Seems that a rogue Android app can get more privileges than it deserves simply by saying that someone trustworthy has vouched for it. It’s been dubbed the “FakeID” hole…
Naked Security – Sophos
Businessweek |
Google's Android Has a Fake-ID Problem
Businessweek The Android security team developed a fix in April and provided the patch to vendors, who had 90 days to implement it before Bluebox publicized its findings, he says. Bluebox has tested about 40 Android-based devices out of more than 6,300 in the market. Google fixes Android's Fake ID security hole Android Security Flaw Allows Hackers to Hijack Phone Google says it delivered patch for Android's “Fake ID” security flaw to partners |