Categories
Close
Menu
Menu
Close
Search
Search

Featured Articles

News

Security flaw on Immobilise mobile phone database is now fixed

Mark

Share:

Print

Rate article:

No rating
Rate this article:
No rating

The Immobilise.com online database, which helps people to store their mobile phone’s IMEI number and record other valuable items, has had a significant security flaw fixed this week.

Users are able to see an online ‘certificate’ that includes their name, address and details of the property they’d registered.

However, security consultant Paul Moore discovered that changing the numbers in a web address for this certificate could reveal information about other people’s valuables.

He described it as “a nice shopping list for a would-be burglar”.

Mr Moore had contacted Recipero, the company behind the Immobilise and CheckMEND sites, in 2013 to warn them about the vulnerability. He made the news public this week after realising that the security flaw still hadn’t been fixed.

Since publicising the issue, the vulnerability has been removed.

In a statement on the Immobilise.com website, Recipero said “We confirm that a vulnerability in a website feature was highlighted to us on 3rd January. If exploited this could have allowed a third party to view details associated with an item registration. The vulnerability was in a feature intended for use by insurers when confirming the validity of an ownership certificate given to them by a claimant. The feature was removed within 30 minutes of us becoming aware. A thorough review of our records reveals no evidence of any data leakage and therefore no requirement to contact any individual Immobilise users.”

[BBC News; Paul Moore website]

Comments

Collapse Expand Comments (0)
You don't have permission to post comments.

Opinion Articles

ExclusiveWill LG buy webOS from HP?

Mark Bridge writes:

Google and Motorola. HP and webOS. Each apparently heading in opposite directions when it comes to strategy.

However, although HP has pretty much pulled the plug on making webOS devices, it's not calling time on the webOS platform.

ExclusiveThis week at The Fonecast: 20th August 2011

Mark Bridge writes:

Welcome to this week's UK mobile industry news summary from TheFonecast.com. After a week's holiday on the scenic north coast of Norfolk, which not only lacks cellsites but also hills to put them on, it's good to finally see the '3G' indicator reappear on my phone. My week off may have been relatively quiet - but the last few days have more than made up for it.

ExclusiveIan Hook from Compliant Phones talks about mobile phone call recording

Mark Bridge writes:

Recording a phone call made by a mobile phone isn’t particularly difficult – it's something we do regularly for our podcasts – but recording every call made and received by a mobile phone isn't so easy. It's even more of a problem for companies with dozens or even hundreds of employees using mobile phones... and yet, for many organisations, this type of thing will soon be a legal requirement.

To learn more, I've been talking to Ian Hook, vice-president of marketing at Compliant Phones. I started by asking Ian why companies would want to record all their mobile phone calls.

ExclusiveVopium puts a friendly face on mobile VoIP

Mark Bridge writes:

Voice over IP – the ability to make phone calls over the internet - is a topic we covered in our first-ever podcast five years ago. At times it promised to change the way we used mobile phones... so what's been happening?

I've been talking to Tanveer Sharif, CEO and co-founder of international call service Vopium, to learn more.

RSS
First6263646567697071Last

Recent Podcasts

ExclusivePodcast from Mobile World Congress 2015

Mark Bridge learns about the mobile technology trends at Mobile World Congress 2015 by chatting to James Rosewell of 51Degrees, Dr Kevin Curran from the IEEE and Chris Millington of Doro.

They talk about wearable devices, wireless charging, mobile operating systems and much more... including some of their favourite products from the exhibition.

ExclusiveLooking back at February: from security scares to multiple MVNOs

We're taking a look back at the biggest mobile industry news stories from February 2015, including allegations that the UK's security service tried to breach SIM card security by hacking into one of the world's biggest SIM producers.

We also talk about the planned BT and EE merger, the creation of two new UK virtual networks, some acquisitions in the mobile payment arena and a new Ubuntu smartphone.

ExclusiveA month of mobile: O2 counts on 3, Microsoft counts to 10 and Apple counts its profits

We're back with a month of mobile industry news, including takeover talks and takeover rumours. O2 and Three are said to be discussing a merger... but is there any truth in the suggestions that BlackBerry could be up for grabs?

We also discuss Apple's record-breaking quarterly figures, the highlights of CES and the launch of Microsoft Windows 10, as well as saying farewell to the current version of Google Glass.

RSS
12345678910Last

Follow thefonecast.com

Archive Calendar

«June 2026»
MonTueWedThuFriSatSun
25262728293031
1234567
891011121314
15161718192021
22232425262728
293012345

Archive