LightBlog

lundi 24 octobre 2016

New Rowhammer Exploits use Hardware Vulnerabilities to Root LG, Samsung, and Motorola Devices

Google is constantly at war with hackers seeking to maliciously exploit security vulnerabilities in their products. Back in the middle of 2014, Google assembled a team of security analysts called 'Project Zero' to report zero-day exploits to the company so they can be patched before any nefarious third-party can take advantage of the undisclosed security hole. One such vulnerability, dubbed the 'Rowhammer' exploits, involves repeatedly accessing a row of memory to cause 'bit-flips' in adjacent rows of memory. This exploit occurs in some DRAM devices and can be used to gain read-write privileges to all of physical memory even within a user-space process.

Researchers from Carnegie Mellon and Intel Labs disclosed this bit-flip exploit in certain DRAM devices manufactured in 2012-2013. At the time, however, the researchers believed that Rowhammer was not readily exploitable due to it relying on "chance hardware faults" that were mostly repelled by adapting some advanced memory-management features. But in March of 2015, Google's Project Zero discussed possible methods of exploiting this DRAM vulnerability to gain kernel privileges, however they were unsure to what extent this vulnerability could be used on other machines or operating systems. It now appears that various Android devices from LG, Samsung, and Motorola are exploitable via a new proof-of-concept attack named 'Drammer.' The new attack demonstrates a reliable method of attaining root access from a user-space app without any permissions.

One of the security researchers responsible for the proof-of-concept, Victor van der Veen, states there isn't a "quick software update" that can protect users from these types of attacks. While the attack is not completely consistent on all of the tested devices, the success rate of the exploit is still alarming. So far, the researchers have stated they were able to root the Nexus 4, Nexus 5, LG G4, 2013 Moto G, 2014 Moto G, Galaxy S4, Galaxy S5, and the OnePlus One. To give you an idea of the exploit's consistency, the team states they were able to break into 12 out of 15 Nexus 5 smartphones that they tested. On the other hand, the team was able to successfully exploit only one out of two Samsung Galaxy S5 smartphones they could test.

The team has already disclosed the exploit to Google back in July of this year and were awarded $4,000 for their efforts. Since then, Google has been working on patching this critical vulnerability and informing Android OEMs on how to patch their devices. An update to patch this exploit is said to be included in the upcoming November security update. For those of you who have devices that will not be receiving the November security update, the researchers state that they will be publishing an application in the Play Store so you can test to see if your device is vulnerable.

The team has even uploaded a video to YouTube to demonstrate the hack happening on a Nexus 5 running Android 6.0.1 with the latest October security patches.

Source: Ars Technica



from xda-developers http://ift.tt/2eA7Htj
via IFTTT

Huawei Mate 9 Pro Rumored to Sport 4X Optical Zoom & Cost up to $1,300 (For Specced-out Variant)

We've known for a while that Huawei is preparing to launch their flagship for the year, and that it will be called the Huawei Mate 9. We recently talked about how this is the perfect time for the company to introduce the smartphone to the market because of the issue Samsung has been having with the Galaxy Note 7. Huawei has already been taking some of Samsung's smartphone market share in China, and this launch will likely take more from them.

A couple of weeks ago Evan Blass leaked some small press renders that claimed to show the front of Huawei's upcoming smartphone. We didn't get to see much detail here since they were so small, but we did learn that Huawei was planning to launch two different variants of the device. The rumor indicated that they would be going the flat/curved route that Samsung has been doing with the Galaxy S series for a couple of years.

This weekend though, we learned some additional information about the Pro (curved) variant of the Huawei Mate 9. If the rumors are true, the Huawei Mate 9 Pro will have a 5.9″ 1440p display, Kirin 960 SoC, 4GB of RAM, storage ranging from 64GB to 256GB, Android 7.0 installed out of the box, it'll be Daydream VR ready, and a similar rear camera setup to what we saw earlier this year with the Huawei P9 (with improved sensors).

