This has nothing to do with Android, it is a known problem with D-Link routers:

http://www.breakitdownblog.com/d-link-dir-655-updated-firmware-hijacks-your-dns/

(or it is possibly the following problem, though less likely:)

http://www.darkreading.com/security/management/showArticle.jhtml?articleID=211201119

This is a case of people using their G1 over a WLAN connection, through a D-Link router with the above problem… nothing suspicious here, move along.

I find it rather laughable too that this post included the sentence “One of the main concerns of Android being open-source is the security.”

Firstly, do you really believe that this could be due to a bug due to some malicious user contributing some change upstream, which made it past the Android codebase maintainers, and somehow managed to get rolled-out by a T-Mobile OTA update, when (1) large numbers of open source contributions to the Android platform haven’t yet started flowing in (as opposed to apps that *run* on Android, of which there are many), (2) the Android devs are still scrambling to have the dust settle after the public release of both the platform and the G1, and are at this point highly unresponsive to bugs filed in the bug-tracker etc., because they have their hands full, and (3) T-Mobile has only rolled out two very minor updates to fix nagging bugs, and haven’t yet rolled out any large platform changes (and in fact there haven’t been many changes to the underlying platform since their release…).

Secondly, do you *really* believe that “security through obscurity” is a more robust form of security than open source? Ask any security company what they think about Microsoft’s approach.