Amazon’s “Manage Your Kindle” page has been reportedly spotted with a flaw thatcould give hackers access to the user’s cookies.
According To a user named Benjamin Daniel Musserl who discovered the bug, if users load a corrupted e-book featuring malicious scripts In Their Kindle library, by either downloading and importing, or tapping ‘Send to Kindle’ from a untrustworthy website, hackers can get access to the user account’s cookies.
Notably, corrupted e-books That are said to give access to a user’s Amazon account cookies include scripts In Their title, Such as.
“Once an attack manages to have an e- book (file, document, …) with a title like added to the victim’s library, the code will be executed as soon as the victim opens the Kindle Library web page. As a result, Amazon account cookies can be accessed by and Transferred to the attacks and the victim’s Amazon account can be compromised, “stated Musserl on a blog post.
In addition, Musserl saidthat he discovered the bug back in October last year, but Amazon patched it soon after. However, the bug started showing again after Amazon Introduced an overhauled ‘Manage Your Kindle’ section.
Users can however avoid the bug by simply not importing e-books from any other website except Amazon, or other trustworthy sources . The company is yet to make an official comment on the issue.
In July, Amazon Announced the launch of a Kindle Unlimited ebooks and audiobooks subscription service. For $ 9.99 (roughly Rs. 610) a month, customers can read from over 600,000 Kindle books, and listen to Thousands of Audible audiobooks, ‘housekeeping’ Individual Titles As Long as They Want.
No comments:
Post a Comment