Android is vulnerable because a new vulnerability in the Linux operating system, which is used as the basis for Android. What does this mean and what does it mean for you?
Android users this week were shocked by news of a new vulnerability that makes vulnerable many Android devices. It is a vulnerability in the Linux code which can cause a lot of trouble on your device. What could really going on? We put the record straight.
1. What is going on?
The vulnerability in Android is caused by a vulnerability in Linux. The error has been around since 2012, but has only now been discovered by the company Perception Point. Since Android is based on Linux, the operating system is also vulnerable. The leak can give users full root access to systems. Linux systems will soon receive an update to fix the leak, but Android devices does this slower making smartphones and tablets more open to attacks from outside.
2. What can it be done?
If wish to make a malicious abuse of the vulnerability, he must first gain access to your system. This is not done lightly, but can be as easy as the installation of an incorrect application. If someone using an app root access to your phone, for example, there may be private information such as passwords stolen, malicious programs are installed, files are deleted and much more.
The previously discovered Stagefright- leak can also be misused. With Stage Fright is possible for others to remotely install apps and then access it via that app to your system. Meanwhile, still not all devices have been updated to close the Stage Fright leak.
3. Which devices are vulnerable?
According Perception Point is any system with Android 4.4 KitKat or more vulnerable, which means according to the company on 66 percent of Android users. Newer devices are less vulnerable due to better security in both software and hardware. Yet in theory any Android device running Android 4.4 or higher here can suffer from.
Google’s Adrian Ludwig differentiates the claim Perception Point by saying that Nexus devices are not affected, and other devices with Android 5.0+ no risk. In some cases, devices with Android 4.4 or older versions vulnerable, but most do not run on the flat Linux version.
4. Should I be worried?
Perception Point suggests that there is no case of abuse is learned in the wild. It was also found in tests which make abuse of the leak is not so easy. For example, newer CPUs from Intel components that make the evil ones more difficult. But even though there is still nothing done with the leak and it’s hard to do something about it, that does not mean the danger is not real. Google has released a patch made available on January 21, but it is unclear what manufacturers actually make the effort to provide their older devices hereof. The Nexus devices from Google are indeed patched anyway.
5. What can you do about it?
There are several ways you can defend yourself against this vulnerability. Care in Settings & gt; About phone & gt; Software update “that you have the latest Android version. A patch for Nexus devices is already made available, but will probably do manufacturers like Samsung and LG will take longer to stop the leak. It is not for nothing that the Consumers’ Association recently Samsung to court dragged to update its policy. Older devices have no updates remain vulnerable.
The most important thing you can do is continue to pay attention to what apps you install. Do not click untrusted links or download any apps outside of Google Play. Attackers can masquerading as an app you know and example, inject malicious code. Looking for a new app? Always look in the Play Store and not on any other website. Choose the Play Store app with the most downloads and the highest rating for the safest option. Check out more tips on Android security.
No comments:
Post a Comment