Android And Nokia Phones Can Be Taken Over Merely By Waving Another Device Near Them

[onehandle]

Smartphones’ growing adoption of so-called “near field communications” promises to let the device in your pocket wirelessly make payments, beam info to other phones, and seamlessly sync with nearby computers. It might also let an artful hacker pickpocket your private information right through your clothes.

At the Black Hat security conference Wednesday, serial Apple and Android hacker Charlie Miller plans to present a grab bag of new tricks that allow him to take complete control of Android and Nokia phones simply by bringing another device or just a chip within a few inches of the target gadget.

Miller, who works for security firm Accuvant but whose research was also funded in part by the Pentagon’s research arm the Defense Advanced Research Projects Agency, found that he could simply flash a near-field-communications (NFC) tag containing a chip next to an Android Nexus S phone to load a malicious url in the phone’s browser through a feature that Google calls Android Beam. From there, he was able to exploit a second, older vulnerability in the phone’s browser to take complete control of the device through the rigged website, accessing any information stored on its SD card or potentially installing software to monitor its communications.

In other words, by merely brushing up against someone in a crowded room, Miller could hijack his or her handset. “The whole idea of Android Beam is that if you both have Android phones, you can share a game you’re playing or a web page or something on Maps,” says Miller. “But the scary thing is that with just an NFC tag I can make your browser open a web page and completely own your phone.”

http://www.forbes.com/sites/andygreenberg/2012/07/25/darpa-funded-researcher-can-take-over-android-and-nokia-phones-by-merely-waving-another-device-near-them/

[MadHound]

1. Another reason to be glad that I don't have a smart phone,

Or a cell phone for that matter.

[RadiationTherapy]

2. Well, someone could also send you an envelope full of anthrax...

or use your mail for identity theft purposes, so you may want to consider ending your postal service as well. In other words, fear of criminals utilizing ones means of communication is a small reason to avoid a means of communication. Though it does seem you have several other reasons for not using cell/smart phone technology.

And no, I am not a shill or stockholder; I do not think "everyone should" have them; I do not feel "threatened" by non-users and compelled to criticize them. I am merely pointing out what seems to be a flawed argument.

[MadHound]

4. Funny how you say one thing but say another.

You stated that you don't feel threatened by non-users, nor compelled to criticize them, yet that is exactly what you did, criticized and belittled me for my personal choice, even venturing into outrageous speculation.

What about by non-cell phone use threatens you so much? Because obviously it does. If you weren't threatened you wouldn't have subjected me to snide insult and baseless speculation. "Somebody from outside the drone collective, must attack!"

Here is something for you chew on, perhaps you'll start to understand.
http://www.thedailybeast.com/newsweek/2012/07/08/is-the-internet-making-us-crazy-what-the-new-research-says.html

[RadiationTherapy]

5. I was pointing out a weak argument, as I stated.

The rest of your post is moot unless you would like to present an argument that has any relevance to the discussion. I took the time to clarify what I was doing in my post. Would you like to reciprocate? Would you like to share the intent of your posts? I doubt it, since it was all merely to support a false sense of superiority - and you are welcome to that false sense. It makes no difference to me.

[MadHound]

8. No, basically you were mocking me

Mocking me for stating that the potential of theft is "Another reason to be glad that I don't have a smart phone, or a cell phone for that matter." I was making a statement concerning my own non-use, not your use.

What threatens you so much about my non-use of a cell phone or smart phone. If it doesn't make any difference to you, why continue with the insults? Why state that I have a false sense of superiority, and what are you basing that statement on?

Oh, and what about that article that I linked to? No comments on that? Nope, just more insults. Telling, very telling.

[RadiationTherapy]

9. You probably ought have just mumbled it to yourself then.

You made your comment and I criticized it as being weak. It could have been any topic, really. You said it was a "reason" (another of several...none of which you have yet listed) when it is, obviously, irrational and not a "reason" at all.

I am basing my accusation of your "false sense..." on your first comment which served only your ego gratification for your choice and related in no way to the article in the OP. Your second comment went so far off of the deep end and into insults so quickly, that I found it unlikely for there to be anything worthwhile at the link you posted. Maybe I will read it another time, but in the context of your second comment, it is not of interest to me.

And since your initial comment was so innocent - so bereft of any scorn toward those so "hive-minded" that they cannot stop using their technology for even 5 minutes to see how destructive it all is - please share some of the other reasons you do not have a cell phone. I am sure they are rational and you are capable of communicating them without insult.

[ecstatic]

3. Interesting. I'll keep the NFC option unchecked for now

On my phone it can be turned on or off by going to Settings - Wireless and Network.

[RadiationTherapy]

6. Can you tell us more about the "NFC" option?

What it is and why it ought be "on" or "off"?

[MineralMan]

7. Boy, am I glad I only use rotary dial phones, then...

I assume one can turn off this "Android Beam" if one wishes.