{"id":95823,"date":"2020-10-03T13:42:45","date_gmt":"2020-10-03T11:42:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah"},"modified":"2020-10-03T13:42:45","modified_gmt":"2020-10-03T11:42:45","slug":"google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","title":{"rendered":"Google divulguera des informations sur les vuln\u00e9rabilit\u00e9s dans les appareils Android tiers","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La soci\u00e9t\u00e9 Google <noindex><a rel=\"nofollow\" href=\"https:\/\/security.googleblog.com\/2020\/10\/announcing-launch-of-android-partner.html\">pr\u00e9sent\u00e9e<\/a><\/noindex> l'initiative  <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list\">Vuln\u00e9rabilit\u00e9 des partenaires Android<\/a><\/noindex>, dans le cadre duquel il est pr\u00e9vu de r\u00e9v\u00e9ler des informations sur les vuln\u00e9rabilit\u00e9s des appareils Android de divers fabricants OEM. L'initiative rendra plus transparent la transmission des informations sur les vuln\u00e9rabilit\u00e9s sp\u00e9cifiques aux firmwares modifi\u00e9s par des tiers aux utilisateurs. <\/p>\n<p>Jusqu'\u00e0 pr\u00e9sent, les rapports officiels sur les vuln\u00e9rabilit\u00e9s (Bulletins de s\u00e9curit\u00e9 Android) ne refl\u00e9taient que les probl\u00e8mes li\u00e9s au code source principal propos\u00e9 dans le d\u00e9p\u00f4t AOSP, sans prendre en compte les probl\u00e8mes sp\u00e9cifiques aux modifications des fabricants OEM. D\u00e9j\u00e0 <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list?q=&#038;can=1\">r\u00e9v\u00e9l\u00e9s<\/a><\/noindex> les probl\u00e8mes concernent des fabricants tels que ZTE, Meizu, Vivo, OPPO, Digitime, Transsion et Huawei. <\/p>\n<p>Parmi les probl\u00e8mes identifi\u00e9s : <\/p>\n<ul>\n<li class=\"l\"> Dans les appareils Digitime, au lieu de v\u00e9rifier les autorisations suppl\u00e9mentaires pour acc\u00e9der \u00e0 l'API du service d'installation des mises \u00e0 jour OTA, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=19&#038;q=&#038;can=1\">un mot de passe cod\u00e9 en dur a \u00e9t\u00e9 utilis\u00e9, permettant \u00e0 un attaquant d'installer silencieusement des paquets APK et de modifier les droits d'acc\u00e8s de l'application.<\/a><\/noindex> Dans un navigateur alternatif populaire aupr\u00e8s de certains fabricants OEM,\n<li class=\"l\"> le gestionnaire de mots de passe <noindex><a rel=\"nofollow\" href=\"http:\/\/phoenix-browser.com\/\">Phoenix<\/a><\/noindex> a \u00e9t\u00e9 impl\u00e9ment\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=7&#038;q=&#038;can=1\">sous forme de code JavaScript, ex\u00e9cut\u00e9 dans le contexte de chaque page. Un site contr\u00f4l\u00e9 par un attaquant pouvait obtenir un acc\u00e8s complet au stockage des mots de passe de l'utilisateur, pour le chiffrement duquel un algorithme peu fiable, DES, et une cl\u00e9 cod\u00e9e en dur \u00e9taient utilis\u00e9s.<\/a><\/noindex> L'application System UI sur les appareils Meizu\n<li class=\"l\"> t\u00e9l\u00e9chargeait <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=9&#038;q=&#038;can=1\">du code suppl\u00e9mentaire depuis le r\u00e9seau sans chiffrement ni v\u00e9rification de la connexion. Lors du contr\u00f4le du trafic HTTP de la victime, l'attaquant pouvait ex\u00e9cuter son propre code dans le contexte de l'application.<\/a><\/noindex> Sur les appareils Vivo,\n<li class=\"l\"> la m\u00e9thode checkUidPermission de la classe PackageManagerService a \u00e9t\u00e9 modifi\u00e9e pour accorder des autorisations suppl\u00e9mentaires \u00e0 certaines applications, m\u00eame si ces autorisations n'\u00e9taient pas mentionn\u00e9es dans le fichier de manifeste. Dans une version, la m\u00e9thode accordait toutes les autorisations aux applications avec l'identifiant com.google.uid.shared. Dans une autre version, pour accorder des autorisations, une v\u00e9rification des noms de paquets \u00e9tait effectu\u00e9e \u00e0 partir d'une liste. <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=11&#038;q=&#038;can=1\">La soci\u00e9t\u00e9 Google a lanc\u00e9 une initiative<\/a><\/noindex> \ud83e\udd47Google r\u00e9v\u00e9lera des informations sur les vuln\u00e9rabilit\u00e9s des appareils Android tiers | ProHoster\n <\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53825\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 Android Partner Vulnerability, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 OEM-\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u043c \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0414\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u0430\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (Android Security Bulletins) \u043e\u0442\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-95823","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google r\u00e9v\u00e9lera les informations sur les vuln\u00e9rabilit\u00e9s des appareils Android tiers | ProHoster","description":"L'entreprise Google a lanc\u00e9 une initiative","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-03T11:42:45+00:00","article:modified_time":"2020-10-03T11:42:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95823","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:57:46","updated":"2022-09-28 21:44:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/95823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=95823"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/95823\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=95823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=95823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=95823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}