11–20 of 34 posts
"Warning: infected app! download and install our app to protect yourself!" thank god there is an app to protect... wait a minute... where have I seen these tactics used before...
Earlier quoted context omitted.
Correct ;-)
That's a universal network attack though, how is it an exclusive vulnerability to this app?
This one uses Javascript Bridge vulnerability to execute high privilege code in your Android. The attack code is javascript to be interpreted to Java calls in Android.
You wouldn't be able to do that in iPhone though.
Hmm.. interesting, well luckily I don't use Bing app, I don't even use Bing on a normal browser. It just sounds wierd to me for some reason .. "Ok Ima Bing that information right now!".
So it seems the story here is that in older versions of android, if you export a Java class to a webview with "addJavascriptInterface", the js code can get arbitrary code exec by calling exportedObject.getClass().forName("java.lang.Runtime").exec() or similar? And if you can mitm/spoof on public wifis, you can inject js to exploit this in apps that export to their webviews?
Google search is default, and for those looking for alternatives, there's also an excellent DuckDuckGo app.
Earlier quoted context omitted.
That's a universal network attack though, how is it an exclusive vulnerability to this app?
You would never be able to install an app without user click "install" etc. This one uses Javascript Bridge vulnerability to execute high privilege code in your Android. The attack code is javascript to be interpreted to Java calls in Android. You wouldn't be able to do that in iPhone though.
Earlier quoted context omitted.
You would never be able to install an app without user click "install" etc. This one uses Javascript Bridge vulnerability to execute high privilege code in your Android. The attack code is javascript to be interpreted to Java calls in Android. You wouldn't be able to do that in iPhone though.
Bit confused as to how this can't happen on iOS "just because," as iOS apps could be targeted in a similar way. Really the message here should be that SSL with certificate-pinning is a must for apps that inherently run in untrusted environments with an inability to easily inspect the security of the network traffic without MITMing it yourself. Wish this was a security feature on the app store -- if, in automated test…
Earlier quoted context omitted.
Bit confused as to how this can't happen on iOS "just because," as iOS apps could be targeted in a similar way. Really the message here should be that SSL with certificate-pinning is a must for apps that inherently run in untrusted environments with an inability to easily inspect the security of the network traffic without MITMing it yourself. Wish this was a security feature on the app store -- if, in automated test…
iOS apps cannot be targeted in this way because they don't have the JavaScript bridge.
iOS doesn't bridge Javascript to _Java_ which is why this particular attack wouldn't work. But the JSCocoa stuff is still pretty young, so wait and see ;)
It flashes saying that the bing App got root permission. I think that's disabled unless the phone was jailbroken.