99% of Android Phones Leak Personal Data

99% of Android Phones Leak Personal Data


Credit: Image composite by SecurityNewsDaily
www.securitynewsdaily.com...

Google's Android mobile operating system is again in the hot seat after German researchers found that a security flaw causes nearly 100 percent of Android phones to leak users' secret account credentials.

Researchers at the University of Ulm explained that the problem lies in ClientLogin, a Google authentication protocol that verifies communication between Android phones and Google apps such as Google Calendar, Google Contacts and Picasa, as well as third-party Android apps such as Twitter and Facebook.

ClientLogin is designed to create an authentication token — basically, a digital spare key that stores your username and password — that clears the way for Android phones to send and receive data without having to login again.

Nice! After seeing all those silly ads about the Android Butler, now we see that you have your own personal spook in your pocket

any smart phone is the devil lmao. that goes with out saying i thought????

reply to post by zorgon


My question....If this is a problem inherent in the software (or perhaps hardware) of the phone itself....Then why is it that 1% doesn't leak info? Shouldn't be 100%?

Ha ! I carry mine in a plastic bag, so if it leaks I can refill it.

On zog, are you insane.

You need to AGREE to ( that is something old I know, personal agreement ) the permissions on android apps..

Like me sending you an Email

"Dear mr zog, I will supply you with updates to your news service, but in return I want access to all your personal documents.!"

*Click OK to agree*

If you click, then who's fault is it? Mine or yours?

99% of people will click yes.... oh well, darin awards all around eh wot!

And if it's authentication issues as alluded to ( sorry I get carried away these days) with google... to which third party are we talking about? Again, falls under permissions...

Yeesh, mebbe someone at my phone company knows what number I is calling.. HOW DARE THEYY!!!111

Oh this is silly, might as well be dancing on the sun.

Wow, a Zorgon thread.....very few these days.

Ears perk, must be serious.

This i find not surprising at all, In my reply last week i mentioned a little about this in my rant against Google, and that included their Precious Android OS. But in all accord, I shouldn't be saying anything. I own an I phone 4S which is the same difference really, THANK YOU Steve Jobs!!!!

Privacy is but an Illusion these days in the digital age.

I'm from Texas and I got an email from paypal that said this
-Explanation as to why the attempted access from Iran was made and by whom

just think what Google is going to do with that information.

Now they will know how much angry birds people play.

Use orbot on your Android device if you want to be anonymous.

Glad I dumped my android for a windows 7 phone....

Originally posted by mainidh
You need to AGREE to ( that is something old I know, personal agreement ) the permissions on android apps..

Like me sending you an Email

"Dear mr zog, I will supply you with updates to your news service, but in return I want access to all your personal documents.!"

*Click OK to agree*

If you click, then who's fault is it? Mine or yours?

People is stupid.

That is why they have to be protected from this type of thing - we have government departments devoted towards helping the morons with their consumer-related issues.

The morons are easily fooled into agreeing to things which are not in their best interest and it is up to the few non-morons left alive to help them avoid situations where they sign their rights away.

reply to post by Exuberant1


Yet the majority of people don't have a choice.......I work for a major home security company that requires us to be connected at all times.

I HATE it, but at least I have a job............if you can call it that.

Originally posted by amongus
Glad I dumped my android for a windows 7 phone....

If its in android then it will be W7. What makes you think it would be any different?

Ever heard of carrier iq?

www.carrieriq.com/

reply to post by amongus

meh slow news month

Android is WILDLY insecure.

DO NOT use it to read email or log into any important sites. Use it for phone calls, browsing, and text messages.

Frankly, I wouldn't recommend downloading any apps from the market at all.

I will tell you... Android is just awful for security. It is very easily hacked.

Originally posted by foood4thought
Android is WILDLY insecure.

DO NOT use it to read email or log into any important sites. Use it for phone calls, browsing, and text messages.

Frankly, I wouldn't recommend downloading any apps from the market at all.

I will tell you... Android is just awful for security. It is very easily hacked.

ok. Would you elaborate? Why not DL from the market? Any links to support your claims?

I'm asking because I recently bought a HTC incredible. And it's just that...IINCREDIBLE!

Originally posted by bakup725

Originally posted by foood4thought
Android is WILDLY insecure.

DO NOT use it to read email or log into any important sites. Use it for phone calls, browsing, and text messages.

Frankly, I wouldn't recommend downloading any apps from the market at all.

I will tell you... Android is just awful for security. It is very easily hacked.

ok. Would you elaborate? Why not DL from the market? Any links to support your claims?

I'm asking because I recently bought a HTC incredible. And it's just that...IINCREDIBLE!

Androids are great phones. It's just... they're easily hacked.

There's stuff in the news recently about apps reading your text messages, contact books and uploading them. Plus, a really well-written app could record background noise 24/7 and upload it to a server.

reply to post by zorgon


Unless i'm going blind, Sorry but do you have a link for this story or news?

This is old news, reported in May 2011. See at this link: www.theregister.co.uk...

If you're on Android 2.3.4 or above you're good.

Originally posted by hp1229
Unless i'm going blind, Sorry but do you have a link for this story or news?

Dang your right weird

www.securitynewsdaily.com...

I asked a mod to add it... thanks for the heads up

Originally posted by zorgon

Originally posted by hp1229
Unless i'm going blind, Sorry but do you have a link for this story or news?

Dang your right weird

www.securitynewsdaily.com...

I asked a mod to add it... thanks for the heads up

Anytime. It is unusual of you to do that but I thought it must have been one of those days for you