2 ms·
The Authenticator app is open-source [1] and extremely minimal. It doesn't run with permissions to access any data on the phone, or even communicate over the ne
by teraflop 14y ago
The Authenticator app is open-source [1] and extremely minimal. It doesn't run with permissions to access any data on the phone, or even communicate over the network; all it does is read the system clock every 30 seconds and compute an HMAC.
[1] http://code.google.com/p/google-authenticator/ http://code.google.com/p/google-authenticator/
- peterwwillis 14y agoThe app isn't what worries me, it's what else is running on the phone. Android malware comes in the form of a rootkit, usually, which means it has total control over your device. Not scared? How about this article[1] from over a year ago, which details over 50 apps in the Marketplace using a rootkit which not only controls anything you do, but can download new code to keep changing at a whim? [1] http://www.guardian.co.uk/technology/blog/2011/mar/02/android-market-apps-malware http://www.guardian.co.uk/technology/blog/2011/mar/02/androi...