Sunday, November 14, 2010

Android Exploits

Android is a mobile operating system, pretty much most of you guys are using phone with such operating system on it now days. People have been talking about how bad are micrcosoft product compare to open source software or operating system. But have they ever thought with open source market, people can create all kind of application free download.

“Android specialist Jon Oberheide demonstrated another hole which involved misusing the Account Manager to generate an authentication token for the Android Market and obtaining permission to install further apps from there. However, this initially requires a specially crafted app to be installed on the smartphone. Nothing could be easier: Oberheide released the allegedly harmless "Angry Birds Bonus Levels" app intothe Android Market and, upon installation, this app downloaded and installed three further apps ("Fake Toll Fraud", "Fake Contact Stealer" and "Fake Location Tracker") without requesting the user's permission.

The privileges of "Fake Tool Fraud" included the right to send premium SMS messages. Google has since removed all of Oberheide's apps from the Market. Back in June, Oberheide had already used an app to demonstrate an Android vulnerability. At the time, Google used the remote deletion feature, available on Android devices, for the first time. ”  Read more…

Android is beginning to face what Microsoft have been facing all this while. But so far I have not seen any bad critics yet then again sooner or later maybe yes.

 

Wikipedia:
Android (operating system)
Android
is a mobile operating system initially developed by Android Inc., a firm purchased by Google in 2005.[4] Android is based upon a modified version of the Linux kernel. It is a participant in the Open Handset Alliance.[5] Unit sales for Android OS smartphones ranked first among all smartphone OS handsets sold in the U.S. in the second and third quarters of 2010,[6][7][8] with a third quarter market share of 43.6%.[9]

Android has a large community of developers writing application programs ("apps") that extend the functionality of the devices. There are currently over 100,000 apps available for Android.[10][11] Android Market is the online app store run by Google, though apps can be downloaded from third party sites (except on AT&T, which disallows this). Developers write in the Java language, controlling the device via Google-developed Java libraries.[12]

The unveiling of the Android distribution on 5 November 2007 was announced with the founding of the Open Handset Alliance, a consortium of 78 hardware, software, and telecom companies devoted to advancing open standards for mobile devices.[13][14] Google released most of the Android code under the Apache License, a free software and open source license.[15]

The Android operating system software stack consists of Java applications running on a Java based object oriented application framework on top of Java core libraries running on a Dalvik virtual machine featuring JIT compilation. Libraries written in C include the surface manager, OpenCore[16] media framework, SQLite relational database management system, OpenGL ES 2.0 3D graphics API, WebKit layout engine, SGL graphics engine, SSL, and Bionic libc. The Android operating system consists of 12 million lines of code including 3 million lines of XML, 2.8 million lines of C, 2.1 million lines of Java, and 1.75 million lines of C++.[17]

No comments:

Changing blog layout

It has been a while since I actually did anything to this blog, I don't even know why do I still keep this site updated. Then again sinc...