Prototype Clickjacking Rootkit Developed For Android 51
ShipLives writes "Mobile security researchers have identified an aspect of Android 4.0.4 (Ice Cream Sandwich) and earlier models that clickjacking rootkits could exploit. As part of an effort to identify potential weaknesses in smartphone platforms, the team was able to develop a proof-of-concept prototype rootkit that attacks the Android framework, rather than the underlying operating system kernel."
Re: (Score:1)
That's awesome. Windows 8 is the best.. it's like GNOME 3 but from Microsoft.
Re: (Score:1)
Agressive pricing frightens slashdotters newly accustomed to Linux's increased market share.
Like every other slashdotter I'll buy a copy for photoshop, mixcraft and games. (Windows is for ralaxation - lol)
Re: (Score:3)
>There has to be a balance between free/open and secure.
>implying that closed source is more secure
>implying
No.
>Apple almost nailed it right on
No, no they didn't. They are anti-FOSS. The only thing they got right was taking the software repository idea from the FOSS world and calling it a store. Where they failed is that they don't allow other stores/repositories in spite of the fact that the FOSS world has been living with multiple trusted repositories for many, many years now.
--
BMO
Re: (Score:2)
Re: (Score:2)
Where they failed is that they don't allow other stores/repositories in spite of the fact that the FOSS world has been living with multiple trusted repositories for many, many years now.
Heh. It's just Android that hasn't.
Multiple trusted repositories (Score:4, Informative)
Re: (Score:1)
Apps banned from Play for being mal-ware end up on other stores where they continue to enjoy life. Apple's approach has actually proven to be better.
Most Android malware is actually distributed ... (Score:1)
via Google's Play Store. This is a KNOWN FACT, not bs.
The official repository IS the problem main. Haven't heard about a single malware being distributed on the Amazon App Store.
Re: (Score:2)
http://it.slashdot.org/story/11/06/15/183209/more-malware-infected-apps-found-in-android-market [slashdot.org]
I realize this is anecdotal, but every Android malware story I've seen also mentioned the Marketplace is where they get it. I doubt users 'trust' it so much as they hope there is safety in numbers.
Re: (Score:1)
http://www.penny-arcade.com/comic/2004/03/19/ [penny-arcade.com]
--
BMO
Re: (Score:2)
No, no they didn't. They are anti-FOSS.
Not quite. What Apple really is against is "open hardware", or, more precisely, "open OS", at least when it comes to the one (hardware and OS) they themselves sell. As for individual pieces of software, they don't care whether it's FOSS or not. On the other hand, if your FOSS license of choice happens to prevent others from uploading it to their app store, see VLC for iOS, killed, if I remember correctly, by the VLC folks themselves, what guilt do they objectively have? When an open source project selects a
Re: (Score:2)
No, no they didn't. They are anti-FOSS.
And they release so many large and widely used open source projects because... they hate it so much?
Re: (Score:2)
Exactly! I know I can trust you because you write everything from the bootloader and firmware upwards! After all, Google wouldn't be doing anything to invade your privacy, like the did with iPhone.
Re:And worse (Score:5, Informative)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:1)
Re: (Score:3)
>That isn't a fault of Android, it's a fault in the rest of society.
This.
The rest of society wants its purple gorillas in spite of the fact that it's badware.
--
BMO
Re: (Score:1)
I love it how this fact only comes up when it's Slashdot's darling OS, but the same fact is projected as a failure of Microsoft when it comes to Windows malware in countless +5 insightful comments over the years. Hypocrisy to the core.
Re: (Score:1)
Re: (Score:1)
I got his by 3 pieces of malware over the years. None of them were installed by choice but were drivebyes.
As a result I stopped using Firefox which does not have sandboxing, I switched to a decent AV package as I was one of those users who felt I didn't need AV as I never click on things and get infected so kept old AVG etc. I only have flash on Chrome which is sandboxed by default. I keep it UPDATED as no one updated flash prior to 2011. I manually disabled Java in all my browsers as I still use Eclipse et
Re: (Score:1)
Does this excuse the manufacturer, or Google, from all responsibility
Re: (Score:3)
>I love it how this fact only comes up when it's Slashdot's darling OS
That the there is a problem that sits in the chair that confuses the part in the seat with the part looking at the screen has been brought up time and again with other OSes. I have actually come out and said that encryption and all the security in the world doesn't effin' matter if you can get the user to trade the key for a candy bar, which has actually happened.
You just have selective hearing, which means you are an asshole.
--
BMO
Re: (Score:1)
It has been brought up yes, but if you've missed the overwhelming support and hundreds of posts on Slashdot for the notion that Windows is not as secure as Unix based OSes, then you're blind and have selective vision, which means you're a blind asshole.
Now that we know how malware-free a popular Unix based OS is, out comes blaming the user instead of the OS.
Re: (Score:3, Insightful)
You seem to be suggesting that it's impossible for it to be simultaneously true that users are lax about security AND the OS is insecure. But why would there be any conflict between those two claims? It's perfectly possible that many Windows users have poor security practices and Windows itself is less secure than other OSes.
Re: (Score:2)
wish I have modpoints. Don't understand why people don't understand this point.
Re: (Score:2)
It all makes sense, when you realize Slashdot is made of more than one person. There are people on slashdot who are not happy with malware on Windows and advocate more of a walled garden, and then there are people who believe in freedom to install malware if they wanted to. So you have more than one set of people, moderating at different points of time, carrying different opinions at different strengths. And thus you have, what you call, hypocrisy in slashdot, when all individuals are perfectly non-hypocrit
Re: (Score:2)
It all makes sense, when you realize Slashdot is made of more than one person. There are people on slashdot who are not happy with malware on Windows and advocate more of a walled garden, and then there are people who believe in freedom to install malware if they wanted to. So you have more than one set of people, moderating at different points of time, carrying different opinions at different strengths. And thus you have, what you call, hypocrisy in slashdot, when all individuals are perfectly non-hypocritical.
Yeah no kidding I was modded down to 0 because I said there is a problem with AV software not having the access in the walled garden to clean up a rootkit infection. Sigh moderators
There needs to be a balance though. Yes security is important but that does not mean banning all javascript except for the OS browser that came with it IE 10, Chrome, Safari, and no one else. Also at least with things like SecureBoot MS is nice enough to have an API for AV scanners to detect and remove rootkits.
I think AV softwar
Re: (Score:1)
Re:And worse (Score:5, Informative)
>And most reasons software does that isn't because of malware.
The most significant symptom of malware infection to Joe User is "my computer is slow." Basically because once you have *one* malware infection, others soon follow, because you haven't kept up with updates, install software from random untrusted sites, or are the victim of a leveraged vulnerability or all three. All these bits of malware fight over the same resources and kill the device's usability.
I have personally seen machines with hundreds of infections. This is typical. The user will muddle along until a certain frustration level is met or the computer simply refuses to finish booting, because the virus load is too much for the poor machine to handle.
"My Computer is Slow" is likely a sign that your system has been compromised for quite a while and there is no malware removal tool that can fix it - a wipe and reinstall of the OS is in order.
--
BMO
Re: (Score:2)
Dumbphone (Score:2)
Re: (Score:1)
Re: (Score:1)
uhmm.... (Score:1)
Thanks?
Re: (Score:2)
You only had to look at the link to know this very much legitimate research.
Even if it was not, for Gods sake dont try to redefine the word. I hope some journalist does not pick this up and start using it as definition of 'researchers'. Just call them researchers, and you can use an adjective to describe them as what ever kind of researchers you think they are.
Re: (Score:1)