Earlier this month, a mobile malware known as Sexy View or Sexy Space slipped through Symbian’s mobile code signing procedure, allowing it to act as a legitimate application with access to device critical functions such as access to the mobile network, and numerous other functions of the handset.
Upon notification, the Symbian Foundation quickly revoked the certificate used by the bogus Chinese company XinZhongLi TianJin Co. Ltd, however, due to the fact the revocation check is turned off by default, the effect of the revocation remains questionable. What are the chances that future malware authors could bypass the code signing procedure again? Read the full story [zdnet.com]
