asterisk2a + exploit   4

Android: Künftig monatliche Updates wegen Stagefright - SPIEGEL ONLINE
Der Grund für den Unterschied: Apple kann Software-Updates direkt an die Nutzer seiner Geräte verteilen, Google ist auf die Handyhersteller angewiesen. Diese müssen Updates an das jeweilige Gerät anpassen und testen, was meist länger dauert. Das Resultat: Obwohl Zimperium die Sicherheitslücke schon im April an Google gemeldet, Google ein Update entwickelt und an die Hersteller geschickt hat, hatte laut der Wirtschaftszeitung "Forbes" bis Ende Juli hat noch kein einziger Hardware-Hersteller die Sicherheitslücke geschlossen.
iOS  ecosystem  Android  fragmentation  Google  IT  Security  exploit  Apple  philosophy  architecture  Open  Source 
august 2015 by asterisk2a
Russia will fork Sailfish OS to shut out pesky Western spooks
Paranoia over NSA tampering spurs de-Westernisation drive // well only the Paranoid survive. [...] Russia’s Minister of Communications and Mass Media, Nikolai Nikiforov, has taken part in talks to form a consortium that will aid Russia in developing a custom mobile OS, reportedly a forked version of Jolla’s Sailfish OS, to lessen its dependence on Western technology. Nikiforov held a working meeting last week with the leadership of Hong Kong-based Sailfish Holdings, developer of the quietly admired Sailfish OS. Alongside other participants, the parties involved discussed the use of open-source software in the public and private sectors, taking into account technical, economic and political factors, the latter of which is expected to include United States’ interference with exported technologies.
Open  Source  Russia  corporate  espionage  industrial  espionage  cyber  espionage  NSA  Five  Eyes  Nationalism  barackobama  presidency  Europe  GCHQ  UK  Foreign  Intelligence  affairs  relations  2015  cyber  war  encryption  Angela  Merkel  Leadership  Career  Politicians  No  Representation  human  rights  Privacy  Internet  Privacy  Cryptopocalypse  cryptography  national  interest  False  Flag  on  Terror  on  Drugs  organised  crime  backdoors  backdoor  IT  Security  exploit  Germany  FRance  surveillance  Surveillance-Industrial  Complex  surveillance  state  Orwellian  corporate  state  manufactured  consent  Cold  propaganda  populism  Pressefreiheit  Lügenpresse  Vorratsdatenspeicherung  Snoopers  Charter  investigative  journalism  Whistleblower  tracking  bulk  data  collection  democracy  freedom  freedom  of  press  Secret  Courts  FISA  Court  FISAAA  BND  military–industrial 
august 2015 by asterisk2a
Android-Smartphones: 950 Millionen Geräte durch Sicherheitslücke bedroht - SPIEGEL ONLINE
bit.ly/1S80wJW "Built on tens of gigabytes of source code from the Android Open Source Project (AOSP), the leading smartphone operating system carries a scary code in its heart. Named Stagefright, it is a media library that processes several popular media formats. Since media processing is often time-sensitive, the library is implemented in native code (C++) that is more prone to memory corruption than memory-safe languages like Java. [...] Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep. Before you wake up, the attacker will remove any signs of the device being compromised and you will continue your day as usual – with a trojaned phone. // Opportunism, publishing exploit/vulnerability to public without giving Google & Co enough time to fix it. Just to make money ... "[we can protect protect] enterprise customers from Stagefright vulnerability."
Android  IT  Security  Google  exploit  memory  corruption  phishing  ethical  machine  Mozilla  Mozilla  Foundation 
july 2015 by asterisk2a

related tags

affairs  Android  Angela  Apple  architecture  attack  backdoor  backdoors  barackobama  BND  buffer  Bug  bulk  Career  Charter  Cold  collection  Complex  consent  corporate  corruption  Court  Courts  crime  cryptography  Cryptopocalypse  cyber  data  democracy  Drugs  ecosystem  encryption  engineering  espionage  ethical  Europe  exploit  Eyes  False  FISA  FISAAA  Five  Flag  Foreign  Foundation  fragmentation  FRance  freedom  GCHQ  Germany  Google  Heartbleed  human  industrial  Intelligence  interest  internet  investigative  iOS  IT  journalism  Leadership  Lügenpresse  machine  manufactured  memory  Merkel  military–industrial  Mozilla  national  Nationalism  No  NSA  of  on  Open  OpenSSL  organised  Orwellian  overflow  password  passwords  philosophy  phishing  Politicians  populism  presidency  press  Pressefreiheit  Privacy  propaganda  relations  Representation  rights  Russia  scam  Secret  security  Snoopers  Social  Source  SSH  SSL  state  surveillance  Surveillance-Industrial  Terror  tracking  UK  Vorratsdatenspeicherung  war  Whistleblower 

Copy this bookmark:



description:


tags: