Skip to main content

All Android versions affected by this vulnerability, except Pie

Vulnerability

A recently published Nightwatch Cybersecurity analysis comes with an alert. All Android versions are affected by this vulnerability, including forks, except for Android Pie. Google fixed the issue at hand with Android 9 but plans no fixes for earlier versions of the OS. CVE-2018-9489 is the tracking code for the issue described.
Apparently, applications can circumvent permission checks and existing mitigations by listening to system broadcasts. These system broadcasts by Android OS, says the report, “expose information about the user’s device to all applications running on the device. This includes the WiFi network name, BSSID, local IP addresses, DNS server information and the MAC address“. A rogue app gaining access to this information can use it to “identify and track any Android device”, and even geolocate it. Accessing other network information could also allow malicious apps to “explore and attack the local WiFi network”.
As mentioned, Google is aware of the problem, and has issued a fix. This fix will only be available, sadly, to those running the latest version of Android: Pie. Google “does not plan to fix older versions”, says Nightwatch Cybersecurity.
Source: pocketnow

Comments

Popular posts from this blog

Learn to code for iOS 12 and join this giveaway to win the new iPhone XS

The hype surroundin g the hotly-anticipated iOS 12 has simmered down a bit, but only because it's finally been r eleased and people are too busy  tinkering with their iPhones to tweet. (We're guessing.) Unlike the previous iOS updates, tech critics and casual users are  touting iOS 12 as the fastest yet , and get this — even on older phones. Yup, after what seemed like an eternity, it looks to be that the iPhone slowdown fiasco is finally over. This only means that developers can use this moment as an opportunity to ramp up on app development and take advantage of the enhanced speed and feature upgrades of the new operating system. If you want to get in on the frenzy, these training bundles will help you get familiarized with iOS 12 update so you can start writing your own apps: Led by top-rated instructor Rob Percival, this 167-lecture course will guide you through the essentials like Swift 4 and Xcode 10 and help you develop practical skills by letting you build

Google Gboard test makes finding a relevant GIF even faster

The whole point of  Google's Gboard  is to help you find relevant items without leaving your phone's keyboard, but how do you know there's something useful available while you're casually typing away? You might get a clue soon enough.  Android Police  has learned that Google is  testing  a smarter Gboard search feature that changes the distinctive "G" button when there's a relevant GIF, info or sticker search for what you're typing. Punch in "works for me" and you may see a sticker icon, while typing a famous name may show a magnifying glass to indicate that there's an info card. Tap the button and you'll search for the material without having to retype a thing. Google appears to have been testing this Gboard update since July and might not roll out the feature soon (or at all). However, the test recently widened to include more users. If Google likes the feature, it might just be a matter of time before the keyboard

Samsung Virtual Reality Headset Gear VR for Galaxy S 6 Hits Shelves

SAMSUNG Desperate to have virtual reality at home, but don't want to wait until Oculus releases its headset next year ? You're in luck, kind of: available starting today is Samsung's Gear VR for Galaxy S6, which lets you use the smartphone as a VR screen. You just slot it into the front and launch your app or movie, and Gear VR does all the 3-D stuff and head-tracking on its own. Not quite the dedicated hardware required for a highly immersive experience, but it'll do in a pinch. The virtual reality headset market right now is fairly limited to early adopters and people interested in making 3-D content — game developers, filmmakers, 3-D modelers and the like. There's not a lot of content available, though a handful of games and apps have VR modes you can try out, and more are coming or being made VR-compatible. Whether that's worth the $200 price of admission for the Gear VR headset (assuming you already have a Galaxy S6 to go in it) is up to you.