According to the application reviews from the Android Market, the app “MemoryUp Personal” is destroying personal data when installed onto an Android handset. There are reports of e-mail accounts being spammed, adware installed, and SD cards being erased – all linked to the installation of this app.
This has sparked several discussions about the appeal of the open source community when personal data is at stake. Traditionally a friendly, help-one-help-all environment, the open source community is under attack by many who have had their phone book, calendar, and SD cards erased by this rogue application.
Another issue raised is the Android Market app approval process, of which we’re not really sure there is one. Several commenters have expressed interest in Google taking more of an Apple AppStore approach, with stricter app requirements before allowing downloads by the masses. A link to the application was not provided for obvious reasons.
edit: and yea... google is gonna hafta start reviewing apps, and set things up like apple, open source is good, freedom is good, but some people ruin it for the greater good, cant really have that going on when theres person info at stake...
make apps like blog comments, with enough negative comments, the app dissappears. My 2 Cents
Although, any Android app can manipulate the sd card.
So far, it seems to me, Google\Android and TMo have launched the G1 and then abandoned it. A disappointment.
The Market has become a place (the 'comments') where I don't even want to go anymore.
<------- my two cents
only reason i wouldn't want to see an app disappear due to bad ratings is because lets say an developer creates the 29th tetris clone game right?
but its crappier then the other 28 tetris clone games, google will just delete it?
i'm pretty sure devs are charged a fee to upload apps
i'd say have like a warning button or tab on each app, but then again, can we trust the teeny boppers in the market place to use it
(tetris clone game was used as an example because im tired of seeing so many of them)
I share his thoughts on installing the minimum of apps and see how the Market develops - I basically keep it to Scoreboard, StreamFurious, and now Last.FM
I don't believe Android is abandoned, but Google generally takes the "throw an idea/application out there and see if it sinks or swims".
Comments do need to be moderated, maybe Android Community can be contracted for that
,Michael Martin
Google And Blog
Android Market App Destroying Phone Data
That is the subject of your front page news story. And yet, the article goes on to say that some of the anonymous COMMENTS for the app are making that accusation. WTF?! Some of the comments also offer the following insights:
"Peter, you suck. Get a job."
"This program worked wonders. Thanks!"
"Haha"
I have read comments for other useful apps where people have no idea wtf they are talking about-- the ones for ConnectBot are hilariously clueless. Not to mention there's always hater comments, spam, "first post" comments, etc etc.
What evidence do you have that "Android Market App" is "Destroying Phone Data"?!
oxonom is right. This program requests ZERO permissions from the user when you install. So how is it doing all the things people are accusing it of doing unless there is a major bug in Android? (the SDCard is available to any program- but that shouldn't be able to delete contact lists and calendars).
Now I have no idea if this program does anything useful at all, if it is spamware as some have said, or if it is actually somehow corrupting people's phones... According to one post, all it does is just calling Java's garbage collector. The developer FAQ does not tell you that much:
http://www.emobistudio.com/faq.html
However, I'd like to point out that this is the SECOND time this site has repeated baseless accusations against an app developer as fact. Remember the "scandal" that "flawed and deceiving" Atrackdog might be selling users information? And now, without any independent investigation that I could find, this MemoryUp program, which some people do seem to be complaining about, is labeled a "rogue application". This is, in my opinion, unfair to the developers and creates false alarm for the Android community.
This has sparked several discussions about the appeal of the open source community when personal data is at stake. Traditionally a friendly, help-one-help-all environment, the open source community is under attack by many who have had their phone book, calendar, and SD cards erased by this rogue application.
Could someone tell me what "open source" has to do with this? Do you guys even know what "open source" is? As far as I can tell, MemoryUp is NOT open source.
You say that the open source community is "under attack" by many who have had their stuff deleted. Where is the open source community under attack by Android users? Please provide links because I couldn't find any.
And do you have an independent confirmation that anyone's phone book, calendar, and SD cards were actually erased by this application? Like did you talk to someone who had the problem and confirm that it was related at ALL to MemoryUp?
If so- this is a big Android security story and I'd like to read more. If not, more information is needed, and I think some apologies may be in order.
W
PS-- one last thing, I just checked the developer web site again and found this:
If you’ve already been using eMobiStudio and encountered problems, or if you have any related questions, please email to Support@emobistudio.com
I propose that anyone having a problem with this app write to them and then post the response in this thread.
Android Market App Destroying Phone Data
That is the subject of your front page news story. And yet, the article goes on to......
....You say that the open source community is "under attack" by many who have had their stuff deleted. Where is the open source community under attack by Android users? Please provide links because I couldn't find any.
