Categories
Close
Menu
Menu
Close
Search
Search

Featured Articles

News

Security flaw on Immobilise mobile phone database is now fixed

Mark

Share:

Print

Rate article:

No rating
Rate this article:
No rating

The Immobilise.com online database, which helps people to store their mobile phone’s IMEI number and record other valuable items, has had a significant security flaw fixed this week.

Users are able to see an online ‘certificate’ that includes their name, address and details of the property they’d registered.

However, security consultant Paul Moore discovered that changing the numbers in a web address for this certificate could reveal information about other people’s valuables.

He described it as “a nice shopping list for a would-be burglar”.

Mr Moore had contacted Recipero, the company behind the Immobilise and CheckMEND sites, in 2013 to warn them about the vulnerability. He made the news public this week after realising that the security flaw still hadn’t been fixed.

Since publicising the issue, the vulnerability has been removed.

In a statement on the Immobilise.com website, Recipero said “We confirm that a vulnerability in a website feature was highlighted to us on 3rd January. If exploited this could have allowed a third party to view details associated with an item registration. The vulnerability was in a feature intended for use by insurers when confirming the validity of an ownership certificate given to them by a claimant. The feature was removed within 30 minutes of us becoming aware. A thorough review of our records reveals no evidence of any data leakage and therefore no requirement to contact any individual Immobilise users.”

[BBC News; Paul Moore website]

Comments

Collapse Expand Comments (0)
You don't have permission to post comments.

Opinion Articles

ExclusiveCarnival of the Mobilists #224

Mark Bridge writes:

Welcome to the Carnival of the Mobilists #224. If you’re a regular visitor to The Fonecast and have no idea what the Carnival is, this is a summary of the week’s best blogging about all things mobile. It travels the internet, alighting at a different mobile-related website every week.

Carnival of the Mobilists

ExclusiveGoogle Nexus One: quarterback or cheerleader?

Mark Bridge writes:

Four months ago, Google unveiled a new way for consumers to buy an Android mobile phone. In fact, that’s pretty much what the first line of the press release said. The phone was the Nexus One and it was being sold online by Google.

You could buy it SIM-free or you could buy it with a contract – but you’d be buying it from Google’s online shop. You couldn’t buy it on a real high street.

ExclusiveWhy Marketers and Copywriters might actually 'need' an iPad... and soon

John Forde writes:

As I sit tapping away on a keyboard, here at 30,000 feet above the Atlantic, I can't help but think...

Thank God Arthur Summerfield got it all wrong.

See, Arthur was the U.S. Postmaster General for President 'Ike' Eisenhower. And in 1959, he boldly predicted...

"Before man reaches the moon, your mail will be delivered within hours from New York to Australia by guided missiles. We stand on the threshold of rocket mail."

Imagine. I'd hate to think what spam would look like, under those circumstances.

ExclusiveGoogle Dictation - "I shall say this only once"

James Rosewell writes:

Back in January 2010 I wrote a brief review of the Google Nexus One that included my thoughts on the not-so-accurate voice dictation feature. From the marketing hype, I had expected to simply speak into the phone and a few seconds later my words would appear as a perfectly formed text message. The reality was somewhat disappointing. For all but the simplest short phrases it struggled to produce the intended words, making it inferior to even the touch-screen keyboard.

ExclusiveThe iPhone and its data are still uneasy bedfellows

Mark Bridge writes:

Being an optimistic cynic isn’t easy. But, hey, I do my best.

Which is why I smiled benignly when I heard this week that WiFi provider The Cloud was offering a free app to O2 iPhone users. It's a simple tool called FastConnect and it'll make it easy for those O2 customers to find free WiFi access via hotspots powered by (you guessed it!) The Cloud.

RSS
First96979899101103104105Last

Recent Podcasts

ExclusivePodcast from Mobile World Congress 2015

Mark Bridge learns about the mobile technology trends at Mobile World Congress 2015 by chatting to James Rosewell of 51Degrees, Dr Kevin Curran from the IEEE and Chris Millington of Doro.

They talk about wearable devices, wireless charging, mobile operating systems and much more... including some of their favourite products from the exhibition.

ExclusiveLooking back at February: from security scares to multiple MVNOs

We're taking a look back at the biggest mobile industry news stories from February 2015, including allegations that the UK's security service tried to breach SIM card security by hacking into one of the world's biggest SIM producers.

We also talk about the planned BT and EE merger, the creation of two new UK virtual networks, some acquisitions in the mobile payment arena and a new Ubuntu smartphone.

ExclusiveA month of mobile: O2 counts on 3, Microsoft counts to 10 and Apple counts its profits

We're back with a month of mobile industry news, including takeover talks and takeover rumours. O2 and Three are said to be discussing a merger... but is there any truth in the suggestions that BlackBerry could be up for grabs?

We also discuss Apple's record-breaking quarterly figures, the highlights of CES and the launch of Microsoft Windows 10, as well as saying farewell to the current version of Google Glass.

RSS
12345678910Last

Follow thefonecast.com

Archive Calendar

«August 2026»
MonTueWedThuFriSatSun
272829303112
3456789
10111213141516
17181920212223
24252627282930
31123456

Archive