Google Just Patched a Major Pixel Vulnerability
There were two major Pixel stories last month that stuck with me. The first was the release of the Pixel 9 series, which is what Google wants me to remember. The second, however, was a major security vulnerability that not only affected Pixel phones, but was baked directly into their firmware.
The issue, discovered by the "mobile threat hunting" company iVerify, stemmed from an app package called "Showcase.apk." This app package's main purpose was to allow retailers like Verizon stores to switch in-store Pixel units into "demo" mode, which would alert the version of Android running on the phone. If you've ever used a demo phone in one of these retailers, you'll know it isn't running "typical" Android.
Not only was Showcase.apk silently baked into all Pixel phones since at least 2017, but when active, it runs in a "highly privileged context," which allows the app package to affect your phone's OS. iVerify found that, in the unlikely chance a bad actor had physical access to your device and activated the program, they'd be able to take over your phone, and install malware and spyware on the device.
Again, the risk to any particular Pixel user was relatively low, but it should have been zero. An app package meant only for stores like Verizon should never have been included in the firmware of most Pixel devices sold to the public.
Luckily, it's no longer a problem—as long as you take action. On Tuesday, Google dropped an update for affected Pixel devices, which removes Showcase.apk from the firmware. The update also improves wifi stability and performance.
How to update your Pixel
If you have a Pixel 8 or newer, all you have to do to update your phone is to activate Google Assistant and say, "Update my phone now." Android will show an update notification, which you can tap to access an update option.
If you have an older Pixel, or this doesn't work for you, head to Settings > System > Software update. From here, you can check for a new update. When one is available, follow the on-screen instructions to install it.
The following Pixel phones are compatible with this update:
Pixel 6
Pixel 6 Pro
Pixel 6a
Pixel 7
Pixel 7 Pro
Pixel 7a
Pixel Tablet
Pixel Fold
Pixel 8
Pixel 8 Pro
Pixel 8a
Pixel 9
Pixel 9 Pro
Pixel 9 Pro XL
Pixel 9 Pro Fold