ShmooCon 2011: Your Android’s dirty little secret
Presenters at the ShmooCon security conference have spent much attention on mobile vulnerabilities in the last couple years, and several attendees this year say it’s a topic of major importance to them.
Last year, a talk focused on weaknesses in the iPhone. This year, two researchers have targeted all their firepower on the Android.
In this morning’s presentation, Jon Oberheide, CTO of DUO Security, and Zach Lanier, a senior consultant with the Intrepidus Group who specializes in network and web application penetration testing, walked attendees at ShmooCon 2011 through a series of weaknesses they discovered in the device at the kernel, platform and application levels.
Among their findings: