The recent discovery of an Android 2.0.1 security flaw got me thinking. I developed a prototype of an app I want to put on the Android Market, it was my first attempt at building a mobile platform application; to protect the information stored in it, the first thing you saw after starting the app was a screen asking you for a password. For months, I used it, storing valuable information within it, and one day, instead of touching the "OK" button to input the password, I touched "Exit". I started the app again, and found out... it did not ask me for the password. Similarly, the Android 2.0.1 flaw is found in a situation we, as developers, do not usually think about.
Normally, when u turn on an Android phone, it will ask you for the security pattern to unlock it. However, when you receive a phone call, asking for this pattern is not practical; since the only thing you want to do, as a user, is to pick up the call, so you're allowed to without unlocking your phone. Now here is when, if the user presses the Back button, the OS does not ask for the unlock security pattern, and instead shows the Home screen. The amazing guys at DroidDog show it in this video:
If you ask me, I agree, it's a pretty good flaw. However, it feels like the developers had a change in mind for a particular piece of code, and did not make the change because it would've caused this issue. Then, one day, they remembered the change they wanted to do, forgot why they had not done it before, and did it. Thus, this security flaw. And now comes the time when, again, we start blaming the manufacturers for selling us software that puts our personal life at risk, considering it would only take a person close to you to take the phone for a while and make a call to check your emails, tweets, Facebook profile, etc. But sometimes we forget that these companies, the ones behind the most important mobile platforms today, are not "black boxes" which just deliver hardware and software, they are made up of people, people like me and like you, who have the right to make mistakes, because they simply can't think of everything. We've been used to the kind of perfection which makes a brand unique, like Apple's fine attention to each and every detail, but again, we forget, it's people behind all that hard work, not companies.

No comments:
Post a Comment