Okay Geek Farm
Friday
Nov262010
Private security firm uncovers several issues in webOS
Daniel Carey
Palm, you just don’t get a break do you? Researchers from a private security firm SecTheory, have stated that webOS as a platform has several semi-serious flaws brought about by Palm’s heavy integration of JavaScript throughout webOS’ core systems. Several of the issues range from cross-site scripting, a floating point overflow issue, and a denial-of-service vector — at least the contact app issue was patched in webOS 2.0.
As previously stated, webOS’ more susceptible to these issues than other mobile operating systems due to Palm’s heavy base integration of web technologies such as JavaScript at a a core level. Hopefully Palm will come out with a patch in the upcoming weeks, and if not, perhaps a strongly worded letter might help.
References (1)
Engadget
