The security researcher community has flagged a serious issue in that Android devices are shipping out to customers with their debug port open to remote connections. The vulnerability was first spotted