4 ms·
Samsung always has a grand vulnerability each year. Like clockwork! In 2015, a vulnerability in Samsung's SwiftKey keyboard was discovered that allowed attack
by neuromason1 4y ago
Samsung always has a grand vulnerability each year. Like clockwork!
In 2015, a vulnerability in Samsung's SwiftKey keyboard was discovered that allowed attackers to remotely execute code on the device.
In 2016, researchers discovered a flaw in Samsung's Knox security software that could allow an attacker to escalate privileges and gain root access to the device.
In 2017, a vulnerability was discovered that allowed attackers to take control of Samsung's SmartCam cameras.
In 2018, researchers found a flaw in Samsung's Secure Boot feature that allowed attackers to install malicious firmware on the device.
In 2019, researchers discovered a vulnerability in Samsung's Galaxy S10 fingerprint scanner that allowed anyone to unlock the phone with a 3D printed fingerprint.
- ChuckNorris89 4y agoSure, but which consumer products don't have security vulnerabilities discovered? That's like pointing at water and blaming it it's wet. Vulns are part and parcel of products running any kind of SW. As long as the manufacturer acknowledges it and pushes a prompt fix we should be good.
- bell-cot 4y agoSadly, it sounds like Samsung has little interest in "fix", and no interest whatever in "prompt".
- prox 4y agoBut why are they so reluctant? What’s the issue here? They aren’t a poor backwater company afaik.
- imchillyb 4y agoNo. Critical system vulnerabilities are few and far between for most companies. Samsung has much greater than average occurrences of critical root level vulnerabilities.
- Spark_Ed 4y agoI've stopped buying anything Samsung because their quality control has become non-existant. My S22 ultra has a major bug that causes the screen to no longer update until I screenshot my way to the restart button. (Their response is trade in for an S23, but at my expense). I've never had a TV fail before, much less within two years. When I first put it together, it seemed like it was designed to fail. When they do, repair means either be charged $300 for a $10 fiber optic cable or $400 for a new output box. Any appliance repair person worth their salt would tell you to never buy Samsung appliances. They're the most prone to failure, most expensive to repair. They try to appeal to consumers by appearing like a luxury brand, while having bottom of the barrel engineering inside. I am avoiding anything Samsung until their track record turns around completely.
- lwhi 4y agoI've had absolutely no problem with my Samsung since the S8 ( followed by S10 plus, S22 plus)
- SketchySeaBeast 4y agoPossibly, but Samsung is the 2nd most popular phone manufacturer on the planet. It stands to reason that with the level of visibility they'd have a lot of eyes on them to find these things. That list provided at the top is also a bunch of different devices and entirely different types of electronics, which again is an argument that the bigger the market the more likely that something will be found.
- kube-system 4y agoThe reason that most software does not have known vulnerabilities is not because it is secure, but because nobody has looked.
- 4y ago
- lallysingh 4y agoApparently that clock stopped for a few years.
- RealStickman_ 4y agoThey took a Corona break
- ChuckNorris89 4y agoWhich would be ironic as the pandemic WFH years saw a huge spike in cybercrime and security related incidents on all fronts.
- thinkingemote 4y agoWhy is this? Id be interested to read the reasons why. At the top of my head it's WFM opening up attack surfaces but it could be that hackers with more free time hacked more. Sociological reasons are more interesting for me.
- wongarsu 4y agoMultiple industries laid off large parts of their workforce. US unemployment trippled, and more tourist heavy countries fared even worse. One of the biggest drivers of crime is "it was the best option available at the time", and most cybercrime isn't highly skilled and fairly accessible. To make matters worse, "regular" crime struggled at the same time. It's harder to break into people's homes if they are at home all day, and you can't mug them in a dark alley either, neither can you pickpocket tourists.
- cronix 4y agoIn some forums I lurk in there was some hubub about massive holes in security that were opened up via people who are used to working in an environment with IT support (somewhat secure, depending), etc, to people trying to figure everything out at home on their own and using new tools (both software and hardware) to do it. Don't know how accurate it is but it makes some logical sense to me.
- webdoodle 4y agoIt's almost like it's planned obsolescence...
- yaomtc 4y agoHuh? SwiftKey was never owned by Samsung. I don't think they even had Samsung-specific builds
- mburns 4y agocontext: https://techcrunch.com/2015/06/17/no-its-samsung-not-swiftkey-that-is-to-blame-for-this-keyboard-security-scare/ https://techcrunch.com/2015/06/17/no-its-samsung-not-swiftke...
- asciii 4y ago> Although Samsung told NowSecure in March that it had sent wireless carriers a fix which could be transmitted to the phones, and not to go public on it for three months, Samsung did nothing about it. As if written today, even though it’s 8 years ago lol!
- deleted 4y ago[deleted]
- fencepost 4y agoI believe the Samsung keyboard was linked with Swype, and I believe it predated SwiftKey (or at least predated swipe-based input in SwiftKey).
- narrator 4y agoThe 3d-printed fingerprint one is not scary since it requires physical access, a 3-d printer and your fingerprint.