More than 500 million Android devices affected
For those who thought that after doing a Factory Reset on the Android (Restore Factory Data) equipment was completely without information CARE staff …, not quite!
According to the advanced news by ArsTechnica website even after doing a Factory Reset your Android it is still possible to retrieve authentication credentials, text messaging, e- mails, contacts, etc. Have you ever thought that if the sell, anyone can recover these your data?
>
Google is facing a big problem of security that need solving most urgently.
According to a study now published under the name Security Analysis of Android Factory Resets , carried out by Laurent Simon and Ross Anderson of Cambridge University, it is known that even doing a Factory Reset on the Android personal data is not completely erased.
Based on the study, it is estimated that over 500 million smartphones can not” clean “all the partitions where personal data are stored and over 630 million smartphones can not remove the information on all the internal SD cards where the videos are stored, photographs, and many other personal and private data of the user.
To get an idea of ”danger” in over 80% of cases you can retrieve the credentials from Facebook and Google using the encryption keys and mechanisms of brute force.
We estimate that up to 500 million devices may not properly sanitize Their data partition where credentials and other sensitive data are stored, and up to 630 million may not properly sanitize the internal SD card multimedia files where are Generally saved.
We found Could we recover Google credentials on all devices presenting a flawed factory reset. Full-disk encryption has the potential to mitigate the problem, but we found que factory reset the flawed leaves behind enough time for the encryption key to be recovered.
Simon Anderson and tested 21 smartphones five manufacturers, including Samsung, HTC and Nexus, with all Android versions ranging from 2.3 up to 4.3. Google has been contacted but so far there is no feedback on this case.
Via ArsTechnica
No comments:
Post a Comment