Anxious to upgrade Android on LG Optimus One: Security Concerns

It’s not just about getting the latest version of Android, it’s about staying secure while being mobile. When I bought my LG Optimus One a few weeks back, one of my biggest concerns were the ability to upgrade Android 2.2 Froyo to Android 2.3 Gingerbread.

Aside from wanting the benefits from a newer version of Android, getting a more secure smart phone is a top priority for me. As more and more of my data are managed and stored on my LG Optimus One like my email, calendar activities even my PayPal transactions, security holes and hack attacks on Android is of my major concerns.

Last May 17, the BBC reported that German security researchers have found a security hole in Android where essentially, the phone ‘leaks’ personal data.

University of Ulm researchers Bastian Konings, Jens Nickels, and Florian Schaub made their discovery while watching how Android phones handle login credentials for web-based services.

Many applications installed on Android phones interact with Google services by asking for an authentication token – essentially a digital ID card for that app. Once issued the token removes the need to keep logging in to a service for a given length of time.

Sometimes, the study says, these tokens are sent in plain text over wireless networks. This makes the tokens easy to spot so criminals eavesdropping on the wi-fi traffic would be able to find and steal them, suggest the researchers.

Armed with the token, criminals would be able to pose as a particular user and get at their personal information.

Two days later, May 19, the BBC in a follow up report said that Google has come out with a statement announcing that they are actively working to address the security issue:

Google said in a statement: “We’re starting to roll out a fix which addresses a potential security flaw that could, under certain circumstances, allow a third party access to data available in calendar and contacts.

“This fix requires no action from users and will roll out globally over the next few days.”

It’s great news, but the more important question is, how do I get the update? I’ve been combing the web in search of ways or information as to whether or not Android 2.3 would be made available as an upgrade for the LG Optimus One. Much to my frustration, the search has yielded no useful results nor answers to my question.

Hopefully, LG would be able to address this concern for us users of their handsets powered by Android 2.2. Maybe I’m overreacting or being too concerned, but online safety is top priority nowadays and using a smart phone is no exception.

One Comment

  1. I feel you are just being a little paranoid about the security. It all says “under certain circumstances”. Unless you keep all your company data on your phone there is no reason to be so worried. Besides its just a minor version upgrade not even a major version. Tell you what – keep all your passwords in a password-protected document. Thats it.

    Reply

Leave a Reply