Google’s emergency steps to fix Android rooting exploit

Rooting Android devices offers a lot of facilities to the users such as they can gain a deeper level of control over the operating system and install apps that require root permission. Through rooting, in a word, you can gain the hidden ‘superuser’ privileges to your hand. However, the drawback of Android rooting is that after rooting, your system becomes more vulnerable to attack by the hackers. In recent days, a lot of vulnerabilities have been discovered and most of them are considered to be emerging after the rooting process.


According to Android Security Advisory notice of Google on last Friday, a flaw in Android can contribute in gaining root access of multiple applications. Google also added that the flaw might be able to take control over the Android system and finally could result in “local permanent device compromise”. Some unnamed rooting apps that are available in Google Play Store and outside its store has been noted to take advantages of android vulnerability and may result in the same system threat. However, the security notice does not make it clear whether or not those rooting apps have been developed to push your system in threat. 


The security notice of Google comes as a warning to the Android users to help them understand the current situation and to deliver them subsequent remedy from the situation. In the notice of March 18, Google states that it has a plan to patch the issue through the upcoming scheduled monthly update. It has also updated and strengthened the security features of Android Verify Apps so that it can detect the malicious rooting apps causing threat to Android system. However, Google has not said anything, whether the malicious rooting apps have been kicked out of the Play Store but confirmed that such apps have violated Play Store’s terms and conditions.


Google supplied a patch to different Android device manufacturers on March 16 so that they can incorporate the patch in the new system as well as fix the existing vulnerabilities through the next system update. According to this, if you are using an Android device that has not yet received an update later than March 18, your device is still prone to the threat. However, it cannot be ensured that you have got the patch upon receiving an update later than March 18, because the manufacturers are most likely to take some time to begin delivering the patch through an update. 


Write a comment

Comments: 4