Android phone users get update for flaw

2 comments | 26I like it!
October 31, 2008, 01:55 PM —  IDG News Service — 

Users of the G1 Android phone on Friday have begun receiving a software update that fixes a flaw that security researchers found earlier in the week.

The update included the fix to the browser vulnerability and a couple of other minor changes as well, said Michael Kirkland, a Google spokesman. Every user of the G1 may not have gotten the update yet but should within a short time frame, he said.

Google worked with T-Mobile USA, the only operator selling the device, to push the update out to users. The G1 went on sale last week, and T-Mobile has not disclosed how many have sold so far.

Researchers at Independent Security Evaluators revealed earlier this week that they discovered that Android, Google's open-source software that is currently only running on HTC's G1 handset, is based on outdated open-source components that do not include a fix to a previously known vulnerability.
On a Web page for ISE, Charlie Miller, Mark Daniel and Jake Honoroff wrote that they wouldn't say much about the vulnerability until Google fixes it.

However, they said that Android users who visit malicious Web sites may find their sensitive information stolen. That's because an attacker could access any information the site uses, including saved passwords, information entered into a Web application form and cookies.

The researchers also said, however, that the impact of the attack is limited because of Android's security architecture. An attacker can't, for example, control functions of the phone such as the dialer.

On Friday, Miller was not available to talk about whether he had received and tested the update.

IDG News Service

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

I like it!
Close

On Twitter now

g1

Powered by Twitter
You are logged in | Sign out
Sign in and post to Twitter

What are you thinking?

Cancel Tweet sent

On Twitter now

Comments

CRAZY SITE!

Researchers at Independent Security Evaluators revealed earlier this week that they discovered that Android, Google's open-source software that is currently only running on HTC's G1 handset, is based on outdated open-source components that do not include a fix to a previously known vulnerability.
On a Web page for ISE, Charlie Miller, Mark Daniel and Jake Honoroff wrote that they wouldn't say much about the vulnerability until Google fixes it.

http://www.mobilephone02.com
| reply

Android phone users get update for flaw soon

The update included the fix to the browser vulnerability and a couple of other minor changes as well, said Michael Kirkland, a Google spokesman. Every user of the G1 may not have gotten the update yet but should within a short time frame, he said.

Google worked with T-Mobile USA, the only operator selling the device, to push the update out to users. The G1 went on sale last week, and T-Mobile has not disclosed how many have sold so far.
http://www.yoytrade.com
| reply
peer-to-peer

Brian Proffitt
Microsoft/Novell: Breaking Down the Coupon Numbers

Esther Schindler
Drupal's Dries Buytaert on Building the Next Drupal

Tom Henderson
Top Ten General Operating Systems Rants

pasmith
PS3 motion controller delayed; goes up against Project Natal

sjvn
Neolithic Windows security hole alive and well in Windows 7

claird
Perl source code comparison makes for good reading

mikelgan
Cell phones don't create stress or interrupt much

Sandra Henry-Stocker
How to: The Unix Interview

 

Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Marketplace