T-Mobile G1 update pulled because of security flaw

28 October 2008 by Staff Editor

Worth Reading?

Yes

+14 [16 votes]

The other day we covered a story about the T-Mobile G1 update that was on TmoNews. We had originally reported that the update would be released to the public soon after they received their phone.

Distribution of the new update (RC28) was stopped on Friday afternoon after Google identified/confirmed a security issue with the browser that allowed for unwanted attacks on users. This security flaw would potentially allow others to install a keystroke recorder within the browser that would give out usernames, passwords, and even credit card numbers that are input in the G1.

In the end, Google decided to rebuild the existing update with a patch that fixes the issue and redistribute it as update RC29. The new update was released yesterday at about 4PM Pacific time, October 27th, which explains why many users did not receive the update this weekend. For those who did manage to get the RC28 update you will be prompted to upgrade to the RC29 update.

Special thanks to matthewboii for bringing this to our attention!

[Via TmoNews]

Join the Discussion (34 comments)

heyitsnan

10-28-2008 04:09 PM

Thanks, Shawn.
FuzzzyHans

10-28-2008 04:10 PM

Thank you.
refused9150

10-28-2008 04:10 PM

Quote:

Originally Posted by heyitsnan

Thanks, Shawn.

Just doing my best to bring the news to you!
McParty

10-28-2008 04:11 PM

Cool, thanks!!
Stone

10-28-2008 04:12 PM

Thanks Refused, Thats why I hit the net everyday. I was on the phone Friday with a t-mo rep and was told that my Update would be forthcomming. Of course they left out that little tidbit of info yu ( not a typo..lol) just posted. At least I'll be getting a new and improved update. I wonder if they will be sending the updates out to those that already had an update...thereby making the rest of us wait even longer? hmmmm?

Stone
jgoldy15

10-28-2008 04:12 PM

Any info on what else is in the update? I'm hoping there is a calendar syncing fix as my calendar has never functioned!
dkvitus

10-28-2008 04:12 PM

good to know
jrokwitdacapitals18

10-28-2008 04:46 PM

I'm confused . I already got the new update last week. Is this a new update that would mean it's the second update so far? Or is this the same update from last week and u guys just didn't get it yet?
heyitsnan

10-28-2008 04:49 PM

This is a new update, with the security flaw fixed. I never rec'd the first update (they pulled it when they found the flaw) so I'll just receive this one.
nphaskins

10-28-2008 04:54 PM

Stupid question, but how do we apply said update. Is it automatic?

refused9150

10-28-2008 04:55 PM

Quote:

Originally Posted by jrokwitdacapitals18

I'm confused . I already got the new update last week. Is this a new update that would mean it's the second update so far? Or is this the same update from last week and u guys just didn't get it yet?

Same one with a patch.

heyitsnan

10-28-2008 04:56 PM

I've heard that you receive a text message and you must "accept" the download. Correct me if I'm wrong anyone.
nphaskins

10-28-2008 05:14 PM

Quote:

Originally Posted by heyitsnan

I've heard that you receive a text message and you must "accept" the download. Correct me if I'm wrong anyone.

Interesting....haven't gotten anything.
NetCom

10-28-2008 05:27 PM

Eh, I have not received any of the updates so far... I am still at RC19
refused9150

10-28-2008 05:53 PM

I hear that it will be delivered in waves over the course of a few days.

jrokwitdacapitals18

10-28-2008 06:56 PM

Quote:

Originally Posted by heyitsnan

This is a new update, with the security flaw fixed. I never rec'd the first update (they pulled it when they found the flaw) so I'll just receive this one.

But i got the update so does this mean im in danger?

jrokwitdacapitals18

10-28-2008 09:46 PM

Well when u turn on your phone u will notice right away a message and u have to update. Well that's how work for me on the first update
refused9150

10-28-2008 10:45 PM

Quote:

Originally Posted by jrokwitdacapitals18

But i got the update so does this mean im in danger?

Your in no more danger that you were before.
nerdherddk

10-29-2008 04:56 PM

Us without a t mobile plan and baught my over ebay. Will we be able to download these patches/upgrades as file downloads just like iphone with itunes, just as an .exe for Windows for instance?
embrace LB

10-30-2008 02:13 AM

i need the update already
jterry

10-30-2008 06:31 AM

I got rc29 this morning. I noticed that when I plug into usb I get a notification to mount drive. Was this on here before and I never noticed?
nerdherddk

10-30-2008 06:39 AM

Us non T-Mobile subscribers, how do we get these updates?
juice

10-30-2008 07:01 AM

Just got the RC29 update this morning.
semifamous1

10-30-2008 07:09 AM

My update came through this morning in Las Vegas. It was a message that was sitting on the home screen when I "woke up" my phone that asked if I wanted to download it now or later.
mast3rpyr0

10-30-2008 07:22 AM

got my update today too. funny, i had a dream about it last night too and without ever seeing what it looked like i saw an image of it...
ckolg1

10-30-2008 07:22 AM

you just have to wait when it comes to u.. i got the upgrade on my original g1 and it made the browser slower and i was on 3g and it obviously crashed... so i returned it at a store and got a new one, even though i bought it online... nice of my tmobile store in west palm, they are the best
bizarro_stormy

10-30-2008 08:28 AM

that explains quite a bit...

thanks shawn
Deathwish238

11-02-2008 04:21 PM

Others have asked but received no reply, if we're not on Tmobile how do we get the update?
refused9150

11-02-2008 04:36 PM

There is a story on our front page that shows how to manually do it. It is not meant for those who are not on T-Mobile to get the update.
nerdherddk

11-03-2008 01:06 AM

That's just ridiculous, Google, HTC or T-Mobile could just offer it as a download package both for Windows and OS X. It cannot be that hard. Just to ignore customers who have baught the phone unlocked it and then use other carriers. It doesn't make sense to me.
Deathwish238

11-03-2008 02:45 PM

Sure it does, they don't care about us...
nerdherddk

11-03-2008 03:41 PM

Yikes, it's worse than Apple
docpaul

02-05-2009 05:06 PM

Question

Could you tweet your update story + geolocation in only 140 chars?

Share your stories here: I got my androidg1update

DocPaul
constellanation

02-05-2009 05:10 PM

this is an old old thread disregard