Hackers show Android OS security flaw with rootkit app at DEF CON

Retuers is reporting that software released at this year's DEF CON hacker's conference in Las Vegas demonstrates how malicious programmers could compromise the core security of the Android smartphone operating system.

That application is what is called a rootkit, meaning that it gains complete ("root") access to the device it compromises. Such access would give the application, and potentially any programmer using its methods, complete access to every bit of information stored on an Android phone that has been compromised. In this particular case, the application was shown to work on two HTC smartphones, the Legend and Desire.

The application, which was distributed on DVD to conference attendees, was developed by a group called Spider Labs. Spider Labs' head, Nicholas Percoco, says that the software was released in order to force Google and manufacturers to address the security flaw in their devices.

Percoco was schedule to host a talk about the security flaw today at the DEF CON event.