Wednesday, August 10, 2016

Vulnerability in full disk encryption feature on Android devices running Qualcomm processor

It is known that Android own platform company Google has a lot of security problems, but has been building a number of encryption on the system features, as well as on the devices also, in recent years there has been a significant improvement in a lot of things that are still far from perfect, he has security researcher Gal Beniamini the discovery of a new security flaw leaves Full Disk Encryption feature is prone to break through.


Gal Beniamini added that this gap affect up to hundreds of millions of Android devices, but the really surprising is that the devices that Qualcomm processors are the most vulnerable.

It is clear that the source of this new vulnerability that has been discovered is there are a lot of flaws in the system kernel Android kernel and chips Qualcomm, so any smartphone running Android 5.0 or onwards and use encryption full part property (full disk encryption) are more vulnerable to penetration and what makes the situation even worse that each of the two Google and Qualcomm have issued to address this problem before, came in Beniamini report that there are still some gaps that are fixed without a new hardware.

It is known that encryption Full feature disk encryption is the property that you save all data on the device safely and make this data unreadable without special encryption and unique entry, is worth mentioning here that the basis of the legal battle between Apple and the Federal Bureau of Investigation FBI on this matter , because Apple made it impossible for anyone to access the user encryption keys so that the company itself, but Beniamini said that with regret on the android system, this feature does not include full safety and possibly through the security hole to penetrate the attackers to data on clients with ease.

It is worth mentioning here that Beniamini works with Google Inc. and Qualcomm to find a solution, and it is still highly unlikely the hackers exploit these vulnerabilities for most Android users, because hackers still need to enter a password, otherwise the encryption key here is not working.

The importance of knowing this news lies in the fact that the full disk encryption feature on the Android system is not quite as secure think a lot of users, and also in order to avoid companies manufacturing processors to repeat these errors and defects again.

0 comments:

Post a Comment