App Security Flaw Disclosed (already patched)

[pappy53]

Google Play Store security flaw discovered that puts millions at risk | Mail Online

This has probably already been posted, but I didn't see anything showing that it had.

 

[zorak950]

So some researchers discovered a vulnerability, worked with the companies involved to fix it, then told us after it was patched. I'm failing to see the problem.

 

[pappy53]

So some researchers discovered a vulnerability, worked with the companies involved to fix it, then told us after it was patched. I'm failing to see the problem.

Sorry, but I am not reading it as fixed, but only as a remedy to future attempts. Seems like the existing codes are still there.

 

[TOTtomdora]

"The bug, which the team has worked with Google, Facebook and other app makers to fix before revealing it, put millions of users at risk, the researchers said."
I'm getting mixed results from this. Is it fixed? Is it not?

Sent from my Nexus 7 using Tapatalk

 

[pappy53]

"The bug, which the team has worked with Google, Facebook and other app makers to fix before revealing it, put millions of users at risk, the researchers said."
I'm getting mixed results from this. Is it fixed? Is it not?

Sent from my Nexus 7 using Tapatalk

Idk, it could be read either way.

 

[zorak950]

It sounds to me like since it's talking about a bunch of apps, some are fixed and some aren't. My question is what risk does this vulnerability actually pose? The article is extremely vague.

 

[A895]

I don't know about this. The article ain't too specific what in the world is going on.

Posted via Android Central App

 

[pappy53]

I don't know about this. The article ain't too specific what in the world is going on.

Posted via Android Central App

It is confusing. But it still doesn't sound too good.


Sent from my iPhone using Tapatalk

 

[zorak950]

It is confusing. But it still doesn't sound too good.

Bah. The press is always doomsaying about Android security, but I've never had a problem. Besides, this isn't so much about Android as it is devs being careless in their code, from the sound of things. If a developer released a Windows app with a security flaw, you wouldn't blame Windows.

 

[rcca]

Android 4.4.4 fixes OpenSSL connection hijacking flaw | Mobile Technology - InfoWorld
Did they remove 4.4.3 I saw it somewhere?

 

[pappy53]

Bah. The press is always doomsaying about Android security, but I've never had a problem. Besides, this isn't so much about Android as it is devs being careless in their code, from the sound of things. If a developer released a Windows app with a security flaw, you wouldn't blame Windows.

All that means is that YOU have never had a problem. Who's blaming Android?

 

[Johnly]

My question is, what company has never had a security issue/compromise? Is there a perfect company with a flawless record? What can we learn from them?

 

[A895]

All that means is that YOU have never had a problem. Who's blaming Android?

I have never had a problem either. Security problems are very few and far between than any one realizes.

Posted via Android Central App

 

[terminatorx]

So some researchers discovered a vulnerability, worked with the companies involved to fix it, then told us after it was patched. I'm failing to see the problem.

Convenient way to look at it! I guess you can say this for literally every malware and vulnerability discovered out there. What's the big deal, they'll eventually patch it.