|
||||||||
Android exploit. 99% of devices vulnerable. |
![]() |
|
|
Thread Tools | Search this Thread |
|
|
#1 |
|
Forum Member
Join Date: Jul 2003
Posts: 53,398
|
Android exploit. 99% of devices vulnerable.
|
|
|
|
|
Please sign in or register to remove this advertisement.
|
|
|
#2 |
|
Forum Member
Join Date: Jan 2003
Location: In Gods Own County
Posts: 20,678
|
...................What a great usp
|
|
|
|
|
#3 |
|
Forum Member
Join Date: Apr 2008
Posts: 3,636
|
Good to see that Google are acting quickly to fix this via the Play store. I'll expect an update for my Nexus 4 soon.
|
|
|
|
|
|
#4 |
|
Forum Member
Join Date: Oct 2003
Location: the wild world web
Posts: 28,132
|
I think that means that any non app store downloads need to be hash check summed before installing.
Obviously this applies to Flash the most. I'm assuming 'apk code' here refers to apps not actually installed. |
|
|
|
|
|
#5 |
|
Forum Member
Join Date: Mar 2007
Location: Hampshire
Posts: 20,806
|
I don't get it, surely any sideloaded app can do what it wants with the phone anyway
|
|
|
|
|
|
#6 |
|
Inactive Member
Join Date: Dec 2011
Posts: 1,482
|
I'm going to say this is blown out of proportion and it's good Google are working on a fix.
Firstly, it's unlikely 900m people will be affected because a popular app has to be malicious, which is unlikely in itself. A lot of hype for a potentially small issue. |
|
|
|
|
|
#7 |
|
Forum Member
Join Date: May 2010
Posts: 11,501
|
Quote:
I'm going to say this is blown out of proportion and it's good Google are working on a fix.
Firstly, it's unlikely 900m people will be affected because a popular app has to be malicious, which is unlikely in itself. A lot of hype for a potentially small issue. If they roll out a fix, you would imagine they would want to roll it out to everyone. |
|
|
|
|
|
#8 |
|
Inactive Member
Join Date: Dec 2011
Posts: 1,482
|
Quote:
I think the point is that any of the 900m users could be affected, not all of them.
If they roll out a fix, you would imagine they would want to roll it out to everyone. Also, as long as Google Play is used (or Amazon etc.) rather than an unknown app store, the risk is reduced even more. |
|
|
|
|
|
#9 |
|
Forum Member
Join Date: Oct 2003
Location: the wild world web
Posts: 28,132
|
Quote:
I think the point is that any of the 900m users could be affected, not all of them.
|
|
|
|
|
|
#10 |
|
Forum Member
Join Date: Sep 2008
Location: At college, in L.A.'s office
Posts: 54,221
|
If there's going to be a fix how will we be able to download it or where will we be able to download it from?
I'm beginning to wonder if I should install an antivirus app on my phone. Would that help keep malware at bay? As for apps I only use the Play store and I haven't got the option to use other app stores enabled. |
|
|
|
|
#11 |
|
Inactive Member
Join Date: Dec 2011
Posts: 1,482
|
Quote:
If there's going to be a fix how will we be able to download it or where will we be able to download it from?
I'm beginning to wonder if I should install an antivirus app on my phone. Would that help keep malware at bay? As for apps I only use the Play store and I haven't got the option to use other app stores enabled. |
|
|
|
|
|
#12 |
|
Forum Member
Join Date: Aug 2005
Posts: 4,214
|
Quote:
A lot of hype for a potentially small issue.
|
|
|
|
|
|
#13 |
|
Forum Member
Join Date: Aug 2009
Posts: 27,438
|
Meh....these sorts of issues crop up all the time, across platforms.
![]() http://gizmodo.com/5984190/how-to-by...anyones-iphone http://www.informationweek.co.uk/sec...omis/240142933 |
|
|
|
|
|
#14 |
|
Forum Member
Join Date: Apr 2005
Posts: 13,091
|
Quote:
I suspect if this was IOS you would be making a lot more of it
![]() |
|
|
|
|
|
#15 |
|
Forum Member
Join Date: Aug 2005
Posts: 4,214
|
Quote:
If this were iOS, the thread would be up to ten pages by now and people would be falling over themselves to comment on the terrible security lapse.
|
|
|
|
|
|
#16 |
|
Forum Member
Join Date: Oct 2003
Location: the wild world web
Posts: 28,132
|
Quote:
If this were iOS, the thread would be up to ten pages by now ...
I thought total silence is more the norm on such like stuff. And imagine the outrage if Google was able to install US NSA software on Android, which logically it is the only one which can't without being found out. iPhone tracking for life, hardly a murmur. iPhones new tracking via any routers you all pass, not a word. |
|
|
|
|
|
#17 |
|
Forum Member
Join Date: Jan 2011
Location: Dundee, Scotland
Posts: 9,293
|
Quote:
I suspect if this was IOS you would be making a lot more of it
![]() There was an issue like this with iOS if i remember correctly anyway. |
|
|
|
|
|
#18 |
|
Forum Member
Join Date: Apr 2005
Posts: 13,091
|
Quote:
Really?
I thought total silence is more the norm on such like stuff. And imagine the outrage if Google was able to install US NSA software on Android, which logically it is the only one which can't without being found out. iPhone tracking for life, hardly a murmur. iPhones new tracking via any routers you all pass, not a word. You've mentioned this thing about Apple tracking you via routers before. Do you have anything to substantiate it? If you're talking about wifi positioning, then that's not Apple tracking iPhones. You realise that Android uses this technique too, right? |
|
|
|
|
|
#19 |
|
Forum Member
Join Date: Oct 2003
Location: the wild world web
Posts: 28,132
|
Quote:
Are you making an actual point? There was a HUGE fuss made when the tracking thing was uncovered, and rightly so.
It was quite funny Jobs calling it 'shocking' but with him the salesman I guess he never needed to know. On this Android hitch, I do hope news sites and Adobe advise about tampered Flash downloads. Everything else downloaded in a similar fashion is piffling. |
|
|
|
|
|
#20 |
|
Forum Member
Join Date: May 2010
Posts: 11,501
|
Quote:
A bit like "all HTC One owners at risk of being mugged for their phone".
|
|
|
|
|
|
#21 |
|
Forum Member
Join Date: May 2010
Posts: 11,501
|
Quote:
Really?
I thought total silence is more the norm on such like stuff. And imagine the outrage if Google was able to install US NSA software on Android, which logically it is the only one which can't without being found out. iPhone tracking for life, hardly a murmur. iPhones new tracking via any routers you all pass, not a word. http://www.bbc.co.uk/news/technology-23187771 |
|
|
|
|
|
#22 |
|
Forum Member
Join Date: Jul 2003
Posts: 53,398
|
Quote:
Meh....these sorts of issues crop up all the time, across platforms.
![]() http://gizmodo.com/5984190/how-to-by...anyones-iphone http://www.informationweek.co.uk/sec...omis/240142933 This particular hack would appear to suggest Android users are now having to be cautious to only download apps from "recognised developers" which to me is a huge flaw. But then i've never agreed with the nature of the Android app store. People mock Apple for approving apps but at least it added another level of security. |
|
|
|
|
|
#23 |
|
Forum Member
Join Date: Jul 2003
Posts: 53,398
|
Quote:
iPhones new tracking via any routers you all pass, not a word.
Which let's not forget.. while they were driving their little camera cars around the world taking photos of everyones house and street.. they were also recording every router they came across and plotting it on a map and storing all this in a huge database. That's why when you go onto google map and ask it to find your location when hard wired into a broadband line, it can find your exact location. So really.. no one knows router privacy breaches better than Google do. Heres Steve discussing it: http://www.youtube.com/watch?v=39iKLwlUqBo |
|
|
|
|
|
#24 |
|
Forum Member
Join Date: May 2010
Posts: 11,501
|
Quote:
Not really the same tho are they? The first link requires physical access to the phone.. which if someone else has physical access to your phone it's already compromised anyway. And the second link is about images, which could apply to all OS's. It's just they highlighted iOS because it auto loads images in email clients. But so do others.
This particular hack would appear to suggest Android users are now having to be cautious to only download apps from "recognised developers" which to me is a huge flaw. But then i've never agreed with the nature of the Android app store. People mock Apple for approving apps but at least it added another level of security. It is interesting that Samsung have already included a fix for the S4. How does that fit with an overall solution for android? Are you going to get a situation where each supplier is going to start providing patches for OS flaws and not just bug fixes for their overlays? |
|
|
|
|
|
#25 |
|
Forum Member
Join Date: Apr 2005
Posts: 13,091
|
Apple does have its own router database, which is used like Google's for wifi location. It's not the tracking system that Alan suggests though.
|
|
|
|
![]() |
|
All times are GMT. The time now is 11:02.



