iSkoot Users Beware

Since the launch of Skype Mobile my friend Daemon aka PhoneBoy has been been taking a closer look at how Skype Mobile and what some might consider to be Skype Mobile's sister application, iSkoot. There was even some speculation Skype Mobile took what iSkoot had and rebranded it. What he has discovered should concern all Skype users. iSkoot may be Skype certified, as their site claims, but they are not Skype Mobile or even Skype safe or secure. These days I don't even check my email, whether from PC, N95 or N810 without using SSL.

Not to be an alarmist but if you're not worried about security, you should be. Broadcasting passwords in the clear as iSkoot is doing is a asking for trouble. Even if your Skype password was unique from every other password used online (I'd bet it is not) but there is still a good chance many have a bank accounts, credit cards or Paypal accounts linked. Not saying they could gain access to these accounts but they could hijack your Skype account and proceed to use it on your dime.

Link: iSkoot Transmits Your Data In The Clear.

Update: Daemon (Phoneboy) has been in contact with the folks at iSkoot over the weekend. A fix to this security hole is expected to be pusehed out April 30. This bug only affects Symbian users. iSkoot says they ahve verified other platform releases are not affected. iSkoot has been quite responsive to this risk as soon as they were notified, something not all developers do.