{"id":95823,"date":"2020-10-03T13:42:45","date_gmt":"2020-10-03T11:42:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah"},"modified":"2020-10-03T13:42:45","modified_gmt":"2020-10-03T11:42:45","slug":"google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","title":{"rendered":"Google revelar\u00e1 informaci\u00f3n sobre vulnerabilidades en dispositivos Android de terceros","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La empresa Google <noindex><a rel=\"nofollow\" href=\"https:\/\/security.googleblog.com\/2020\/10\/announcing-launch-of-android-partner.html\">ha presentado<\/a><\/noindex> iniciativa  <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list\">Vulnerabilidad de Socios de Android<\/a><\/noindex>, en el marco de la cual se planea divulgar informaci\u00f3n sobre vulnerabilidades en dispositivos Android de varios fabricantes OEM. La iniciativa har\u00e1 m\u00e1s transparente la comunicaci\u00f3n de informaci\u00f3n sobre vulnerabilidades espec\u00edficas de firmware modificados por terceros a los usuarios. <\/p>\n<p>Hasta ahora, en los informes oficiales sobre vulnerabilidades (Boletines de Seguridad de Android) solo se reflejaban problemas en el c\u00f3digo base propuesto en el repositorio AOSP, pero no se consideraban los problemas espec\u00edficos de las modificaciones de los fabricantes OEM. Ya <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list?q=&#038;can=1\">divulgados<\/a><\/noindex> los problemas afectan a fabricantes como ZTE, Meizu, Vivo, OPPO, Digitime, Transsion y Huawei. <\/p>\n<p>Entre los problemas identificados: <\/p>\n<ul>\n<li class=\"l\"> En los dispositivos de Digitime, en lugar de verificar las credenciales adicionales para acceder al API del servicio de instalaci\u00f3n de actualizaciones OTA <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=19&#038;q=&#038;can=1\">se utiliz\u00f3<\/a><\/noindex> una contrase\u00f1a embebida, lo que permite a un atacante instalar APKs sin ser detectado y cambiar los permisos de la aplicaci\u00f3n.\n<li class=\"l\"> En un navegador alternativo popular entre algunos fabricantes OEM <noindex><a rel=\"nofollow\" href=\"http:\/\/phoenix-browser.com\/\">Phoenix<\/a><\/noindex> el gestor de contrase\u00f1as <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=7&#038;q=&#038;can=1\">se implement\u00f3<\/a><\/noindex> en forma de c\u00f3digo JavaScript, ejecutado en el contexto de cada p\u00e1gina. Un sitio controlado por el atacante podr\u00eda obtener acceso completo al almac\u00e9n de contrase\u00f1as del usuario, para cuyo cifrado se utilizaba un algoritmo d\u00e9bil como DES y una clave embebida.\n<li class=\"l\"> La aplicaci\u00f3n System UI en dispositivos Meizu <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=9&#038;q=&#038;can=1\">cargaba<\/a><\/noindex> c\u00f3digo adicional desde la red sin cifrado y verificaci\u00f3n de la conexi\u00f3n. Al monitorear el tr\u00e1fico HTTP de la v\u00edctima, el atacante podr\u00eda ejecutar su c\u00f3digo en el contexto de la aplicaci\u00f3n.\n<li class=\"l\"> En los dispositivos de Vivo hab\u00eda <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=11&#038;q=&#038;can=1\">redise\u00f1ado<\/a><\/noindex> m\u00e9todo checkUidPermission de la clase PackageManagerService que otorgaba permisos adicionales a ciertas aplicaciones, incluso si esos permisos no estaban especificados en el archivo de manifiesto. En una versi\u00f3n, el m\u00e9todo otorgaba cualquier permiso a aplicaciones con el identificador com.google.uid.shared. En otra versi\u00f3n, para otorgar permisos se verificaban los nombres de paquete de una lista.\n <\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fuente: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53825\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 Android Partner Vulnerability, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 OEM-\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u043c \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0414\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u0430\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (Android Security Bulletins) \u043e\u0442\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-95823","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/es\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/es\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google revelar\u00e1 informaci\u00f3n sobre vulnerabilidades en dispositivos Android de terceros | ProHoster","description":"La empresa Google present\u00f3 la iniciativa","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-03T11:42:45+00:00","article:modified_time":"2020-10-03T11:42:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95823","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:57:46","updated":"2022-09-28 21:44:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/95823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=95823"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/95823\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=95823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=95823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=95823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}