{"id":95823,"date":"2020-10-03T13:42:45","date_gmt":"2020-10-03T11:42:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah"},"modified":"2020-10-03T13:42:45","modified_gmt":"2020-10-03T11:42:45","slug":"google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","title":{"rendered":"Google wird Informationen \u00fcber Schwachstellen in Drittanbieter-Android-Ger\u00e4ten offenlegen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Das Unternehmen Google <noindex><a rel=\"nofollow\" href=\"https:\/\/security.googleblog.com\/2020\/10\/announcing-launch-of-android-partner.html\">hat<\/a><\/noindex> Initiative  <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list\">Android Partner Vulnerability<\/a><\/noindex>, im Rahmen dessen geplant ist, Informationen \u00fcber Sicherheitsanf\u00e4lligkeiten in Android-Ger\u00e4ten verschiedener OEM-Hersteller offenzulegen. Die Initiative wird die Transparenz dar\u00fcber erh\u00f6hen, wie Benutzer \u00fcber sicherheitsspezifische Vulnerabilit\u00e4ten informiert werden, die in modifizierten Firmware-Versionen von Drittanbietern vorhanden sind. <\/p>\n<p>Bisher wurden in den offiziellen Berichten \u00fcber Sicherheitsanf\u00e4lligkeiten (Android Security Bulletins) nur Probleme im Hauptcode, der im AOSP-Repository angeboten wird, erfasst, w\u00e4hrend Probleme, die spezifisch f\u00fcr Modifikationen von OEM-Herstellern sind, unber\u00fccksichtigt blieben. Bereits <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list?q=&#038;can=1\">offenbare<\/a><\/noindex> Probleme betreffen Hersteller wie ZTE, Meizu, Vivo, OPPO, Digitime, Transsion und Huawei. <\/p>\n<p>Zu den festgestellten Problemen geh\u00f6ren: <\/p>\n<ul>\n<li class=\"l\"> In Ger\u00e4ten von Digitime wurde anstelle einer \u00dcberpr\u00fcfung zus\u00e4tzlicher Berechtigungen f\u00fcr den Zugriff auf die API des OTA-Update-Dienstes <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=19&#038;q=&#038;can=1\">ein<\/a><\/noindex> hartcodierter Passwort verwendet, der es Angreifern erm\u00f6glicht, unauff\u00e4llig APK-Pakete zu installieren und die Zugriffsrechte f\u00fcr die Anwendung zu \u00e4ndern.\n<li class=\"l\"> In einem bei einigen OEM-Herstellern beliebten alternativen Browser <noindex><a rel=\"nofollow\" href=\"http:\/\/phoenix-browser.com\/\">Phoenix<\/a><\/noindex> wurde der Passwortmanager <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=7&#038;q=&#038;can=1\">in Form von JavaScript-Code umgesetzt, der im Kontext jeder Seite ausgef\u00fchrt wird. Eine von Angreifern kontrollierte Website konnte vollen Zugriff auf den Passwortspeicher des Benutzers erhalten, f\u00fcr dessen Verschl\u00fcsselung unsichere Algorithmen wie DES und ein hartcodierter Schl\u00fcssel verwendet wurden.<\/a><\/noindex> Die System UI-Anwendung auf Meizu-Ger\u00e4ten\n<li class=\"l\"> lud <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=9&#038;q=&#038;can=1\">zus\u00e4tzlichen Code aus dem Internet ohne Verschl\u00fcsselung und Validierung der Verbindung. Bei der \u00dcberwachung des HTTP-Verkehrs des Opfers konnte der Angreifer seinen Code im Kontext der Anwendung ausf\u00fchren.<\/a><\/noindex> In Vivo-Ger\u00e4ten wurde\n<li class=\"l\"> die Methode checkUidPermission der Klasse PackageManagerService <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=11&#038;q=&#038;can=1\">vereinfacht<\/a><\/noindex> um einigen Anwendungen zus\u00e4tzliche Berechtigungen zu gew\u00e4hren, selbst wenn diese Berechtigungen nicht in der Manifestdatei aufgef\u00fchrt sind. In einer Version gew\u00e4hrte die Methode allen Anwendungen mit der ID com.google.uid.shared beliebige Berechtigungen. In einer anderen Version wurde die Berechtigungsvergabe durch Abgleich von Paketnamen in einer Liste durchgef\u00fchrt.\n <\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Quelle: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53825\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 Android Partner Vulnerability, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 OEM-\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u043c \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0414\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u0430\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (Android Security Bulletins) \u043e\u0442\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-95823","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/de\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"de_DE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/de\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google wird Informationen \u00fcber Sicherheitsanf\u00e4lligkeiten in Drittanbieter-Android-Ger\u00e4ten offenlegen | ProHoster","description":"Das Unternehmen Google hat eine Initiative vorgestellt","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-03T11:42:45+00:00","article:modified_time":"2020-10-03T11:42:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95823","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:57:46","updated":"2022-09-28 21:44:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/95823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=95823"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/95823\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=95823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=95823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=95823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}