Catch up on stories from the past week (and beyond) at the Slashdot story archive


Forgot your password?
Security Android Cellphones Handhelds

Android Master Key Vulnerability Checker Now Live 76

darthcamaro writes "Last week, Rain Forrest Puppy (aka Jeff Forristal) first disclosed the initial public report about an Android Master Key flaw. Code was released earlier this week for attackers to exploit the flaw — but what about users? Google has claimed that it has patched the issue but how do you know if your phone/carrier is safe? Forristal's company now has an app for that. But even if your phone is not patched, don't be too worried that risks are limited if you still to a 'safe' app store like Google Play. 'The only way an Android user can be attacked via this master key flaw is if they download a vulnerable application. "It all comes down to where you get your applications from," Forristal said.'"
This discussion has been archived. No new comments can be posted.

Android Master Key Vulnerability Checker Now Live

Comments Filter:
  • Re:Master key? (Score:4, Informative)

    by Andy Dodd ( 701 ) <atd7.cornell@edu> on Thursday July 11, 2013 @10:23AM (#44250273) Homepage

    That was the word Bluebox used to describe it... Honestly, their original press release blew this way out of proportion.

    Most Android devices now have support for scanning of sideloaded APKs for Malware now (it's a Google Play service), and I'm assuming that while a week or two ago that detector wasn't configured to detect this exploit, it almost surely does by now.

DISCLAIMER: Use of this advanced computing technology does not imply an endorsement of Western industrial civilization.