Follow us on FB
Tuesday, 4 February 2014
Facebook wants to read your SMS, confidential info: Kaspersky
Tuesday, 4 February 2014 by Unknown
Leading social media company Facebook wants to read SMSes and other
confidential information of people on the Android mobile phone platform,
cyber security firm Kaspersky said on Monday.
“Over the last few days there has been a constant scrutiny over Facebook
having access to your SMS. Buried within the latest update for Facebook’s
Android app is a feature that is causing growing concern among some users,”
Kaspersky said in a statement on Monday.
No immediate comments were received from Facebook.
Facebook is one of the companies that has been accused by U.S.
Whistleblower Edward Snowden of sneaking in to private information to help
National Security Agency of U.S. in spying at global level. The social media
firm has denied that allegation.
The Facebook application at the time of installation on Android mobile
phones seeks certain permissions and the updated version now asks users to
allow it “Read your text messages (SMS or MMS)”.
The social media’s logic behind seeking access to SMS is that “if you add a
phone number to your account, this allows us to confirm your phone number
automatically by finding the confirmation code that we send via text
message“.
The updated Facebook application now wants to “Read calendar events plus
confidential information” which it justifies as it is required to allow “the app
to show your calendar availability (based on your phone’s calendar) when
you’re viewing an event on Facebook”.
Facebook sends code via SMS that has to be entered when a user registers
with the social media website which in a way helps the company verify the
authenticity of users twice.
“Two-factor authentication provides an extra level of security, so it’s good to
see Facebook providing this option ... As a final note, we’d urge people to
carefully check the permissions requested by any app when you first install
it,” Kaspersky Lab’s Principal Security Researcher David Emm said.
Kaspersky added the permissions also grants access to multimedia messages,
for which reason is not explicitly given.
It expressed apprehension on the word ‘automatic’ used in the permission
sought by Facebook.
“...the key, it seems to lie in the word ‘automatically’ Surely the app doesn’t
need to do this automatically. Facebook could simply prompt me to type in
the code manually. Or, at the very least, provide this option,” Kaspersky said.
It added that this may be an innocent feature “but in the light of growing
concerns about online privacy, such an option would help to allay people’s
fears”.
Facebook is reported to have 93 million users in India out of which 75 million
access it from their mobile phone as of December 2013.
The permissions sought by Facebook are apart from similar permissions
sought by Google’s Android platform in the name of Facebook.
The social media company on its website said, “Keep in mind that Android
controls the way the permissions are named, and the way they’re named
doesn’t necessarily reflect the way the Facebook app uses them. We realise
that some of these permissions sound scary, so we’d like to provide more info
about how we use them.”
On the issue of permission sought by Android to access information and edit
feature in user’s phone, Google has earlier said, “Its an app which you (user)
have choice of installing.”
Facebook — with more than 1.2 billion users worldwide — is celebrating its
10th birthday amidst challenges of keeping its original base of young users
with new innovative social networks coming to the fore.
The company was launched by Mark Zuckerberg on February 4, 2004, from
Harvard University.
Tags:
Technology
confidential information of people on the Android mobile phone platform,
cyber security firm Kaspersky said on Monday.
“Over the last few days there has been a constant scrutiny over Facebook
having access to your SMS. Buried within the latest update for Facebook’s
Android app is a feature that is causing growing concern among some users,”
Kaspersky said in a statement on Monday.
No immediate comments were received from Facebook.
Facebook is one of the companies that has been accused by U.S.
Whistleblower Edward Snowden of sneaking in to private information to help
National Security Agency of U.S. in spying at global level. The social media
firm has denied that allegation.
The Facebook application at the time of installation on Android mobile
phones seeks certain permissions and the updated version now asks users to
allow it “Read your text messages (SMS or MMS)”.
The social media’s logic behind seeking access to SMS is that “if you add a
phone number to your account, this allows us to confirm your phone number
automatically by finding the confirmation code that we send via text
message“.
The updated Facebook application now wants to “Read calendar events plus
confidential information” which it justifies as it is required to allow “the app
to show your calendar availability (based on your phone’s calendar) when
you’re viewing an event on Facebook”.
Facebook sends code via SMS that has to be entered when a user registers
with the social media website which in a way helps the company verify the
authenticity of users twice.
“Two-factor authentication provides an extra level of security, so it’s good to
see Facebook providing this option ... As a final note, we’d urge people to
carefully check the permissions requested by any app when you first install
it,” Kaspersky Lab’s Principal Security Researcher David Emm said.
Kaspersky added the permissions also grants access to multimedia messages,
for which reason is not explicitly given.
It expressed apprehension on the word ‘automatic’ used in the permission
sought by Facebook.
“...the key, it seems to lie in the word ‘automatically’ Surely the app doesn’t
need to do this automatically. Facebook could simply prompt me to type in
the code manually. Or, at the very least, provide this option,” Kaspersky said.
It added that this may be an innocent feature “but in the light of growing
concerns about online privacy, such an option would help to allay people’s
fears”.
Facebook is reported to have 93 million users in India out of which 75 million
access it from their mobile phone as of December 2013.
The permissions sought by Facebook are apart from similar permissions
sought by Google’s Android platform in the name of Facebook.
The social media company on its website said, “Keep in mind that Android
controls the way the permissions are named, and the way they’re named
doesn’t necessarily reflect the way the Facebook app uses them. We realise
that some of these permissions sound scary, so we’d like to provide more info
about how we use them.”
On the issue of permission sought by Android to access information and edit
feature in user’s phone, Google has earlier said, “Its an app which you (user)
have choice of installing.”
Facebook — with more than 1.2 billion users worldwide — is celebrating its
10th birthday amidst challenges of keeping its original base of young users
with new innovative social networks coming to the fore.
The company was launched by Mark Zuckerberg on February 4, 2004, from
Harvard University.

This post was written by: Author Name
Author description goes here. Author description goes here. Follow him on Twitter
Get Updates
Subscribe to our e-mail newsletter to receive updates.
Related Articles
- Google brings local payment for Android apps to Philippines, Indonesia, Thailand and Malaysia
- Information technology hires on the rise
- Social video success for brands on Vine and Instagram: Your 6-to-15 seconds of fame
- Microsoft says modern.ie has helped save developers 1 million hours testing for IE in just one year
- Vegas Tech Fund’s Jen Mccabe on making hardware startups easier and surviving the ‘trough of sorrow’
Subscribe to:
Post Comments (Atom)
0 Responses to “Facebook wants to read your SMS, confidential info: Kaspersky”
Post a Comment