• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root Yet another new security breach found - how worried should we be about this new one?

meandmydroid

Well-Known Member
Dec 10, 2009
115
16
While TrevE is fighting the good fight for us on the CIQ issue...how concerned should be be about the following find? Security vulnerability in many android phones (HTC included) allows apps to bypass the "permissions" they are supposed to be following and lets them hack your phone, make calls, send SMS, record audio on your phone (your calls?), track your location, etc etc....someone make all this stop! :eek: Is this another battle that needs to be tackled?

Android permissions glitch allows eavesdropping, data theft | Cyber Crimes Unit

Report: Security Vulnerability In Many Android Phones Allows Malicious Apps To Record Audio, Track Location, And More Without User Permission
 

That's the list of phones they randmly picked from each manufacturer to test on...but this affects all android devices...it appears that something called "sharedUserID" built into android is allowing apps to hijack other apps permissions, giving the app that didn't have the permissions itself the ability to do anything the hacker wants to on you phone (record your audio conversations, send SMS without your knowledge, make phone calls, access all of your personal/confidential information, wipe your phone, and so on....

Also not sure what the link in the above post is referencing on this issue??? This has nothing to do with the CIQ issue...

Anyway, back to the actual issue...I wonder how soon the developer community will come out with a patch or fix to stop this security hole...
 
Upvote 0
Carrier IQ Is Just The Tip Of The Iceberg. Wikileaks Founder Reveals That Smartphones Can Be Easily Hacked

Maybe it's just me that feels this is as bad if not much much worse that the CIQ issue, but are any of the roms available now capable of removing or patching this huge security breach, or will that be something we need to put on our "hope for" list?

So thankful for TrevE coming to our rescue on the CIQ issue with a fix...now just hopeful someone can come up with something to fix this other huge security breach...
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones