Android Phone Numbers Leaked By Facebook App - InformationWeek
IoT
IoT
Mobile
News
7/2/2013
05:01 PM
50%
50%
RELATED EVENTS
7 Key Cloud Security Trends Shaping 2017 & Beyond
Dec 15, 2016
Cloud computing is enabling business transformation as organizations accelerate time to market and ...Read More>>

Android Phone Numbers Leaked By Facebook App

Symantec spots privacy leak and Facebook issues patch, saying it was an inadvertent coding error and phone numbers did not go public.

The Syrian Electronic Army: 9 Things We Know
(click image for larger view)
The Syrian Electronic Army: 9 Things We Know
Facebook has fixed a bug in its Android app, following reports that the app was inadvertently leaking users' phone numbers to the social network.

The "privacy leak" was spotted by Symantec, which said that the latest version of Norton Mobile Security, which includes a new Mobile Insight tool that dynamically assesses Android apps for potential security or privacy violations, had flagged Facebook's Android app.

"The first time you launch the Facebook application, even before logging in, your phone number will be sent over the Internet to Facebook servers," according to a Symantec blog post. "You do not need to provide your phone number, log in, initiate a specific action, or even need a Facebook account for this to happen."

According to Google Play, Facebook's Android app has been installed on between 100 million and 500 million devices. Symantec said that "a significant portion of those devices are likely affected."

[ More comes to light about whistleblower's job description. Read Snowden's Real Job: Government Hacker. ]

Numerous Android apps slurp excessive data for various reasons -- perhaps owing to developers' coding errors, to support "find my friend" features, or to allow developers or advertising networks to better track individual users.

But Facebook spokesman Derick Mains, confirming Symantec's bug report, said it had resulted from an inadvertent coding error. "The Android beta we released last week includes the fix," he said via email. "We did not use or process these numbers in any way, and have already deleted them from our servers."

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Majo
50%
50%
Majo,
User Rank: Apprentice
7/3/2013 | 6:15:54 PM
re: Android Phone Numbers Leaked By Facebook App
The bug would be a jackpot for security surveillance linking phones and Facebook accounts. Pay-per-use phones can be linked to Facebook users, and 'temporary' Facebook accounts to phone accounts. Sweet.
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
Top IT Trends to Watch in Financial Services
IT pros at banks, investment houses, insurance companies, and other financial services organizations are focused on a range of issues, from peer-to-peer lending to cybersecurity to performance, agility, and compliance. It all matters.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on InformationWeek.com for the week of November 6, 2016. We'll be talking with the InformationWeek.com editors and correspondents who brought you the top stories of the week to get the "story behind the story."
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll