440 Felstead Road, Northriding
Johannesburg, South Africa
+27 11 066 2919
+27 76 946 0258
info@tech-chat.co.za
design@tech-chat.co.za

How the Spectre CPU flaw affects iOS and Android phones and tablets

Intel may have dominated most of the news surrounding the kernel bug in processors, but it’s not just Windows and Macs that are at risk. In addition to Meltdown, there is also a “branch target injection” bug called Spectre that affects mobile ARM processors found in iOS and Android phones, tablets, and other devices that could also expose your data. Here’s everything we know about it so far.

This post has been updated with information from Google about protection against possible Spectre attacks that shouldn’t impact performance.

[ Further reading: Meltdown and Spectre FAQ: Fix for Intel CPU flaws could slow down PCs and Macs ]

Wait, now my phone is at risk too?

Kind of. Google’s Project Zero team uncovered the Spectre bug as part of its larger investigation into CPU security and has already taken steps to mitigate the risk. However, even if you have a phone that’s vulnerable, Google notes that “exploitation has been shown to be difficult and limited on the majority of Android devices.”

Apple has been mum on Spectre and how it affects iOS devices, but presumably the risk will be equally small.

Adam Patrick Murray/IDG

Your Google Pixel 2 XL was already patched, as long as you have automatic updates turned on.

Are any phones at more risk?

The newest Android phones are in much better shape than older ones. Google’s latest security patch, which was released in December, “includes mitigations reducing access to high precision timers that limit attacks on all known variants on ARM processors.” That means all Pixel phones have been patched (assuming automatic updates are turned on), as well as Nexus 5X and 6P, as well as the Pixel C tablet.

How can it be fixed in non-Google phones?

Just like Meltdown, Spectre can only be patched via software. Some newer Android phones (such as the Samsung Galaxy S8 and Note 8) have already been updated, and other manufacturers should start pushing out their own updates within the next few weeks, as well as Apple’s iOS devices. However, many Android phones will likely remain vulnerable.

What if my phone doesn’t get updates anymore?

A hacker could potentially trick an otherwise safe app on your phone into handing over your personal info such as passwords and encryption keys. However, an attacker would need access to your unlocked phone as Spectre is unlikely to be implemented or triggered remotely.



Source link

Article

Reviewed by on

Rating: 8.7 out of 10


Leave a Reply

Your email address will not be published. Required fields are marked *

%d bloggers like this: