Google Rolls Out Updates for Android Security Hole

May 19, 2011 -

Responding to reports that 99.7 percent of Android-based phones suffered from a security hole that made vital personal data vulnerable to hackers, Google has released an automatic fix to deal with the problem. Google is trying to assure users that no action is needed on their part.

"Today we're starting to roll out a fix which addresses a potential security flaw that could, under certain circumstances, allow a third party access to data available in calendar and contacts," said Google in a statement. "This fix requires no action from users and will roll out globally over the next few days."

The flaw was identified by Ulm University (Germany) researchers who who tested the security hole on a number of smart phones using the Android operating system. They also found that some phones sent unencrypted data, which clever hackers could "eavesdrop" on with the right tools.

"We wanted to know if it is really possible to launch an impersonation attack against Google services and started our own analysis," said researchers Bastian Könings and Jens Nickels.

"The short answer is: Yes, it is possible, and it is quite easy to do so. Further, the attack is not limited to Google Calendar and Contacts, but is theoretically feasible with all Google services using the ClientLogin authentication protocol for access to its data APIs."

Source: GameIndustry.biz


Comments

Re: Google Rolls Out Updates for Android Security Hole

Good, quick turnaround.  That's what I like to see.  Being able to rapidly fix security holes is as important a skill as preventing them in the first place -- because sooner or later, you're going to need to know how to do both.

 
Forgot your password?
Username :
Password :

Poll

Will we ever get Half-Life 3?:

Shout box

You're not permitted to post shouts.
james_fudgeprh99: Whether you agree with the article or not, fighting alleged censorship with censorship is hella lame10/02/2014 - 4:27am
james_fudgewhoever made that decision at Intel will regret it later on down the road. Boycotts are tricky business.10/02/2014 - 4:26am
prh99The unflattering characterization "They don’t know how to dress or behave." & "‘Games culture’ is a petri dish of people who know so little about how human social interaction..." probably didn't help.10/02/2014 - 1:52am
prh99Probably not many as it was purely a vindictive move. The headline alone was plenty of ammo, but for those that did read and complain..10/02/2014 - 1:42am
Andrew EisenI wonder how many of those who complain about that article actually read past the headline.10/02/2014 - 1:37am
prh99http://intel.ly/1tjh1AH http://bit.ly/1rGPHOY http://intel.ly/Zu6go9 it isn't surprising "Gamers are over" didn't go over very well.10/02/2014 - 1:34am
Papa MidnightCan you parlay that to #WriteAGawkerArticle? The cesspool of horrid crap over there extends far beyond Kotaku.10/02/2014 - 12:34am
Andrew EisenWow! Intel dropped Gamasutra due to GameJournoPros? Over Matt Matthews? The only Gamasutra guy in the group? Who hasn't written a single thing about #GamerGate at the site? Where did you read that?10/02/2014 - 12:32am
Neo_DrKefka#WriteAKotakuArticle "#GamerGate is responsible for breaking millions of Intel powered macbooks after angry SWJ hipsters slam them shut" or "How Toxic Processors from Intel causes sexism. "10/02/2014 - 12:15am
Neo_DrKefkaSo Intel has dropped Gamesutra due to there support of your Gaming News Cabal Fudge. Anti GamerGate article soon? Or like your e-mails are you hoping this narrative dies down soon?10/02/2014 - 12:14am
Andrew EisenWell, time to eat some dinner and work on the Hyrule Warriors guide until bedtime!10/02/2014 - 12:11am
Andrew EisenJust finished my stream. That... could have gone better. Technical issues prevented me from playing a console game so I instead played and bitched about The Walking Dead for two hours. Oh well, the folks watching still seemed to enjoy it.10/02/2014 - 12:09am
Matthew Wilsonwe all know valve can not cout to 3.10/02/2014 - 12:08am
MechaTama31Who cares? Gimme Portal 3!10/01/2014 - 9:38pm
quiknkoldAndrew : Mostly I decided there were better people who could explain what was going on, or fight any battles that may come up. so I decided not to talk about it anymore.10/01/2014 - 8:49pm
Andrew EisenI don't recall you promising that. GamerGate is not a taboo discussion here. Anyway, thanks for the link. Very interesting.10/01/2014 - 8:47pm
quiknkoldI know I promised to not talk about Gamergate again, but Intel just pulled sponsership from Gamasutra over it http://techraptor.net/2014/10/01/gamasutra-intel/10/01/2014 - 8:40pm
quiknkoldP.T. is a game I just cannot play alone. I puss out hard on it. need somebody with me when I play that. Kojima was right. it is Pants Shittingly Scary10/01/2014 - 6:17pm
quiknkold@james_fudge not playin all the way through. P.T, Silent Hill(Not sure which), Resident Evil Gamecube Remake, Alien Isolation, Ghostbusters, Outlast, Super Castlevania 410/01/2014 - 6:04pm
james_fudgeI wish I could like that last shout.10/01/2014 - 5:48pm
 

Be Heard - Contact Your Politician