Download Fortnite to Android is not particularly dangerous. Installing Fortnite on Android can be dangerous if you do not know the risk. This week, Google and Epic Games began a battle that started with an act of good will. Google showed Epic Games that they had errors in their Fortnite APK appfil – seems innocent enough to act on their own, right?
Google showed a mistake in Fortnite APK for Epic Games InfoSec (developers and fixes on Epic Games, developers behind Fortnite.) Once they had shown this error to Epic Games, Epic Games went to work on a solution. They patched the vulnerability pretty fast – about 33 hours after the first message from Google.
Google included the video above with its first message to Epic Games to show how the vulnerability could affect an unsuspecting user when receiving an attack. This type of attack would require the attacker to know that vulnerability existed initially. This was not known before this week.
Two pieces of information are important here, and one of them is important especially for you, Fortnite gamer. If you downloaded Fortnite for your Android device directly from any source, your device may have been corrupted by a malicious party. The part you missed was Fortnite Installer.
Epic Games built with some security to ensure they had a direct line between their servers with updates to the app and the end user. This was the Fortnite Installer app. This is separate from the Fortnite app itself. If you did not download the Fortnite Installer app from epic games, you might want to reset your device now and change any passwords you have ever entered on your smartphone or tablet.
That's not what Google was talking about. Google talked about a Fortnite Installer vulnerability with versions before 2.0.1. The SPECIAL set of circumstances you may have encountered for this vulnerability has affected you as follows:
1. You downloaded Fortnite Installer before version 2.0.1 and
2. Install Fortnite from Fortnite Install after August 24th
If installed on August 23 or earlier, you are probably good. If you downloaded the patched version of Fortnite Installer on version 2.0.1 or later, you are probably good. This fairly specific set of circumstances is what we are talking about.
Google included a disclaimer in their disclosure of vulnerability to epic games, then to the world. The description included the following text, which is standard with such information: "This error is subject to a 90 day disclosure deadline. After 90 days of expiration or a patch has been made available, the bug report – including any comments and attachments – will be visible to the public . "
The part that is easy to misunderstand here is a 90-day deadline. This is active as long as no patch was issued. If, and when a patch (a repair) is released, a new countdown will take effect. This new countdown, as mentioned by Google later in the thread, is a week's time. The timeline goes like this:
1. August 15: Google identifies errors
2. August 15th: 90-day hours go into play before publishing errors.
3. August 15: Epic begins to work on repair
4. 16th of August: Epic discovery fixes, begins to send patch to users
5. August 16: 7-day hours go into play before announcing mistakes.
6. August 24th: Time is up, wrong published by Google.
In Google Issue Tracker for this issue, you can see how the 16 logged in Epic about "90 days before this issue was specified so users have time to patch their devices." No other emails seem to have become sent (and / or revealed) between that request and the confirmation from Google that 90 days are no longer in force – and that the 7 days are up.
Meanwhile On Mashable, Epic Games CEO Tim Sweeney shared a statement: "Google's security analysis processes are valued and enjoyed the Android platform, but a company that is as powerful as Google should practice more responsible enlightenment than this and Do not disturb users during its PR campaign against Epic's distribution of Fortnite outside of Google Play. "
Keep the seat belts tight, people, this is not the end of this particular exchange. Fortnite is one of the biggest games in recent history, and launch on mobile devices was an explosion that has not been seen since Pokemon GO. Epic Games decided that they would launch the game outside of Google Play to avoid what they saw as unfair fees for hosting their app for download. Google, for their part, made it clear in the search engine that Fortnite was not in the Google Play app store to avoid unnecessary fatal download of third-party applications that publish as official apps. Since that time, it has been a bit of a back-stage tussel.
This is not the first time the fight fight is gone public. Take a look at the timeline below for related events. Stay tuned when we look at the throne for more.