Security Flaw Is Revealed in T-Mobile's Google Phone
SAN FRANCISCO — Just days after the T-Mobile G1 smartphone went on the market, a group of security researchers have found what they call a serious flaw in the Android software from Google that runs it.
Context & Ripple Effects
Android's first T-Mobile handset reached stores alongside the launch of Android Market and Google's release of the operating-system stack as open source. The reported vulnerability therefore arrives at the point when Google is asking both consumers and outside developers to trust a new mobile platform.
The G1 had already attracted a list of early usability complaints, while Android development had previously been associated with software glitches. A security issue raises the stakes from rough product execution to protection of the device and its software environment.
First-order effects
- Google faces immediate pressure to address a flaw researchers characterize as serious in the Android software powering the G1.
- T-Mobile G1 buyers inherit a platform-level security concern, rather than a problem limited to the carrier's retail rollout.
Second-order effects
- Android Market's launch makes confidence in Google's security response relevant to developers distributing software as well as to G1 customers.
- Google's open-source release gives outside developers and security researchers a direct stake in how Android vulnerabilities are identified and corrected.
Third-order effects
- If Android expands to additional handsets and carriers, security maintenance and coordinated fixes become a central test of Google's ability to govern an open mobile platform.
- The episode points toward mobile operating systems competing not only on features and handset availability, but on the credibility of their vulnerability-response process.
The trend: Open mobile platforms are making software security and patch coordination a core part of platform trust from the first handset launch.