Richi Jennings Industry analyst and editor, RJAssociates
This week brings yet more examples of poor design. Specifically: Two apps trusting phone numbers without properly authenticating the actual user.
First, a deadly denial-of-service attack on WhatsApp, in which combining two subtle side effects can lock out users from their accounts. And second, a really dumb authentication bug in a wireless provider’s app.
Watch out these things come in threes. In this week’s
Security Blogwatch, we got the 411 (ask your parents).
Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention:
Cracking Enigma.
What’s the craic, Zak? Mister Doffman reports