Stories
Slash Boxes
Comments

SoylentNews is people

posted by cmn32480 on Tuesday October 20 2015, @04:03PM   Printer-friendly
from the not-just-for-windows-anymore dept.

Proving that the more complex the OS, the easier it is to hack, and how root really isn't required to attack a device a malicious app bypassed Ubuntu Phone security checks to give the attacker full control over the phone.

Luckily only 15 people are known to have downloaded the app but one has to wonder if Ubuntu Phone is already being targeted so successfully in its infancy what does that bode when its a more juicy target?

An educated guess for the unreleased sales statistics can be found on Riccardo Padovani's blog.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1, Insightful) by Anonymous Coward on Tuesday October 20 2015, @11:32PM

    by Anonymous Coward on Tuesday October 20 2015, @11:32PM (#252517)

    The numbers I would like to see (and which never seem to be included with the hand-waving articles) are
    1) How much time elapsed between the release of the software and the time the flaw was reported to the developers?
    2) How much time was there between the devs being notified and when the patch was available?

    -- gewg_

    Starting Score:    0  points
    Moderation   +1  
       Insightful=1, Total=1
    Extra 'Insightful' Modifier   0  

    Total Score:   1  
  • (Score: 4, Informative) by frojack on Wednesday October 21 2015, @01:12AM

    by frojack (1554) on Wednesday October 21 2015, @01:12AM (#252552) Journal

    1) How much time elapsed between the release of the software and the time the flaw was reported to the developers?

    Version: 0.1
    Updated: Oct 13, 2015
    License: Proprietary

    Just long enough for 15 users to install it. Worst case: just about 48 hours, but actual upload time is unspecified , so it could be less.

    2) How much time was there between the devs being notified and when the patch was available?

    Discovered: At 2015 Oct 14 22:50 UTC
    A fix issued: At 2015 Oct 15 04:23 UTC

    So Under 6 hours....

    --
    No, you are mistaken. I've always had this sig.