3 ms·
"Vulnerability" is an euphemism, this is a deliberately crafted backdoor. Perhaps it is a testing/debugging-facility that they forgot to remove from the produc
by moe 15y ago
"Vulnerability" is an euphemism, this is a deliberately crafted backdoor.
Perhaps it is a testing/debugging-facility that they forgot to remove from the production build?
That'd be about the only semi-plausible excuse for HTC to come out of this alive (when/if mainstream media decides to jump on this).
- barista 15y agoGiven that Google releases while most of its products are still in "beta". That seems very likely.
- shareme 15y agoit depends, on the java side if we are using log.Config correctly and proguard right all logging is defanged and left out of any obfuscated application. However, on the OS side it depends on what changes HTC made for carriers and how adequate their codeqa testing and security audits were