Many Android devices are not that secured than we thought

Another vulnerabilities in security had been recently discovered in smartphone, especially which runs on Android 5.0 Lollipop and powered by a Qualcomm chips. This security flaw will leave Android smartphone user in very serious problem.

A security analyst name Gal Beniamini from the Israeli Defense Force, conducted an investigation that revealed that devices are seriously vulnerable to so called “Brute Force Attack”, where the hackers can breach the security measures by just doing a persistent trial and error action.

Since the released of Android 5.0 Lollipop, Android rolled out a Full Disk Encryption (FDE), where it involves the smartphone to generate a 128-bit master key based on the user’s password.

The problem here, is that the way which the key is being stored to the smartphone can be easily be cracked by any law enforcement agencies and the worse are the criminals.

FBI’s recent case was involving about the phone encryption on Apple’s iPhone, where the authorities wants the Apple to decrypt the iPhone of the attackers in the San Bernardino shootings in the U.S. But the problem was that Apple, could not even decrypt the FDE of the iPhone that ran on 256-bit.

According to Neowin, these are namely flaws in how Qualcomm processors verify security and Android kernels – the core operating system.

Beniamini explains in blog post outlining the full details of the Android hack, both Google and the chip-maker Qualcomm have been aware about this vulnerabilities, the smartphone use may require to have hardware upgrade to fix this issue.

The blog post, explained how vulnerable smartphones could be targeted everyday activities, this includes text messages, e-mail and web browsing.

Just stay tuned here, I will update this post if any comment provided by Google and Qualcomm regarding this issue.

Source: Click here