Got Voice Offers Visual Voicemail and MAJOR Security Concerns
Posted in Random by Dan at 12:03 pm
This post was published 2 years 5 months 8 days ago and its content may not be valid anymore.
We are all for GotVoice (I’m a subscriber) and we are all for mobile websites. So it is only nature we would be excited about GotVoice mobile which lets you easily listen to your messages via a mobile friendly website.
Well we aren’t. We found out that when you log into m.gotvoice.com you login credentials are not only presented in the clear, but also in the URL.
Eg: http://m.gotvoice.com/inbox.php?username=tips%40uneasysilence.com&password=xxxxxxxx&cmd=login&Log+In=Log+In
Sorry GotVoice, we’ll pass.
I, like you, think GotVoice is great. I’m also a fan of mobile websites. So when I found this article, I had to see this for myself. I did it just now, and I’m not seeing these issues.
Maybe they fixed it between your post and mine. If so – Man, those guys are good! What a quick turnaround.
BTW. it looks like they’re encrypting the password before they send it. :)