Replicant OS Developers Find Backdoor In Samsung Galaxy Devices

Posted by Soulskill on Wednesday March 12, 2014 @10:22AM from the caught-out dept.

An anonymous reader writes "Developers of the Free Software Foundation-endorsed Replicant OS have uncovered a backdoor through Android on Samsung Galaxy devices and the Nexus S. The research indicates the proprietary Android versions have a blob handling communication with the modem using Samsung's IPC protocol and in turn there's a set of commands that allow the modem to do remote I/O operations on the phone's storage. Replicant's open-source version of Android does away with the Samsung library to fend off the potential backdoor issue."

1 of 126 comments (clear)

Min score:

Reason:

Sort:

Re:OTA updates by dos1 · 2014-03-12 10:39 · Score: 5, Interesting

This is part of their undocumented protocol for communication with the modem. Modem can ask to read or write some file on disk using IPC_RFS_READ_FILE, IPC_RFS_WRITE_FILE, IPC_RFS_LSEEK_FILE, IPC_RFS_CLOSE_FILE, etc. messages and the library will happily do that for the modem. It's hardly unintended.