LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-08-2010, 04:46 PM   #1
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Exclamation Researcher Publishes Android Browser Exploit


Quote:
A researcher at security firm Alert Logic has published code that could be used to compromise some versions of Google's Android Operating System. The exploit, if properly adapted, could make Android phones vulnerable to remote attacks and compromises.
Complete Article
 
Old 11-09-2010, 09:38 PM   #2
MS3FGX
LQ Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 361Reputation: 361Reputation: 361Reputation: 361
At least it is fixed in 2.2, but as of right now 2.1 still has a slight lead over 2.2 in terms of userbase (it should be noted that no devices currently use 2.0 anymore). Hopefully more devices will get pushed from 2.1 to Froyo, or maybe now directly to Gingerbread (2.3). At the very least, if the manufacturers don't plan on upgrading their devices past 2.1, they can at least issue a fix for the browser itself.

In fact, issues like this may be a sign it is time for Google to break the Browser out of the main OS like they have recently done with the GMail and YouTube apps. By separating the application from the core OS, Google is able to remotely upgrade that specific application without having to get the vendors to issue a whole new firmware upgrade.
 
Old 11-10-2010, 01:01 PM   #3
salasi
Senior Member
 
Registered: Jul 2007
Location: Directly above centre of the earth, UK
Distribution: SuSE, plus some hopping
Posts: 4,070

Rep: Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897
Quote:
Originally Posted by MS3FGX View Post
At least it is fixed in 2.2, but as of right now 2.1 still has a slight lead over 2.2 in terms of userbase (it should be noted that no devices currently use 2.0 anymore). Hopefully more devices will get pushed from 2.1 to Froyo, or maybe now directly to Gingerbread (2.3). At the very least, if the manufacturers don't plan on upgrading their devices past 2.1, they can at least issue a fix for the browser itself.
Maybe, there are no devices shipping with 2.0, but 1.6 (and, I think, even more tragically, 1.5) are still shipping. And I can't really see definitive information on how far back this bug actually goes.

Worse still, when a phone ships with an OS, it often keeps that OS version for all of its life. A few get some kind of third party mod to a more recent OS version, and some get a manufacturer/provider upgrade, but, as far as I can tell, this remains a minority sport.

Quote:
In fact, issues like this may be a sign it is time for Google to break the Browser out of the main OS...
Now, that would be a really good idea that Google should adopt. Not doing it encourages people to use third party browsers, which seems to undermine any gain Google get from the whole Android business.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Sync Your Desktop Browser to Your Android Phone LXer Syndicated Linux News 0 07-09-2010 01:00 PM
LXer: Opera releases Mini browser beta for Android LXer Syndicated Linux News 0 03-12-2010 05:50 AM
LXer: Android & iPhone browser wars: Using HTML5, CSS, and jQuery LXer Syndicated Linux News 0 01-05-2010 01:40 PM
LXer: Mac OS X easy to crack, says researcher LXer Syndicated Linux News 1 03-13-2009 08:18 AM
LXer: HI Researcher Continues OpenDocument FUD LXer Syndicated Linux News 0 06-14-2006 10:03 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:33 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration