Over 600 million Samsung mobile device users may be at risk due to a significant security threat, according to researchers at mobile security specialist NowSecure.
and
“Welton found he could hijack the process of updating one of the virtual keyboards Samsung installs on many Android smartphones. From there, he could eavesdrop on phone conversations, rummage through text messages and contacts, or turn on the microphone to capture audio,”…
Enjoy your phone Samsung people.
It doesn’t look like a good day for Apple either :/ http://arstechnica.com/security/2015/06/serious-os-x-and-ios-flaws-let-hackers-steal-keychain-1password-contents/
Right…they better come out with a fix some time soon…somebody getting their paws on my 1Password data…ugh.
I’m going to guess that the Apple exploit gets WAY more press, and that they’ll patch their vulnerability before Samsung can patch theirs.
Hi, I’m Megan and I work for AgileBits, the makers of 1Password.
For our security expert’s thoughts on the vulnerability, please see our blog: https://blog.agilebits.com/2015/06/17/1password-inter-process-communication-discussion/. If you have further questions, we’d love to hear your thoughts in our discussion forums: https://discussions.agilebits.com.
Thanks for he pointer, Megan…it does actually make me feel better about this whole mess 🙂
It’s time to let go of the woe-be-Apple attitude. Just not fashionable anymore.
Samsung is a pure evil, not just their electronics division, but entire company as a whole. South Korea is currently going through MERS virus scare, which may trigger the country into recession. And the main reason for the scare? Samsung’s hospital pressured government to withhold naming them as the primary origin of the virus. MERS quickly spread as a result and the net result is 23 dead people, 165 diagnosed, ,2208 schools closed at one point, and major decline in restaurant, retail sales, and tourism.
as this comes on the heels of a major iOS keychain vulnerability, which apple had already had 6 months time to fix and did nothing, i’d say: “holy shit, apple. let’s enjoy our idevices, apple people”
http://www.theregister.co.uk/2015/06/17/apple_hosed_boffins_drop_0day_mac_ios_research_blitzkrieg/
Interesting that this vul is in Swiftkey keyboard which is pre-installed on Samsung phones. I wonder whether there are iOS implications. I’d poke at Samsung, but as others note, bad day for Apple security too. I think they Simpsons have some advice.
Marge: “It’s easy to criticize.”
Homer: “And FUN too!”
I’m also gonna guess Jim is not gonna make a blog post titled “Holy shit Apple” and sign it with “Enjoy your computer Apple people”
Yikes! With this, the iOS/OSX issue others mentioned, and the Lastpass problem over the weekend, it’s been a bad several days for everyone.
Time to do that security sweep again and make sure I don’t have password duplicates and they are all randomized.