ID: IRCNE2012031418
Date: 2012-03-03
According to “CNet”, a security loophole on Apple's iOS platform that gives applications access to a user's photo library without explicit permission has been found to exist on Google's Android platform as well.
The New York Times' Bits blog today notes that Android applications are able to read pictures off a phone as long as that user has given the app permission to use the device's Internet connection.
According to Google, the mobile OS has long been set up to allow this kind of access due to the way it stores data on external memory cards that expand on the phone or tablet's built-in storage. But it may not stay that way.
"We originally designed the Android photos file system similar to those of other computing platforms like Windows and Mac OS," a Google spokesperson said in a statement. "At the time, images were stored on a SD card, making it easy for someone to remove the SD card from a phone and put it in a computer to view or transfer those images."
"As phones and tablets have evolved to rely more on built-in, non-removable memory, we're taking another look at this and considering adding a permission for apps to access images," the company added. "We've always had policies in place to remove any apps on Android Market that improperly access your data."
For the past few months, Google has been running an anti-malware scanning service code-named Bouncer. It scans apps for known malware, spyware, and Trojans, while keeping an eye out for any other suspicious behaviors. Apps that have malicious code or behavior detected are then flagged for a review by Google's staff, who can remove it from the Android Market. That's on top of Google's feedback program that lets users manually flag and report applications they believe to be suspect.
- 2