T-Mobile G1 browser security flaws revealed

[talkbackdroid]

With the T-Mobile G1 only being out for a few days, a group of security researchers have already found a serious flaw in the Android software by Google. It appears that the G1 is threatened by many of the same security threats that personal computer ... Read more

[almightyA]

pretty sure this has already been posted?

[refused9150]

Doesn't matter does it?

[NismoG35]

Thats ok, this is google. Given that its thier first OS on a phone and the spotlight is on them and Tmobile for releaseing the G1, i bet theyu will release a patch to this pretty soon. So for all the people out thier that havent received RC24 yet, dont worry something newer is comeing out sooner rather then later.

I wonder if this security flaw works on any of the other major mobiles operating systems?

[Maximosis]

All u have to do is take the same precautions u take on ur pc. That's all remember to look at the url address before u submit ur password and we should be good for business

[Jorsher]

Originally Posted by Maximosis

All u have to do is take the same precautions u take on ur pc. That's all remember to look at the url address before u submit ur password and we should be good for business

From what the article states, the exploit would allow them to install a keylogger on your phone. This would record your password whether you were at the correct address or not.

I'm not suggesting you become paranoid, but don't want people thinking as long as they check the url they're ok.

[embrace LB]

umm obviously it does matter, it's practically like having passwords stored on your laptop and being on a wifi connection that isn't password protected..

[AnDroiD KiDz]

I'm going to make this short and brief... In order to go into landscapeing view while you're web browsing with the keyboard closed just simply open up a web page, press menu, select "more", then you'll stroll down till you see "Flip Orientation", click on that then "Walah!", your screen flip to LANDSCAPE view with your keyboard closed. Enjoy!

[Dr. Tyrell]

Google was smart enough to setup jails (sandboxes?) for every process, and this alone will strictly limit intrusion damage.

I have looked at processes and file structures on the G1, and let me tell you Google did their homework.

As a long time Unix/Linux administrator I can say with authority that with the coming of additional hole plugging, etc. this phone (and other Android devices to follow) will be nearly impenetrable. And if an intrusion happens there is absolutely no way to escape the jail.

The Doctor

[refused9150]

The patch on the update that was recently released should have taken care of this problem all together.