Researcher warns of Android browser vulnerability
Published: 27 Oct 2008 13:59 GMT
A flaw exists in the Google-led Android mobile platform that could let users be tricked into visiting malware-laden websites and unwittingly have their keystrokes recorded, The New York Times has reported.
According to the Saturday article, a researcher and former US National Security Agency computer-security specialist, Charles Miller, told Google about the flaw last week. The article also quotes a Google security engineer, Rich Cannings, as saying the flaw's impact would be limited due to the compartmentalisation of the Android platform.
"We wanted to sandbox every single application because you can't trust any of them," Cannings told The New York Times.
Read this
Photos: Seven androids – and their lessons for enterprise IT
ZDNet UK picks out seven of fiction's most arresting androids and the lessons their fables have for business technology
A Google spokesperson told ZDNet UK on Monday that the company was "working on a browser software patch for Android" and "co-ordinating with T-Mobile on a plan to soon deliver this update over-the-air to customers' G1 handsets" — the HTC-made G1 being the first Android handset to be released to market.
Google's spokesperson also said the company did not believe the matter would "negatively impact" customers' experience with the G1, which will be launched by T-Mobile in the UK on Thursday.
Miller has reportedly not yet publicised the technical details of the problem, but has said the flaw in the browser used in Android means a visit to a malicious website could lead to software being secretly installed on the handset. Such software could record keystrokes made by the user, thereby discovering private information and passwords.
Android is a complete mobile stack — from operating system to applications — that is being developed by the Open Handset Alliance, an industry consortium headed up by Google.
- Photos: A rough guide to mobile open source
- Analysis: Android may spread beyond phones
- Roundup: First Google Android phone unveiled
- T-Mobile G1 (HTC Dream): A first look
- Analysis: First Android phone enters the smartphone fray
- Photos: T-Mobile G1 (HTC Dream)
- How Android stands out in the smartphone space
- Android in action on T-Mobile's G1
- Google releases final Android SDK
- T-Mobile G1 (HTC Dream) review
- Google shares Android source code
- Coders to profit as Android Market opens
Did you find this article useful?
Digg
Slashdot
Del.ici.ous
Stumble
Reddit
