Android and MeeGo NFC target for hackers are

Print E-mail
Technology - Gadgets
Thursday, 26 July 2012 02:03

Charlie Miller, once again, data revealed interesting security on mobile devices. At a recent conference in Las Vegas dropped the technology NFC , in his words, "is more open than we think" or, in my opinion, to the point we are shown.

Android Seguridad

NFC enables us to transfer content and, as happens with the Bluetooth, it is also able to match teams with only bring them directly, which is quicker. This speed advantage when matched teams, for whatever reason, can be counterproductive unless it is resolved. In testing with a Galaxy Nexus , a Nexus S and Nokia N9 revealed that hackers are using a similar method, which of course was not revealed, to which Miller used, would be able to access any terminal that has a chip NFC to introduce malicious code and play with our private data.

To popularize the NFC is getting a lot of noise because their ability to function as a purse and make payments easily with our mobile, making it more worrying that you will come and not only have access to your mail or text messages but also could access data from credit cards and have more fun.

Another example was fairly straightforward because you have already put into practice in other platforms but through emails or web ads, for lack of common sense, many end up as victims. But the way through NFC implant would be more direct and without the possibility that the receiver can refuse. That is, if a terminal closer to yours, in the case of Android because it is necessary to activate it first Meego-the team will receive any type of file being sent or even a web link automatically and without realizing you could run the default browser and open a website.

In tests with Android, Gingerbead (2.3) and Ice Cream Sandwich (4.x) were vulnerable but more work, but Jelly Bean (4.1) was able to execute malicious links and stream content through Android Beam without permissions user receives.

As for Nokia, NFC is not enabled by default, but once active can make a similar attack with no need for end user consent. By testing with Nokia N9, Miller was able to introduce malicious code to further control the phone from a Macbook, was able to make calls, send SMS and so on. On both platforms is necessary that the terminal is unlocked, otherwise it is not possible, but it's a little worry factor.

Miller is not a rookie, and has shown us in a couple of times why reveal these details and, fortunately for many uses for good and that they can afford.




Font