Google Rolls Out Updates for Android Security Hole

May 19, 2011 -

Responding to reports that 99.7 percent of Android-based phones suffered from a security hole that made vital personal data vulnerable to hackers, Google has released an automatic fix to deal with the problem. Google is trying to assure users that no action is needed on their part.

"Today we're starting to roll out a fix which addresses a potential security flaw that could, under certain circumstances, allow a third party access to data available in calendar and contacts," said Google in a statement. "This fix requires no action from users and will roll out globally over the next few days."

The flaw was identified by Ulm University (Germany) researchers who who tested the security hole on a number of smart phones using the Android operating system. They also found that some phones sent unencrypted data, which clever hackers could "eavesdrop" on with the right tools.

"We wanted to know if it is really possible to launch an impersonation attack against Google services and started our own analysis," said researchers Bastian Könings and Jens Nickels.

"The short answer is: Yes, it is possible, and it is quite easy to do so. Further, the attack is not limited to Google Calendar and Contacts, but is theoretically feasible with all Google services using the ClientLogin authentication protocol for access to its data APIs."

Source: GameIndustry.biz


Comments

Re: Google Rolls Out Updates for Android Security Hole

Good, quick turnaround.  That's what I like to see.  Being able to rapidly fix security holes is as important a skill as preventing them in the first place -- because sooner or later, you're going to need to know how to do both.

 
Forgot your password?
Username :
Password :

Poll

Best decade for video games?:

Shout box

You're not permitted to post shouts.
ZippyDSMleePapa Midnight: Care to take a look at this and tell me what you think about it? http://www.amazon.com/Frisby-FS-5010BT-Surround-Speakers-Bluetooth/dp/B00EYX1N2S/03/26/2015 - 10:27pm
Matthew Wilson@AE I think he means both.03/26/2015 - 9:23pm
ZippyDSMleeuhg either a nap after being up 30 hours or working on my comp blah. Oh wow when did the the all shout box page show 3 times as many shouts 0-o03/26/2015 - 8:30pm
Andrew EisenMechaCrash - Sony in particular or Hollywood in general?03/26/2015 - 7:38pm
Matthew Wilson@mach no way in hell, so that is why I want them to stay away.03/26/2015 - 7:21pm
MechaCrash"Get the movie right" is preferable to "stay away," but do you really think they won't screw it up?03/26/2015 - 7:19pm
Craig R.And yes, 90's games. Damn near all of my fav computer & console games were from that decade03/26/2015 - 7:00pm
Craig R.I'd take the NCAA seriously if they'd bite instead of bark03/26/2015 - 6:59pm
Andrew EisenConster - Sure, give me a few minutes.03/26/2015 - 3:05pm
Consterhttp://sanfrancisco.cbslocal.com/2015/03/26/salesforce-ceo-says-company-is-cancelling-all-programs-in-indiana-over-lgbt-discrimination-fears/ http://edition.cnn.com/2015/03/25/politics/mike-pence-religious-freedom-bill-gay-rights/index.html03/26/2015 - 2:55pm
ConsterApparently Salesforce and the NCAA are also upset over SB 101. I know they're not video-games related, but maybe add a line to the article?03/26/2015 - 2:54pm
Andrew EisenThat said, I doubt that if the movie gets made, it will be similar to either version of the show. But, Star Wars movies will be out again and the designs are still pretty awesome so it's got a chance.03/26/2015 - 2:34pm
Andrew EisenPeople my age and older with disposable income and a fondness for nostalgia.03/26/2015 - 2:32pm
Matthew Wilson@AE I am kinda surprised sony would want to make a movie of something that is 30 years old. I woulder how many people remember robotech?03/26/2015 - 2:24pm
Andrew EisenProbably not but my wish is that Hollywood make good anime movies.03/26/2015 - 2:20pm
Matthew Wilsonhttp://variety.com/2015/film/news/robotech-movie-sony-tv-series-anime-1201460191/ am I the only one that wishes Hollywood would stay a million mile away from anime?03/26/2015 - 1:29pm
MaskedPixelantehttp://www.comicbookmovie.com/fansites/markcassidycbm/news/?a=117247 Because when I think "all new, all different", my mind jumps to a hero that's served on FOUR different Avengers teams.03/26/2015 - 11:31am
Matthew Wilsonnot shocked, lets see how gencon reacts.03/26/2015 - 11:01am
Andrew EisenAnd for those of you keeping track, Indiana's SB 101 was signed into law this morning by Gov. Pence.03/26/2015 - 10:58am
james_fudgeyeah!03/26/2015 - 9:17am
 

Be Heard - Contact Your Politician