According to the professor, Google's shortcoming mostly comes from a relatively skin-deep routine that checks the SHA-1 value and install package name, not underlying code that's tougher to change.

ENGADGET: Android 4.2 App Verification Service tested, found no substitute for full anti-malware tools

Mr Sha, the company's best manager, who ran a rubber-parts factory in the mountains of Anhui province in central China, secretly set up a rival plant down the valley which he financed by siphoning money from the Asimco joint venture.

ECONOMIST: A disorderly heaven