Android vulnerability exposes users to data theft

Discussion in 'Droid X Hacks' started by Natey2, May 17, 2011.

  1. Natey2
    Offline

    Natey2 Active Member

    Joined:
    Oct 23, 2010
    Messages:
    1,339
    Likes Received:
    4
    Trophy Points:
    38
    "Using an Android device on unsecure Wi-Fi can expose your calendar, contacts, and other data to bad guys"

    http://www.infoworld.com/t/mobile-security/android-vulnerability-exposes-users-data-theft-309

    Also
    http://www.informationweek.com/news/personal-tech/smart-phones/229500737


    Sent from my unrooted DroidX using DroidForums app
  2. Backnblack
    Offline

    Backnblack Premium Member Premium Member

    Joined:
    Nov 18, 2009
    Messages:
    11,263
    Likes Received:
    5
    Trophy Points:
    0
    Easy fix on that...Don't use'em....
  3. Sal R.
    Offline

    Sal R. Member

    Joined:
    Nov 26, 2009
    Messages:
    421
    Likes Received:
    15
    Trophy Points:
    18
    My paranoia about public wifi networks has just been reinforced, yet again.
  4. FrellingFrakker
    Offline

    FrellingFrakker New Member

    Joined:
    Mar 3, 2011
    Messages:
    232
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Atlanta, GA
  5. CoFoltman84
    Offline

    CoFoltman84 New Member

    Joined:
    Jun 8, 2010
    Messages:
    354
    Likes Received:
    1
    Trophy Points:
    0
    Location:
    518-NY
    I don't get how they actually hack in though. is it a custom made app or just DOS commands to access our files?
  6. sonicfreak360
    Offline

    sonicfreak360 New Member

    Joined:
    Aug 19, 2010
    Messages:
    534
    Likes Received:
    0
    Trophy Points:
    0
    Maybe firesheep? That's my only guess...

    Sent from my Droid using Tapatalk
  7. CoFoltman84
    Offline

    CoFoltman84 New Member

    Joined:
    Jun 8, 2010
    Messages:
    354
    Likes Received:
    1
    Trophy Points:
    0
    Location:
    518-NY
    i really need to get up on my hacking. can you also put files onto someones phone? i think it would be great to hack into a friends phone and add a bunch of pictures haha
  8. AngryHatter
    Offline

    AngryHatter Member

    Joined:
    Jan 4, 2011
    Messages:
    520
    Likes Received:
    1
    Trophy Points:
    18
    Using unsecured WiFi is a threat to ANY device, not just your phone.
    When I am in the airport I use no apps that require a PW.
    Not doing your banking on a public WiFi is just common sense.

    edit - I saw this a month ago. Proof of concept but not easy to swipe someones data - you need to be very close to the target. And if your phone is off, obviously it reads nothing.
  9. muscleheadbob
    Offline

    muscleheadbob New Member

    Joined:
    Mar 1, 2011
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    0
    what about people who use it with their work and sync calendars? Do the geniuses at Verizon or Google have a solution for putting our personal information at risk? I am not happy.
  10. cananot
    Offline

    cananot New Member

    Joined:
    Feb 15, 2011
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Richmond,Virginia
    Ok I can understand about computers but smart phones? I assumed that smart phones didn't have an issue with that ? Cause can't figure out why companies sell virus protection for phones? ?

    Sent from my DROIDX using DroidForums
  11. AngryHatter
    Offline

    AngryHatter Member

    Joined:
    Jan 4, 2011
    Messages:
    520
    Likes Received:
    1
    Trophy Points:
    18
    No this is an app where the guy can read your stuff, but he has to be with in 5 feet of you.
  12. cananot
    Offline

    cananot New Member

    Joined:
    Feb 15, 2011
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Richmond,Virginia
    Oh ok I gotcha. So that would mean if they were near me then the Droid would pick that up since they would be going threw Bluetooth or wifi and Droid always makes a sound when something is trying to connect to it Wells how mine is set up. Dang hackers

    Sent from my DROIDX using DroidForums
  13. mugsy77
    Offline

    mugsy77 New Member

    Joined:
    Oct 17, 2010
    Messages:
    144
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Dallas
  14. muscleheadbob
    Offline

    muscleheadbob New Member

    Joined:
    Mar 1, 2011
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    0
    This happened when I had an HTC Dash and the wifi was on years ago. I was sitting in a bar and out of nowhere, a day later, the email i assoiated to the Dash was getting spammed and everyone in that addressbook. You would think a company the size of google would be able to use "hindsight". Any word of a patch while I prepare to permanently disable my wireless...
  15. Natey2
    Offline

    Natey2 Active Member

    Joined:
    Oct 23, 2010
    Messages:
    1,339
    Likes Received:
    4
    Trophy Points:
    38
    It's not the unsecured WiFi network that is the main issue here... it is the Android ClientLogin using http instead of https by default.
    Article says it was fixed in Android 2.3.4, so not a unsecured WiFi network issue here. But always better to operate over secure WiFi network (eg. WPA2) for additional level of security.

    Sent from my unrooted DroidX using DroidForums app
  16. Natey2
    Offline

    Natey2 Active Member

    Joined:
    Oct 23, 2010
    Messages:
    1,339
    Likes Received:
    4
    Trophy Points:
    38
    Article says hacker creates a WiFi hotspot using the same SSID as the open WiFi network. Your unsuspecting device connects to his hotspot instead, and he grabs your authentication token and uses it.
    There are also programs that can sniff packets as they are transferred over networks. If packets are not encrypted, the information is easily visible and can be re-used by a hacker sniffing packets.

    Sent from my unrooted DroidX using DroidForums app
  17. Jiibus
    Offline

    Jiibus New Member

    Joined:
    Sep 5, 2010
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    0
Search tags for this page
360 mobile security
,
android hack wifi photos
,
android vulnerability
,
android vulnerability to virus
,

hack android pictures over wifi

,
hack pictures from android over wifi
,
hack unsecured android
,
how to hack into someones phone for pictures