Tomek Kondrat · Nov 30, 2013 at 01:00 pm

Google Nexus Devices Vulnerable to DoS Attacks, Protect Yourself with Simple App

Due to their expedient updates and lack of potentially vulnerable carrier and OEM addons, Nexus devices are considered to be among the safest Android devices. Being certified by Google mean a lot, but everything has some vulnerabilities, and newest Nexus devices are no exemption.

According to Romanian security researcher Bogdan Alecu, the Nexus lineup is vulnerable to a denial-of-service attacks based on a special type of SMS. This attack relies on Flash SMS, short messages displayed on the screen without being stored in the inbox. These are most often seen in pre-paid contract plans, used by a carrier to send messages with recent costs.

As it turns out, Flash SMS messages sent in rapid succession can cause some unexpected behavior like freezing, crashing, or even rebooting. The newest Nexus phones will reboot after approximately 30 messages sent in a short time. Users won’t be able to realize that they device was attacked without looking at the screen. Sometimes some data loss occur, so many important calls can be missed because of this.

Alecu claims that Google was alerted about this problem about a year ago and promised to fix it in Android 4.3. Unfortunately, they didn’t fulfill their promise, and the issue is still present in KitKat on the Nexus 5. The situation is even more abnormal, as non-Nexus device are unaffected. The security researcher claims that he tested almost 20 various devices, and only Nexus devices were vulnerable.

The Google Play Store offers plenty of apps that can send Flash SMS messages, including one made by Bogdan Alecu himself. Luckily, Alecu was kind enough to release a proof of concept application that protects Nexus devices from these attacks as well.

These DoS attacks that are described by Bogdan Alecu are not the most malicious and dangerous. An attacker can’t control your device. However, the potential for data loss, pranking, and even stalking may make this a rather annoying glitch. Hopefully, Google will look into this issue and fix it as soon as possible.

[Thanks to XDA Recognized Contributor D™ for the tip]
_________
Want something on the XDA Portal? Send us a tip!

Tomek Kondrat

eagleeyetom is an editor on XDA-Developers, the largest community for Android users. Tomek is the only Polish moderator on XDA Developers. He graduated from the University of Warmia and Mazury in Olsztyn with a degree in journalism and public communication in 2013. He's a big fan of football (not hand egg), post rock and cooking. A total addict of mobile technology, especially Android. Currently flashes dozens of custom ROMs on his OPO. View eagleeyetom's posts and articles here.
Mathew Brack · Jul 3, 2015 at 12:00 pm · 2 comments

The Atlas of XDA

A few weeks ago, we asked you "How Does Your Location Affect Your Life As A Power User?". In the days that followed, members from all over the world shared their stories and experiences of life across the globe. Allow me to introduce the true story of what it means to be a power user on this pale blue dot.   Index Africa & Oceania: Australia, Indonesia, Libya, Madagascar, New Zealand, Nigeria, South Africa, Americas: Brazil, Chile, Columbia, Costa Rica, Guatemala, Martinique, United...

XDA NEWS
Mario Tomás Serrafero · Jul 3, 2015 at 11:10 am · 3 comments

New Snapdragons: Some Context & Contrast

It hasn’t been a good year for Qualcomm so far. Every device featuring the Snapdragon 810 has had a less-than-stellar fate, be it because of overheating complaints or actual decreased sales. HTC is in a particularly worrisome situation, and Sony’s Z4 is slipping down Japanese charts just over a week after its release. The G Flex 2, Mi Note Pro and Z3+ all saw complaints as well. Even MediaTek is seemingly getting an advantage over this.   But a particularly...

XDA NEWS
Aamir Siddiqui · Jul 3, 2015 at 10:12 am · 1 comment

Google To Launch Next Gen Android One On July 14

The first gen of Android One devices to be launched in India in September 2014 were decent starter smartphones, featuring budget specs and a promise of fast updates. However, the phones did not pick up as big a response as Google hoped. Now, as per a report by The Economic Times, it appears that Google is rethinking their strategy towards Android One in India. The first gen Android One devices focused on first time smartphone users, but were flawed in...

XDA NEWS
Share This