And do you have an independent confirmation that anyone's phone book, calendar, and SD cards were actually erased by this application? Like did you talk to someone who had the problem and confirm that it was related at ALL to MemoryUp?
If so- this is a big Android security story and I'd like to read more. If not, more information is needed, and I think some apologies may be in order.
W
Where? "Where R the weapons of Mass Destruction!?"
LOL,
seriously tho....
Pay no attention to the whole "cupcake" thing. Clearly all those fixes and improvements are being added for "other" android phones. Oh wait. There are no other android phones right now.
Like on the Maverick comments. Its a big a/s/l whore thread.
Or the applications like ConnectBot where people don't understand the purpose of the program and 1 star it because they're retarded.
I'm not against a VERY cursory and automated "do no harm" test being implemented for the Market, BUT THERE CAN BE NO DETERMINATION OF AN APPLICATION'S DESIRABILITY OR FITNESS FOR A GIVEN PURPOSE. The only reason there are so many "crapplications" on the Android Market right now is because they aren't being crowded out by real applications that you actually have to pay for.
We've been carrying around pc's in phone form for years, and they've been largely squandered and wasted because virtually no one could put (or pick) applications on them.
The iPhone marketing model is NOT the way to go (even almost 30 years after Apple failed with it the first time).
So far, it seems to me, Google\Android and TMo have launched the G1 and then abandoned it. A disappointment.
...
As for these MemoryUp rumors, I'd like to see some actual evidence. This type of publicized speculation is corrosive to the OpenSource community. I had the program installed for a while and saw no evidence of an attack, privacy violation, or system degradation. Let's see some log files.
The open source community is in no way responsible for this. The app in question isn't open source, last I checked. If anything, this is a vindication of the open source community: in order to have true confidence in the security of the applications you're downloading and using, you have to be able to see that application's source.
If anyone is attacking the open source community over this, they (the attackers) are f'n morons.
Understanding how to manage the memory on my SD card 'cause that prevents me
From dabbling too much into the different apps. I just want to make calls, send a few
Texts, and play fantasy football on my phone (my job is not too friendly too fantasy
Footballers). Hopefully, something positive is done to rectify this unfortunate
Occurance. Until then I guess ignorance is bliss.
So, is what you're saying that the G1 is/should be primarily for the tech junkie "elite" that Knows about Knowing - and 'ordinary' users be damned? That the every day user should keep his mouth shut because he isn't "skilled" enough to use the phone properly?
My impression is that the G1 along with the Market is supposed to appeal and be useful to anyone who desires a good smartphone. Not just for code junkies, developers and the 'elite'.
I have an IT degree, but have absolutely no desire to do anything with my G1 except to make calls and use the internet with full browser capabilities and carry personal info along with me. I don't believe the G1 was put on the market with the expectation that an end-user would have to be elite enough to root the phone, scrutinize code to be sure Apps are safe or spend time in special groups to make sure they keep track of behind the scenes information or be able to use the G1 to it's fullest capabilities.
I anticipated more involvement from Google in the Market. So? Just my own absurd expectation...I still like the G1 for what it is right now.
My impression is that the G1 along with the Market is supposed to appeal and be useful to anyone who desires a good smartphone. Not just for code junkies, developers and the 'elite'.
I have an IT degree, but have absolutely no desire to do anything with my G1 except to make calls and use the internet with full browser capabilities and carry personal info along with me. I don't believe the G1 was put on the market with the expectation that an end-user would have to be elite enough to root the phone, scrutinize code to be sure Apps are safe or spend time in special groups to make sure they keep track of behind the scenes information or be able to use the G1 to it's fullest capabilities.
I anticipated more involvement from Google in the Market. So? Just my own absurd expectation...I still like the G1 for what it is right now.
End-users: What's going on with development?
Google: WiFi in the build is currently broken because of $VERY_SPECIFIC_THING.
E: What?
G: WiFi is broken because of $HIGHER_LEVEL_EXPLANATION
E: Huh?
G: WiFi is broken.
E: When will you fix it?
G: First we have to do $VERY_SPECIFIC_THING
E: And that means what?
G: We have to do $HIGHER_LEVEL_EXPLANATION
E: Do what now?
G: We're working on it.
E: You should really talk more about what you're doing! That's all we ever hear is "we're working on it"! When will this be out?
G: Check out our roadmap.
E: January?
G: We're aiming for first quarter, 2009.
E: So that means late January?
It's a wonder their heads haven't exploded. I've noticed that at least one member of the Android dev team now has a plea in her signature for users to not email her directly but instead post on the appropriate Google group forum.
thats fine...if they made clear exactly whats gonna make it to the g1, first its all of it, then its some things from cupcake, then its nothing, then its some things again..it changes every week....... which maybe isnt googles place to say...then its tmobiles fault... but i know from personal experience those two companys arent working very hand in hand with this phone....
I'd like to be an average user being informed by an 'official' middle man. ickyfehmleh's E/G conversation seems right on the money to me. Maybe some kind of 'press release' to engaget or the like stating what's going on or even what's NOT going on would feel helpful.
Anyway - I'm keeping an arms length from the Market until it evolves into something that feel a little more stable.
in the meantime root your phone, learn what you can do. and maybe learn java. then the world is yours.
The Android dev team will detail what's going on, like how change 7345 needs to be "manually applied to get the same APNs preconfigured as in the ADP1". Chances are that makes no sense to a majority of their users -- it makes little sense to me without digging into the source. So they simply say "we're working on it", because what else could they say? How do you tell the "average customer" things that won't freak them out ("WiFi is broken in the current build" == "OMG THE G1 WON'T HAVE WIFI ANYMORE") yet convey the appropriate level of information?
↓↓ clicky ↓↓
I think it should cost $10 to post a comment, and at least half of that should go to the developer of the app. Then people would only post comments when they have something to say.
The Android dev team will detail what's going on, like how change 7345 needs to be "manually applied to get the same APNs preconfigured as in the ADP1". Chances are that makes no sense to a majority of their users -- it makes little sense to me without digging into the source. So they simply say "we're working on it", because what else could they say? How do you tell the "average customer" things that won't freak them out ("WiFi is broken in the current build" == "OMG THE G1 WON'T HAVE WIFI ANYMORE") yet convey the appropriate level of information?
yea i understand that...what i mean...is if they can have a roadmap stating everything there working on, why cant they have a roadmap for dummies... stating what there working on in very specific easy terms... i mean dont get me wrong...i can put together a computer from the ground up, but when it gets into programming i dont know much of anything, im in the music industry, not tech industry.... they call it branches... what im saying is, tell the customer what "leafs" your adding are, leave the branch that leads to that leaf for the techies.... thats all im sayin...
Here, with the G1, I am admit about remaining an average-Joe-end-user. No root.
http://i.gizmodo.com/5138822/rogue-a...e#viewcomments
You can see Gizmodo reporting on this, and of course the Apple (and some Palm) fanboys have attacked the Android platform for this and said it should be done the Apple way (with screening).
On the current off topic conversation about T-mobile & Google "abandoning" the platform/the G1, I say on the Google/Android platform side, it's the end user not understanding the information given, not that Google isn't supporting the platform. On the G1 side, it's T-mobile's responsibility to support it with updates. Google doesn't directly support the G1. T-mobile still seems to be doing it's job on the official T-mobile forums, but they are not talking about future updates because most companies don't do that.
On the market itself, I agree there should be improvements to the rating system. There should be an option of flagging an app as malicious and with enough flags it should be reviewed by Google (just like they do on Youtube). For comments you should be able to rate comments just like on Youtube. Usually only the really horrible comments (like "first!") get buried, it's quite rare a useless comment gets rated up and I haven't seen a useful comment get buried.
http://i.gizmodo.com/5138822/rogue-a...e#viewcomments
you can see gizmodo reporting on this, and of course the apple (and some palm) fanboys have attacked the android platform for this and said it should be done the apple way (with screening).
On the current off topic conversation about t-mobile & google "abandoning" the platform/the g1, i say on the google/android platform side, it's the end user not understanding the information given, not that google isn't supporting the platform. On the g1 side, it's t-mobile's responsibility to support it with updates. Google doesn't directly support the g1. T-mobile still seems to be doing it's job on the official t-mobile forums, but they are not talking about future updates because most companies don't do that.
On the market itself, i agree there should be improvements to the rating system. There should be an option of flagging an app as malicious and with enough flags it should be reviewed by google (just like they do on youtube). For comments you should be able to rate comments just like on youtube. Usually only the really horrible comments (like "first!") get buried, it's quite rare a useless comment gets rated up and i haven't seen a useful comment get buried.
i concur!!
"Have two channels on android market. One for apps rated 3+ (default) and one for all. Google would use strict guidelines to rate apps, counting for 5 public votes. Public votes could override Google's rating."
http://productideas.appspot.com/#11/...cnlVc2VyGIEuDA
Vote for it if you agree. I don't think Google should take apple's approach and have to approve (or deny) every application, because not everyone that uses the G1 (and future android phones) is tech savvy, and they won't know any better. By letting the tech savvy switch to the all application channel, they get all new apps right away and can vote on the applications. X amount of votes with an average of at least 3 stars means it is published in the default channel. Google's team could use guidelines to approve these applications as well but their approve process gives the application a rating based on its score. This rating could be overridden by android users.
