Saturday, March 30, 2013

Ruzzle and the flaw in chat: possible intrusions all 8217; # & game!

The Hacktive Security, an Italian company specialized in computer security, has discovered a major flaw & # 8217; all the in-game chat Ruzzle that allowed her to take the 8217; # & identity of any user and to consult lists of games played, to challenge new contacts and read private messages exchanged with other users. Mag Interactive developers ensure that the problem has been solved, but experts are not just d & # 8217; # & 8230 agreement;

ruzzle

The danger, in short, seems partly returned but the Hacktive Security remain vigilant, because the solution adopted by Mag Interactive does not convince completely. In practice, the problem concerned the game Ruzzle chat, which had an important security flaw that allowed to steal easily the 8217; # & identity of any registered user. Once stolen 8217; # & lt identity could defy contacts, view the list of the matches but also read private messages of 8217; # & unaware user.

Given that the game now has 25 million users worldwide, a story like that has to be taken into serious consideration. Francesco Mormile, founding partner of the Hacktive Security, points out that the first security update released for not solving the problem Ruzzle the possibility of intrusions, while l & # 8217; 20 March update released by Mag Interactive goes to obfuscate the communication protocol.

As explains, but Mormile & # 8220;It is said to be # & 8216; # & 8217 reclaimed; that piece of code that caused the problem. We are working to understand exactly the mechanisms implemented & # 8221;.

In short, eyes open because the problem may persist.

[via]



Source From IosDroid.net

No comments:

Post a Comment