To read all comments associated with this story, please click here.
Yea, like other mobile applications stores could check that you application behaves bad only the third sunday of the month, without source code access no store checks before distribution is perfect
By the way this applications was not distributed on the Android Market, people need to enable the setting to install apps from other places, and still Android warn the user you will give access to the app to send SMSs
Well, the news is that it is the first found. And will become worst.
Then suppose the trojan was in an app that uses SMS, like... something that sends messages to a group when an alarm is triggered. The SMS ability is needed and is part of original concept of that app.
If the app is open source, the trojan may be inserted, compiled and binary may be posted in an alternate repository - or the original, remember recent IRC server incident.
People - me included - tends to think "it will not happen to me". Sometimes I test open source programs and there is no guarantee that it is virus free, I am assuming the risk and using the RPMs.





Member since:
2005-12-31
"Here, install this package"
"What does it do?"
"Oh, that's not important. Just install it. Look, it's shiny"
"Sure!"
...
"ZOMG! Stuff is happening! It's teh trojanz!"
Really? This is news?