unboiled.info
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
TheAnonymouseJoker@lemmy.ml to Privacy@lemmy.ml · 6 years ago

Snapdragon chip flaws put 1 billion Android phones at risk of data theft [Ars Technica]

arstechnica.com

external-link
message-square
10
link
fedilink
  • cross-posted to:
  • privatelife@lemmy.ml
-2
external-link

Snapdragon chip flaws put 1 billion Android phones at risk of data theft [Ars Technica]

arstechnica.com

TheAnonymouseJoker@lemmy.ml to Privacy@lemmy.ml · 6 years ago
message-square
10
link
fedilink
  • cross-posted to:
  • privatelife@lemmy.ml
Snapdragon chip flaws put >1 billion Android phones at risk of data theft
arstechnica.com
external-link
There’s no word on when Google and phone makers will incorporate fix from Qualcomm.
alert-triangle
You must log in or register to comment.
  • forgotmylastusername@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    6 years ago

    I vaguely remember some snapdragon exploit a couple years ago that was supposed render a whole bunch of devices unlockable but as far as I can tell nothing ever came of that.

    • TheAnonymouseJoker@lemmy.mlOP
      link
      fedilink
      arrow-up
      0
      arrow-down
      1
      ·
      6 years ago

      This is entirely different though. Any media that DSP can process is capable of exploiting the whole phone, so the exploit is rather easy.

  • brombek@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    6 years ago

    “3 billion” devices with multiple vulnerabilities that sound like RCE via things like video playback with “fixing them requires a long chain of communication between many vendors, manufacturers and resellers” sounds like a total disaster to me. Many (most?) Android phones in use will never see an update!

    • TheAnonymouseJoker@lemmy.mlOP
      link
      fedilink
      arrow-up
      0
      arrow-down
      1
      ·
      6 years ago

      The only way is to buy a phone without Qualcomm processors, that leaves the option of poor Exynos, or the much better Mediatek and Kirin chips.

      • brombek@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        6 years ago

        Yeah, until someone looks at their “security” :D

        • TheAnonymouseJoker@lemmy.mlOP
          link
          fedilink
          arrow-up
          0
          arrow-down
          1
          ·
          6 years ago

          Well, these Black Hat guys do look at the security of non Qualcomm devices, it seems.

          https://github.com/secmob/TiYunZong-An-Exploit-Chain-to-Remotely-Root-Modern-Android-Devices/raw/master/us-20-Gong-TiYunZong-An-Exploit-Chain-to-Remotely-Root-Modern-Android-Devices.pdf

          Go to page 5 of PDF

  • xvf@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    6 years ago

    vulnerable to hacks that can turn them into spying tools

    Aah yes, gotta love muricans crying because tiktok is chinese “spyware” and should be banned, while qualcomm just makes a “oopsie woopsie” for 3 letter agencies with billion of devices around the world.

    Fuck, I can’t even disable googol play services, it’s constantly running in the background

    • TheAnonymouseJoker@lemmy.mlOP
      link
      fedilink
      arrow-up
      0
      arrow-down
      1
      ·
      6 years ago

      Use my Smartphone Hardening non root Guide 2.0, the few starting steps should be enough to disable Google Play Malware.

      • xvf@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        6 years ago

        Thanks.

        I noticed that un Settings -> Security -> Device Admin Apps Google Play Services was enabled, by disableing it I was able to atleast Disable the app.

        • TheAnonymouseJoker@lemmy.mlOP
          link
          fedilink
          arrow-up
          0
          arrow-down
          1
          ·
          6 years ago

          You should disable the package itself via ADB so it does not re enable itself, like it does like a spyware.

Privacy@lemmy.ml

privacy@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.ml

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

  • Lemmy.ml libre_culture
  • Lemmy.ml privatelife
  • Lemmy.ml DeGoogle
  • Lemmy.ca privacy

much thanks to @gary_host_laptop for the logo design :)

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 60 users / day
  • 60 users / week
  • 94 users / month
  • 1.97K users / 6 months
  • 1 local subscriber
  • 51.6K subscribers
  • 3.87K Posts
  • 72.6K Comments
  • Modlog
  • mods:
  • k_o_t@lemmy.ml
  • tmpod@lemmy.pt
  • Yayannick@lemmy.ml
  • ranok@sopuli.xyz
  • UI: unknown version
  • BE: 0.19.20
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org