Skype Update for Android Fixes Security Flaw, Adds 3G Calling

Skype's new Android app update fixes a recently discovered security flaw in the software. Image courtesy Skype

Skype released a new version of its Android app Wednesday morning, fixing the app’s recently discovered security vulnerabilities.

The new version secures a loophole in which third-party software was able to gain access to data stored on the user’s phone.

“We have had no reported examples of any third-party malicious application misusing information from the Skype directory on Android devices,” Skype’s chief information-security officer Adrian Asher said in a blog post. The company encouraged users to download its software from the official Android Market or the Skype web site, rather than an unofficial outside venue.

Skype’s popular voice-over-internet service took heat last week after a blogger discovered the security flaw in the Android version of the app, which allowed access to sensitive user details including your full name, address and date of birth. The security exploit has existed on Skype’s Android app since its wide release in October.

Skype also included a new feature for Android users in the update: Calls can now be made using 3G networks.

U.S. Skype users could previously use only Wi-Fi connections to make VOIP calls over Skype’s servers, except for those who had certain Verizon-carried phones. Outside the United States, however, Skype users could make calls on both Wi-Fi and 3G.

While this wide availability of 3G calls using Skype is new to Android users, Skype released its 3G calling feature for iOS devices almost a full year ago.

Calls (both voice-only and video chat) as well as IMs between Skype users remain free, while calls made from Skype to non-Skype cell numbers or land lines can be paid by a subscription plan or purchasing Skype credits.

See Also:


Moleskine iOS App Confuses, Disappoints

The Moleskine iOS app ignores everything that is good about the original paper notebook

If the Moleskine notebook is simple, well made and very easy to use, then the Moleskine iOS app is the opposite: confusing, hard to fathom and almost impossible to use quickly.

The Moleskine app is a note-taking app, with a wealth of features. To get an idea of how it works, let me walk you through opening the app and creating a note.

Launch the app and you get a vertical splash screen that looks like a Moleskine notebook cover. This can not be viewed horizontally and you have to touch it to access your notes. Every. Time. You. Open. The. App. Next, you see a list of your “thoughts”. Touch the little plus sign to create a new one. You are prompted to give it a name. Do this.

Now, the screen darkens and a band covers it, like a paper barrier. Here you see buttons for “categories”, “new” and “assign”. New? didn’t we just create a new note? Worse, the first two of these words have arrows underneath. “categories” has a left-pointing arrow, and “new” has one which points down.

Touch “categories” and you come to a full, lined page surrounded by yet more cryptic icons. Could this be the actual note page? Then why did I tap the word “categories”?. You can insert images, change categories (via two more button presses, one of which duplicates the one you made to get to this section) and change the paper style. What you can’t do is start writing. Or can you?

Press the back button and you are sent to the beginning, the list of your “thoughts”. Let’s try again. Tap one of your “thoughts” and it opens. Maybe I should double-tap to start writing? It works! At last I am writing. Now, what was it I wanted to say?

There is plenty more here. You can, as mentioned above, insert images. You can also draw on the page, add your note to a map, and browse by those ever-important categories. You can also shop online from within the app and buy real stationery. But of course, all of this is as convoluted as just starting a note.

The app does have one big advantage over the expensive paper notebooks: it’s free. I’m sure it will be the perfect app for for some people, but it just frustrates me. Add to this that there has been a spiritual equivalent of the Moleskine in the app store for a long time. It’s called Penultimate, and it does one thing: lets you write on the page with a finger or stylus. It has the elegance of a real Moleskine, and is beautifully made. Better, it costs just $2. You should probably check it out.

Moleskine app [iTunes]

App for iPhone/iPad [Moleskine]

See Also:


Skype’s Android App Could Expose Your Personal Details

User details such as your name, birthday and address can be accessed in a security loophole on Skype for Android. Photo courtesy of Skype

A recently discovered security flaw in Skype for Android mobile devices could give prying eyes a peek at your personal data, including full name, date of birth and contact information.

Using a custom-made app to test Skype Video for security issues, mobile blog Android Police discovered a simple exploit to access many sensitive user details in the current version of Skype for Android mobile phone users.

After downloading and analyzing a leaked version of Skype Video, which appeared earlier in the week, Android Police blogger “Justin Case” discovered how poorly the app protected user data.

He was able to access user data with some custom software to break through the Skype app’s security. After testing this on the currently released version of Skype video for Android — which has been in wide release since October 2010 — he found that it contains the same security issues.

The exploit gains access to the file “main.db” in the Skype directory. This file holds sensitive information such as your first and last name, birthday, billing address, e-mail addresses, home and cellphone numbers. Information on all the people in your address book is accessible through the contacts database, and all stored chat logs are also accessible through the chat database.

