Google Rolls Out Updates for Android Security Hole

May 19, 2011 -

Responding to reports that 99.7 percent of Android-based phones suffered from a security hole that made vital personal data vulnerable to hackers, Google has released an automatic fix to deal with the problem. Google is trying to assure users that no action is needed on their part.

"Today we're starting to roll out a fix which addresses a potential security flaw that could, under certain circumstances, allow a third party access to data available in calendar and contacts," said Google in a statement. "This fix requires no action from users and will roll out globally over the next few days."

The flaw was identified by Ulm University (Germany) researchers who who tested the security hole on a number of smart phones using the Android operating system. They also found that some phones sent unencrypted data, which clever hackers could "eavesdrop" on with the right tools.

"We wanted to know if it is really possible to launch an impersonation attack against Google services and started our own analysis," said researchers Bastian Könings and Jens Nickels.

"The short answer is: Yes, it is possible, and it is quite easy to do so. Further, the attack is not limited to Google Calendar and Contacts, but is theoretically feasible with all Google services using the ClientLogin authentication protocol for access to its data APIs."

Source: GameIndustry.biz


Comments

Re: Google Rolls Out Updates for Android Security Hole

Good, quick turnaround.  That's what I like to see.  Being able to rapidly fix security holes is as important a skill as preventing them in the first place -- because sooner or later, you're going to need to know how to do both.

 
Forgot your password?
Username :
Password :

Shout box

You're not permitted to post shouts.
Neo_DrKefkaMost also came with a free PS TV. Not a big fan but it did come with a free HDMI cord03/04/2015 - 7:40am
Andrew Eisen20.2 million PS4 consoles sold as of March 1. http://www.prnewswire.com/news-releases/playstation4-ps4-sales-surpass-202-million-units-worldwide-300045019.html03/04/2015 - 12:33am
MechaTama31Goth: True, but you can at least not waste your time reloading pages that have no new comments, or trying to remember which stories you even commented on.03/04/2015 - 12:26am
ZippyDSMleeI like nivida as well but this is kinda sad, http://arstechnica.com/gaming/2015/02/nvidia-hit-with-class-action-lawsuit-over-graphics-card-ram-issues/03/04/2015 - 12:23am
Goth_SkunkTo be fair, the tracker only advises you of threads that you've commented on have received more comments. It does nothing towards advising you if you've been replied to.03/04/2015 - 12:21am
ZippyDSMleeSeems you can make a link to the trackpage and ti will go there for as long as you are loged in.03/03/2015 - 11:26pm
ZippyDSMleeOh wow you can do that? I been just checking my posts 0-o03/03/2015 - 11:24pm
Matthew Wilsononly news worth while is a console that is about wiiu power for 200 bucks, but who cares.03/03/2015 - 11:12pm
MechaTama31Is it possible to make it so clicking on your username takes you to your Track page instead of your Edit page? I use the Track page routinely to see if anybody has replied to me. Editing my profile, not so much. Save a bit of wear and tear on my mouse?03/03/2015 - 10:44pm
Matthew Wilsonhttp://www.twitch.tv/nvidia is going to do a GDC conference, but god dam their preshow is so cringe worthy. ps I have a nvida card, and like their stuff, but still...03/03/2015 - 9:31pm
ZippyDSMlee.....win8 hates any left over hidden install partitions from other version of windows....only waste 5 hours finding that out...its ahrder than you think keeping up with 4 or 5 HDDS......03/03/2015 - 4:44am
Matthew WilsonI am going to pax east, any games you guys want me to check out?03/02/2015 - 11:23pm
ZippyDSMleeNo one remembers the days of Cinemagic and Cynergy eh? :P, meh even MGS is getting to film like....03/02/2015 - 8:44pm
MechaTama31I was about to get all defensive about liking Metal Gear Solid, but then I saw that he was talking about "cinematic" as a euphemism for "crappy framerate".03/02/2015 - 8:29pm
prh99Just replace cinematic with the appropriate synonym for poo and you'll have gist of any press release.03/02/2015 - 5:34pm
PHX Corphttps://www.youtube.com/watch?v=vZQDFO2KEPo Jim Sterling Makes Fun of "Cinematic" Gaming03/02/2015 - 3:39pm
Matthew WilsonWOW is copping EVE. http://us.battle.net/wow/en/blog/18141101/introducing-the-wow-token-3-2-2015 I think its a smart move to deal with gold farmers in this way.03/02/2015 - 1:16pm
Matthew WilsonI guess epic is tired of having their lunch eaten by unity. https://www.unrealengine.com/blog/ue4-is-free03/02/2015 - 12:50pm
Andrew EisenNot much to follow. Kern is being silly and... nothing much else is happening.03/02/2015 - 11:40am
Papa MidnightI ask because, having only just heard of it, I have not, and I was hoping for some insight.03/02/2015 - 11:39am
 

Be Heard - Contact Your Politician