Linux Code Leaves 1.4 Billion Android Devices Vulnerable to Hackers! OMG! #HNNTech

The code affects Android KitKat and every subsequent release of the software, allowing hackers to inject malicious code into unencrypted communications, security software company Lookout said Monday. Another day, another potential Android attack. 

The number of devices affected might run past 1.4 billion -- including those running the Android Nougat developer preview. Techmeme says "The vulnerability makes it possible for anyone with an Internet connection to determine whether any two parties are communicating over a long-lived transport control protocol connection, such as those that serve Web mail, news feeds, or direct messages. 

In the event the connections aren't encrypted, attackers can then inject malicious code or content into the traffic. Even when the connection is encrypted, the attacker may still be able to determine a channel exists and terminate it."

Linux bug affecting Android versions 4.4 and later opens the smartphones to remote, traffic hijacking attacks (Dan Goodin / Ars Technica)