Samsung promised to make available updates για την επίλυση του θέματος ασφαλείας που παρουσιάζει η εφαρμογή του πληκτρολογίου Swift των κινητών της συσκευών.
Such as we already mentioned, ερευνητές ασφαλείας από την εταιρεία NowSecure προειδοποίησαν ότι ένα πρόβλημα που συνδέεται με το προ-εγκατεστημένο πληκτρολόγιο των συσκευών Samsung (Swiftkey) είναι πολύ επικίνδυνο για τους ιδιοκτήτες των συσκευών.
The risk arises from a development error that allows downloading via unsafe channels with unencrypted HTTP links instead of HTTPS.
Worse, the update process has root-level access and product authenticity is not controlled, creating mechanisms that allow skilled hackers to install malware.
More than 600 millions company's mobile devices (including the latest Galaxy S6) are potentially vulnerable.
"The Swift keyboard comes pre-installed on Samsung devices and can not be turned off or uninstalled. "Even when not used as the default keyboard, the vulnerability can still be exploited," says NowSecure.
Samsung has admitted that there is a problem, and claims that various factors make it very difficult to carry out such an attack….
Nevertheless, the company will release an update like she says in her blog.
This vulnerability, as noted by the researchers, requires a very specific set of conditions that a hacker should take advantage of.
The user and the hacker should be in the same unprotected network at the time the update is received. Also, in a protected KNOX device, there are additional features, such as real-time kernel protection that can prevent a malicious attack from being effective.
So, the chance of having a successful attack, exploiting this vulnerability is low.
We have not yet reported cases of Galaxy devices that were compromised by these keyboard updates. But, as the reports show, the risk exists and Samsung will release a security update within the next few days.
