iPhone Encryption App Data a Major Flaw in Travel Apps

iPhone Encryption Data a Major Flaw in Travel Apps

A new report says the 10 most popular travel apps for iPhone and Android devices are severely flawed

A new report from Bluebox Security says the top 10 travel apps in the iOS and Android app stores are all riddled with security flaws. Bluebox says encryption app data, insufficient protection against man-in-the-middle attacks, and leftover administration or debugging code are the biggest issues for the iPhone and Android devices.

Of those flaws, a lack of encryption for app data at rest was the biggest problem, according to Andrew Blaich, lead security analyst at Bluebox Security.

"It only works when the device is off," said Blaich. "But while the device is running, the data can be stolen by other malicious apps -- or by someone grabbing the device from your hand."

In total, only one of the top 10 Android apps encrypted data, and none of the iOS apps encrypted data. Online one of the iPhone apps used certificate pinning encryption, which checks to see if the app is exchanging information with the right clients.

Travel apps are a particularly sensitive target because these apps hold personal data, financial data, loyalty program data, as well as travel itineraries.

"It's really important to understand what they're doing to protect this data," Blaich said.

About the Author

Matt Holden is an Associate Content Editor for 1105 Media, Inc. He received his MFA and BA in journalism from Ball State University in Muncie, Indiana. He currently writes and edits for Occupational Health & Safety magazine, and Security Today.

  • How COVID-19 Has Revolutionized Aviation Security Let's Talk Sports Security

    In this episode of SecurPod, Ralph C. Jensen and Fred Burton discuss security tactics at sporting events, from dealing with unruly fans to coordination between the home and visitors' teams to identifying potential stalkers. We also talk about the logistics of re-opening mass-attendance venues in the wake of the COVID-19 pandemic.

Digital Edition

  • Security Today Magazine - May June 2021

    May June 2021


    • Tapping into Touch-free Digital
    • Deep Learning
    • Working from Home
    • Body-worn Technology
    • A Tragic Turn of Events

    View This Issue

  • Environmental Protection
  • Occupational Health & Safety
  • Infrastructure Solutions Group
  • Spaces4Learning
  • Campus Security & Life Safety