Video and images on Viber are sent without encryption and get stored online, researchers have found.
Ibrahim Baggili and Jason Moore, researchers from the University of New Haven’s Cyber Forensics Research & Education Group, demonstrated how files are sent on the app in aYouTube video.
“The key here is to let the people know about these things so they can make an informed decision about using these applications until they are patched,” Baggili, an assistant professor of computer science, told CNET on Thursday.
The researchers also found that Viber stores the data publicly on its servers for at least a week.
“The data is stored on Viber’s server in an unencrypted manner,” one of the researchers said in the video. “There is also no authentication method used, so anybody who has access to these links can look at this data, retrieve this data, and do whatever they want with it.”
[box] Source: c|net[/box]
