Ars Technica reports that a weakness in Java Cryptography Architecture leaves Android users exposed, which Google has confirmed.