Epic browser for android mobiles. Fortnite’s Android installer shipped with an Epic security flaw

Epic browser for android mobiles Rating: 8,2/10 841 reviews

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

An Epic security engineer, at my urging, requested Google delay public disclosure for the typical 90 days to allow time for the update to be more widely installed. . However, it was irresponsible of Google to publicly disclose the technical details of the flaw so quickly, while many installations had not yet been updated and were still vulnerable. Unfortunately, the installer had a phenomenally dangerous security flaw in it that would allow a malicious actor to essentially install any software they wanted. Many warned that this was a security risk for several reasons, for example that users would have to enable app installations from unknown sources — something most users have no reason to do. Edward pointed out this could be fixed easily and in a magnificently low-key bit of shade-throwing helpfully linked to a page on the Android developer site outlining the basic feature Epic should have used. Indeed, companies really should try not to endanger their users for selfish reasons.

Next

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

In a thread posted a week after the Fortnite downloader went live, that the installer basically would allow an attacker to install anything they want using it. And the Play Store has other protections and features, visible and otherwise, that are useful for users. Epic InfoSec then requested Google to wait 90 days before publishing the information. Google wasted exactly zero time pointing out this egregious mistake. As you can see, Google was not feeling generous. Really, the opposite of glory. Silently, and with lots of extra permissions too, if they want, because of how the unknown sources installation policies work.


Next

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

. . . . .

Next

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

. . . . . . .

Next

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

. . . . . . .

Next

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

. . . . . . .

Next

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

. . . . . .

Next

Fortnite’s Android installer shipped with an Epic security flaw

epic browser for android mobiles

. . . . . . .

Next