
The CBS Sports App sent user information over the Inteet unencrypted. The problem has been fixed.
Screenshot by Laura Hautala/CNETCBS Sports Digital let its defense slide.
Both the app and mobile website collected registering users' names, passwords, dates of birth and other personal information, and then sent that data unencrypted over the Inteet to CBS Sports Digital's servers, said cybersecurity company Wandera, which sells products to protect mobile phones from hackers.
That's sort of like ruing toward the end zone without a bunch of linemen to deflect the opposing team.
The problem has been fixed, according to CBS Sports Digital, which said in a statement that user data was not breached as a result of the flaw. (Both CBS Sports Digital and CNET are part of CBS Interactive, the online division of CBS.)
"Our inteal teams are rigorous about monitoring our platforms for any potential security issues," the company said.
The sports app, which CBS used to live-stream the Super Bowl in February, surged in popularity in March after the release of a new version that helped fans track the NCAA men's basketball touament. According to app-tracking website Apptopia, the CBS Sports app was downloaded just under 300,000 times last month.
But its vulnerability indicates a larger issue: Companies don't always give security its due when it comes to mobile services, said Michael Covington, a threat researcher with Wandera. "That's where it starts to fall apart," he said.
That's why Covington advises you to think about the information you're sharing, assuming companies give you a choice. "Update your passwords and, if you don't think they need your postal code, take it off your profiles," he said. Or to mix metaphors, don't give hackers an easy slam dunk.
برچسب:
نویسنده: استخدام کار