Android Flaw Makes Wi-fi Vulnerable

Android Flaw Makes Wi-fi Vulnerable


Malicious code can be placed on smartphones running older flavours





If you own a smartphone hosting an older version of the Android OS, you could be vulnerable to a malicious code attack.

The weakness lies in the WebView programming interface, allowing developers to embed web-based content into apps used for banking, entertainment, and such like.

Many of the apps on Google Play don't safely secure the connection between the WebView component on a device and the web content being downloaded, meaning hackers on the same open wi-fi network as a user could hijack the connection, download bad code and... well, you know the rest.

As it happens, Android's sandboxing and permissions stop most apps from installing other apps without permission so it's unlikely that this would become an issue, but the threat is there.