Google Play has a major security problem

June 19, 2014 09:38

Researchers have discovered a crucial security problem in Google Play, the official Android app store where millions of users of Android, the most popular mobile platform, get their apps.

Jason Nieh, professor of computer science at Columbia Engineering, said Google Play has more than one million apps and over 50 billion app downloads, but no one reviews what gets put into Google Play-anyone can get a 25-dollar-account and upload whatever they want. Very little is known about what's there at an aggregate level.

He said given the huge popularity of Google Play and the potential risks to millions of users, we thought it was important to take a close look at Google Play content.

Nieh and PhD candidate Nicolas Viennot's paper is the first to make a large-scale measurement of the huge Google Play marketplace. To do this, they developed PlayDrone, a tool that uses various hacking techniques to circumvent Google security to successfully download Google Play apps and recover their sources.

They discovered all kinds of new information about the content in Google Play, including a critical security problem: developers often store their secret keys in their apps software, similar to usernames/passwords info, and these can be then used by anyone to maliciously steal user data or resources from service providers such as Amazon and Facebook.

« Back to LIVE

TOP STORIES

BJP's '400 paar' film flopped on day 1 of polls: Tejashwi

"The turnout in the four Lok Sabha seats was low as compared to the 2019 polls but on the basis of feedback received from these constituencies, we are confident of winning these. People are fed up with false promises made by BJP...

David, Pollard fined for illegal assistance to SKY

Mumbai Indians batter Tim David and batting coach Kieron Pollard have been fined 20 percent of their respective match fees for breaching the IPL's Code of Conduct during the match against Punjab Kings in Mullanpur on April 18.

Verstappen takes Red Bull's 100th F1 pole in Shanghai

Mexican team mate Sergio Perez qualified second fastest in a front row lockout for Red Bull, 15 years after the team took their first win at the Shanghai International Circuit with Sebastian Vettel.

A Daughter Campaigns For Her Mother

On Friday, April 19, 2024, Aditi Yadav, Samajwadi Party President Akhilesh Yadav and Dimple Yadav's elder daughter, campaigned for her mother, the party's candidate from Mainpuri, Uttar Pradesh.

Fate Of First Phase Candidates Sealed

The first phase of Election 2024 on Friday, April 19, 2024, covered 102 seats across 21 states and Union Territories.