Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
In August 2024, security firm iVerify reported that Pixel firmware included Showcase.apk, a Verizon retail-demo app with an insecure configuration download and unusually high privileges. That combination could create a route to serious compromise under particular conditions, but iVerify did not report that Pixel owners had been broadly hacked. Google’s September 2024 Pixel update notice listed removal of a third-party APK as a security fix. Pixel owners should install available updates and check their security patch level.
What was the Pixel security flaw?
The issue involved Showcase.apk, an app iVerify said was included in Pixel firmware and Google over-the-air images. The firm identified it as software developed by Smith Micro and apparently intended to support Verizon in-store demonstrations. iVerify reported that it had been present on Pixel devices shipped worldwide since September 2017. Its public report described the affected population as “millions” or a “very large percentage,” but did not give a precise device count or percentage. iVerify’s August 15, 2024 report
The concern was not simply that a demo app existed. iVerify said Showcase.apk had extensive system privileges and could execute commands and install packages. It also reported that the app retrieved configuration and remote files from a predefined URL over unencrypted HTTP. If an attacker could manipulate that network traffic, altered configuration could potentially be used to run code or commands with system-level access. In plain terms, an insecure download becomes more consequential when the app processing it has unusually broad authority.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsThese were iVerify’s technical findings and risk analysis, not proof that Pixel users were compromised. The cited reporting does not establish a number of exploited devices, confirmed victims, or actual breaches.
#1 Best Overall
- Attention-grabbing design meets the latest evolution of the Google Pixel Camera on the new Google Pixel 11 Pro; Gemini Intelligence helps manage details so you can live in the moment[1]; and the phone is available in two sizes
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan: Works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers[2]
- Stay informed without looking at your screen: When your phone is face down, Pixel HiLight gently alerts you with subtle glowing lights when your favorite contacts are calling or you’re talking with Gemini; exclusive to Google Pixel 11 Pro phones
- Magic Capture catches the moment as you live it: With just one tap, Pixel 11 Pro captures video and photos, and automatically edits, crops, and unblurs a curated collection, ready to share – and you get the memory of how it felt to be in the moment
- Two new cameras for more brilliant photos: A larger telephoto sensor captures 30% more light for clear, beautiful photos and videos, even in the dark[3]; Pixel’s longest zoom ever helps you capture details from impressive distances[4]
Could someone remotely take over every Pixel?
No. iVerify said Showcase.apk was not enabled by default on most devices it examined. The enablement method its researchers investigated required physical access, and they withheld the instructions. They also noted that other methods or circumstances might exist. That means the findings do not support saying that every Pixel was actively vulnerable to remote takeover simply because the package was present.
iVerify described the potential consequences if the app were enabled and its weaknesses exploited. Its executive’s characterization of the app’s ability to “take over the phone” was an assessment of capability, not evidence that such takeovers occurred. Reports of potential impact should not be confused with confirmed incidents.
Rank #2
- Google Pixel 10a is a durable, everyday phone with more[1]; snap brilliant photography on a simple, powerful camera, get 30+ hours out of a full charge[2], and do more with helpful AI like Gemini[3]
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan; it works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Pixel 10a is sleek and durable, with a super smooth finish, scratch-resistant Corning Gorilla Glass 7i display, and IP68 water and dust protection[4]
- The Actua display with 3,000-nit peak brightness shows up clear as day, even in direct sunlight[5]
- Plan, create, and get more done with help from Gemini, your built-in AI assistant[3]; have it screen spam calls while you focus[6]; chat with Gemini to brainstorm your meal plan[7], or bring your ideas to life with Nano Banana[8]
What did Google do about Showcase.apk?
On September 3, 2024, Google’s Pixel update notice listed “Fix to remove third party APK to address security vulnerability.” The notice did not name Showcase.apk, but contemporaneous reporting connected that change to the app. Google listed the fix for Pixel 6 through Pixel 8a, Pixel Fold, and Pixel Tablet. Google’s September 2024 Pixel update announcement
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Google’s September Pixel security bulletin says patch level 2024-09-05 or later addresses all issues in that bulletin. The timeline matters: iVerify said no patch had been offered when it published its findings on August 15; Google later announced the APK-removal fix in September. Those statements refer to different dates, not conflicting update status. Google’s September 2024 Pixel security bulletin
How to check whether your Pixel has an update
- Open Settings on your Pixel.
- Tap Security & privacy, then System & updates, and review Security update for the installed patch level. On some Android versions, labels or menu placement may differ; use Settings search for “Security update” if you do not see it.
- To look for an available update, open Settings > System > Software updates > System update, then follow the on-screen prompts. Google recommends accepting available Pixel updates. Google Pixel software update guidance
Compare the installed security patch level with Google’s bulletin and install available updates. Update availability and timing can vary by device and carrier, so if no update appears, check again later rather than assuming the phone is permanently unsupported. The relevant September bulletin identifies 2024-09-05 or later as addressing the issues in its scope.
Quick Recap
Best Value
- Google Pixel 7 is powered by Google Tensor G2; it’s faster, more efficient, and more secure, with the best photo and video quality yet on Pixel[1].Other camera description:Front,Rear.Bluetooth Version 5.2 with dual antennas for enhanced quality and connection.
- Unlocked Android 5G phone gives you the flexibility to change carriers and choose your own data plan[2]; works with Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Pixel’s Adaptive Battery can last over 24 hours; when Extreme Battery Saver is turned on, it can last up to 72 hours[3]
- The 6.3-inch Pixel 7 display is super sharp, with rich, vivid colors; it’s fast and responsive for smoother gaming, scrolling, and moving between apps[4]
- Google Pixel 7 has wide and ultrawide lenses with up to 8x Super Res Zoom[5]; and Cinematic Blur brings more drama to your videos
Rank #4
- Google Pixel 10 Pro is the ultimate Pixel experience, featuring advanced AI with Gemini, unbelievable camera quality, impeccable design in two sizes, and the next-gen Google Tensor G5 chip[1]
- Unlocked Android phone gives you the flexibility to change carriers and choose your own data plan[2]; it works - Google Fi, Verizon, T-Mobile, AT&T, and other major carriers
- Get a head start on syncing your data before it even arrives: After you purchase your new Pixel, look for an email that explains how to transfer your photos, videos, passwords, and more in just a few quick steps[11]
- Pixel’s pro camera system makes everything look amazing, even in low light; capture more of the scene with advanced Google AI models, and bring out incredible details with 100x Pro Res Zoom, stunning 50 MP images, and super steady videos in 8K[10]
- Pixel 10 Pro is built with durable aluminum and Corning Gorilla Glass Victus 2 for scratch and drop resistance; the 6.3-inch Super Actua display with 3,300-nit peak brightness is easy on the eyes, even in direct sunlight[3,13,18]
What Pixel owners should—and should not—do
- Do install official updates. This is the remedy supported by Google’s update guidance.
- Do not infer that your phone was compromised. The reporting describes a potential vulnerability and does not establish widespread exploitation or confirmed victims.
- Do not install a third-party cleanup tool for this issue. The cited sources do not recommend one; the documented response is Google’s software update.
- Do not publish or follow purported Showcase.apk activation instructions. iVerify withheld its investigated enablement method, and reproducing it is unnecessary for checking or installing the fix.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
