Google Rolls Out Updates for Android Security Hole

May 19, 2011 -

Responding to reports that 99.7 percent of Android-based phones suffered from a security hole that made vital personal data vulnerable to hackers, Google has released an automatic fix to deal with the problem. Google is trying to assure users that no action is needed on their part.

"Today we're starting to roll out a fix which addresses a potential security flaw that could, under certain circumstances, allow a third party access to data available in calendar and contacts," said Google in a statement. "This fix requires no action from users and will roll out globally over the next few days."

The flaw was identified by Ulm University (Germany) researchers who who tested the security hole on a number of smart phones using the Android operating system. They also found that some phones sent unencrypted data, which clever hackers could "eavesdrop" on with the right tools.

"We wanted to know if it is really possible to launch an impersonation attack against Google services and started our own analysis," said researchers Bastian Könings and Jens Nickels.

"The short answer is: Yes, it is possible, and it is quite easy to do so. Further, the attack is not limited to Google Calendar and Contacts, but is theoretically feasible with all Google services using the ClientLogin authentication protocol for access to its data APIs."

Source: GameIndustry.biz


Comments

Re: Google Rolls Out Updates for Android Security Hole

Good, quick turnaround.  That's what I like to see.  Being able to rapidly fix security holes is as important a skill as preventing them in the first place -- because sooner or later, you're going to need to know how to do both.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
Andrew EisenLikewise, only two of Xbox One's top 12 are exclusive: Dead Rising 3 and Ryse: Son of Rome (if you ignore a PC release later this year).09/01/2014 - 4:34pm
Andrew EisenNot to disrespect the current gen of consoles but I find it telling that of the "12 Best Games For The PS4" (per Kotaku), only two are exclusive to the system: Infamous: Second Son and Resogun.09/01/2014 - 4:30pm
MaskedPixelantehttp://www.joystiq.com/2014/09/01/beyond-two-souls-ps4-trophies-emerge-directors-cut-reported/ MMM MMM, nothing quire like reheated last gen games to make you appreciate the 400 bucks you spent on a new console.09/01/2014 - 4:24pm
Andrew EisenThat's actually a super depressing thought, that a bunch of retweeters are taking that pic as an illustration of the actual issue instead of an example of a complete misunderstanding of it.09/01/2014 - 4:20pm
Andrew EisenObviously, the picture was created by someone who doesn't understand what the issue actually is (or, possibly, someone trying to satire said misunderstanding).09/01/2014 - 4:10pm
Papa MidnightPeople fear and attack what they do not understand.09/01/2014 - 4:04pm
Papa MidnightWell, let's not forget. Someone held their hand in a peace sign a few weeks ago and people started claiming it was a gang sign. Or a police chief displayed the hand signal of their fraternity and was accused of the same.09/01/2014 - 4:04pm
SleakerEither people don't understand that what the picture is saying is true, or the picture was created out of a misunderstanding of what sexism is.09/01/2014 - 3:52pm
Sleaker@AE ok yah that's where the kind of confusion I'm getting. Your tweet can be taken to mean two different things.09/01/2014 - 3:51pm
Andrew EisenSleaker - No. No, not even remotely. The pic attached to my tweet was not made by me; it's not a statement I'm making. It's an illustration of the complete misunderstanding of the issue my tweet is referring to.09/01/2014 - 3:13pm
Papa MidnightIn other news, Netflix states why it paid Comcast: http://money.cnn.com/2014/08/29/technology/netflix-comcast/index.html?hpt=hp_t209/01/2014 - 3:10pm
Papa MidnightAndrew Eisen: Sites like Tumblr make things seem much bigger than they are. A vocal extreme minority start complaining and things go as they do.09/01/2014 - 3:09pm
SleakerAre you trying saying that specific costumes are sexist simply by being included in the game?09/01/2014 - 3:03pm
Andrew EisenSleaker - Seems completely cut and dry to me (of course, I wrote it so that's not surprising). What about it do you find confusing?09/01/2014 - 2:25pm
MaskedPixelantehttp://www.joystiq.com/2014/09/01/icewind-dale-enhanced-edition-now-available-for-pre-order/ Third time's the charm, right guys? Right? Surely Icewind Dale EE can't suck as much as Baldur's Gate 1 and 2 EEs can, right?09/01/2014 - 1:37pm
Sleaker@AE I don't even know what you're trying to say in that tweet.09/01/2014 - 1:28pm
Andrew EisenBy far the most retweeted tweet I've ever tweeted. https://twitter.com/AndrewEisen/status/50617593365333196809/01/2014 - 11:15am
Thomas RiordanNo, certainly not. Anything to prevent that kinda crap.09/01/2014 - 8:18am
SleakerAlthough.. I don't think it hurts anyone if kids think the report is true :P09/01/2014 - 3:26am
Sleakerand just for future reference. National Reports is a fake news site, they decided to remove their disclaimers a while back apparently...09/01/2014 - 3:25am
 

Be Heard - Contact Your Politician