Home › News ›

Fortnite Installer Contained Huge Security Gap

Article Comments

Aug 25, 2018, 9:41 AM by Eric M. Zeman

Epic Games' popular Fortnite game was beset with a flaw so severe it allowed any app on Android phones to download anything silently in the background. The issue arose due to the way Epic chose to distribute the game. Had Epic published the game in the Google Play Store the company would have been beholden to the 30% fees charged by Google, thereby eating into its ability to make money. Epic decided to offer the game apart from the Play Store. The process involved downloading and installing a separate installer app that then downloaded the game itself. It was this in-between app, the Fortnite Installer, that introduced the security flaw. Google's security team discovered that the Fortnite Installer app could be hijacked by any app on the phone. The apps could then download literally anything to the phone with full permissions granted unbeknownst to the Fortnite Installer and device owner. Google informed Epic Games of the vulnerability on August 15 and a patch has since been issued. The episode serves to highlight the danger of installing apps that don't come directly from the Google Play Store. There's no word if the security hole was exploited.

Android Central »

Related

Samsung S24 Series Adds More AI, Updates the Hardware

Jan 17, 2024
Samsung has unveiled its lineup of flagship phones for 2024, the Galaxy S24 series. The phones sport multiple upgrades in both hardware and software compared to last year's models.

Kyocera Brings a Rugged Flip Phone to FirstNet

Apr 20, 2021
AT&T has launched the Kyocera DuraXE Epic, an update to the DuraXE rugged flip phone first introduced in early 2016. The most important addition is support for LTE band 14 and FirstNet, the LTE network operated by AT&T that gives priority to first responders.

New Senate Bill Would Reshape App Stores

Aug 12, 2021
A bipartisan group of three US Senators has introduced new legislation that would place major new rules on the app stores run by Apple and Google. The Open App Markets Act would: Ensure users could access third-party app stores and make them the default.

Apple Must Allow Apps To Steer Customers to Alternative Payment Methods, Rules Federal Judge

Sep 10, 2021
A US Federal Judge has ruled that Apple must allow app developers to "steer" customers away from Apple's App Store payment service, which collects a fee of up to 30%. The ruling was part of Fortnite maker Epic Games' lawsuit against Apple for anti-competitive behavior.

iOS 14.8 Patches Nasty Security Flaw

Sep 13, 2021
Apple today released a set of urgent security updates for iOS, watchOS, macOS, and Safari for Mac. The updates fix a previously-unknown zero-day security flaw that enabled "arbitrary code execution" when viewing a maliciously crafted PDF file, which could be transmitted by visiting a web page and/or receiving an iMessage.

more news about:

Comments

This forum is closed.

This forum is closed.

No messages

Page 1 of 1