Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > News > Tech News > Google fixes Android cryptological app security flaw, updates due soon

Google fixes Android cryptological app security flaw, updates due soon
Thread Tools
MacNN Staff
Join Date: Jul 2012
Status: Online
Reply With Quote
Jul 9, 2013, 10:01 AM
 
Google has plugged a serious security hole in Android, one that potentially allowed for the installation of malware in an APK without breaking an app's cryptographic signature. The flaw, discovered in February, reported to Google and publicly announced last week by mobile security research firm Bluebox Labs, affects versions of Android as far back as version 1.6.

Android apps contain a cryptographic signature which proves to the device's kernel that it has not been altered or otherwise tampered by other parties. As the vulnerability allows the app to be changed without altering the signature, Android will believe it is unmodified, and will run the app as it normally would.

Speaking to ZDNet, Android communications manager Gina Scigliano confirmed "that a patch has been provided to our partners - some OEMs, like Samsung, are already shipping the fix to the Android devices." Considering the typical schedule for updates from manufacturers via carriers, this could be a quick fix for the latest devices, while older generations of smartphone or tablet may end up waiting a considerable amount of time for the update.

While the flaw is potentially serious, it does not appear to have affected apps in general. Scigliant advised that Google has "not seen any evidence of explotation in Google Play or other app stores via our security scanning tools. Google Play scans for this issue, and Verify Apps provides protection for Android users who download apps to their devices outside of Play."
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -4. The time now is 09:32 PM.
All contents of these forums © 1995-2015 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.8 © 2000-2015, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2