Researchers say some Android phone makers hide missed updates

Google Home Unboxing and Setup process- GIZBOT

These smartphone makers have created a false sense of security among their users.

In a recent report by a German security firm, it was found that several Android phones missed multiple security patches leaving these devices vulnerable to a broad collection of known hacking techniques. The J5 did miss some security patches from 2017, but it didn't advertise that they were installed. Yes and no. While it's disgraceful for the companies to misrepresent a security patch level, SRL points out that often chip vendors are to blame: devices sold with MediaTek chips often lack many critical security patches because MediaTek fails to provide the necessary patches to device makers.

As I mentioned in the first step, the SnoopSnitch app isn't fully working on devices running Android 8.1 like the Pixel 2. The companies like Google, Samsung, and Sony got a very good record of installing the patches but the companies like Lenovo's Motorola, TCL and ZTE have got the problem to roll out the updates.

Device fragmentation has always been a challenge for Google when releasing updates for its Android platform, which is by far and away the most popular mobile software on the planet. "Owing to this complexity, a few missing patches are usually not enough for a hacker to remotely compromise an Android device", the researchers wrote. The Berlin-based team found that many Android phone manufacturers were far behind on updates, or even lying about the last security update applied to the phone. Compared to flagships, cheaper phones are found to be skipping more patches, which also tend to use cheaper chips.

Failing to update their smartphones with the latest security updates is one thing, but SRL found that some simply lie about installing any patches at all. Sony and Samsung were both flagged as having missed some security patches - in some cases in spite of reporting that they were up to date.

Pakistan court bans ex-PM Sharif from elections for life
According to television news channels, the verdict was issued unanimously by all five judges of the bench. Following the verdict, both Sharif and Tareen have become ineligible to ever hold public office.

Amazon drops the price of the popular Ring Video Doorbell to $99.99
Shipment deals might increase as this deal is pretty tempting and Amazon will move a lot of these video doorbells today. In terms of integrations, all of Ring's doorbells work with Alexa, Google Assistant, IFTTT, and Wink.

Three UNSC resolutions on Syria fail; investigators on way
He said the resolution was trying to recreate the old expert body, whose extension Moscow blocked in November. The draft received 12 votes in favour, two against (Bolivia and Russia) and one abstention (China).

HTC, Huawei, LG and Motorola all had between three and four skipped patches while Xiaomi, OnePlus and Nokia skipped, on average, between one and three security updates.

Google's Android product security lead, Scott Roberts, said: "We're working with [SRL] to improve their detection mechanisms to account for situations where a device uses an alternate security update instead of the Google-suggested security update". This can be seen in the image of the table below which lists off what OEMs were missing patches and how many of them were missed.

"Built-in platform protections, such as application sandboxing, and security services, such as Google Play Protect, are just as important", he said.

Nohl agrees that exploiting Android vulnerabilities remains hard due to these security layers and points out an easier and more common route to compromising Android devices is through the use of malicious apps - either inside Google Play or outside the store.

Related News:



Most liked

Sridevi wins first National Award, posthumously
The film was also recognised for original screenplay, while the best dialogues went to Odiya film " Hello Arsi ". Announcing Sridevi's name, feature film jury head Shekhar Kapur said the actor was the most deserving candidate.

Black flags, 'Go back Modi' chants greet PM Modi at Chennai
Members of the Thamizhaga Vazhvurimai Katchi (TVK) were detained as they tried to enter the airport and climbed on hoardings. Urging the government to act fast, Hassan requested the government to take cognisance of the protests held in the state.

"High Definition Vinyl" Is Happening, Possibly as Early as Next Year
Cutting lathes and nickel-plated stampers to press vinyl are outdated and HD Vinyl will use lasers to etch a better "stamper". Assuming all goes according to plan, they are hoping to get the first HD vinyls into stores by the summer of 2019.

Israel probing how pro-boycott Irish mayor came despite ban
Dublin City Council passed two resolutions endorsing the BDS movement on Monday. Israel had tried to block his entry through its airport.

Wale Writes Touching Post After Speaking With Meek Mill
He is now serving up to four years due to probation violations, dating back to an drugs and weapons charge in 2007. Afterward, Kraft called for reform of the criminal justice system.

President Trump's 'Post Office Scam' Feud With Amazon Just Got Hotter
Claims that Amazon is taking advantage of the Postal Service have not passed muster with fact checkers. Gerry Connolly, D-Va., a member of the House Oversight Committee, said in a statement to USA TODAY.

Three Bollywood actresses among most admired women in the world
Bollywood actors such as Aishwarya Rai-Bachchan, Priyanka Chopra and Deepika Padukone were among those featured. Former President Barack Obama is more admired than President Trump in every country except Russian Federation .

Elneny: We're ready to face any team in semi-final
With the Gunners on the attack, Welbeck passed to Elneny who then provided the striker with the ideal ball to slot home.

Boston Bruins: Slight changes to the lines for game one
You think you're a special team? Flip a coin for game one because this series is going seven games where no 4-1 lead will be safe. At the time of the sweep, Boston was a struggling team having lost six of eight games after the back-to-back against the Leafs.

Imran Khan says will discuss FATA issues with army chief
Talking about caretaker governments, he said they are brought in Pakistan as there is a fear of rigging and dishonesty. He called for mainstreaming of Fata by introducing the local government system and devolving power to the locals.

Unnao rape case: CBI detains accused BJP legislator
Two complaints were filed in the aftermath, one against the teenager's family and the other against the suspected assailants. Sengar was detained from a house in Lucknow's Indira Nagar and taken to the CBI's office in Hazratganj at around 4am.

Supreme Court Okays Release of Movie 'Nanak Shah Fakir'
The film was previously set to be released in 2015, but it was put on hold because of this controversy. The bench asked all the states to maintain law and order and ensure smooth screening of the film.

Arsenal survive Moscow scare to reach Europa League semis
Arsenal also reached the semi-finals after recovering from a wobble to draw 2-2 at CSKA Moscow and progress 6-3 on aggregate. However, Payet's magical goal with the outside of his right foot on the hour sent the home fans wild.

Gender pay gap for council staff revealed
According to the analysis, the gender wage gap is largest in Louisiana and Utah, followed closely by West Virginia and Montana. The College reported a median gender pay gap of 3.57%, compared to the 10% national average for Further Education colleges.

Mercer's Kahlia Lawrence selected in WNBA Draft
She leaves U of L as the school's second all-time leading rebounder (1,151 rebounds) and third all-time scorer (2,028 points). The franchise, a year removed from its Tulsa relocation, needed to hit on its picks to build up a playoff roster.