Friday, January 21, 2011

Android's browser is vulnerable to data theft

The National Institute of Communication Technologies (INTECO) has published on its website a notice warning of security flaws in the terminal operating system Android. The vulnerability would allow the extraction of data from the terminal and SD card contents via the Internet. The browser's operating system is responsible for the failure, so INTECO other browsers are recommended waiting for Google to solve the problem for future upgrades.

The browser's built-in series on the Android system does not alert users when they download a file. Security researcher Thomas Cannon has discovered the danger that the browser act in this way. The files, once downloaded, could open and run remotely over the Internet. In this way users would not be aware of the operation because the system does not ask for any permission.

Thomas Cannon has shown that the problem may allow the collection of personal data by third party terminals. In tests of computer researcher has shown that access to the data terminal is almost complete, the intruder can even extract the contents of the SD card devices. INTECO has alerted users of this practice as a precaution.

According to the release of the institute, the problem affects all versions below 2.2, including the latter. Google is expected to resolve the matter in future updates and Ginberbread, overcomes these problems. Until you upgrade to the latest version of Android, INTECO recommended to use other browsers such as Firefox or Opera.

No comments:

Post a Comment