Unless you Upgrade to Android Pie, a Vulnerability Leaves your Phone Trackable -- and Google Won't Fix It
A vulnerability in the Android operating system means that it is worryingly easy to track and locate phones. While the issue has been addressed in Android Pie, Google has no plans to patch the vulnerability in earlier versions of its mobile OS.
The vulnerability (CVE-2018-9489) was revealed in a report from Nightwatch Cybersecurity which warns that it can be used to "uniquely identify and track any Android device" and also to "geolocate users". As well as Google's own Android builds, the problem is also said to affect forked versions such as FireOS.
The vulnerability, which was first reported to Google back in March, means that it is possible for apps to bypass permissions and gain access to information that is contained in system broadcasts -- information that can be very revealing. The problem is made all the more serious thanks to the fact that the vast majority of people will never see Pie on their phones, meaning their handsets will remain vulnerable.
Describing the problem, Nightwatch Cybersecurity says:
System broadcasts by Android OS expose information about the user's device to all applications running on the device. This includes the WiFi network name, BSSID, local IP addresses, DNS server information and the MAC address. Some of this information (MAC address) is no longer available via APIs on Android 6 and higher, and extra permissions are normally required to access the rest of this information. However, by listening to these broadcasts, any application on the device can capture this information thus bypassing any permission checks and existing mitigations.
Because MAC addresses do not change and are tied to hardware, this can be used to uniquely identify and track any Android device even when MAC address randomization is used. The network name and BSSID can be used to geolocate users via a lookup against a database of BSSID such as WiGLE or SkyHook. Other networking information can be used by rogue apps to further explore and attack the local WiFi network.
It is not known whether the vulnerability has been exploited in the wild, but now it has been exposed, that risk has greatly increased. More information about the security issue can be found in the Nightwatch Cybersecurity report.
Source: betanews
Latest Jobs
-
- Sales New Business / Account Manager - Sales Security / Cloud / Managed Service
- London
- upto 50,000 base plus OTE
-
*Actively looking to hire now. Consultative Sales person. New business and account management. Technology and Services (Cloud / Security / Managed Services) Flexible location- remote working- London based office for when the ‘new normal’ emerges. We are looking for a capable and self sufficient sales person that will also benefit from a team that will generate leads / appointment setting. Your role will be to generate new logo business opportunities and manage and expand traction into a number of existing accounts (that have spent.) Targeting the mid market to small enterprise. This award winning business, who deliver a broad range of transformational solutions, are looking to attract a high achiever. Uncapped commission and sensible scaled targets to attract the best. Top earners achieving in excess of £200k+ Experience in selling one or more of the following is essential; Managed Services, Datacentre, Cloud and Cyber Security. All details kept in confidence, apply today to find out more. Chris.Holt@dclsearch.com 07884666351
-
- New Business Hunter - Global Telecom Services
- Munich
- up to €90,000 base plus €60,000 OTE (some flexibility)
-
New Business Hunter - Telecom Services Salary up to €90,000 base plus €60,000 OTE Location: Munich Reference RA7379 Our client a leading Global Telecoms Provider are looking for an ambitious New Business Hunter to be based in Germany, targeting Germany HQ enterprises business who are looking to expand or develop their presence in the Asian markets, you will be able to sell across their full portfolio of services, from Global Connectivity, Cloud, Security and SDWAN solutions As the New Business Hunter you will be responsible for the development of new Logo accounts, focusing on growing these from initial introduction through to established customer Responsibilities: • Maintaining and developing relationships with targeted companies • Identifying opportunities to grow revenue • Generating revenue growth within new Logo customers via telephone and face to face contact, web meetings and when necessary face to face visits Skills and experience: • Fluent German and English verbal and written skills are imperative • Experience in the Telecoms/networking industry is a must • Proven new business experience and able to show how you would target, approach and win a customer • Aptitude for achieving individual revenue and key performance targets. • Proven negotiations skills. Telecoms Jobs | Telecommunications Jobs | Telecommunications Jobs