Slashdot Mirror
Huge Security Hole In Recent Samsung Devices
An anonymous reader writes "A huge security hole has been discovered in recent Samsung devices including phones like the Galaxy S2 and S3. It is possible for every user to obtain root due to a custom faulty memory device created by Samsung." The problem affects phones with the Exynos System-on-Chip.
Does that mean I can finally root and upgrade my crappy Galaxy S1 with Android 2.1 yet? Fucking AT&T
http://saveie6.com/
Installing any app exposes you - even without explicit permissions apps can do bad things. Let's put this into some perspective, shall we? It's just one more exposure. The real problem is in actually being able to tell what -any- app is currently doing on your device. And that kind of monitoring is no-where in sight.
Sent from my ENIAC
This only effects the international S3, the US LTE version uses a Snapdragon CPU.
I consider someone *else* running as root a security hole. As long as you need physical access, this is a feature. A phone that will not let you install what you want is broken.
there just was niggerbutt on tv in the Cowboys game
LUALLZ DENG!
Instead of considering that "security hole" a "security hole", consider it as a "feature".
Just root the damn thing and unlock it !!
Muchas Gracias, Señor Edward Snowden !
Are you sure it wasn't a faulty custom memory device instead?
systemd is Roko's Basilisk.
The Google ad on the page for TFA states "Root Any Android Device In 1 Touch! Easy To Use Automatic Root Software". Talk about context-sensitive ads!!
I'm sick of hearing of lumia propaganda from that dieing horse of a company. The 920 is a 185 gram, 10mm tank of poo. It's for people with Stockholme syndrome who try to convince versatile people with compact phones to be stupid like them and walk around with holes in their pants..plus it only runs crappows 8. "Really" smart people have a hTC One S, an iphone 4s, or a nexus 4. The Galaxy sII is also tolerable. Best of the new breed - nexus 4 on cost.
Nokia will always regret not going with android I think.
Every user can easily root their device? Sounds like a feature to me.
Strangely, TFA makes no mention of an app built to actually use this exploit to install SuperSU (root access management app): http://forum.xda-developers.com/showthread.php?t=2050297 - i.e. what most users consider getting rooted.
Of course, this exploit can be used by any app, and a user can use the core exploit manually to install SuperSU (or Superuser) to let Play apps that need root (but don't contain this exploit ;)), but the linked method does all the work for you already.
Form of: denial and accusation of user error.
Why did you link to that horrible advertisement of a webpage? Google even gives the Wikipedia page as the first result...
And there are those who wonder why the #1 seller on the market is the iPhone. Perhaps, it is because Apple takes security seriously?
iOS has yet to have a single malware app in its history, other than stuff befalling jailbroken devices. This is a quite sterling record for any popular platform in the computing industry.
Tim Cook needs to sue them for that one.
How is this even remotely a security hole? Much less a "Huge" one? Owners can gain root access to their own device? God forbid!
Sounds like Samsung is ripping off Sony security.
Quick! Get Kaz Hirai on the phone!
Non impediti ratione cogitationus.
Dear slashdot,
If a software failure allows an user to gain control of his own device, 'a.k.a." Jail breaking, it is not a "security hole" - it is a freaking FEATURE!
T.F.A. an the headline puts it as if it was a bad thing.
-><- no
I was considering purchase of a Galaxy S2 in the next 12 hours. Now I can't justify spending the money on it knowing it has a gaping security hole. Is there a possibility this could affect the similarly spec'd Samsung Galaxy S Advance? It has a STE U8500 chipset so if it's truly only an Exynos chipset vulnerability it should be fine, but this leaves me wondering about Samsung. Perhaps more telling would be waiting to see what, if anything, Samsung does about this.
www.gaiageek.com
Apple's is chiefly based around how good their gatekeeper is.
No, in fact Apple's security does not rely on that at all. The system is designed to prevent any application, not just Apple vetted ones, from harming the system - otherwise Apple would not allow independent Enterprise deployment as they do since Apple does not review those applications.
Apple's system is deeper than Androids because instead of having one up-front out of context question about the permissions the app should support, instead iOS users are asked if the system should allow access to a protected resource at the time the application (and thus the user) needs it. You aren't asked up front if an app can access contacts, you get asked that when you reach a portion of the app that would like to look into contacts and thus you can decide if you really want it to see contacts for that reason, or back out and not let the app see them.
iOS devices ALSO do not allow installation of apps to external media which was already a monstrous security hole for Android devices; any SD card inserted that was formatted FAT32 could have any portion read and written to by any app.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
(claim that BSaD is a and what supplies more grandiose errors. Future I The mobo blew according tothis And she ran conducted at MIT A dead man walking.
The page describing the exploit is from september. Is that a news?
conversation 4nd
Use this APK to get root and install superSU
http://forum.xda-developers.com/showthread.php?t=2050297
Now, whenever any app asks for root permissions, you will be asked whether you want to give root. This is how it used to work in my older rooted devices.
My Aurora : http://www.youtube.com/watch?v=o91ZsGwJYyg
FB : https://www.facebook.com/TanveersPhotography
Commenting to remove an accidental mod, a sad mistake that caused many tears.
Wow, Samsung.
Does that mean the HRS Hotels app can be deleted more easily?
Naah, they obviously would have dealt with preventing that more thoroughly as marketing depts. with deep pockets were involved.
I hadn't the slightest objection to his spending his time planning massacres for the bourgeoisie... (P.G. Wodehouse)
That made my day. I had to go through all my old apps and disable automatic updates (I disabled it by default for the new ones months ago) but after rooting the phone I finally was able to remove the fr****ng Voice Commands app with the instructions here.
You can use supercurio's non-root fix. Note that it does temporarily stop the front camera on the Galaxy S3 from working.
There is no issue, everything is fine.
Sent from my Samsung Galaxy S3
http://www.awfullybigmoustache.com
Charlie Miller would like to disagree with you with his Command and Control trojan stock ticker app.
Meanwhile a thousand equivalent apps sit on the Android app store untouched. MORE secure does not mean 100% secure.
After all, even with his stock ticker app what could actually be done via remote commands is still limited to what the sandbox can do. That is defense in depth.
The fact remains iOS is MORE secure than Android.
Deeper than Androids? Is that why there is a jailbreak vulnerability for each and every device it has
Tethered jailbreaks that require physical access to perform are wholly different than Android being mostly useless without rooting it.
The target audience sees a popup and it's an automatic "yes"
It is on Android because you are agreeing to a million things. On iOS it's far less automatic because you are only thinking about one question, and if it doesn't make any sense you just kill the app.
Oh wait, you're advocating for a user experience that involves popups
Yes, at the right time and asked only once. Because that is what leads to better security, not only EVER asking once for a million permissions, or asking every single time (vista) which DOES lead to users simply agreeing.
Any app placed on the SD care is encrypted by the OS.
Yes, encrypted by the device all other applications are running on. You must be REALLY stupid to think everything is encrypted (it is not) or that it's not possible to decrypt and inject (the system does after all).
Basically I'd say it speaks volumes to the confidence of your arguments that you posted AC instead of as a user. Tired of being provably wrong over a long time, how pathetic.
"There is more worth loving than we have strength to love." - Brian Jay Stanley