Weekend Hack: UDIDirectory

#1

Post by patr1ck » Tue, Jan 03, 2012, 8:58 PM UTC

Weekend Hack: UDIDirectory
udidirectory.com

Re: Weekend Hack: UDIDirectory

#2

Post by hluska » Tue, Jan 03, 2012, 9:03 PM UTC

Sorry to report some bad news, but I just received an application error. If you'd like full details (platform, browser, etc) ask and I'll send you my details!

Re: Weekend Hack: UDIDirectory

#3

Post by patr1ck » Tue, Jan 03, 2012, 9:06 PM UTC

hluska wrote: post #2

Sorry to report some bad news, but I just received an application error. If you'd like full details (platform, browser, etc) ask and I'll send you my details!

Uh oh. Can you email the details to udidirectory@fadeover.org? We'll look at it. Thanks!

Re: Weekend Hack: UDIDirectory

#4

Post by admp » Tue, Jan 03, 2012, 9:52 PM UTC

Uh, at first I misread this as UDDIDirectory, and was very glad to realize that was a mistake.

Re: Weekend Hack: UDIDirectory

#5

Post by ashishbharthi » Tue, Jan 03, 2012, 10:19 PM UTC

One question: When a friend send me an app do I have option to say 'NO' before app installs itself?

Re: Weekend Hack: UDIDirectory

#6

Post by cortesi » Wed, Jan 04, 2012, 12:22 AM UTC

I urge people to think twice before publicizing their UDIDs. Many apps have very serious shortcomings in the way they deal with UDIDs, which means that an attacker armed with your UDID could potentially access accounts and personal information.

See here for some recent examples, looking just at a single industry (social gaming networks):

http://corte.si/posts/security/udid-must-die/index.html

I can tell you with absolute confidence that this is just the tip of the iceberg.