Uber: The Microsoft Store Uber App Does Not Implement Server-side Token Revocation

Summary The Microsoft Store Uber App Windows Phone Architecture does not properly revoke or expire a rider's x-uber-token upon app signout. Security Impact When a user logs out/signs off of the app, the logout process is handled only locally on the application side, and without any type of...

Uber: The Microsoft Store Uber App Does Not Implement Certificate Pinning

Summary The Microsoft Store Uber App Windows Phone Architecture does not properly implement certificate pinning. Security Impact Layer-2+ network traffic transmitted from and received by the app can be surreptitiously intercepted and transparently modified by an attacker, with no warnings or erro...

October 10, 2017—KB4041676 (OS Build 15063.674)

None None...

Surface Pro 4 update history

None None...

August 23, 2016 — KB3176934 (OS Build 14393.82)

None None...

Microsoft Store India got hacked in India !

Microsoft Store India got hacked in India ! Today, Hackers from group EvilShadow successfully hack and deface the website of Microsoft Store India https://www.microsoftstore.co.in . But Hacker upload his deface page at location . Hacker revealed that user passwords were saved in plain text as sho...