New Set of Android Vulnerabilities puts 900M Devices at Risk by karnal

View this thread on: hive.blog | peakd.com | ecency.com

security · @karnal · Aug 8 '16 (edited)

$844.42

New Set of Android Vulnerabilities puts 900M Devices at Risk

![](http://www.matrudev.com/files/Android-crying-logo-520x245.jpg)

If you have an Android phone, it is **time to update your system**!

Security firm [Check Point](https://blog.checkpoint.com) has recently disclosed four security flaws that allow an attacker to **completely take over** your Android phone.

All that is necessary is for an attacker to trick the user into installing a malicious application - without any special permissions.

The set of vulnerabilities (going by the name of '[Quadrooter](https://blog.checkpoint.com/2016/08/07/quadrooter/)') appears to impact only phones based on [Qualcomm chips](https://www.qualcomm.com/products/snapdragon).

**Incredibly**, one of the four vulnerabilities is set to be fixed only in September.

---

*Note*: At the time of this writing, Check Point website is currently experiencing technical difficulties, most likely due to overwhelming demands from overly concerned Android owners from around the globe. The situation should improve shortly.

👍 blocktrades, tombstone, arhag, xeroc, benjojo, steempower, hipster, lovejoy, billbutler, kimziv, leon-fu, craig-grant, jl777, paco, chhayll, edgeland, jchch, robrigo, steve-walschot, bue, greenman, allasyummyfood, karnal, anonymous, dedriss, proto, xtester, germanaure, ninzacode, guywinfield, andrewawerdna, taker, geronimo, cian.dafe, karen13, randolphrope, gmurph, thegoodguy, ppitonak, bue-witness, boy, hanshotfirst, jed78, mini, murh, gekko, belkins, bledarus, michaellamden68, iamrohitkgupta, daniel.pan, kalimor, brett.tesol, bunny, furion, healthcare, pavel-tyh, chantelle, charley, akaninyene-etuk, zhuvazhuva, helen.tan, starik69, gottod, and 47 others

`author`	karnal
`permlink`	new-android-vulnerability-puts-900m-devices-at-risk
`category`	security
`json_metadata`	{"tags":["security","cybersecurity","life","steemit","android"],"image":["http://www.matrudev.com/files/Android-crying-logo-520x245.jpg"]}
`created`	2016-08-08 09:01:15
`last_update`	2016-08-08 09:01:39
`depth`	0
`children`	11
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	638.703 HBD
`curator_payout_value`	205.716 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	1,001
`author_reputation`	19,869,197,162,216
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	679,195
`net_rshares`	77,063,567,243,844
`author_curate_reward`	""

properties (23)vote details (111)

