Making Tech Headlines · Page 3
GhostMap Needs No Permission to Make Android Practice Restarting Forever
· New York time
A specially crafted Android app can exploit the GhostMap flaw to force a device into a persistent boot loop, according to security reporting. The app requires no permissions and only needs to be installed for the attack to work. A boot loop repeatedly restarts the phone, preventing it from reaching the normal screen where its owner can use it. That makes the weakness particularly disruptive: the device is not merely displaying an unwanted ad or asking for one more alert. It is stuck attempting to become usable. The lack of a permission request also removes a familiar warning sign. People have grown accustomed to questioning why a simple app wants contacts, a microphone or location access. Here the dangerous moment comes earlier, when the app is installed at all. The polite request never arrives because the attacker does not need it for this technique. That does not mean every app without a permission prompt is malicious. It does mean a quiet installation screen is not a guarantee that all is well. Android's helpful little permission dialogue has spent years teaching users to look for suspicious questions. GhostMap's nasty trick is to skip the interview and put the phone directly into a rehearsal of its own opening scene.
Read this story in the full newspaper →Satire. Not factual reporting. Read the original reporting from the linked publishers.