3 ms·
I like Android One devices and the complete freedom of choice they provide me, but the likehood and the severity of CPU vulnerabilites seem to be much higher wi
by krn 6y ago
I like Android One devices and the complete freedom of choice they provide me, but the likehood and the severity of CPU vulnerabilites seem to be much higher with Snapdragon chips.
Also, the security patches arrive much slower to Android than to iOS devices.
And I am especially concerned about ARM's TrustZone, which seems to be inferior to Apple's Secure Enclave.
- esperent 6y agoThis is the first exploit specific to snapdragon that I've ever heard of. Were there others?
- krn 6y agoMultiple Kernel Vulnerabilities Affecting All Qualcomm Devices (2020) https://blog.zimperium.com/multiple-kernel-vulnerabilities-affecting-all-qualcomm-devices/ https://blog.zimperium.com/multiple-kernel-vulnerabilities-a... The Road to Qualcomm TrustZone Apps Fuzzing (2019) https://research.checkpoint.com/2019/the-road-to-qualcomm-trustzone-apps-fuzzing/ https://research.checkpoint.com/2019/the-road-to-qualcomm-tr... QualPwn - Exploiting Qualcomm WLAN and Modem Over The Air (2019) https://blade.tencent.com/en/advisories/qualpwn/ https://blade.tencent.com/en/advisories/qualpwn/ QuadRooter: New Android Vulnerabilities in Over 900 Million Devices (2016) https://blog.checkpoint.com/2016/08/07/quadrooter/ https://blog.checkpoint.com/2016/08/07/quadrooter/
- fulafel 6y agoThose are software bugs thoughe except the WLAN one. But Apple has had same kind of WLAN firmware vulns. The software vulns demonstrate serious failures of the Qualcomm product package of course, and is only relevant from POV of how the fixes can be deployed.