Google Play stares at serious security breach: Study
New York: Using a new tool called PlayDrone, researchers at Columbia Engineering have discovered a crucial security problem in Google Play - the official Android app store where millions of Android users get their apps.
They found that developers often store their secret keys in their app`s code, similar to usernames/passwords info.
These can be then used by anyone to maliciously steal user data or resources from service providers such as Amazon and Facebook.
These vulnerabilities can affect users even if they are not actively running the Android apps.
Google Play has more than one million apps and over 50 billion app downloads.
"But no one reviews what gets put into Google Play, anyone can get a $25 (Rs.1,475) account and upload whatever they want. Very little is known about what`s there at an aggregate level," said Jason Nieh, professor of computer science at New York-based Columbia Engineering.
To unlock this, researchers developed PlayDrone, a tool that uses various hacking techniques to circumvent Google security to successfully download Google Play apps and recover their sources.
PlayDrone scales by simply adding more servers and is fast enough to crawl Google Play on a daily basis, downloading more than 1.1 million Android apps and decompiling over 880,000 free applications.
"We have been working closely with Google, Amazon, Facebook and other service providers to identify and notify customers at risk, and make the Google Play store a safer place," informed Nicolas Viennot, a research student at Columbia Engineering.
Google is now using our techniques to proactively scan apps for these problems to prevent this from happening again in the future, he added in a paper presented at the ACM SIGMETRICS conference.
More from India
More from World
More from Sports
More from Entertaiment
- I eat beef, can somebody stop me?: Kiren Rijiju hits back at Naqvi
- Delhi: Visually impaired boy scores 91.4% in CBSE 12th Board exams
- MP: 14-year-old boy works as bonded labour since 2009
- UP: Man chops off wife's nose, hair for dowry
- Zee Media Exclusive: The plight of yoga expert Tejaswi Sharma
- Heat ave continues in India, death toll climbs to over 1,400
- Megastar Amitabh Bachchan slapped with Rs 1 crore notice
- Woman denied flat in Mumbai for being a Muslim
- 4 Indians in Forbes' 100 most powerful women list
- Kenyan lawyer offers to marry Barack Obama's daughter Malia
- Gujjar stir: HC asks Rajasthan govt to clear rail track, roads
- Maggi likely to face ban in India!
- Gujjar stir: HC asks Rajasthan govt to clear rail track, roads- Part II
- AIB: The 'Third Gender's right to dignity'
- Salman Khan accident files burnt in Mantralaya fire
- CBSE Class 10 Board Result 2015 to be announced today
- CBSE Class 10 Board Result 2015 (cbse.nic.in, cbseresults.nic.in) postponed?
- Maharashtra MSBSHSE HSC Result 2015 on mahresult.nic.in
- First look: Salman Khan steals thunder in `Bajrangi Bhaijaan`
- I was misquoted, says Kiren Rijiju on 'beef' remark
- CBSE Class 10 (Class X Board) Result 2015 on cbse.nic.in, cbseresults.nic.in at 2 pm
- mahresult.nic.in updated with MSBSHSE Maharashtra HSC Class XII Result 2015
- Manmohan Singh defends himself on 2G charge, slams Modi govt for 'carbon copy' schemes
- Sonia Gandhi 'unconstitutional authority' during UPA: PM Narendra Modi
- Hours after attacking NDA govt, Manmohan Singh meets PM Narendra Modi
- PMO website revamped, now send e-mail to PM Modi directly
- Check cbseresults.nic.in, cbse.in for CBSE Class 10 X Board Result at 2 pm
- Death toll climbs to over 1400 as intense heatwave continues in India
- GUJCET Results 2015 declared on gseb.org
- Delhi Assembly passes resolution against MHA notification: As it happened