Bad idea.
I don't want the purveyor of all things advertising to get their own special "tier" of applications when the developers have bid up the bucks to get there (take a look at AdWords !).
All that MIGHT be appropriate is an automated "do no harm" test that Google administers before an app gets on the market. No discretionary powers for anyone, just a step to filter out anything malicious.
one correction apple does not approve every app.
Bad idea.
I don't want the purveyor of all things advertising to get their own special "tier" of applications when the developers have bid up the bucks to get there (take a look at AdWords !).
All that MIGHT be appropriate is an automated "do no harm" test that Google administers before an app gets on the market. No discretionary powers for anyone, just a step to filter out anything malicious.
one correction apple does not approve every app.
I reworded the idea on Google's Product Ideas:
"Have two channels on android market. One for apps rated 3+ (default) and one for all. Google would use strict guidelines to rate apps, counting for 5 public votes. Public votes could override Google's rating." Maybe this one is more clear?
B
I was very excited when I stumbled upon the G1 several months ago. Here's why.
Some time back I thought it would be a good idea to develop apps (games, primarily) on cell phones. So I bought my son a Motorola TracFone from Walmart to kill 2 birds with one stone -- a phone for him and a game development platform for me. The phone can handle games just fine, according to all the specs I had read prior to buying the phone. But what I missed in my research was that TracFone had crippled the phone, making it practically impossible to use for my purposes.
My employer subsequently provided me a Motorola RAZR phone, another excellent piece of hardware that unfortunately was crippled by the Verizon plan it came with. Unless I wanted to jump through Verizon's hoops -- which I'm sure I will do eventually -- I couldn't make an app available for download to that phone, either.
I considered going down the iPhone path, but that is no picnic for several reasons, including its un-open-ness. Some people have done well with developing for the iPhone, and I anticipate at some point I'll port my apps there. But it doesn't really lend itself to the independent 1-man game-development companies.
When I researched the G1 and the Android platform, I realized that this was the phone -- and the platform -- for me. At first, I just used the freely downloadable SDK, IDE, emulator, and other tools, skins, etc. For no charge, I was able to develop apps.
Eventually, though, I would need a G1 to complete my development and testing. Nobody within a hundred (200 or more, maybe) miles sold a G1, so I had to order one online. I opted not for the development phone (phone only, no plan), but I bought a regular G1 with a regular montly calling and data plan. I wanted to make sure I could test my apps as a regular Joe consumer.
I don't get any coverage at home, where I do my development -- no 3G, no EDGE, no bars, no connection, nothing. I have to drive several miles before I get to the edge of EDGE coverage, and by then my kids have taken control of the G1 to track themselves moving down the road on a Google map. (So, it's half development platform, half toy right now.)
But I have to say I love the phone. I call it a phone, even though I never use it as a phone. It's easy -- and essentially free -- to develop and test apps. Except for the cost of phone (and plan), the only cost to me has been the $25 I paid Google to become a 'trusted' developer so I can eventually upload my apps to the market.
So, someday soon my apps will be in the Android Market. At the moment, though I hope my apps are of good quality, they will have to be low-budget. To some they will be 'crap' and deserve poor reviews. Hopefully to some others they will be something worth paying a small pittance for.
But they'll be out there. And I have to thank Google and TMO and the open source movement and many others for allowing me the privilege of being able to get them online with few and inexpensive hoops to jump through.
I believe where there is opportunity there are opportunists. That is the price we pay for freedom. But hopefully some fair monitoring and reviews, rather than suppression, will be the answer.
Fortunately, the platform requires the user's permission to install apps that have access to the data and resources that belong to the platform or other applications. I installed several free apps from the market, and one required access to I-don't-remember-what. I cancelled that installation because granting that permission wasn't worth having that app. I was glad I had that choice and the warning.
I agree that there is a certain 'danger' in having such an open phone and platform. And I hope that collectively we can minimize the danger while still allowing for independent expression and commerce. But my hat is overwhelmingly tipped to Google and TMO and others for making a truly public marketplace with some reasonable measures of protection.
(If you've read this for, thank-you and sorry both.)
And to be honest I would not be suprised if the app is someone purposefully taking advantage of the many idiots that sit and watch the market like hawks to download and app as soon as it becomes available so that they can say "1st" or b*tch about how an app sucks because it doesn't do anything when its actually a library for other apps and its not supposed to do anything. It tells me that people are just downloading any and everything with no regard for the permissions it is requesting. If they get hacked its their own fault.