Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Friday June 19 2015, @09:02PM   Printer-friendly
from the don't-bother-calling-me-I-can-already-hear-you dept.

As many as 600 million Samsung phones may be vulnerable to attacks that allow hackers to surreptitiously monitor the camera and microphone, read incoming and outgoing text messages, and install malicious apps, a security researcher said.

The vulnerability is in the update mechanism for a Samsung-customized version of SwiftKey, available on the Samsung Galaxy S6, S5, and several other Galaxy models. When downloading updates, the Samsung devices don't encrypt the executable file, making it possible for attackers in a position to modify upstream traffic—such as those on the same Wi-Fi network—to replace the legitimate file with a malicious payload. The exploit was demonstrated Tuesday at the Blackhat security conference in London by Ryan Welton, a researcher with security firm NowSecure. A video of his exploit is here.

Thus will hackers be treated to front row seats to 600 million pockets full of lint.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1, Flamebait) by Tork on Friday June 19 2015, @11:46PM

    by Tork (3914) Subscriber Badge on Friday June 19 2015, @11:46PM (#198494)
    I'm really glad I don't own an XBOX One, but I don't visit their forums and tell them about it.
    --
    🏳️‍🌈 Proud Ally 🏳️‍🌈
    Starting Score:    1  point
    Moderation   -1  
       Flamebait=1, Total=1
    Extra 'Flamebait' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   1  
  • (Score: 1) by anubi on Saturday June 20 2015, @01:49AM

    by anubi (2828) on Saturday June 20 2015, @01:49AM (#198515) Journal

    Neither do I. It seemed like a useless piece of hardware for me. Seemed like having a telemarketer come into my home and live with me. I see it as a platform only good for encouraging me to buy a whole lot of DRM crap where each piece I buy will have yet more EULA crap for me to agree to, despite the fact I already paid money for the proprietary platform that runs it.

    I have dozens of Arduinos, though.

    --
    "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
    • (Score: 2) by Nerdfest on Saturday June 20 2015, @02:04AM

      by Nerdfest (80) on Saturday June 20 2015, @02:04AM (#198520)

      You can run Android phones on almost completely open software, through the use of FDroid, custom kernels, and a variety of other sources. Not using a smart phone at all is a bit of an over-reaction; they can be extremely useful.

      • (Score: 1) by tftp on Saturday June 20 2015, @02:42AM

        by tftp (806) on Saturday June 20 2015, @02:42AM (#198529) Homepage

        Not using a smart phone at all is a bit of an over-reaction; they can be extremely useful.

        It all depends on one's lifestyle. If you leave home at 8am and return by 10pm, never stopping in any single place for more than 30 minutes, then perhaps you need a mobile computer. If you spend on average 20 minutes per day in a car, and the remaining time in front of a computer at work or at home, then it's not all that important. I belong to the latter group; I have too many computers around me.

      • (Score: 1) by anubi on Saturday June 20 2015, @07:24AM

        by anubi (2828) on Saturday June 20 2015, @07:24AM (#198570) Journal

        I should have been a little more clear I was responding to the post about the XBox. To me, the XBox does only one thing... insist I buy more proprietary software that runs on it, and having to agree to whatever the proprietary software demands or I lose the use of my investment. No thanks.

        --
        "Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
    • (Score: 2) by mendax on Saturday June 20 2015, @03:45AM

      by mendax (2840) on Saturday June 20 2015, @03:45AM (#198536)

      I went to see the doctor yesterday afternoon to have my head and neck checked out after getting knocked off my motorcycle by an idiot who rear-ended me on Tuesday. He was surprised when I told him I didn't have a smart phone, like I was some space alien from Mars. Well, maybe I acted like a Martian because of the mild concussion he diagnosed. Not surprisingly, while he was giving me the handouts for how to deal with concussion and whiplash his iPhone rang.

      --
      It's really quite a simple choice: Life, Death, or Los Angeles.
      • (Score: 2) by Nerdfest on Saturday June 20 2015, @12:38PM

        by Nerdfest (80) on Saturday June 20 2015, @12:38PM (#198640)

        Hope you're okay dude. That sucks.

        • (Score: 2) by mendax on Sunday June 21 2015, @04:57AM

          by mendax (2840) on Sunday June 21 2015, @04:57AM (#198948)

          Well, I'm alive enough to read postings here, and type them in. I guess that's something. But no work! Woohoo!

          --
          It's really quite a simple choice: Life, Death, or Los Angeles.