Well, that only took one media firestorm. Google, in response to widespread reports of a potential credential security hole in Android (which not only affects Android, but any OS using authTokens), is starting to roll out a fix for the public Wi-Fi vulnerability to all affected Android devices today. Google's statement, below:
Galaxy S owners, you may have a reason for some early celebration. CyanogenMod 7 for the GS variants, which has been around in relatively unsupported early alpha stages for the last couple of months, has just gone quite a bit more formal with the introduction of the new "captivatemtd" device branch.
What does it mean? Captivate is the first device of the Galaxy S bunch to move to the official CM download area in the form of nightlies.
After spending some reviewing the Dell Venue last week, I have a renewed interest in the world of all things combining Dell and Android. But, let's face it, Dell hasn't exactly had a great track record with its Android hardware, particularly its first attempt at a tablet - the universally-disliked Streak 7.
The Streak name, then, does evoke a bit of a grimace for most folks familiar with Android hardware.
Regardless of where you sit in the tech world, there is one thing that affects us all: security vulnerabilities. Unfortunately, our little green robot is no exception this rule, and The Register recently dropped a report on a potentially bad exploit.
Apparently, in Android 2.3.3 and below, there is a vulnerability that would allow attackers to collect digital tokens that are stored on the device after users login to Google Calendar, Facebook, Twitter, and "several other accounts."
Here's how it works: when you login to an account, an authToken is stored locally on your device for 14 days, allowing you to re-access the service without hassle.
Listening to tunes on your Android device is serious business - no doubt about it.
It's so serious that many of us are pretty well set in our ways for what we consider the "choice" Android music-listening application, and we aren't willing to budge on it.
PowerAMP users, for example, swear by the application's seemingly endless list of customizations and options. On the other hand, Subsonic devotees like myself are advocates of what is probably the most configurable music streaming experience in existence.
The crew over at 911sniper are all over some HTC leaks today, aren't they? Here's another one for you - this time it's Gingerbread for the HTC EVO Shift 4G. Hopefully all of you that are holding an EVO Shift in your hand right now will get some Gingerbread lovin' shortly after devs get a hold of this.
The download seems to be moving at a snail's pace for us, so we're working on uploading this to our mirror right now.
Update: You can grab the system dump from our mirror here.
In part two of our exciting series of HTC leaks today is the system dump (I'm really trying not to make poop jokes, here) of the HTC EVO 3D, Sprint's upcoming flagship smartphone. Again, the intrepid 911sniper blog has provided the goods. I wonder if these things just fall off the back of trucks. Internet trucks, that is.
The EVO 3D is coming this summer, and we spent a little time with it back at CTIA in March (check out our hands-on here), and were thoroughly impressed.
UPDATE: The Gingerbread radio is apparently being linked to hard bricks. We have removed the link for the time being, until this issue is resolved, or a new radio version is leaked.
This morning 911Sniper dropped a leaked Gingerbread test build for the HTC Thunderbolt, but there was one issue: it wasn't flashable. Our buddy Justin Case from TeamAndIRC immediately took it to the lab and started dissecting its parts to see what needed to be done.
Samsung has just announced via press release its plans to officially update its Galaxy S line of phones (yep, including North American ones) to Gingerbread starting this week, with the UK and Scandinavian countries first on the list to get the Ginger-bump. Samsung has again remained characteristically ambiguous about exactly which Galaxy S devices will be eligible (and when) for the update directly from Kies, Samsung's device management software.
It's entirely unclear if "North American" Galaxy S phones include the heavily carrier-customized versions of the device in the United States (Captivate, Fascinate, Vibrant, Epic), or merely unbranded Canadian versions of the phone and European imports that have snuck their way onto US shores.
Google I/O 2011 is all wrapped up, and boy was it eventful. In case you missed them the first go-round, we provided a handy-dandy list (with videos embedded) of the keynotes and Android sessions from both the first and second day. The first keynote, especially, was really quite fascinating and provided a good review of where Android is headed.