Windows Phone Store permissions flaw patched by Microsoft, allowed apps to access photos

Windows Central

WinC Bot
Staff member
Dec 17, 2013
73,604
63
0
Visit site
Security_Flaw_Images.jpg

The Windows Phone Store received a bug fix recently, closing a hole that allowed developers to publish applications that can access a user?s photo library without their permission. The quirk was originally brought to our attention by developer Al Gihuni, who makes the popular Sound Cloud app SoundClone for Windows Phone (don't worry, that app is safe).
Gihuni demonstrated this quirk for us by submitting a test app to the Store ? *seen in this article's images ?**that required three capabilities: access to your photo library, phone identity, and owner identity. After passing through Microsoft?s certification processes, we opened up the Store app and navigated to the app listing. The listing only indicated the app needed phone and owner identity access, with no mention of access to the photo library.

Full story from the WPCentral blog...
 

Members online

Forum statistics

Threads
323,183
Messages
2,243,406
Members
428,037
Latest member
Brilliantick99