Developer Finds Security Hole in Galaxy Note II, S2
December 17, 2012 8:31 PM
comment(s) - last by
Memory permissions raise danger of local attacks
Samsung Electronics Comp., Ltd. (
) the top maker of Android smartphones in the world (or any kind of phones, for that matter), received some unwelcome news on Monday, when a developer going by the handle "alephzain" posted details on Microsoft Corp.'s (
) XNA developers forum regarding memory permissions security holes in some of Samsung's top devices.
In order to give their
a dedicated line from the camera to the memory, Samsung opened up permissions to the on-chip DRAM. The only issue is that it appears to have opened its memory for writing to all users.
That's good news for modders who could use it to obtain root for the purpose of installing custom builds of Android like Cyanogen. Bu at it's bad news from a security perspective.
The Galaxy Note II
The flaw appears to affect a number of top Samsung devices, including the
Galaxy Note II
, the Galaxy S2, and the Meizu MX. Comments the developer who found the flaw, "The good news is we can easily obtain root on these devices and the bad is there is no control over it."
Generally to do something truly malicious with the flaw, you would have to use a trojan app equipped with memory dumping or memory injection functionality. But given the
success of past trojans against Android-rival Apple
, Inc. (
) the possibility of this flaw being exploited in the wild should not be ruled out.
This article is over a month old, voting and posting comments is disabled
12/18/2012 6:07:12 AM
I've been waiting three days for this one to see what spin would be put on it and y'know I'm not disappointed. In fact my expectations have been exceeded.
Let's ignore the sheer scale (in terms of products) and sheer seriousness of this situation (wilful Direct Memory Access on a network-connected device) but instead deflect attention towards the fruity ones with a link to a completely irrelevant article that was scotched six months ago in any case and was a complete non-story.
No matter about all those Samsung owners who will be blissfully unaware of the mess going on in their pocket because they don't read tech websites (I mean proper tech websites, not this one obviously) and have no idea just how big a clusterfuck Samsung have made here and will probably actually be completely unaware of it and therefore will not take steps to mitigate the problem.
Good game Mick. Clown.
12/18/2012 3:23:06 PM
Looks like the story/article was taken down? It shows up as blank, even after refreshing.
"It seems as though my state-funded math degree has failed me. Let the lashings commence." -- DailyTech Editor-in-Chief Kristopher Kubicki
Apple Aims to Tack on Galaxy Note II and 5 Other Products to Existing Lawsuit
November 26, 2012, 2:05 PM
Symantec: Flashback Trojan for Mac Generates $10,000/Day
May 1, 2012, 1:46 PM
Samsung Reveals Quad-Core Exynos 4 for Galaxy S3 Superphone
April 26, 2012, 1:19 PM
MSI's AMD Richland (A10)/Neptune (7/8xxxM) Gaming Notebooks Start at $1,299 USD
May 22, 2013, 3:15 PM
Apples Tries to Use Decade-Old Patents to Ban Samsung Galaxy S IV
May 22, 2013, 3:00 PM
Intel Shake-Up to Focus on Mobile, New Devices
May 22, 2013, 11:04 AM
Report: DISH CEO Makes Aggressive $2B USD Bid for LightSquared's Spectrum
May 20, 2013, 10:25 PM
Apple Releases Tim Cook's Testimony on Corporate Tax Laws
May 20, 2013, 7:40 PM
Apple's Tim Cook to Talk Profit Shifting, Taxes at U.S. Senate Hearing
May 20, 2013, 1:44 PM
Most Popular Articles
High School Student Creates Storage Device that Can Charge in 20 Seconds
May 20, 2013, 6:51 AM
Google Announces "Pure" Galaxy Nexus S4 for $649, Android Updates
May 15, 2013, 1:42 PM
Seawater Cooling Saves Data Center Big Bucks, Energy, Despite Jellyfish Issues
May 17, 2013, 3:23 PM
U.S. Federal Traffic Board Wants to Make Drunk Driving Threshold Far Harsher
May 15, 2013, 11:32 AM
Newegg Legal Chief: "We don't Feed the Trolls"; Defeats Bell Lab Shell Comp.
May 17, 2013, 10:11 AM
Latest Blog Posts
Quick Note: Sony "Teases" PS4 Ahead of Xbox Reveal in New Video
May 20, 2013, 12:33 PM
Nokia Introduces Instagram-Like App of Its Own to Help Lumia Sales
May 20, 2013, 7:10 AM
Parents of Pre-Teen Drivers Commonly Practice Distracted Driving Says Study
May 9, 2013, 7:16 AM
Apple's iOS 7 Running Into Internal Delays Due to Massive Overhaul
May 1, 2013, 4:26 PM
Elon Musk Willing to Spend More Money on Widening of 405 Freeway
Apr 26, 2013, 7:28 PM
More Blog Posts
Copyright 2013 DailyTech LLC. -
Terms, Conditions & Privacy Information