Close
Page 1 of 2 12 LastLast
Results 1 to 10 of 20
Like Tree4Likes

Thread: Another security warning for Android powered devices

  1. #1
    Administrator dgstorm's Avatar
    Join Date
    Mar 2013
    Posts
    375
    Member #
    30
    Device
    none
    Liked
    321 times
    Mentioned
    0 Post(s)

    Another security warning for Android powered devices


    News is quickly spreading across the Internet of another potential security threat to Android devices.

    The BBC covered it by saying:

    "A "master key" that could give cyber-thieves unfettered access to almost any Android phone has been discovered by security research firm BlueBox.

    The bug could be exploited to let an attacker do what they want to a phone including stealing data, eavesdropping or using it to send junk messages.

    The loophole has been present in every version of the Android operating system released since 2009.

    Google said it currently had no comment to make on BlueBox's discovery."
    The Huffington Post, went on to report that...

    "The method demonstrated by Bluebox would let app developers modify an update to a legitimate app to look like a system file, which can then be used to take control of a phone. With the right signature disguising its real motives, the update could log passwords, credit card information, photos, emails - essentially anything on your mobile device.

    "The implications are huge," Bluebox explains on its website.

    "Depending on the type of application, a hacker can exploit the vulnerability for anything from data theft to creation of a mobile botnet."
    Meanwhile, Ars Technica have also covered the story...

    While it would be devastating if an attacker was able to get such a modified APK into the Google Play Store, or somehow use the technique to hijack the update mechanism of legitimate apps, there are probably safeguards already in place to prevent such attacks.

    "I imagine that Google would move quickly to add some logic to look for such attacks," Dan Wallach, a professor specializing in Android security in the computer science department of Rice University, told Ars. "Without that available to an attacker, this is likely to only be relevant for Android users who use third-party app stores (which have lots of other problems). This bug could also be valuable for users trying to 'root' their phones."

    Blue box researchers privately reported the vulnerability to Google in February.
    So, while this would appear to have the potential to be a problem, there is a lot of difference between "potential" and "actual".

    What is your take on this latest security story?

    As originally posted by janner43 @TransformerForums.com.

  2.  

  3. #2
    Super Moderator macuser's Avatar
    Join Date
    May 2013
    Posts
    648
    Member #
    267
    Device
    SGH-I337
    Liked
    189 times
    Mentioned
    12 Post(s)

  4. #3
    Senior Member Beer Goggles's Avatar
    Join Date
    May 2013
    Posts
    914
    Member #
    514
    Device
    SGH-I337
    Liked
    289 times
    Mentioned
    3 Post(s)
    Quote Originally Posted by macuser View Post
    Sure, but how long will the carriers take to actually get this fix to our phones?
    Galaxy Note 4, White, AT&T, 128 GB SD

  5. #4
    Super Moderator macuser's Avatar
    Join Date
    May 2013
    Posts
    648
    Member #
    267
    Device
    SGH-I337
    Liked
    189 times
    Mentioned
    12 Post(s)
    Quote Originally Posted by Beer Goggles View Post
    Sure, but how long will the carriers take to actually get this fix to our phones?
    i'm downloading a software update from at&t right now. its 357.38mb.
    Dsquared likes this.
    stock at&t s4.

  6. #5
    Senior Member Beer Goggles's Avatar
    Join Date
    May 2013
    Posts
    914
    Member #
    514
    Device
    SGH-I337
    Liked
    289 times
    Mentioned
    3 Post(s)
    Quote Originally Posted by macuser View Post
    i'm downloading a software update from at&t right now. its 357.38mb.
    From where?
    Dsquared likes this.
    Galaxy Note 4, White, AT&T, 128 GB SD

  7. #6
    Super Moderator macuser's Avatar
    Join Date
    May 2013
    Posts
    648
    Member #
    267
    Device
    SGH-I337
    Liked
    189 times
    Mentioned
    12 Post(s)
    it didnt tell me where it was from. maybe once its done downloading? the file is pretty big. my first update on this phone was only 21.39 mb

    edit: its an at&t software update found when you go into 'about device'. i dont think it told me where at&t got the software update from.
    Last edited by macuser; 07-09-2013 at 09:50 AM.
    stock at&t s4.

  8. #7
    Senior Member Beer Goggles's Avatar
    Join Date
    May 2013
    Posts
    914
    Member #
    514
    Device
    SGH-I337
    Liked
    289 times
    Mentioned
    3 Post(s)
    Quote Originally Posted by macuser View Post
    it didnt tell me where it was from. maybe once its done downloading? the file is pretty big. my first update on this phone was only 21.39 mb
    So you mean from the "Software Update" on the phone?

    I actually checked this last night.... nothing. I'll check again.
    Galaxy Note 4, White, AT&T, 128 GB SD

  9. #8
    Super Moderator macuser's Avatar
    Join Date
    May 2013
    Posts
    648
    Member #
    267
    Device
    SGH-I337
    Liked
    189 times
    Mentioned
    12 Post(s)
    Quote Originally Posted by Beer Goggles View Post
    So you mean from the "Software Update" on the phone?

    I actually checked this last night.... nothing. I'll check again.
    yea, its a software update. if it tells you to wait 24 hrs or something, just change the time on your phone to current time +24 hrs.

    edit: once i clicked install it restarted my phone and now its telling me that 'android is upgrading... optimizing app 131 of 147'
    Last edited by macuser; 07-09-2013 at 10:02 AM.
    stock at&t s4.

  10. #9
    Senior Member jspradling7's Avatar
    Join Date
    Mar 2013
    Location
    Texas
    Posts
    356
    Member #
    82
    Device
    SCH-I545
    Liked
    173 times
    Mentioned
    3 Post(s)
    No! mac, that was the virus you downloaded!

    Just kidding. : )
    macuser and Dsquared like this.
    Verizon - G2 Malladus - S4 Hyperdrive

  11. #10
    Super Moderator macuser's Avatar
    Join Date
    May 2013
    Posts
    648
    Member #
    267
    Device
    SGH-I337
    Liked
    189 times
    Mentioned
    12 Post(s)
    i really should have learned my lesson about updating immediately after ios6 broke my iphone4. i think this update let's me move apps to my sd card. there's a new tab in app manager. i'll play w it when I get home
    stock at&t s4.

Page 1 of 2 12 LastLast

Remove Ads

Links

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Similar Threads

  1. How to get Adobe Flash (for all your Android devices)
    By Leeshor in forum Galaxy S4 FAQ & Guides
    Replies: 11
    Last Post: 09-03-2013, 10:32 PM
  2. Gartner Projects 1 Billion Android Devices Will Ship in 2014
    By dgstorm in forum Galaxy S4 News & Site News
    Replies: 0
    Last Post: 06-24-2013, 03:37 PM
  3. Replies: 0
    Last Post: 05-07-2013, 06:13 PM
  4. Replies: 7
    Last Post: 04-13-2013, 03:26 PM
  5. Replies: 3
    Last Post: 03-28-2013, 01:50 PM

Search tags for this page

fix security warning droid

,
galaxy s4 security alert
,

galaxy s4 security warning

,
how do i fix a security warning on the galaxy s 1
,
s4 security alert
,
s4 security warning icon
,

security warning android

,
security warning android phone
,
security warning on samsung galaxy
,
what does an lagitimit security warnig look like in the galaxy 2
Click on a term to search our site for related topics.