GOOGLE CONFIRMS SECURITY FLAW, ROLLS OUT SERVER SIDE FIX

No Android security flaw is good news for Google, but the recently discovered ClientLogin issue that left the OS vulnerable to impersonation attacks is surely at least a bit more welcome than some of the alternatives. That's because the flaw can be fixed at the server-side level (rather than on millions of Android phones), and Google has now confirmed that a fix is rolling out today, although it may take a few more days for it to cover all users (there's no action required on your part).

The company's not quite out of the woods just yet, though -- while we've confirmed with Google that the fix addresses the issues with Calendar and Contacts, the problem with Picasa remains, and there's still no indication of a fix for it. Incidentally, Google had already fixed the Calendar and Contacts issues on the phone-side with Android 2.3.4 (although that still left 99 percent of phones vulnerable), but it too is still stuck with the Picasa vulnerability.

ADOBE FINDS ANOTHER CRITICAL FLAW IN FLASH

Adobe has found yet another serious security flaw in Flash. The vulnerability affects all platforms, including Android, though only attacks on Windows have been seen in the wild so far. Just like last month's exploit, this one is spreading via malicious .swf files embedded in Office documents, only this time it's Word instead of Excel being targeted (a hacker's gotta keep it fresh, after all). Once again Reader and Acrobat are also vulnerable, but attacks can be thwarted using Reader's Protected Mode.

iOS FLAW FOUND IN iPHONES

A flaw in the design of iOS 4.1 allows someone to bypass the passcode entry lock on the iPhone.  On a locked iPhone input a random number in the emergency call field, press call and promptly hit the hardware lock button.  This will take you to the Phone app granting access to the call history, voicemail and address book.  This hack works on iPhone 3G, 3GS and 4.

Additionally, selecting "shared contact" and the camera icon will grant access to the photo album.  If you hold down the menu button you will have access to any music stored on the device as well.  While these aren't major bugs, it could be used to exploit various areas of the device. [Engadget]

NEW iPHONE 4 FLAW

The free bumper program just ended and already we have word of another flaw in the design of the iPhone 4.  This flaw concerns the back which is made of glass, according to Ryan Block of gdgt.com.  Block citing Apple engineers, says that non-bumper type cases, ie slip over cases, are scratching the glass on the back of the iPhone 4.  These scratches, caused by dirt and debris getting caught between the case and the glass, can lead to cracking of the glass.

Apple has gone as far as pulling all slip over cases from the Apple stores.  Most of these are third-party cases that pay Apple 10-15% to have the "Made for iPhone" badge.  Needless to say these companies are not happy.  Users can still buy the cases, just not through the Apple stores.

This may help explain the rumor that the next generation iPhone will be a completely different form factor and not have a glass back. [Gizmodo]