Android bug fear in 900 million phones

BBC ^ | August 8, 2016 | By Mark Ward

[Swordmaker]

The flaws affect devices containing Qualcomm chips

Serious security flaws that could give attackers complete access to a phone's data have been found in software used on tens of millions of Android devices.

The bugs were uncovered by Checkpoint researchers looking at software running on chipsets made by US firm Qualcomm.

Qualcomm processors are found in about 900 million Android phones, the company said.

However, there is no evidence of the vulnerabilities currently being used in attacks by cyberthieves.

"I'm pretty sure you will see these vulnerabilities being used in the next three to four months," said Michael Shaulov, head of mobility product management at Checkpoint.

"It's always a race as to who finds the bug first, whether it's the good guys or the bad."

Affected devices included:

• BlackBerry Priv and Dtek50
• Blackphone 1 and Blackphone 2
• Google Nexus 5X, Nexus 6 and Nexus 6P
• HTC One, HTC M9 and HTC 10
• LG G4, LG G5, and LG V10
• New Moto X by Motorola
• OnePlus One, OnePlus 2 and OnePlus 3
• Samsung Galaxy S7 and Samsung S7 Edge
• Sony Xperia Z Ultra

[Swordmaker]

Ping for your attention and lists.

[Swordmaker]

Thanks to Drago for the heads up.

[Swordmaker]

"People should call whoever sold them their phone, their operator or the manufacturer, and beg them for the patches," said Mr Shaulov.

[TigersEye]

btrl

[BullDog108]

Checkpoint has created a free app called QuadRooter Scanner that can be used to check if a phone is vulnerable to any of the bugs, by looking to see if the patches for them have been downloaded and installed.

[CommieCutter]

bm

[Terry L Smith]

Thanks for the info.

Now, how about the cellphone company give us the patch to gedt rid of all those ‘apps’ that come with the phone that we don’t use, and they tell us there is nothing they can do about it???

Could this ‘demand the patch’ also be used as a backdoor entrance of ‘apps’ that the government wants to put on your phone, and not tell you about??

I do not keep records on the phone, nor ‘save’ passwords in my laziness, nor keep any kind of documents or photos. it is a phone, maybe fancier, maybe expensive and foisted upon me because all the snowflakes use them, but it is just a phone.

[dayglored]

> "...beg them for the patches..."

Okay, so this is a software issue associated with the Qualcomm processor used in Android devices.

Now we get to see how rapidly Android patches get disseminated through the network of manufacturers and operators.

[Scythian_Reborn]

"I'm pretty sure you will see these vulnerabilities being used in the next three to four months," said Michael Shaulov, especially since we have announced it now, have fun ...

[libertylover]

However, there is no evidence of the vulnerabilities currently being used in attacks by cyberthieves.

Right. Like there's no evidence anyone hacked Mrs. Bill Clinton's private email server.

[ThunderSleeps]

A potential security threat - ANDROID PING!
Android Ping! If you want on or off the Android Ping List, Freepmail me.

---

Sadly the tone of the article is a little sensational, borderline shrill and light on details. The good news is, the chip maker and major phone companies have had the patch for a while. My Galaxy S5 isn't explicitly listed as one affected by this, though it does have a Qualcomm chipset. AT&T has sent out updates recently for it. There's a better article on this at ZDNet, more info, less panic.

Yet another example of why I keep nothing significant on my phone. No credit cards, bank info, nothing. The services such as Google that it connects to - I use different passwords for there than anything important. (like banking)

[dennisw]

Same ol Apple FUD straight out of faom party central in Cupertino

[Organic Panic]

YET people will still download Pokeman and give all access to people they don’t know for a game.

[Swordmaker]

Same ol Apple FUD straight out of from party central in Cupertino

Baron Dennis Won Munchausen would have us believe that Apple owns the BBC and ZDNet. Lying again and getting caught at it does you no good, DennisW. Your Apple Delusions and your fear that someone will figure out that you are in the closet and "out you" cause you to be militantly anti-Gay and post these diatribes against Apple because YOU think it will protect you. LOL!

[CodeToad]

Android IS a bug!

I have never seen an OS cobbled together so badly as Android.

[dennisw]

No need to out anyone at Apple. They are all out. Out and about running amuck and af**k at their Cupertino foam parties. The only Apple workers who are not out and gay are their Chinese workers. They are too busy trying to off themselves.

[dennisw]

Apple FUD is same as Hillary FUD and Tim KOOK holds Hillary fundraisers. How KOOKY is that?

[Swordmaker]

DennisW? You must be off your meds again, or you need a huge increase in the dosage. Lies all over the place. You just smeared 90,000 Apple employees. Feel better now?

[dennisw]

You know your personal mother ship in Cupertino foam boys are just a bunch of homos and a distribution arm of CHINA INC.