The custom app, which the Android Police named “Skypwned,” doesn’t require root access to the phone in order to exploit Skype’s security loophole.

“This means that a rogue developer could modify an existing application with code from our proof of concept (without much difficulty), distribute that application on the Market, and just watch as all that private user information pours in,” Android Police wrote.

The loophole doesn’t appear to be showing in the Skype Mobile for Verizon version of the app, according to Android Police.

Skype provided Wired.com with a statement, claiming it was working to address the vulnerability:

It has been brought to our attention that, were you to install a malicious third-party application onto your Android device, then it could access the locally stored Skype for Android files.

These files include cached profile information and instant messages. We take your privacy very seriously and are working quickly to protect you from this vulnerability, including securing the file permissions on the Skype for Android application.

To protect your personal information, we advise users to take care in selecting which applications to download and install onto their device.

This isn’t Skype’s first time to take heat on security issues. In March, advocacy group Privacy International called upon Skype to tighten up some of its security measures in a vehemently worded blog post. The blog post cited the ease of a Skype user’s ability to imitate other users, as well as a lack of HTTPS-level of protection for its downloads.

The blogger who detected the security issue suggests three ways for Skype to fix it: the use of proper file permissions, the institution of an encryption scheme and a thorough security review of the company’s apps before their release.

See Also:


Postagram Prints, Mails Instagram Photos

Postagram takes pure pixels and lets them slum it in paper form

Instagram is pretty cool if you have an iOS device. The community photo-sharing service can be browsed through the official app (still the only way to actually upload photos) or viewed with various third party apps and sites. But what about those losers who can’t — or worse, won’t — look at your amazing, grungified photos? Perhaps these luddites, probably your family members, don’t even own an iPhone or an iPad, or a device with an internet homepage browser. What do you do?

You will have to descend to their technological level and send the photos by snail mail. Thankfully, you won’t have to get analog dirt on your hands to do it. You can use the Postagram app.

Postagram takes your Instagram photos, lets you add a message (up to 140 characters) and then mails a printed copy to anyone, anywhere in the world. The picture is printed at 300 dpi on heavy photo paper and comes surrounded by a postcard, from which the print can be popped out. Each picture costs $1 to print and send, and you have to do nothing but choose the picture and pay.

I can see this becoming as addictive as Instagram itself. I would even use it to mail my favorite photos to myself, if only I hadn’t had my mailbox sealed up years ago: The only things I ever received were junk mail and anthrax. The spores I could deal with, but the junk mail? No frikkin’ way.

Postagram [Postagramapp via iPhoneography]

See Also:


Android OS Hack Gives Virtual Early Upgrade

The latest CyanogenMod release (7.0) is based on Android 2.3.3 (Gingerbread).

Android phone owners stuck on older versions of the operating system know the frustration of seeing newer versions with features they can’t get.

Good news for them: A new, hacked version of Android delivers many of the features of the latest Android OS without the wait.

The gang over at CyanogenMod dropped a new stable release of their popular Android OS ROM, CyanogenMod version 7.0.

In the hacking community, a custom ROM (which stands for “read-only memory”) has come to refer to a image of the operating system that comes on your phone when you buy it, aka a stock ROM. Customized ROMs are exactly that — tweaked versions of an OS that are manipulated, often containing firmware upgrades that come out faster than official updates from the makers of the OS.

After gaining root access to your phone, you can run the custom ROM on your phone using an app like ROM Manager.

The new release functions on more than 30 devices, now including two tablets — the Barnes and Noble Nook Color and the G-Tablet.

Version 7.0 is available free for download at the CyanogenMod website.

Installing CyanogenMod 7 brings major updates to the keyboard and texting tools, reducing problems with selecting text for copying and pasting that frustrated users in previous versions of Android. The reports on battery use by app are much more detailed in the settings menu compared to Froyo. A number of minor updates include a list of all the apps you’ve downloaded on your phone, as well an update to the camera app that makes it easy to switch between front- and back-facing cameras.

Along with access to Gingerbread’s finest features, CyanogenMod 7.0 comes with a number of cool perks, including built-in CPU clocking (over or under), the ability to install more apps to your phone’s SD card, custom wallpapers and themes, and some tweaks to the music-playing app that allows you to use the camera button to pause.

Some of the different features in the update aren’t grandiose in nature, but the new CyanogenMod release highlights what Android enthusiasts love about the platform — the ability to customize a phone through subtle tweaks and flourishes, making what would otherwise be one of many manufactured handsets into a personalized (or hacked) device.

Have you downloaded and tested the new CyanogenMod 7.0? Let us know what it’s like in the comments.

See Also:


Adobe Shows Three Amazing iPad Apps for Photoshop

Adobe’s new Photoshop-connected iPad apps show what can be done with multitouch.

