Jon Oberheide and Zach Lanier report finding two (more?) security bugs in Android:
Security duo finds another pair of vulnerabilities in Android | Android Atlas - CNET Reviews
Jon and Zach's video (embedded in the CNET article):
Android Vulnerabilities and SOURCE Barcelona Training - YouTube
One allows arbitrary apps to be installed without prompting the user for permission. The second gives root access. The second one looks similar to Gingerbreak, hitting a Linux vulnerability to gain root, except they demoed this one on a Nexus S running 2.3.4.
Security duo finds another pair of vulnerabilities in Android | Android Atlas - CNET Reviews
Jon and Zach's video (embedded in the CNET article):
Android Vulnerabilities and SOURCE Barcelona Training - YouTube
One allows arbitrary apps to be installed without prompting the user for permission. The second gives root access. The second one looks similar to Gingerbreak, hitting a Linux vulnerability to gain root, except they demoed this one on a Nexus S running 2.3.4.
Facebook
Twitter
Instagram