FYI-
I'm going to be spending the next couple of weeks attempting to fix a glaring security hole in Android. Downloads are started without asking the user's permission, resulting in the
Not-Compatible drive-by vulnerability to be exploited more and more recently.
I posted about this in several forums a few months ago, but no one seemed to take me seriously then. Now it's become a true problem I cannot ignore any longer. This drive-by vulnerability allows an infected webpage to take over your phone if you simply load the webpage up in your browser. With the combination of Flash-Player vulnerabilities announced last nite, this is a truly huge problem. Just visiting a bad webpage could allow your phone to be taken over, sending sms to premium numbers, stealing your personal info, and even initiating phone calls to premium numbers. And that's just the tip of the iceburg!
I will not be working on other issues (his BACKside ROM) until I manage to get a properly working interstitial dialog inserted into the download process. TBH, I can't believe AOSP has allowed this behaviour, and I will do what I can to get it changed upstream. Till then, please please be careful when visiting websites you are not familiar with. If you see a download beginning in the background without your interaction (ie you didn't click on a link to download something, it just starts on it's own), your best bet is to pull your battery, put it back in and boot into recovery, then do a full wipe/format and re-install the ROM. Hopefully you have TB backups to re-install your apps afterwards. This is actually dangerous enough for me to recommend such drastic measures!