Forget Flash — Adobe’s latest iPad experiments are way more interesting than a plug-in to let you view restaurant websites. The three apps — Eazel, Lab and Lava — all link to Photoshop Creative Suite 5 running on a Mac or a PC, and let you use the multitouch display to control various functions.

Eazel lets you finger-paint on the iPad and then transmits the results to Photoshop. You can use wet or dry paint, control the size and opacity of the brushes, and a “particle-stroke painting” engine lets paint spread out for a few seconds before it dries. The most amazing part, though, is the control UI.

Plop down five fingers and a control appears at the tip of each. Move the appropriate finger to adjust color, opacity, settings and brush size. flicking your thumb left or right will undo or redo. This looks like something that should be in every app, not just drawing apps.

Next up is Nav, which puts the Photoshop tool palette on the iPad’s screen with big, easy-to-hit icons. The 4×4 grid is customizable, so you can pick your 16 favorite tools, and touching them selects the tool on the desktop machine. It also lets you browse and duplicate open documents on the iPad’s screen. This one is simple, but may turn out to be the most useful.

Finally, Lava is a color-mixer. Anyone who has mixed oil or acrylic paints on a palette (or an old piece of wood, or plastic or whatever) will know that it is far more intuitive than sliding widgets on-screen. Lava lets you do this, interacting with colors directly and using the results in Photoshop.

All of these apps, which aren’t yet available, use Adobe’s new Photoshop Touch SDK. This software development kit lets anyone write iPad apps that interact with Photoshop.

But it’s not a big deal just for iOS developers. The open SDK means developers working on other platforms — like Android Honeycomb and the forthcoming BlackBerry PlayBook OS — can begin coding their own apps based on Adobe Touch. Considering that tablets produced over the last year have been generally considered content-consumption devices, Adobe’s SDK release invites the possibility of a new wave of content-creating users.

These apps show what Adobe can do when it’s not fighting with Apple over Flash. They also show what multitouch can do when you stop thinking in desktop metaphors. I can’t wait to try them. They may even make me start using Photoshop again.

Nav [Photoshop]

Lava [Photoshop]

Eazel [Photoshop]

Mike Isaac contributed to this report.

See Also:


ZoomReader for The Partially Sighted: Magnifies, Reads Text Aloud

ZoomReader not only magnifies text, it can read it aloud

The owner of the restaurant down the street from me has to hold the menu about an inch from his eyes to read it. I think he’d love this iPhone app. It’s called ZoomReader, and that’s exactly what it does: zoom and read.

Like the Eye Glasses app we covered way back in 2009, ZoomReader uses the iPhone’s camera and screen to magnify text. But thanks to the iPhone 4’s hi-res camera and display, and some rather clever options, it manages to be a lot more than just a neat gimmick.

Aim the camera at some small text — instructions, a medicine bottle label or a menu — and it can be magnified up to 4x, showing up crisp on the retina display. Colors of both paper and ink can be changed to make them easier to read. And then things get really interesting.

Hit the camera icon and it will snap the image in front of the lens, perform OCR (optical character recognition) and then read the result out loud using speech synthesis. You can control the app with your voice, too, if the icons are tricky for you to see.

Clearly this is useful just as a magnifier for those with poor eyesight. And if the OCR works well (quality can vary wildly in these things) then it could work even for the blind.

The app is in the App Store now, and costs a reasonable $20, a price that gives me some confidence that it contains a decent OCR engine.

ZoomReader product page [iTunes]

ZoomReader App Released for iPhone – the Ultimate Visual Assistance Tool [ZoomReader]

See Also:


Android Is Getting In-App Billing This Week

Android app developers can test in-app billing before it debuts next week

Developers and mobile gamers alike will be happy to learn that in-app purchasing for Android will be available starting sometime this week.

The Android Market’s in-app billing system is currently available for developers to test, but apps using the service won’t be able to publish until it goes live.

Android’s in-app billing will handle financial transactions and provide a standard purchasing ecosystem across all apps, while giving developers the freedom to control how virtual goods are purchased and tracked.

“This new service gives developers more ways to monetize their applications through new billing models including try-and-buy, virtual goods, upgrades, and more,” Eric Chu says on the Android Developers blog.

Until now, developers wanting to include in-app transactions in their app needed to go through PayPal, Zong, or develop their own solution, like Angry Birds did. Google announced its intention to provide an in-app billing service in January. Apple has offered in-app billing on its iOS devices since October 2009.

Perhaps the in-app billing system will help rejuvenate Android’s historically sluggish app sales. By lowering the barrier to entry — offering apps for free or at significantly reduced prices — more users may be willing to download apps, then make additional purchases within the app later on.

