Samsung Galaxy devices may have backdoor to user data, developer says Developers working on Replicant, an open-source OS based on Android, claim to find a flaw that provides access to read, write, and delete files stored on some Samsung devices. Samsungs Galaxy devices might have a built-in security flaw that could allow for remote access to data, a developer claims. The folks behind Replicant, a free and open-source OS that aims to replace proprietary Android components with free alternatives, claim to have discovered a flaw in certain Samsung devices that allows for access to read, write, and delete files on the phones storage. In addition, the developers said that the flaw has sufficient rights to access and modify the users personal data. In a blog post detailing the issue on Wednesday, Replicant developer Paul Kocialkowski said the trouble resides in the use of two processors in mobile devices. The applications processor runs the main operating system, while another, baseband processor, is used to handle communications to and from the device. The issue with the baseband processor in Samsungs devices, Replicant argued, is that its using a proprietary Samsung software to handle all the communication -- and that software allows for a backdoor to user data. Provided that the modem runs proprietary software and can be remotely controlled, that backdoor provides remote access to the phones data, even in the case where the modem is isolated and cannot access the storage directly, Kocialkowski wrote. Although Replicant said that the software could potentially access user data, it appears that its doing nothing wrong. In fact, the company wrote that there are some features in the software that are legitimate. According to Replicant, the Nexus S, Galaxy S, S2, and S3, and Galaxy Tab 2 10.1, among other Samsung devices, are affected by the issue. Its worth noting that Replicants announcement might also be somewhat self-serving: the company said in a blog post that its free alternative would mitigate the issue. CNET has contacted Samsung for comment on the report. We will update this story when we have more information.
Posted on: Sat, 15 Mar 2014 02:44:43 +0000
Trending Topics
Recently Viewed Topics
© 2015