1. Are you ready for the Galaxy S20? Here is everything we know so far!

URGENT: per London Financial Times: "Android smartphones face WiFi data breach threat"

Discussion in 'Android Devices' started by SGS2, May 19, 2011.

  1. SGS2

    SGS2 Well-Known Member
    Thread Starter

    :mad:

    if you want to believe google, go ahead. if you don't, like i don't, read on. I think the financial times of london may be more honest.

    LINK: FT.com / Technology - Android smartphones face data breach threat

    "Android smartphones face WiFi data breach threat"
    By Tim Bradshaw, Digital Media Correspondent
    The Financial Times Limited 2011
    Published: May 18 2011 13:11 | Last updated: May 18 2011 13:11

    Owners of Android smartphones are being warned to avoid public WiFi networks after researchers found a security flaw that could affect the vast majority of devices based on Google’s software.

    A trio of researchers at Ulm University in Germany found that it was “quite easy” for hackers to intercept data from Google’s photo-sharing, calendar and contacts applications, as well as potentially other Google services such as Gmail, using a flaw that affects 99 per cent of all Android devices.

    The revelation will again put the spotlight on Google’s approach to security with its mobile operating system, which is the most popular software for smartphones in the world.

    The security flaw has been fixed in Android’s 2.3.4 version of its operating softwares and beyond.

    In March, Google was forced to remove more than 50 rogue applications, which could have stolen data or sent costly messages, from tens of thousands of Android devices.

    The attack works when unsecured wireless access points that imitate public WiFi hot spots that the phone has accessed before – such as a coffee shop chain – capture an authentication token.

    That token can then be used by attackers to access and modify personal data in Picasa, Google’s photo site, Calendar and Contacts. Business customers using Google apps on Android are not affected by the weakness because all traffic is encrypted by default.

    “The implications of this vulnerability reach from disclosure to loss of personal information for the Calendar data,” said the Ulm researchers in a posting on their website.

    “Beyond the mere stealing of such information, an adversary could perform subtle changes without the user noticing. For example, an adversary could change the stored e-mail address of the victim’s boss or business partners hoping to receive sensitive or confidential material pertaining to their business.”

    Google said of the flaw: “We’re aware of this issue, have already fixed it for calendar and contacts in the latest versions of Android, and we’re working on fixing it in Picasa.”

    However, according to the researchers, the flaw still affects devices running older versions of Android, which make up 99.7 per cent of Google smartphones in use today.

    “The latest research just shows that Android users need to be even more careful with their phones than they are with their PCs,” said Omri Sigelman, vice-president of AVG Mobilation, a provider of security software for Android.

    “All platforms are vulnerable to hackers, particularly at the beginning of their lives, but the openness and popularity of Android means that it is especially at risk. Sadly, many operators don’t provide the necessary updates, leaving their users vulnerable to critical flaws like this one.”

    The Ulm researchers recommended that Android users turn off “automatic synchronisation” in the settings menu when connecting with open WiFi networks and let their devices “forget” wireless networks they have used previously.

    “The best protection at the moment is to avoid open WiFi networks at all when using affected apps,” they wrote.

    LINK: FT.com / Technology - Android smartphones face data breach threat

    The Financial Times Limited 2011.
     



    1. Download the Forums for Android™ app!


      Download

       

Samsung Captivate Forum

The Samsung Captivate release date was July 2010. Features and Specs include a 4.0" inch screen, 5MP camera, 512GB RAM, Hummingbird processor, and 1500mAh battery.

July 2010
Release Date
0
Reviews
Loading...
Similar Threads - URGENT per London
  1. Shubh89
    Replies:
    2
    Views:
    625
  2. Nitsuga
    Replies:
    17
    Views:
    1,910
  3. pasinduvibahaliyanage
    Replies:
    12
    Views:
    779
  4. saad aziz
    Replies:
    3
    Views:
    687
  5. MoodyBlues
    Replies:
    16
    Views:
    950
  6. giannis97
    Replies:
    17
    Views:
    1,178
  7. Fast2020
    Replies:
    2
    Views:
    498
  8. TheHornet
    Replies:
    8
    Views:
    617
  9. MoodyBlues
    Replies:
    7
    Views:
    545
  10. vikram001
    Replies:
    15
    Views:
    1,249

Share This Page

Loading...