{"id":95823,"date":"2020-10-03T13:42:45","date_gmt":"2020-10-03T11:42:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah"},"modified":"2020-10-03T13:42:45","modified_gmt":"2020-10-03T11:42:45","slug":"google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","title":{"rendered":"O Google revelar\u00e1 informa\u00e7\u00f5es sobre vulnerabilidades em dispositivos Android de terceiros","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A empresa Google <noindex><a rel=\"nofollow\" href=\"https:\/\/security.googleblog.com\/2020\/10\/announcing-launch-of-android-partner.html\">apresentou<\/a><\/noindex> iniciativa  <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list\">Vulnerabilidade do Parceiro Android<\/a><\/noindex>, na qual planeja-se divulgar informa\u00e7\u00f5es sobre vulnerabilidades em dispositivos Android de v\u00e1rios fabricantes OEM. A iniciativa tornar\u00e1 mais transparente a transmiss\u00e3o de informa\u00e7\u00f5es sobre vulnerabilidades espec\u00edficas para firmware modificado por terceiros aos usu\u00e1rios. <\/p>\n<p>At\u00e9 agora, os relat\u00f3rios oficiais sobre vulnerabilidades (Android Security Bulletins) refletiam apenas problemas no c\u00f3digo principal fornecido no reposit\u00f3rio AOSP, mas n\u00e3o levavam em conta problemas espec\u00edficos de modifica\u00e7\u00f5es de fabricantes OEM. J\u00e1 <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list?q=&#038;can=1\">divulgadas<\/a><\/noindex> as quest\u00f5es envolvem fabricantes como ZTE, Meizu, Vivo, OPPO, Digitime, Transsion e Huawei. <\/p>\n<p>Entre os problemas identificados: <\/p>\n<ul>\n<li class=\"l\"> Nos dispositivos Digitime, em vez de verificar as permiss\u00f5es adicionais para acessar a API do servi\u00e7o de instala\u00e7\u00e3o de atualiza\u00e7\u00f5es OTA, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=19&#038;q=&#038;can=1\">foi usado<\/a><\/noindex> uma senha embutida, permitindo que um invasor instalasse APKs sorrateiramente e alterasse as permiss\u00f5es do aplicativo.\n<li class=\"l\"> No popular navegador alternativo utilizado por alguns fabricantes OEM, <noindex><a rel=\"nofollow\" href=\"http:\/\/phoenix-browser.com\/\">Phoenix<\/a><\/noindex> o gerenciador de senhas <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=7&#038;q=&#038;can=1\">foi implementado<\/a><\/noindex> na forma de c\u00f3digo JavaScript, executado no contexto de cada p\u00e1gina. Um site controlado pelo atacante poderia obter acesso total ao armazenamento de senhas do usu\u00e1rio, onde algoritmos de criptografia inseguros DES e uma chave embutida eram utilizados.\n<li class=\"l\"> O aplicativo System UI nos dispositivos Meizu <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=9&#038;q=&#038;can=1\">carregava<\/a><\/noindex> um c\u00f3digo adicional da rede sem criptografia e verifica\u00e7\u00e3o de conex\u00e3o. Ao monitorar o tr\u00e1fego HTTP da v\u00edtima, o atacante poderia executar seu c\u00f3digo no contexto do aplicativo.\n<li class=\"l\"> Nos dispositivos Vivo, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=11&#038;q=&#038;can=1\">foi modificado<\/a><\/noindex> o m\u00e9todo checkUidPermission da classe PackageManagerService para conceder permiss\u00f5es adicionais a alguns aplicativos, mesmo que essas permiss\u00f5es n\u00e3o estivessem especificadas no arquivo de manifesto. Em uma vers\u00e3o, o m\u00e9todo concedia quaisquer permiss\u00f5es a aplicativos com o identificador com.google.uid.shared. Em outra vers\u00e3o, a verifica\u00e7\u00e3o de permiss\u00f5es era feita comparando nomes de pacotes com uma lista.\n <\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53825\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 Android Partner Vulnerability, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 OEM-\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u043c \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0414\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u0430\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (Android Security Bulletins) \u043e\u0442\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-95823","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google ir\u00e1 revelar informa\u00e7\u00f5es sobre vulnerabilidades em dispositivos Android de terceiros | ProHoster","description":"A empresa Google apresentou a iniciativa","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-03T11:42:45+00:00","article:modified_time":"2020-10-03T11:42:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95823","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:57:46","updated":"2022-09-28 21:44:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/95823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=95823"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/95823\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=95823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=95823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=95823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}