Latest in Android

Image credit:

Some Android phones fail to enforce permissions, exposed to unauthorized app access

Joshua Tucker, @joshmtucker
December 2, 2011
Share
Tweet
Share

Sponsored Links


Eight Android phones, including the Motorola Droid X and Samsung Epic 4G, were found to house major permission flaws according to a research team at North Carolina State University. Their study revealed untrusted applications could send SMS messages, record conversations and execute other potentially malicious actions without user consent. Eleven of the thirteen areas analyzed (includes geo-location and access to address books) showed privileges were exposed by pre-loaded applications. Interestingly, Nexus devices were less vulnerable, suggesting that the other phone manufacturers may have failed to properly implement Android's security permissions model. Google and Motorola confirm the present flaws while HTC and Samsung remain silent. Exerting caution when installing applications should keep users on their toes until fixes arrive.

[Thanks, John]




All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Share
Tweet
Share

Popular on Engadget

Jabra Elite 85t review: Noise-blocking comfort that rivals the best

Jabra Elite 85t review: Noise-blocking comfort that rivals the best

View
NASA confirms OSIRIS-REx has secured its asteroid sample

NASA confirms OSIRIS-REx has secured its asteroid sample

View
Some Google One plans now come with a complimentary VPN

Some Google One plans now come with a complimentary VPN

View
Scientists found an Earth-sized ‘rogue’ planet in the Milky Way

Scientists found an Earth-sized ‘rogue’ planet in the Milky Way

View
Netflix is raising the price of standard and premium plans in the US

Netflix is raising the price of standard and premium plans in the US

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr