More Than 1M Google Accounts Breached by Gooligan

Re:More Than 1M Google Accounts Breached by Gooligan by 4rtemis on Wednesday November 30, 2016 @12:13PM (#13072507)

You can win. Sane defaults. Allowing the potentially unsafe method "expert mode" is OptIn. I wouldn't buy a car if the dealer held the only key to the hood, still I don't expect everyone to be a grease monkey nor do I think it remarkably safe.

[ Parent | on HN ]

Re:More Than 1M Google Accounts Breached by Gooligan by tdkl on Wednesday November 30, 2016 @12:18PM (#13072560)

What's "insane" about explicitly having to opt-in to 3rd party application installs in Android ? That switch existed for years and was praised upon. The media opinion only shifted after Android becoming most widely distributed phone OS. It's just easy clicks.

Android is fine.

[ Parent | on HN ]

Re:More Than 1M Google Accounts Breached by Gooligan by 4rtemis on Wednesday November 30, 2016 @12:27PM (#13072659)

I'm in agreement with you and that's what I was saying or tried to say. Opting into 3rd party installs is fine with me, having the option disabled is a "sane default".

[ Parent | on HN ]

Re:More Than 1M Google Accounts Breached by Gooligan by mtgx on Wednesday November 30, 2016 @12:41PM (#13072785)

I agree with the first comment, but Android is "not fine".

The lack of a sane updating model is a real security problem.

[ Parent | on HN ]

Re:More Than 1M Google Accounts Breached by Gooligan by 4rtemis on Wednesday November 30, 2016 @12:50PM (#13072870)

Yeah, Android's not fine. The business model, the weak full disk encryption, inability to set strong FDE password separate from your pin, centralization around Google Play Services, moving AOSP into GAPPS iteratively, forced obsolecense via carriers/hardware producers

Long way to go.

[ Parent | on HN ]