You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates. It is highly recommended to avoid sending media files that you expect to stay private or which will contain sensitive data using this popular messenger app, at least until the vendor acknowledges this vulnerability and remediates it, says the report. As such, this vulnerability remains and presents a risk to users. Trustwave made every effort to contact the vendor multiple times since 18 August 2020 but did not receive any response. It is trivial to sensitive media files sent by users of this application. This will be pasted into the multi-tab extension on Chrome or Firefox for simple viewing. Can view or listen to other media messages shared between other users, simply by incrementing the value in the URL.Ī simple bash script might be used to generate a sample list of URLs using the predictable changes in the addresses. When a recipient receives an SMS text containing a media URL link sent from this app, the text message appears as follows:īrowsing to the above URL ( (.)cn/D/dd1efd/w) would permit the recipient to view the voice message. The following demonstrates how an attacker could misuse this weakness to look at other users’ media content without authorization: This affects the confidentiality of media content sent through this application. Moreover, the URL link was sequential (hexadecimal) and predictable.Īs a result, a malicious user could potentially access any media files sent through this service. Accessing the link was also possible with none authentication or authorization. SpiderLabs found that the app permits users to share files with anyone no matter the recipient having the app installed. The vulnerability Found in GO SMS Pro App The user could then click on the link and look at the media file through a browser. It is unclear which other versions are affected but this is probable to affect previous, future versions also.Īt this point, if the recipient does not have the GO SMS Pro app installed, the media file is sent to the recipient as a URL through SMS. No fuss, no hassle, it just works.This defect was discovered on GO SMS Pro v7.91. The other reason is that it is stable and just works. That is one of the strengths of the app and goes a long way to explaining why it is so popular. It is plain that a lot of thought has gone into how Go SMS Pro feels and operates as well as how it looks. The app is slick, fast and simple to use. The developers are apparently aware and will be doing something about it, which is nice. I have seen a couple that have appeared within messages which is not cool. Gebruikersbeoordeling voor GO SMS Pro - Messenger, Free Themes, Emoji: 4. Go SMS Pro is free to use but contains ads. Download nu GO SMS Pro - Messenger, Free Themes, Emoji 8.03 APK voor Android Geen extra kosten. It’s a small feature but one that punches well above its weight. That way I can write a reply so I don’t forget and then send it a couple hours later when my work is done or I am more likely to be able to chat. Rather than sending an instant response telling everyone I’m around or available, I can schedule a response to be sent at a particular time. One smaller feature that I’m using quite a lot is the scheduled response. You can assign contacts to categories, automatically block messages from unknown senders or senders you don’t want to hear from. While both iOS and Android have this feature built in, the Go SMS Pro version is very slick. There is also the option to add images to Private box to keep images safe too.Īnother cool feature is SMS blocker. It’s a neat feature that works for secret messages or even for work purposes. The Description Of GO SMS Pro - Messenger, Free Themes, Emoji v7. Then you can assign messages to the box to keep them safe. Confirm the PIN and Private box will be ready for use. The first time you set it up you will be prompted to set up a PIN code to unlock it. Private box is accessed through the features menu. It is a neat function that encrypts messages you add to the box. One highlight of Go SMS Pro is the Private box. While the core intent is definitely SMS, there is a decent supporting cast that makes this a well-rounded app. Go SMS Pro has a range of key features including large message support, pop up chats, privacy protection and the usual emoji and stickers. There is also a theme builder within the app if you’re the creative type. Some are designed by the company behind the app while others are designed by users. The Theme store has a huge range of free and premium themes that completely change how the app looks and feels. Customization is a real strength of Go SMS Pro.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |