Making Money With Android

Intent.ACTION_SEND Crashes Facebook App

I came across a rather obscure bug today, while trying to submit my app Tap That! Number to the Amazon Appstore. I received a rejection notice detailing several problems with my app, including this strange one:

Application’s “Feedback” functionality “Facebook” option is not working.

At first I had no idea what this meant. My app never mentions Facebook at all. The only “Feedback” option I have is a menu item designed to send an email to the developer.

After digging around a bit, I found that the code I was using to launch an email intent was also recognising Facebook and presenting it in the list of available apps. Here’s the code I was using:

Hijack any Facebook account with Faceniff – Firesheep for Android

A hacker called Bartosz Ponurkiewicz has released a simple Android app called Faceniff (Facebook + Sniff), which allows you to hijack the Facebook profile of anyone on same wireless network as you. Think Firesheep, but running on something you can slip in your pocket and carry anywhere. Oh, and it’s “for educational use only” 😉 Understand?

The interesting thing about Faceniff is that it works with WPA2-PSK encrypted networks (as well as the lower grade WAP protocol). So it doesn’t matter how strong your wireless encryption is, it’s still susceptible to inside attacks. All you need is a rooted Android phone with Faceniff installed.