IDNetters Forums

Technical News & Discussion => Mobile Devices News & Discussion => Topic started by: Glenn on Nov 06, 2010, 07:47:51

Title: Android security exploit
Post by: Glenn on Nov 06, 2010, 07:47:51
QuoteA security researcher has released proof-of-concept code that exploits a vulnerability in most versions of Google's Android operating system for smartphones.

M.J. Keith of Alert Logic said he released the attack code to expose what he characterized as inadequate patching practices for the open-source mobile platform. Rather than find the underlying bug himself, he searched through a list of documented security flaws for Apple's Safari, which relies on the same Webkit browser engine used in Android. In short order, he had an attack that exploits about two-thirds of the handsets that rely on the OS.

http://www.theregister.co.uk/2010/11/06/android_attack_code/
Title: Re: Android security exploit
Post by: Rik on Nov 06, 2010, 11:04:53
Is nothing safe anymore.  :shake:
Title: Re: Android security exploit
Post by: Simon on Nov 06, 2010, 11:55:25
I don't think Android ever was.  :(
Title: Re: Android security exploit
Post by: Rik on Nov 06, 2010, 12:07:10
Where's that carrier pigeon.
Title: Re: Android security exploit
Post by: Simon on Nov 06, 2010, 12:11:55
I just ran over it.
Title: Re: Android security exploit
Post by: Glenn on Nov 06, 2010, 12:15:14
Quote from: Simon on Nov 06, 2010, 11:55:25
I don't think Android ever was.  :(
Going by the way he found the holes, Safari isn't either.
Title: Re: Android security exploit
Post by: Rik on Nov 06, 2010, 12:16:37
Quote from: Simon on Nov 06, 2010, 12:11:55
I just ran over it.

Shame on you, I was saving him for lunch. ;D
Title: Re: Android security exploit
Post by: Simon on Nov 06, 2010, 12:18:06
Quote from: Glenn on Nov 06, 2010, 12:15:14
Going by the way he found the holes, Safari isn't either.

It bloody is as far as trying to hack it to change the font size on the iPhone!   ;D
Title: Re: Android security exploit
Post by: Rik on Nov 06, 2010, 12:34:37
 ;D
Title: Re: Android security exploit
Post by: Glenn on Nov 06, 2010, 12:39:41
Quote from: Simon on Nov 06, 2010, 12:18:06
It bloody is as far as trying to hack it to change the font size on the iPhone!   ;D

Email the guy and ask him to hack it for you.  ;)
Title: Re: Android security exploit
Post by: Simon on Nov 06, 2010, 12:50:20
Who, Steve Jobs?
Title: Re: Android security exploit
Post by: Glenn on Nov 06, 2010, 12:51:14
The chap in the article
Title: Re: Android security exploit
Post by: Simon on Nov 06, 2010, 13:03:16
Ah...  ;D
Title: Re: Android security exploit
Post by: Gary on Nov 06, 2010, 14:06:49
Quote from: Glenn on Nov 06, 2010, 12:15:14
Going by the way he found the holes, Safari isn't either.
Depends how Safari interacts with OSX compared with Webkit on Android I guess, OS X 10.6.5 is coming soon so there may be a new update to Safari anyway, but all smartphones will be targets, Android will have Flash as the most vulnerable I imagine, OSX has its own, Windows has had a IE hole for 600 days now! Nothing is secure, unless you nail it down  ;)
Title: Re: Android security exploit
Post by: Rik on Nov 06, 2010, 15:49:11
And then, if it's a water container, it just leaks. ;D
Title: Re: Android security exploit
Post by: Gary on Nov 06, 2010, 22:48:25
Quote from: Rik on Nov 06, 2010, 15:49:11
And then, if it's a water container, it just leaks. ;D
;D