This Day On The Street
Continue to site
ADVERTISEMENT
This account is pending registration confirmation. Please click on the link within the confirmation email previously sent you to complete registration.
Need a new registration confirmation email? Click here

Starbucks Security Breach: The Media Misled You (Update 1)


I received an email from Daniel Wood, the security researcher who discovered the vulnerability in the Starbucks app, on Saturday afternoon. 

He wrote:

Rocco, thank you for taking this stance regarding my findings on the Starbucks iOS app.

Here's an update on the Starbucks situation and my comments on some of the sensationalizing ...

You can read Wood's complete comments at  the link, but here are the highlights:
After publishing my vulnerability report on the Starbucks v2.6.1 mobile iOS application, I have been in continuous communications with Starbucks. As you know, Starbucks released an updated version of the application to address these security concerns. I have evaluated the latest version of the Starbucks mobile application (v2.6.2) from the Apple App Store and conducted exhaustive retesting of the application in order to confirm whether the vulnerabilities were successfully addressed ... 

Starbucks has effectively addressed the security issues that were documented in my original report ... however, I do recommend that the above issue be remediated within the next release cycle of the mobile application to prevent a customers' last logged geolocation data from being stored. 
Wood also addressed sensationalism in the media, which, clearly takes aim at the ReadWrite piece mentioned on Page One of the present article:
At no point were Starbucks's data servers compromised, exposing their 10 million customers to the application as some reports have suggested. This was a local exploitable vulnerability on a users device, not a remotely exploitable vulnerability on their servers or any other type of remote code execution vulnerability. 
There you have it. Don't believe everything you read, especially if it comes from over-the-top tech snobs, something Wood obviously is not. 

I (buzzword alert) reached out to SBUX Chief Digital Officer Adam Brotman on this. He couldn't comment at the moment, but asked that I check back in the coming days. 

Must Read: Netflix Could Crash -- Hard -- Next Week

--Written by Rocco Pendola in Santa Monica, Calif.

Disclosure: TheStreet's editorial policy prohibits staff editors, reporters and analysts from holding positions in any individual stocks. Rocco Pendola is a columnist for TheStreet. Whenever possible, Pendola uses hockey, Springsteen or Southern California references in his work. He lives in Santa Monica.
2 of 2

Check Out Our Best Services for Investors

Action Alerts PLUS

Portfolio Manager Jim Cramer and Director of Research Jack Mohr reveal their investment tactics while giving advanced notice before every trade.

Product Features:
  • $2.5+ million portfolio
  • Large-cap and dividend focus
  • Intraday trade alerts from Cramer
Quant Ratings

Access the tool that DOMINATES the Russell 2000 and the S&P 500.

Product Features:
  • Buy, hold, or sell recommendations for over 4,300 stocks
  • Unlimited research reports on your favorite stocks
  • A custom stock screener
Stocks Under $10

David Peltier uncovers low dollar stocks with serious upside potential that are flying under Wall Street's radar.

Product Features:
  • Model portfolio
  • Stocks trading below $10
  • Intraday trade alerts
14-Days Free
Only $9.95
14-Days Free
Dividend Stock Advisor

David Peltier identifies the best of breed dividend stocks that will pay a reliable AND significant income stream.

Product Features:
  • Diversified model portfolio of dividend stocks
  • Updates with exact steps to take - BUY, HOLD, SELL
Trifecta Stocks

Every recommendation goes through 3 layers of intense scrutiny—quantitative, fundamental and technical analysis—to maximize profit potential and minimize risk.

Product Features:
  • Model Portfolio
  • Intra Day Trade alerts
  • Access to Quant Ratings
Options Profits

Our options trading pros provide over 100 monthly option trading ideas and strategies to help you become a well-seasoned trader.

Product Features:
  • Actionable options commentary and news
  • Real-time trading community
SYM TRADE IT LAST %CHG
SBUX $54.69 -1.03%
AAPL $110.37 -1.75%
FB $88.15 -1.94%
GOOG $606.25 -1.32%
TSLA $245.57 -0.86%

Markets

Chart of I:DJI
DOW 16,374.76 +23.38 0.14%
S&P 500 1,951.13 +2.27 0.12%
NASDAQ 4,733.4970 -16.4820 -0.35%

Free Reports

Top Rated Stocks Top Rated Funds Top Rated ETFs