Google Rolls Out Updates for Android Security Hole

May 19, 2011 -

Responding to reports that 99.7 percent of Android-based phones suffered from a security hole that made vital personal data vulnerable to hackers, Google has released an automatic fix to deal with the problem. Google is trying to assure users that no action is needed on their part.

"Today we're starting to roll out a fix which addresses a potential security flaw that could, under certain circumstances, allow a third party access to data available in calendar and contacts," said Google in a statement. "This fix requires no action from users and will roll out globally over the next few days."

The flaw was identified by Ulm University (Germany) researchers who who tested the security hole on a number of smart phones using the Android operating system. They also found that some phones sent unencrypted data, which clever hackers could "eavesdrop" on with the right tools.

"We wanted to know if it is really possible to launch an impersonation attack against Google services and started our own analysis," said researchers Bastian Könings and Jens Nickels.

"The short answer is: Yes, it is possible, and it is quite easy to do so. Further, the attack is not limited to Google Calendar and Contacts, but is theoretically feasible with all Google services using the ClientLogin authentication protocol for access to its data APIs."

Source: GameIndustry.biz


Comments

Re: Google Rolls Out Updates for Android Security Hole

Good, quick turnaround.  That's what I like to see.  Being able to rapidly fix security holes is as important a skill as preventing them in the first place -- because sooner or later, you're going to need to know how to do both.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
PHX Corp@Jessy I actually saw it on gamespot, seems that Nintendo accidently turned Samus into a Badass11/23/2014 - 9:28pm
Jessy HartAnybody else see the Samus Amiibo with 2 arm canons?11/23/2014 - 9:10pm
Andrew EisenNeo - If you're not bleeding then it's probably not you who needs to go to the doctor.11/23/2014 - 5:45pm
Wonderkarpgood. that kind of behavior is unnecessary.11/23/2014 - 5:44pm
WonderkarpGeorgina Young - Are Video Games Sexist? https://www.youtube.com/watch?v=rX9LV4GuG9E11/23/2014 - 5:43pm
ZippyDSMleehttp://deadspin.com/starcraft-player-says-hell-rape-opponent-is-booted-f-1662346891/+Fahey11/23/2014 - 5:40pm
Wonderkarphttps://www.youtube.com/watch?v=O4a9tMGSTG411/23/2014 - 5:32pm
WonderkarpDan Vavra of Warhorse Studios at the Nordic eCommerce Summit 2014 on Game Journalism and why ethics are important11/23/2014 - 5:27pm
WonderkarpGame Dev Ashley Ross on the Block/Blacklist https://www.reddit.com/r/KotakuInAction/comments/2n603f/thoughts_on_the_recent_igdaggautoblocker_incident/11/23/2014 - 5:25pm
Wonderkarpwhich is interesting cause this the first one 100% made by 2k games after the THQ buy11/23/2014 - 4:17pm
Wonderkarpbleh. the more I play WWE 2k15 on PS4, the more I get disappointed.11/23/2014 - 4:09pm
Neo_DrKefkaIt happened around 1030 this morning. I was not blooding because blood was on my hands11/23/2014 - 3:50pm
Andrew EisenThat depends on a lot. Were you bleeding at the time you requested to leave or did you want to leave work to go to the doctor over an incident that happened on a different day that you didn't file an incident report for?11/23/2014 - 3:21pm
Neo_DrKefkaThat would be a major OSHA violation correct?11/23/2014 - 1:54pm
Neo_DrKefkaOff topic but I was at work and went over to the first aid kit to get some eye drops. I look at my hand and noticed blood on my hands. My employers said their is no incident report and they won't send me to see a doctor and that I am abandoning my job.11/23/2014 - 1:54pm
MaskedPixelanteThe more I hear about AC Unity being rushed out, the more I think Ubisoft was telling the truth about why they couldn't add female co-op models.11/23/2014 - 1:14pm
IanCI wouldnt say the 360/PS3 version were superior. They were different games.11/23/2014 - 11:49am
MechaTama31It's hard to rank my top 5 against eachother, but they would include Ghostbusters, Back to the Future (all of it), Monty Python and the Holy Grail, The Shawshank Redemption, and The Princess Bride.11/23/2014 - 11:09am
Andrew EisenTrue, but I liked the fact that rather than do a crappy looking version of the PS3/360 version, it went with an art style more suited to the Wii's strengths.11/23/2014 - 12:26am
Wonderkarpif I had the money, I'd buy one of those expensive proton pack replicas11/22/2014 - 11:25pm
 

Be Heard - Contact Your Politician