Paypal Remote Code Execution

Paypal Remote Code Execution (android)

https://labs.mwrinfosecurity.com/advisories/2014/03/10/paypal-remote-code-execution/

 

I guess it's time to start looking for alternatives. First their staff is responsible for Twitter account being stolen ( https://www.wilderssecurity.com/showthread.php?t=359338 ) now they don't want to fix security bug in their software.

hqsec

 

1. The title is slightly missleading because this is about a Paypal Application for Android and not about Paypal itself.

2. Unfortunately, for some places on this planet, there are no alternatives to Paypal.

 

It says an interim workaround is Do not use the Paypal android app on public Wi-Fi networks.
So i assume using your phones own connection is safe.
Here is a clip from the BBC's click ( nothing to do with paypal specifically )
http://www.bbc.co.uk/iplayer/episode/b03y9z19/Click_08_03_2014/

 

That's why I put it in my quote, but now it is in the title as well

Yes, a pity indeed. In my country we have a lot more payment methods than Credit Card, so they are not very common here, and I don't want to get one and pay for it just for a handful of things I can only buy with PayPal or CC.

Relatively safe yes. Anyone who can see your network data can abuse this. You can protect from a lot of attackers by not using public WiFi, but you're not safe from your provider, governments etc.