Who honestly didn't see that one coming?
That the article is wrong about the attack vector: sure. But still: that's a botnet that may already be in command of one million zombified smartphones. That is quite a feat.
And you know what? If when the ability to install app came out people had been criticizing it here, saying it was a major security disaster waiting to happen and that millions of smartphones would become part of a botnet, there would have been a backlash here.
People would have downmodded "naysayers" like crazy, lamenting that HN is too negative, that everytime the security topic comes out people thinking they're smarter than other open their big mouth, etc.
So I'll say it very clearly: this is just the beginning. You'll only see more and more crazy stuff like that.
Just as for years and years we've heard about desktop and laptop computers being part of gigantic botnets, we'll now hear about smartphone botnets.