BREAKING NEWS: ANDROID HAS A SECURITY BREACH! EVERY SECOND ANDROIDGERÄT AFFECTED!
One logs into an open wireless network, so it's attackers (no, we call them> hackers', which sounds simple euphoric), possible to read the traffic! This is madness!
Time, be honest: Who thought because really, that is private to an open network? Ever since Google Street View with their carts pulled through the country, would surely everyone know that you can read along data from unencrypted networks. This is super simple, appropriate software can be found on the web.
Granted, the whole truth was not what I wrote. But in many news reports, the above is actually sold as a security issue. The truth is this: You sit in Starbucks and logs in the open Starbucks Wi-Fi. If you have been drinking coffee there and logged into the branch network, we see Android the power again and the login is done automatically. A is convenient das. Androidgerät would not be a Androidgerät, it would not do the following: If one uses the phone, one is constantly logged into his Google account. At least then, if you created one. If you are logging in with the account, then sent to Google's login information is encrypted using an HTTPS connection. The fatal happens then: You get one authToken of the Google servers. It is used to authenticate with Google services. The crux of the matter: Communication with the Google service itself is done without encryption. A Hacker can intercept the token and impersonate you. And, consequently, log into your Google services (Calendar, Contacts, ...) and rumwuscheln.
Google responded: It is working to ensure that the connection with the remaining services also encrypt is done. Therefore it needs an update: Stupid is the way to the Android updates and yes such a thing. Gets to the end of each smartphone owners the update can take several months, when the user receives the update at all. The manufacturers are rather lame.
What am so upset about the whole thing: The media will again spread half-truths that will help the user in principle and not confuse him even more. Sure, the thing with the unencrypted Google services should be fixed. This is beyond question. But the "danger" with the open wireless networks can be safely deleted from the articles.