lol, Microsoft need to learn how to write Android app, especially in Java programming
Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
21–30 of 34 posts
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#22So it seems the story here is that in older versions of android, if you export a Java class to a webview with "addJavascriptInterface", the js code can get arbitrary code exec by calling exportedObject.getClass().forName("java.lang.Runtime").exec() or similar? And if you can mitm/spoof on public wifis, you can inject js to exploit this in apps that export to their webviews?
This is exactly how it works. And a lot of apps use this JS bridging technic to make their app easy to maintain. Dirty hack becomes technical debt
Please disclose more technical detail
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#23i do not want to use bing any more. how can i protect my android phone?
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#24Well to be honest almost nobody on Android uses Bing..... Google search is default, and for those looking for alternatives, there's also an excellent DuckDuckGo app.
Um...Seems there are still 1m-5m downloads.
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#25lol, Microsoft need to learn how to write Android app, especially in Java programming
microsoft like c#,lol
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#26Please disclose more info about how to fix it, thx.
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#27Earlier quoted context omitted.
This is exactly how it works. And a lot of apps use this JS bridging technic to make their app easy to maintain. Dirty hack becomes technical debt
Please disclose more technical detail
It's a vulnerability on Android Webview component, which supports a "addJavascriptInterface" method. This method allows you to call the Java native method by using a Javascript object inside the webpage. And, there is a trick that can bypass the restriction on classes that JSInterface object could access. You can call any method in any Java class. Such as Java.lang.Runtime.exec. You can google "addJavascriptInterface vulnerability". It's not a new vulnerability, but lots of app haven't fix it yet.
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#28"There's a horrible vulnerability in the Bing app! ...but we're not going to give you any details." I hate stories like that.
google "addJavascriptInterface vulnerability"
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#29Well to be honest almost nobody on Android uses Bing..... Google search is default, and for those looking for alternatives, there's also an excellent DuckDuckGo app.
LOL, that's what I thought... Well there is a large number of apps also affected by this vulnerability. Some have 50m-100m downloads.
Re: Hackers can pwn your Android in 10 seconds, if you use Bing App in Starbucks
#30Earlier quoted context omitted.
That's a universal network attack though, how is it an exclusive vulnerability to this app?
You would never be able to install an app without user click "install" etc. This one uses Javascript Bridge vulnerability to execute high privilege code in your Android. The attack code is javascript to be interpreted to Java calls in Android. You wouldn't be able to do that in iPhone though.
Thx Zhongjie ;)