A new opportunity for attackers to gain access to smartphone apps from these networks has been discovered.
This week, mobile security experts demonstrated an example of the discovery that was recently made that allows a very simple attack to be made which exploits a code vulnerability in Apple iOS applications.
This vulnerability gives attackers the ability to persistently alter server URLs from which the data is loaded to the apps.
This means that the attacker will be able to change the URL from which the iOS application is loading its data, presenting a massive mobile security threat. This is particularly unpleasant as the victim will not know when it is happening nor that it has occurred. It means that the attacker could invisibly use the data to be able to load malicious links or to insert false news regarding market movements into a news application.
The makers of the applications were not notified of the mobile security threat ahead of the announcement to the public.
The mobile security threat was identified by Skycure and it has, in the past, already notified app makers of this type of threat’s existence. Typically, the developers are provided with this knowledge ahead of the public announcement. However, in this circumstance, they stated that it was not possible for them to wait to notify developers before making this information public. They felt that because the vulnerability was present in hundreds of different apps – including stock management applications – it was important for people to be notified as soon as possible, without waiting to tell the app makers, first.
Skycure, a mobile security expert firm, declined to provide the names of the specific apps that were tested positive for the threat. The reason was that they didn’t want to provide this information to potential attackers who could exploit this knowledge before a solution to the issue could be found. The company’s chief technology officer, Yair Amit, said that “The vulnerability affects so many apps that it’s virtually impossible to alert app makers.” The researchers from the company also assembled a short video to demonstrate how an app could be manipulated by an attacker.
Pricing disparity in mobile applications is gaining notice
The world of mobile applications is evolving. App developers are beginning to push the boundaries as new, more advanced mobile devices are introduced to the global market. These devices are governed by their operating systems, of which the most prolific are the iOS and Android platforms. Each operating system boasts of a devoted consumer base, which often clash against one another as the two flaunt the performance and capabilities of their favored platform. The disparity between the two platforms is becoming more apparent in the arena of mobile applications, however, and the divide separating the operating systems is quickly becoming one of cost.
SoundHound shedding light on pricing disparity
SoundHound is a simple instant music search and discovery application. It is not the first of its kind, but has become very popular with mobile consumers around the world. The application is available to both the Android and iOS operating systems and is used quite regularly by consumers in both camps. Mobile applications are typically cross-platform, but their universal nature is punctuated by the fact that they do not cost the same on every platform. This issue is becoming highlighted by the SoundHound platform, as well as many others that are available to consumers.
Differing costs resulting from business model experimentation
SoundHound is available on the Android for $6.99 through Google Play. On Apple’s App Store, however, it is available for $5.99. The price disparity is not gargantuan, but SoundHound is one among many mobile applications that do not have singular pricing across all mobile platforms. This is because developers are beginning to test various business models and pricing points in several markets. Notably, the SoundHound application is available for the Windows Phone operating system for free.
Experimentation may be a risky venture in the mobile applications business
Testing new business models and pricing points can be very risky when it comes to mobile applications. Pricing disparity can often confuse or enrage consumers, leading to heavy criticism and causing applications to fail in the market. SoundHound has not been free of this criticism, but has managed to avoid the prospect of failure. The app has also begun to highlight the fact that the economics of mobile applications continue to evolve and that no concrete business plan has yet emerged to create a standard in the mobile space.
