Android Phones Easier To HAck Than iPhone

According to researchers in Germany, Android phones are easier to hack than iPhones. Any version of Android prior to OS 2.3.3 are vulnerable to an attack thanks to a weak ClientLogin authentication protocol.

So basically, if you log in to Facebook, Twitter or your email account, your info is stored for 14 days and can be accessed by hackers.

"To collect such authTokens on a large scale an adversary could setup a wifi access point with a common SSID (Service Set Identifier) of an unencrypted wireless network, e.g., T-Mobile, tarbucks...With default settings, Android phones automatically connect to a previously known network and many apps will attempt syncing immediately. While syncing would fail (unless the adversary forwards the requests), the adversary would capture authTokens for each service that attempted syncing."

There is a way to from Google, but those with Android mobile phones are advised to use trusted sites only. Don't know what it is but, Android phones have never appealed to me. Although the other day a friend of mine showed me how he can turn his handset in to a Wi-Fi Hotspot which could come in handy.


I'ma stick to my Blackberry Torch and iPhone4 for now...


(Source)