Later that day, Evan tweeted out some additional information about what his sources are telling him for this variant. He says the Mate 9/Pro will feature a 4X optical zoom thanks to its rear-facing camera setup. Not only that, but we're told the most expensive version of the Mate 9 Pro will be priced at $1,300. We saw a lot of complaints about how much Samsung decided to charge for the Galaxy Note 7, and saw more complaints about how much Google is charging for the Pixel and Pixel XL. So we ask you:

Do you think $1,300 is too much to pay for a smartphone that has 256GB of internal storage, top internals and a 4X optical zoom rear camera setup?

Source: VentureBeat



from xda-developers http://ift.tt/2enspyY
via IFTTT

LG V20 Users Report Rear Camera Protective Glass is Brittle

Over the years, LG has not built up the best reputation when it comes to manufacturer defects of their products. When the LG G3 was released, many people were having the plastic frame around their phone cracking in multiple locations. This likely happened from prying the plastic cover off the back to swap out a battery, but it could happen to others from a small drop even if it was in a protective case.

It took LG a while to publicly confirm this was a manufacturing defect, but after that people were still having trouble getting the company's customer support to admit it so they could get a replacement. Then there was the bootloop issue that happened to so many LG G4 customers since the device was launched. This time, LG still chooses to refuse replacements if there were any visible scuffs on the phone even though the issue was software-related and well-known.

We haven't seen any massive amount of reports about a bootloop issue with the LG V20, but we are starting to see another manufacturing defect. On the 19th of this month, someone in the /r/LGV20 subreddit talked about how the protective glass on their rear camera cracked for seemingly no reason, and it was only 5 hours after they had taken it out of the box. The next day we saw the same thing happen after some test scratches were done to the glass on the JerryRigEverything YouTube channel.

Yesterday there was another person from the /r/LGV20 subreddit say the same thing happened to theirs after they used the rear LED flashlight for 30 minutes on an airplane. So far, we haven't seen any reports from this in the LG V20 forums here on XDA, but it has sparked a discussion about the issue. So if you have an LG V20, be careful about the rear camera protective glass, and be sure to let us know if this happens to you.

Source: /r/LGV20



from xda-developers http://ift.tt/2dCVnGO
via IFTTT

samedi 22 octobre 2016

No More BABBQ — Thanks for the Meat and the Memories!

As the BABBQ 16 comes to an end, we learned the sad news that this will be the last BABBQ. XDA has been a part of this yearly meet-up for the past 5 years, where we met everyone from software cooks to those enthusiasts willing to explore every corner. We've loved every moment of every year.

"This might be the end of the BABBQ, and possibly IDEAA, but the impact we've had will last for a very very long time"

Aaron Kasten

The BABBQ has hosted thousands of people over its lifespan, with dozens of booths and camps from all sorts of groups — software developers, OEMs and hardware manufacturers, and Android lovers from every corner of the world. We've had our XDA hangout spot every year, where we've shared stories and interacted with the community through chats and giveaways. If you've ever been to one of our booths, we hope you had a good time!

It's sad to see the Big Barbecue come to an end, and it will be missed. We'll always have fond memories of the insightful lectures from industry figures, the fireside chats and the friends we made through the halls of whatever convention center we happened to meet at that year. Tricycle races, RC robots roaming around, the pool parties where nobody actually used the pool — and the meat, oh, that sweet, sweet barbecue at the closing of every gathering. If you've been here, you know how much fun it has been. It might be no more, but the BABBQ has brought Android's new-found motto to life every year: be together, not the same.

We invite you to take a trip down memory lane and to check out our experience at the BABBQ through the years in the videos below!



from xda-developers http://ift.tt/2eF2Hmv
via IFTTT

Playing BeerBox at Android BBQ

XDA is holding a contest to giveaway a NextBit Robin here at the Big Android BBQ. The contest has people trying their hand at BeerBox VR. This Google cardboard app simulates drunk vision while you move around. We asked people to try to roll a ball into a cup. Turns out to be much harder than it looks.

Big thanks to UMi for sponsoring us at the Big Android BBQ!

Check them out at umidigi.com

 

 



from xda-developers http://ift.tt/2f3tVr9
via IFTTT

How do You Think the Pixel Will Change the Android Market?

The Pixel has been announced, widely reviewed, and is now shipping to early bird customers that dove into the purchase without second thoughts. This is a device that Google intends to highly influential, putting a lot of money on the line in the process.

But while the Pixel is a big release for Android, it also comes at quite a price, residing in the uppermost bracket of the market. With such an investment on Google's part, and with so much advertising and excitement behind this product and its features, plus what Google intends to do with its brand moving forward, we must expect some market repercussion. So we ask,

How will Google's Pixel phones influence or otherwise alter the smartphone market? What do you think will happen to Android phones, in particular? Is the Pixel going to be a success, or will the enthusiasm die out or the marketing fail to do its job over time?

Let us know your thoughts in the comments down below!



from xda-developers http://ift.tt/2euvlHw
via IFTTT

Google Silently Removed Mentions of an “HTC Cerberus” from Pixel XL Source Code

The "Made by Google" motto represents a dramatic shift in Google's attitude towards Android. Rather than cycle through its various OEM partners to co-produce a Nexus device, Google decided to take tighter control over the entire process of designing and developing their smartphones.

These efforts have resulted in the Google Pixel and Pixel XL which have been heavily marketed as the first pair of 'true' Google phones.

But what isn't mentioned in any Pixel marketing material is the fact that the phones are actually manufactured by HTC. Google is rather adamant that they retained control over both the hardware and software for the new Pixel devices, even going so far as to plaster a large Google logo on the back of the two smartphones. HTC has been relegated to the role of an Original Design Manufacturer (ODM) rather than co-engineering the device with Google. Indeed, it would seem that the working relationship between Google and HTC is akin to that of Apple and Foxconn. What many in the industry have dubbed the 'iPhone' of the Android world is thus similar in more ways than just the price.

While Google has contracted HTC to assemble the Pixel phones, Osterloh says the approach is no different than Apple's partnership with iPhone builder Foxconn. Flip the Pixel over and you'll see "Made by Google," another tip of the hat to Apple, which has long made much of the fact that its phones are "Designed by Apple in California." Osterloh says Google will never say the Pixel is co-engineered with anyone else. He proudly proclaims, "It's ours." – Rick Osterloh, chief of Google's hardware vision, speaking to Bloomberg

This working relationship is not foreign to either party in this mix. Google's Pixel C was the first "made by Google" device – and you will find absolutely no mention of any OEM partner in any press release, nor will you find any commits from OEM engineers in its source code. On the other hand, HTC has apt experience as an ODM while previously working for the likes of Sony Ericsson among others. Yet, there is some lingering doubt about how involved HTC truly was in the development of the two Pixel phones. The existence of a previously-unnoticed commit by an HTC engineer removing all mentions of an unknown "htc_cerberus" code name (coupled with Senior Recognized Developer Jcase's observations on the Pixels' bootchain) suggests that HTC contributed in some way to the software development of the two Google Pixels.


Laying the Seeds of Doubt 

Pixel XL Teardown by iFixit

Pixel XL Teardown by iFixit

The seeds of doubt about Google's level of control over the Pixel range has existed since before the phone's release. The first semi-decent leaked photos of the Pixel lead some Android journalists to speculate that the Pixel's seemingly large bezels were due to borrowing the HTC One A9's design. However, Google's statement that the Pixels' design are not based on any current HTC device are backed up by the iFixit teardown which revealed no evidence of the phone's manufacturing origin. Therefore, there's really no evidence to deny that Google created an original design for the Pixel devices.

But back in early September, David Ruddock of AndroidPolice speculated that the relationship between HTC and Google would be more close-knit than their future marketing would let on. Jean Baptiste Su of Forbes corroborated this claim after the Pixel launch by stating that the only truly fundamental difference between the previous Nexus devices and the current crop of Pixel phones is the lack of any OEM branding. If we were to reconcile the idea that Google was solely responsible for designing the hardware with the claim from the Forbes contributor that HTC's involvement is similar to that of previous Google-OEM arrangements, then we would have to conclude that HTC would have been involved in the early software development process for the Pixel devices.


'Cerberus'

Source: Pinterest

If you've ever flashed a factory image for one of Google's Nexus devices, then you've probably seen the code name for your Nexus device. Google has given each Nexus device a code name based on a marine animal which serves as an internal moniker for the development team until the company finalizes a name. For the Pixel devices, though, it's unclear what the naming convention will be given that the sample size is so small. The Pixel C is code named 'Dragon' in AOSP (or 'Ryu' if you look on the factory image page), for instance, while the Google Pixel and Pixel XL, are code named 'sailfish' and 'marlin' respectively.

The two Pixel smartphones follow the internal naming convention for Google Nexus devices, which makes sense given the timeline of reports that the Nexus program was dead. Though we do not know when exactly Google decided to re-brand the HTC Nexus devices as Google Pixel devices, there is strong support to the notion that Pixel phones began their life as Nexus phones given the reliability of the leaks this cycle and the Pixel code names fitting the Nexus naming convention. Thus, we are assuming that, perhaps for quite a bit of time in the Pixel phones' development cycle, HTC was involved much like any other OEM was involved with the development of the Nexus devices. There is not much in the way of direct evidence left behind in the software, but circumstantial evidence from two well-known developers backs up our claim.

htccerberus

First up, XDA Recognized Developer Bumble-Bee discovered an interesting commit in Marlin's source code from the beginning of August. The commit was submitted by an HTC software engineer and it made a single, seemingly inconsequential change – removing the "htc_cerberus" label from the file_contexts file under sepolicyfile_contexts is used to bind a label to a file/directory and can be used by user-space apps. In Marlin's file_contexts file, we can see that "HTC Cerberus" was a label for one of the A/B partitions on the device. Omitting the label doesn't seem to affect anything on the device, as the first public release of the Marlin's source code shows file_contexts without the label. This is speculation on our part, but perhaps this reference to "Cerberus" is related to some internal HTC code name that we are not yet aware of, perhaps a component of the device that was planned to be used or even an unknown device. At the very least, the existence of the commit by an HTC engineer suggests some level of involvement in the software between HTC and Google.

When we first received this information, we were unsure what it could potentially represent. But looking back at a tweet by @jcase (one of the developers behind Sunshine S-Off/Unlock), we started to feel more confident about our argument.

@jcase was able to look at the bootchain, the process your smartphone uses to boot up, and determined that it was fairly similar to the bootchain from an HTC device. To be more precise, he states that "it's a standard HTC bootchain with some hardening/changes." While this claim is mostly conjecture, @jcase's experience with the bootloaders on HTC devices gives some credence to his case. Plus, the fact that the bootchain seems to be an HTC creation lines up with the idea presented earlier that the Pixel devices were originally being developed as Nexus phones.

"Made by Google"

Google aimed to capture the smartphone market by competing directly with the likes of Samsung and Apple. They've picked a perfect time to pick up the mantle of the Android smartphone representative while Samsung is recovering from its Note 7 fiasco. But we'll have to wait and see whether or not their plan to tackle the iPhone will succeed. Depending on the success of the Pixel and Pixel XL, will Google go all in on the top-down approach they only recently committed to? Or will their partners still play a more closer-role than the company is letting on?

Cerberus image source



from xda-developers http://ift.tt/2dJCNQM
via IFTTT