The development team of CyanogenMod, a popular community-built Android firmware, discovered and removed a line of code that posed potential security risks because it logged and stored device screen-lock patterns in a file.
The unwanted line of code was added back in August in CyanogenMod version 10, which is based on Android 4.1 (Jelly Bean), as part of a new feature that allowed the size of the lock screen's dot grid to be configurable -- for example from the default 3x3 size to 6x6.
CyanogenMod ROMs give Android users the latest Ice Cream Sandwich or Jelly Bean treats to their otherwise-neglected smartphones, and it's mostly open-source except for one piece: the boarded-off ROM Manager.
To remedy that, the modding organization is bringing its OTA updater back from the CM5 and 6 graves, letting users pull updates straight to their devices.
Something we have learned over the past few months is that if you don’t release, someone else will do it for you. Since we are open-source, we absolutely encourage it! Unfortunately, the quality of unofficial builds can vary, and we are serious about quality. Of course nightlies are always available, but we realized that having something that is a bit more stable on a more frequent basis is important. Starting now, we are rolling out our M-Series releases. M-Series builds will be done at the beginning of every month.
Whenever there's a new version of Android, Steve Kondik and the CyanogenMod team tend to swing into action almost immediately with plans for a major revision of the fan-favorite platform overhaul. For Android 4.1 Jelly Bean, that swing will be faster than ever.
The crew's early looks suggest that there will only be a few minor tweaks needed to merge Google's latest with the custom Android code, making CyanogenMod 10 a relative snap to produce.
The developers behind CyanogenMod, a popular third-party Android system ROM has announced that they have decided to no longer enable root access by default.
Future versions of CyanogenMod starting with version 9, will have this option removed by default however users will still be able to explicitly enable it.