Software is never completely secure. If you think otherwise, you are in for a rude awakening. Every now and then, hackers will find a way to take control of an app or expose private data–for money, fun, or fame. Motives varies, but these types of hackers are extremely talented, and often their potential is wasted to illegal activities. One of good guys in finding and neutralizing security flaws is Google. Current efforts have been focused mainly on their own products like Chrome OS or Chrome browser. But now, the whole idea of protecting the Internet has gone to a new level.
The Android Open Source Project is a good example of how the community can be used to make a big project used by millions safer and more complete. Android isn’t made only by developers gathered together in Mountain View. We’ve seen some contributions made by multiple XDA developers like Senior Recognized Developers jcase and Chainfire. Google obviously found out that some talented hackers are spread all over the world, so they came up with a new initiative, Google Project Zero. It’s a team made of top Google security researchers that have a sole mission to keep the world safe–free of security flaws, like the Heartbleed bug in OpenSSL project. Google Project Zero’s mission is to try and expose every security vulnerability and let companies know to fix them.
Google has already recruited some hackers from their own company and even XDA. New Zealander Ben Hawkes discovered dozens of bugs in software like Adobe Flash or Microsoft Office 2013. English researcher Tavis Ormandy discovered some zero-day vulnerabilities in antivirus software. Finally, George Hotz, for us known more as XDA Recognized Developer GeoHot, the creator of the Towelroot root exploit compatible with almost every device using an unpatched kernel. Before creating Towelroot, GeoHot was involved in iOS Jailbreaking and won the Pwnium hacking competition last March. Last but not least is Ian Beer. With such an All-Star team, Internet users will one day be a bit more safe.
It’s remain unanswered whether Google Project Zero will be a successful initiative. That said, exposing the flaws in order to encourage and allow companies to fix them is an innovative project, and other companies should follow the Google’s path in making the Web a safer place to work, communicate, and simply have fun.
Want something on the XDA Portal? Send us a tip! -- Join us for xda:devcon 2014!