Researchers at Bluebox Security have revealed a disturbing flaw in Android's security model, which the group claims may affect up to 99 percent of Android devices in existence. According to Bluebox, this vulnerability has existed since Android 1.6 (Donut), which gives malicious app developers the ability to modify the code of a legitimate APK, all without breaking its cryptographic signature -- thereby allowing the installation to go unnoticed. To pull off the exploit, a rotten app developer would first need to trick an unknowing user into installing the malicious update, but hackers could theoretically gain full control of a user's phone if the "update" posed as a system file from the manufacturer.
Bluebox claims that it notified Google of the exploit in February. According to CIO, Bluebox CTO Jeff Forristal has named the Galaxy S 4 as the only device that's currently immune to the exploit -- which suggests that a security patch may already exist. Forristal further claims that Google is working on an update for its Nexus devices. In response to our inquiry, Google told us that it currently has no comment. We certainly hope that device manufacturers do the responsible thing and distribute timely security patches to resolve this issue. Absent that, you can protect yourself by installing updates through the Play Store and Android's built-in system update utility.
when.eng("eng.perm.init")
Starting today, anyone hopping between EU member countries with their smartphone will see roaming charge caps substantially cut across networks and services. As promised by the EU Commission's VP Neelie Kroes last week, new price caps will drop call charges by "at least 17 percent," while receiving calls are reduced by 12 percent per minute starting today. Text message costs are down 11 percent, while (perhaps most importantly) data charges across networks in Europe have been cut by 36 percent, down to 45 Euro cents per MB -- 91 percent cheaper than they were in 2007.The commission says it has managed achieve price reductions of over 80 percent across mobile services in the last six years, but it isn't done there. Further price caps are promised for the same time next year too, as you can see after the break, with roaming data charges set to be further halved (down to 20 cents) by July 2014, with voice calls and text charges also seeing further, admittedly less substantial, reductions. Now, let's see how the EU fares on those ridding the old country of throttled data speeds.Image credit: Die Bundeskanzlerin 
Show full PR textNew lower price caps for mobile roaming from 1 July: data 36% cheaper; roaming in Croatia 15 times cheaper
