Don't worry about photos leaking, Microsoft has blocked the WP8 store vulnerability

Computer store news: Windows Phone security is obvious to all, but there will be an episode. Recently, Microsoft Windows Phone Store ushered in a bug fix. This fix addresses a security privacy vulnerability that could allow developers to post a WP8 app that can gain access to local photos without user authorization.

This Microsoft Windows Phone store update, although very small, still caught the attention of developer Al Gihuni, and Al Gihuni developed the popular cloud music application "SoundClone" for the WP platform.

Developer Al Gihuni also showed a simulation test application (TicTacHum) on the foreign media wpcentral website, replaying how to get access to WP8 users' local images.

Specific Operation Process:

1. Developers design a test application (TicTacHum)

2. Submit to Microsoft Windows Phone Store and check three application conditions: 1. Obtain photo library; 2. Obtain mobile phone ID; 3. Obtain user ID

3. After the Microsoft store certification process, successfully publish to the WP store. Note: Microsoft has improved the application certification process for the WP Store, which takes only one hour at the earliest.

4, the user enters the Microsoft WP store, search for the test application (TicTacHum) and download, in the application details, indicate only the phone ID, user ID description, and does not prompt the user, the application also Need to get photo library permission.

5. The user starts the installation and runs the application (TicTacHum).

6. Successfully enter the main interface of the TicTacHum application and also gain access to local images.

Although the user does not authorize the photo library permissions of the TicTacHum application, the application uses the WP Store vulnerability to gain access to local images.

▲This is also confirmed by the Microsoft WP store.

Fortunately, there is currently no application that uses WP8 store exploits, and Microsoft Timely repair security vulnerabilities in the WP store, WP8 users can rest assured to download and install various applications and games.