2014 Google initiative fixes security vulnerabilities in 275,000 apps

In an update on its App Security Improvement program, Google writes that the initiative has now inspired more than 90,000 developers to fix security vulnerabilities in 275,000 apps. The search giant started the project in 2014.

Google reports that the ASI program now warns developers about 26 different security vulnerabilities in their apps. In addition, the company announces that it has created a new page, where more information about the security vulnerabilities can be found. Developers can also go there to be notified of new issues. By April 2016, the program had delivered 100,000 patched apps.

The new page states that each app will be scanned by Google before being accepted by the Play Store. If the system encounters a security issue, the developer will be notified. By uploading a new version of the app, in which the problems have been solved, the app can still be allowed.

The various issues show, among other things, that in 2014, Google began warning developers about AWS data left behind in their apps. In 2016, the company also started showing warnings for OAuth tokens from Foursquare and Facebook. In addition, vulnerabilities are also included in the list of issues, such as the logjam leak in OpenSSL. A separate support page with more information can be called up for each part of the list.

Example of a warning