voter	rshares	pct
anonymous	28,846,092,931	1%
blocktrades	42,414,483,041,085	100%
tombstone	20,987,924,196,748	100%
boy	3,075,683,659	100%
xeroc	1,967,531,669,605	100%
bue-witness	3,732,437,858	100%
bunny	714,004,633	100%
arhag	6,026,939,414,701	100%
bue	51,183,714,637	100%
mini	1,649,000,071	100%
moon	208,614,542	100%
lovejoy	229,063,667,956	100%
benjojo	1,327,368,257,351	100%
steempower	1,249,000,369,479	100%
healthcare	611,989,886	100%
daniel.pan	880,706,773	100%
dedriss	25,997,022,418	100%
jchch	90,240,042,791	100%
helen.tan	286,917,997	100%
edgeland	114,812,039,442	100%
craig-grant	177,689,519,427	100%
pavel-tyh	511,522,167	100%
ppitonak	3,735,864,819	100%
ninzacode	14,770,063,531	100%
germanaure	15,217,766,134	100%
hipster	922,365,294,404	100%
gekko	1,405,226,349	100%
steve-walschot	60,173,642,872	100%
cian.dafe	4,463,021,046	100%
murh	1,458,915,389	33.01%
akaninyene-etuk	351,206,910	100%
chantelle	369,454,922	100%
charley	369,319,345	100%
billbutler	216,925,921,591	100%
leon-fu	180,440,647,073	100%
starik69	281,561,116	100%
kimziv	210,663,454,223	100%
karnal	33,877,171,284	100%
michaellamden68	943,264,998	100%
robrigo	70,942,294,229	100%
chhayll	128,364,893,303	100%
furion	711,832,850	1%
ghozia	227,006,107	100%
zhuvazhuva	297,019,461	100%
guywinfield	14,430,901,120	100%
thegoodguy	3,795,895,292	100%
paco	144,302,718,516	100%
karen13	4,349,865,861	100%
gottod	236,215,268	100%
alexoz	214,989,696	100%
ts888	112,520,784	100%
juliap4	135,849,892	100%
geronimo	5,349,802,003	100%
alexander9	53,517,851	100%
jl777	148,148,030,112	100%
rumhurius	108,709,544	100%
greenman	46,731,881,648	100%
proto	17,821,090,169	100%
belkins	1,164,467,480	100%
jed78	2,654,304,196	100%
yulia98	124,080,440	100%
alrx6918	83,754,799	100%
taker	9,100,859,817	100%
allasyummyfood	45,464,886,428	100%
principalscunner	62,687,134	100%
nurik	53,055,119	100%
gmurph	4,286,909,447	100%
xtester	16,841,891,198	100%
kalimor	813,345,865	100%
misteem	152,248,586	100%
jellenmark	76,723,637	100%
bitmaxt	106,502,632	100%
randolphrope	4,287,768,508	100%
ciao	22,794,164	100%
zmb	53,221,594	100%
numberone	58,947,679	100%
jrcornel	45,609,317	100%
steemo	23,412,215	100%
successful	57,902,177	100%
hanshotfirst	2,800,131,651	100%
steema	18,435,647	100%
goodluckcanuck	182,831,122	100%
evgenyche	54,488,849	100%
confucius	27,519,925	100%
bledarus	1,073,612,765	100%
jarvis	19,962,237	100%
leraakulenko	58,048,802	100%
inna3	25,422,922	100%
inkha	126,212,849	100%
prophet	79,827,907	100%
vasilii	12,903,254	100%
iamrohitkgupta	917,279,546	100%
andrewawerdna	14,170,574,745	100%
success43	1,158,600	0%
garri74	48,655,441	100%
awkwardawk	46,806,608	100%
smarit	55,136,642	100%
brett.tesol	747,887,025	100%
mfeu	57,224,275	100%
kondiana	32,032,844	100%
dryde	57,108,338	100%
allanrichard	54,768,895	100%
groovedigital	38,995,141	100%
marketprice	55,585,943	100%
theeashman	56,667,541	100%
mikehere	56,461,733	100%
felixblanco	48,522,239	100%
petagaye	54,163,902	100%
balamica	55,241,535	100%
dakatiphes	57,488,473	100%
unholy	43,958,147	100%

@andrian70529 · Aug 8 '16

nice info

properties (22)

`author`	andrian70529
`permlink`	re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t200041727z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 20:00:18
`last_update`	2016-08-08 20:00:18
`depth`	1
`children`	0
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	9
`author_reputation`	-868,444,901,747
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	689,223
`net_rshares`	0

@brett.tesol · Aug 8 '16

Useful to know, but concerning that they are so relaxed about releasing a fix for such a major issue!

👍 karnal, fields

`author`	brett.tesol
`permlink`	re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t143152686z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 14:31:51
`last_update`	2016-08-08 14:31:51
`depth`	1
`children`	2
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	101
`author_reputation`	442,005,070,943
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	683,195
`net_rshares`	31,120,929,310
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
karnal	0 B		31,057,390,520	100%
fields	0 B		63,538,790	100%

@karnal · Aug 8 '16

Indeed!

I would strongly advise against installing unknown applications until this issue is sorted out.

A successful exploit yields root access, at that point it is game over!

👍 karnal, brett.tesol, joemoraca

`author`	karnal
`permlink`	re-bretttesol-re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t143901700z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 14:39:00
`last_update`	2016-08-08 14:39:00
`depth`	2
`children`	1
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	177
`author_reputation`	19,869,197,162,216
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	683,345
`net_rshares`	31,847,037,574
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
karnal	31,057,390,520	100%
brett.tesol	733,222,574	100%
joemoraca	56,424,480	100%

@brett.tesol · Aug 8 '16

Sound advice ;)

