Thursday, May 19, 2011

Upgraded to Android 2.3.4 over the air

Upgraded my new Google Nexus S, to android 2.3.4 over the air, a very smooth process. The long awaited voice and video calls from gtalk is the main attractive feature. Just had a quick video call with my brother in India, very nice experience.
Google Nexus S

Along with battery life, sudden power cycles and simultaneous appearance of 3G and WiFi icons a serious security issue is also fixed in 2.3.4 release.

The ClientLogin authentication protocol implementation was not proper in version 2.3.3 and earlier. After a user submits valid credentials for Google Calendar, Contacts and possibly other accounts, the programming interface retrieves an authentication token that is sent in cleartext. Because the authToken can be used for up to 14 days in any subsequent requests on the service, attackers can exploit them to gain unauthorized access to accounts. I never expected such moronic mistake from google. Nevertheless I am on 2.3.4... :D

Labels: , , ,

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home