Summer vacation is almost approaching, and many families are planning their next big trip. However, you should think twice before downloading a number of popular travel applications, as they can compromise your privacy and security.
These popular travel apps can jeopardize your summer vacation plans
Of the apps tested by Kryptowire, Disneyland had the highest threat score at 85 followed by Uber at 83.6, Waze at 82.9, Southwest Airlines at 82.2 and SpotHero at 80.1. The reason the apps in question had such high threat scores is due to the amount of data they collect and the device resources they use, like a smartphone’s microphone, camera and camera roll.
The Disneyland app, Uber, the Southwest Airlines app, Waze, and SpotHero are all popular travel apps that aren’t as safe as they appear. To estimate threat scores, the company’s research team employed its Mobile Security Testing (MAST) to conduct a risk assessment on regularly used travel apps.
Chief technology officer at Kryptowire, Alex Lisle provided further insight on the firm’s findings in a press release and why bringing your work phone on a family trip is often a terrible idea, saying:
The Disneyland app poses the largest privacy concern to users as it is capable of using multiple device-level resources including a device’s microphone, camera roll and contacts without checking for trusted environments, according to Kryptowire.
“While it’s exciting that more people will resume leisure and business travel this summer, we can’t be naive to the risks associated with modern travel, including mobile app usage. In our new ‘hybrid work’ environment, it’s not just personal devices coming along for the ride. The lines continue to blur between personal bring your own device (BYOD) and professional devices, and its crucial employers and employees are aware of the potential risks.”
The app also has insufficient keychain protection, as the limits on when the data it stores within the keychain can be accessed are not particularly restrictive. The researchers also observed that the Disneyland app sends a device’s unique identifier across any network a smartphone with it installed is connected too.
Kryptowire’s MAST gave the app such a high threat score as a device identifier is traditionally used to track a device across multiple apps and web traffic. If this data fell into the wrong hands, it could put travelers at risk of identity theft or other attacks when visiting Disneyland.
Check the latest news about tech news section for best information.