NFC flaw allows easy hacking of Android and Nokia phones
posted by Michael H. / Jul 25, 2012, 12:52 PM
Of course, as we said, the attacking device (either a standalone chip, or other NFC-enabled device) has to be just a few centimeters from the target device in order to use the NFC exploit. The hack works by beaming malicious code wirelessly to the target device, and once deployed the code will exploit a known vulnerability through files or webpages in a document reader or browser, or even in the operating system itself. So, essentially, the NFC exploit is really just an extremely easy delivery system for malicious code rather than a direct exploit of the systems.
security features of Jelly Bean factor into this. The exploit was also shown on the Nokia N9. The basic problem is that once NFC interactions are enabled (default on with Android, but default off in MeeGo), all files are automatically accepted without any options by users to refuse files. Since files are automatically accepted, it makes it much easier to load malicious code on a target device, assuming you can get close enough to do so.The exploit was shown on a Nexus S running Android 2.3 Gingerbread, and a Galaxy Nexus running Android 4.0 Ice Cream Sandwich. It's unclear how the new
source: Ars Technica
Posts: 2137; Member since: Jan 06, 2011
hmm.. one seemingly easy solution would be to enforce user permission as an option… that way users would have to check the screen and agree to anything nfc-related. it would not be as ideally easy, but it would solve the all-access problem
posted on Jul 25, 2012, 1:20 PM 5
Posts: 101; Member since: Jul 19, 2012
Even then, you still only have a password guarded connection. Encryption would be awesome, but would limit the capabilities of NFC to where it would be pointless to have it. New tech is always going to have flaws.
posted on Jul 25, 2012, 1:26 PM 0
Posts: 101; Member since: Jul 19, 2012
This really isn't too major of an issue seeing that distance is the biggest issue. On top of that the NFC would have to be on and I'm willing to bet (for right now) most people won't even be using NFC for a while until more support for it comes later on.
posted on Jul 25, 2012, 1:25 PM 1
Posts: 32; Member since: Jul 13, 2012
u r right... most people dont use NFC... but majority of users dont even know what NFC is.. this is where problem arise... as they dont know what it is.. NFC is turned on(by default on Android) & can be accessed by hackers..... more users know about the TECH the tight the security of the device can be obtained......
posted on Jul 26, 2012, 1:12 AM 0
Posts: 290; Member since: Jan 13, 2012
Some click-baiting headline... android and "Nokia" phones, when in fact it is one model only, which even has the functionality off as default. And Android is an OS, Nokia a manufacturer, so combining them makes no sense. Please change this headline to "Android and MeeGo phones" and make better headlines in the future...
posted on Jul 25, 2012, 3:37 PM 3
Posts: 84; Member since: Jul 23, 2012
It is a bit dangerous once more and more people used NFC as a Credit or Debit Card. Hope Nokia could strengthen the security and introduce the NFC payments. This will attract those busy people. At the same time Nokia can venture through the hardship like what it has happen now.
posted on Jul 25, 2012, 6:04 PM 1
Posts: 1; Member since: Feb 12, 2013
Hi everybody I recently made an app for reset Cards plus more management tools for mifare cards. I tested it and it is working without error with all types of mifare cards. I suggest you to download and test it by google play. you can find it by its name in your phone store. Its name in your phone store is: “NFC Ultra Ticket Resetter” If you download the test project it is free. Please let me know your comments thanks
posted on Feb 12, 2013, 6:55 AM 0
Send a warning to post author
Send a warning to Selected user.
The user has 0 warnings currently.
Next warning will result in ban!
Ban user and delete all posts
Message to PhoneArena moderator (optional):