👍 karnal

`author`	brett.tesol
`permlink`	re-karnal-re-bretttesol-re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t144850600z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 14:48:54
`last_update`	2016-08-08 14:48:54
`depth`	3
`children`	0
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	15
`author_reputation`	442,005,070,943
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	683,529
`net_rshares`	31,057,390,520
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
karnal	0 B		31,057,390,520	100%

@cire81 · Aug 8 '16

Thanks for the heads up and warning. Is it true that android are more prone to viruses since it is open source?

properties (22)

`author`	cire81
`permlink`	re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t173153046z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 17:31:51
`last_update`	2016-08-08 17:31:51
`depth`	1
`children`	2
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	111
`author_reputation`	99,228,490,804
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	686,419
`net_rshares`	0

@someguy123 · Aug 8 '16

No. It's not because it's open source. it's because it's **open**, i.e. you can install any app you want, from any source. You don't need to download your apps from the Google Play Store. Unlike Apple, where the only source is the iTunes App Store, and you don't get any choice whatsoever.

One of the biggest problems in Android is the amount of third party attacks, for example Samsung's Knox, designed to IMPROVE security, has a very major flaw which actually makes their phones highly vulnerable. (which was actually used in the TV Show Mr Robot to hack the FBI) - thus having a non-samsung phone actually improves your security simply because of that attack.

It's thanks to companies like HTC, Samsung, and Sony filling up their android phones will all their vendor crapware that opens up whole new vectors of attacks. Every now and then we do get attacks that directly damage android itself, such as this, which is somewhat Qualcomm's fault, not even Android's fault in it's own.

👍 bitfish

`author`	someguy123
`permlink`	re-cire81-re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t184841865z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 18:48:42
`last_update`	2016-08-08 18:48:42
`depth`	2
`children`	1
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	986
`author_reputation`	103,945,664,283,580
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	687,809
`net_rshares`	69,850,863
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
bitfish	0 B		69,850,863	100%

@bitfish · Aug 8 '16

A good idea might be preferring Smartphone companies which don't fill up your phone with vendor crapware. At least they should allow deleting those apps without having to root your phone. 

My old Samsung came with lots  of proprietary Samsung bloatware apps which  could not be deleted without rooting. After switching to LG (G4) things are much better. Much less bloatware and you can delete those apps.

properties (22)

`author`	bitfish
`permlink`	re-someguy123-re-cire81-re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t200408727z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 20:04:09
`last_update`	2016-08-08 20:04:09
`depth`	3
`children`	0
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	405
`author_reputation`	38,081,681,042
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	689,302
`net_rshares`	0

@gekko · Aug 8 '16

there is no way to protect yourself? 8[

👍 gekko

`author`	gekko
`permlink`	re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t183638243z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 18:36:39
`last_update`	2016-08-08 18:36:39
`depth`	1
`children`	1
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	39
`author_reputation`	1,185,517,433,922
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	687,537
`net_rshares`	1,405,226,349
`author_curate_reward`	""

properties (23)vote details (1)

voter	weight	wgt%	rshares	pct	time
gekko	0 B		1,405,226,349	100%

@karnal · Aug 9 '16

Might be wise to not install any unknown apps until this is fully fixed (September?).

👍 karnal, gekko

`author`	karnal
`permlink`	re-gekko-re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160809t003442200z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-09 00:34:42
`last_update`	2016-08-09 00:34:42
`depth`	2
`children`	0
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	85
`author_reputation`	19,869,197,162,216
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	693,852
`net_rshares`	32,633,757,240
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
gekko	0 B		1,576,250,891	100%
karnal	0 B		31,057,506,349	100%

@inna3 · Aug 8 '16

Good afternoon. Your article is very useful. I voted for you.

properties (22)

`author`	inna3
`permlink`	re-karnal-new-android-vulnerability-puts-900m-devices-at-risk-20160808t155441846z
`category`	security
`json_metadata`	{"tags":["security"]}
`created`	2016-08-08 15:54:42
`last_update`	2016-08-08 15:54:42
`depth`	1
`children`	0
`last_payout`	2016-09-08 02:27:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	61
`author_reputation`	-2,950,549,471,217
`root_title`	"New Set of Android Vulnerabilities puts 900M Devices at Risk"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	684,730
`net_rshares`	0

@mikehere · Aug 9 '16

Here is a video about it: https://www.youtube.com/watch?v=Nr7SJAg-aTY

properties (22)