With Stage Fright bug we now have monthly security update on Android. Android N is soon going to take extra security measures. The new OS will ensure that the media server and its tasks will be divided into several components.
Stage Fright was a dangerous vulnerability in Android which attackers from outside could give control of a smartphone or tablet. This leak has ensured that we now have monthly security updates from Google and other manufacturers. Android N wants to go further in terms of security. For example, the media server within the platform have access to a lot of parts: the camera, the microphone, graphics, phone, Bluetooth, internet and more. This section is located in a sandbox, a lot access and is difficult to secure.
A root cause analysis Showed That the libstagefright bugs Primarily occurred in code responsible for parsing file formats and media codecs. This is not surprising parsing complex file formats and codecs while trying to Optimize for speed is fast, and the large number of edge cases makes Such code susceptible to both accidental and malicious malformed inputs.
to avoid that we get a second Stage Fright, Google has ensured that Android N media server is divided into several parts and components, each with its own permissions and access. For example, the camera server really only have access to the camera and not the microphone. If anyone then have evil sense, then initially only attacked specific components. It is not that once you complete smartphone or tablet at risk if a hacker actively proceed.
No comments:
Post a Comment