Samsung Keyboard Bug Leaves 600m Android Devices Exposed to Hackers

Category > OTHERS || Published on : Thursday, June 18, 2015 || Views: 821 || Samsung Keyboard Bug Samsung Keyboard Bug Leaves 600m Android Devices Exposed to Hackers


The security bug revolves around the update mechanism of the built-in keyboard, which looks for language updates for trending phrases either daily or weekly.
 
"The keyboard was signed with Samsung's private signing key and runs in one of the most privileged contexts on the device, system user, which is a notch short of being root," said researcher Ryan Welton from security company NowSecure who discovered the hole.
 
The problem was discovered last year. NowSecure told Samsung about the bug in December. Samsung asked NowSecure to keep the discovery under wraps until it could patch the problem. Google's Android security team was also notified.

Read Full Story @ NDTV