“I’m incredibly excited as a developer and a user because it opens the door to another avenue for revenue. This will increase the quality of apps you will see on Android and create more incentives for developers who aren’t targeting the platform to give it a shot,” said Andreas Schobel, CTO and co-founder of Catch.

Many iOS developers who have held off from committing to Google’s OS due to monetization concerns may also finally port their apps over to Android, so we could be seeing a slew of new apps in the coming weeks.

Android devices running 1.6 or higher will be able to access the new in-app billing system when it’s available (possibly tomorrow, according to AllThingsD). Apps in both Google’s Android Market and Amazon’s App Store will have access to the service.

“Some of the great free apps on iPhone are solely supported by in-app purchases of virtual goods. This will be another avenue for developers to make money,” says Schobel.

For detailed information about the release, visit Google’s In-App Billing Dev Guide.

See Also:


Report: No iPhone 5 at Apple’s Summer Conference

Apple CEO Steve Jobs takes the stage in San Francisco, March 2, 2011. Photo: Jon Snyder/Wired.com

Apple's Steve Jobs appears on stage in San Francisco to introduce the iPad 2. Photo: Jon Snyder/Wired.com

Apple has traditionally debuted new iPhones at its annual software developers conference, but this year’s event in June will be 100 percent software news, according to a report.

Citing anonymous tipsters, well-sourced Apple blogger Jim Dalrymple claims there will be no iPad, iPhone or Mac hardware introduced at Apple’s Worldwide Developers Conference, which kicks off June 6 in San Francisco.

Apple’s press release announcing the event doesn’t give much hope for any hardware announcements.

“At this year’s conference we are going to unveil the future of iOS and Mac OS,” said Philip Schiller, Apple’s senior vice president of Worldwide Product Marketing. “If you are an iOS or Mac OS X software developer, this is the event that you do not want to miss.”

Apple will likely give details on the next-gen Mac operating system, OS X Lion, and the next version of its mobile OS, iOS 5.

New cloud-based features will likely be included in iOS 5 (think online storage, or a “music locker” service). It may not be released until fall, according to a TechCrunch report. That means an iPhone 5 would probably release in the fall timeframe with the launch of iOS 5.

See Also:


A Few Android App Developers Rake in Millions

The iOS platform isn’t the only way to make money on the mobile apps scene.

Tech news site Electricpig took a look at eight groups that have made it big — more than six-digits big — with hit Android apps.

Better Android Apps, for example, has made approximately $1.34 million from purchases of its hits Better Keyboard and Open Home. Yongzh created emulators for the PlayStation, Sega, Nintendo and Atari systems, and gathered about $1.81 million from sales of these apps.

“Conventional wisdom told us that to be successful, we had to focus on iOS. Conventional wisdom was wrong,” said Gary Gattis, CEO of Spacetime Studios.

That certainly seems to be true with the tower-defense game Robo Defense. It has also been a big winner, netting creator Lupis Labs more than $2.09 million.

An estimated 3.7 billion Android apps have been downloaded to date, according to AndroLib. Many developers wish that number would rise at a faster rate and are counting on tools like in-app payments to spur app purchases and developer earnings. However, that hasn’t stopped developers such as Eddie Kim, creator of Car Locator, or almost anyone else on this list, from netting big profits.

These high sales figures illustrate that Android’s app market is finally coming to fruition as a solid distribution platform, where software programmers can make good money. Within months of the opening of Apple’s App Store in the summer of 2008, a few lucky programmers quickly struck gold with hot sales of their apps.

Android has been around for about the same time, and only now are we beginning to see comparably high sales figures for Android app makers. Though Google’s app market has been slower to mature, these success stories should give programmers more incentive to make killer apps for Android-powered tablets and smartphones.

Beautiful Widgets netted its maker, LevelUp Studio, more than $934,000. Halfbrick Studios (maker of Fruit Ninja) has netted more than $242,000 after porting its iOS favorite to Android.

Other big winners, thanks to pop-up advertising, include Rovio, for (what else?) Angry Birds, and Arron La for Advanced Task Manager.

Spacetime StudiosPocket Legends, a 3-D MMO, has managed to garner profits of $8,000 per day from in-app payments, making it a shoo-in for six-figure earnings in the not-too-distant future.

“The Android platform has seen phenomenal growth, and it’s great that new avenues for app distribution are opening up,” Rovio CEO Mikael Hed said in a recent news release.

The addition of new marketplaces like Amazon’s App Store is proof, showing that Google’s OS has the potential to be just as lucrative as Apple’s, and companies want to get in on the action.

Spacetime’s Gattis summed up the Android app scene pretty nicely: “In some ways, it’s kind of like the wild, wild West,” he said, “but that’s where the Gold Rush people made their claim.”

Image: Bad Piggy Bank (Rovio)

Meet The Android App Millionaires [Electricpig via Android Guys]