Slashdot Mirror

← Back to Stories (view on slashdot.org)

Google Admits Bitcoin Thieves Exploited Android Crypto PRNG Flaw

Posted by timothy on from the oopsie dept.

rjmarvin writes "The theft of 55 Bitcoins, or about $5,720, through Android wallet apps last week was made possible because of flaws in Android's Java and OpenSSL crypto PRNG, Google revealed in a blog post. In the wake of a Bitcoin security advisory and a Symantec vulnerability report, the Android Developers Blog admitted the reason the thieves were able to pilfer their wallet apps. The flaws are already, or in the process of being repaired."

2 of 183 comments (clear)

  1. Bring in the regulators! by meta-monkey · · Score: 4, Funny

    I'm so glad they're going to start regulating bitcoin. I mean, somebody ran off with $5,720! Monstrous!

    That's why I keep my money in safe, secure U.S. dollars and in the stock market, where you don't have to worry about dangerous criminals absconding with your savings.

    --
    We don't have a state-run media we have a media-run state.
  2. Re:Already or in the process of being repaired by Anonymous Coward · · Score: 1, Funny

    It's okay though, with Android you can just write your own PRNG and change all the other software to use it, then you'll be good to go.