Telekinetics My Ass -A MUST Read

by **azdewars** Fri 04 Dec 2015, 3:58 am

This is information I (azdewars)personally can access (hack) via Amazon (download mobile app WGT).

Technical Details

Size: 33.1MB
Version: 1.18.5
Developed By: WGT Media ( Privacy Policy

)
Application Permissions: ( Help me understand what permissions mean )
http://www.amazon.co.uk/mas/permissions/279-5504378-1793322?_encoding=UTF8&ref_=mas_dp_perm DeadEnd How Convenient

Access the list of accounts in the Accounts Service
Open network sockets
Request authtokens from the AccountManager
Access information about networks
Get information about the currently or recently running tasks: a thumbnail representation of the tasks, what activities are running in it, etc
Access the vibration feature
Access information about Wi-Fi networks
Read from external storage
Read-only access to phone state
Write to external storage

[size]
Minimum Operating System: Android 4.0[/size]
Approximate Download Time: Less than 5 minutes

This is one(1) of many WGT vulnerabilities. WGT is also in the game of MALWARE. To fight it is futile, however, this could be my purpose in life.

The following is an excerpt from WGT Privacy Policy. Mobile users of WGT beware:
When you use WGT (whether through a Social Site or directly), you may also disclose your personally identifiable information when you form relationships, send messages, perform searches and queries, form teams, set up events, and otherwise transmit information through various channels. This information is generally retained by us so that you can connote to have the use of the information when you use the functionality of the Site, for instance, you can return to view prior messages you have sent or easily see your friend list.
If you play WGT games on your mobile device, such as smartphones, tablets and iPads, we collect your mobile device identifier, device type and IP address. We may collect other information associated with your device such as telephone number, country and other information that you have chosen to provide, such as user name, character name, geo-location or email address. We may also access your contacts to enable you to invite friends to join you in using the WGT services and playing a WGT game.
With your consent, we may send push notifications to your mobile device, including game updates and other relevant messages. You can manage push notifications form the "options" or "settings" pages within the relevant game and/or from your mobile device's "settings" page.
Default setting typically set to ENABLE (Push)
We may use information collected form you in the course of registering for or playing a WGT Game to create your game accounts and allow game play, to enable user communications as described above and to communicate with you about your use of a WGT Game, to provide support, to deliver targeted advertising, to provide in-game leader boards and promote in-game play achievement, to improve our services and to detect and prevent fraud and violations of the WGT Terms and Conditions.
You post User Content (as defined in the WGT Terms & Conditions) on the Site at your own risk. We cannot control the actions of other users, and we are not responsible for circumvention of any privacy settings or security measures contained on the Site. You understand and acknowledge that, even after removal, copies of User Content may remain viewable in cached and archived pages or if other users have copied or stored your Content.
Conclusion:
If I can access this information and tweak the code to perform a particular task and reset code after completion (no digital footprint) other person(s) also can. A serial hacker? Could be because a person(s) was targeted.
I trust some of you will will take me serious about this. If not, PLEASE check your settings to validate your desired protection. And PLEASE read WGT Privacy Policy. Statistically, only 12% of online users read the WHOLE Privacy Policy and hackers use that to their advantage.
This is a simplified example of how to tweak code to perform a task without client knowledge and/or not thoroughly checking your settings.
Go to your Facebook login page BUT DO NOT LOGIN. MOST home users automatically have their email address and password already present. If not, kudos to you.
Youll notice password are star like symbols for security.....
1- highlight your password only (ou might have to log out and then page will present itself withemail and password)
2- With password highlighted only, right click and select INSPECT ELEMENT.
3- On left pane of code you'll notice gray highlighted line of code with the word "password". Double click on the WORD password and type in "text". The parentheses will stay present.
Now look at your Facebook password. It is in text now. BE careful of persons BORROWING your pc for : submitting resumes, checking email, you get the point. They just might know how to do this AND well ..you never can tell about people anymore. No respect
Reset browser and Facebook is returned back to password encrypted
Please excuse mis-spellings etc. late for appointment but I wanted to share knowledge first. Thank you in advance
found WGT Media reviews of ex-employees which is another avenue of gaining insider information, one of them being an Engineer.
https://www.glassdoor.com/Reviews/WGT-Media-Reviews-E797546.htm

Respectfully,
John - azdewars