Al parecer ayer se conocía la existencia de una nueva aplicación llamada simplemente test. La llegaron a instalar quince usuarios, que ya han sido avisados. Una vez se alertó del descubrimiento se pusieron en marcha los protocolos de seguridad, incluyendo la paralización de subidas y descargas a la tienda y el escaneo de todas las aplicaciones disponibles. La preparación de un parche que evite el problema está en camino.
At 2015 Oct 14 22:50 UTC a member of the Ubuntu App Developer Community published a post about an app named “test.mmrow” in the Ubuntu Phone’s Software Store that exploited a previously unknown bug in the application installation system. Upon clicking the “Tap me” button in the app, a script was created that modified the boot splash screen, and gave the intruder root access. This could happen only on Ubuntu Phones; users of Ubuntu on the desktop, server, cloud and snappy Ubuntu Core devices are not affected.
Comentarios
Y a las 15 descargas ya estaba detectada y corregida pocas horas después...
At 2015 Oct 14 22:50 UTC a member of the Ubuntu App Developer Community published a post about an app named “test.mmrow” in the Ubuntu Phone’s Software Store that exploited a previously unknown bug in the application installation system. Upon clicking the “Tap me” button in the app, a script was created that modified the boot splash screen, and gave the intruder root access. This could happen only on Ubuntu Phones; users of Ubuntu on the desktop, server, cloud and snappy Ubuntu Core devices are not affected.
Han sido bastante rápidos.
http://insights.ubuntu.com/2015/10/15/update-on-ubuntu-phone-security-issue/
"La llegaron a instalar quince usuarios"
El 80% de los usuarios de Ubuntu afectados, oh my God!!.