Original topic:

Qualcomm Snapdragon devices at risk.

(Topic created on: 08-08-2020 10:25 PM)
393 Views
Anikroyale
Expert Level 5
Options
Others

Many security flaws have been discovered in Qualcomm Snapdragon processors. As per the report, the flaws arise from the Hexagon SDK used to prepare DSP related code and let hackers spy on Android devices as well as steal data from them. DSPs are SoC units which are responsible for image processing, telecommunications and audio signal receptions. Refer to these links for more information:

 

https://www.bleepingcomputer.com/news/security/nearly-50-percent-of-all-smartphones-affected-by-qual...

 

https://www.news18.com/news/tech/over-40-smartphones-at-risk-due-security-issues-on-qualcomms-snapdr...

 

https://www.indiatimes.com/technology/news/millions-of-android-devices-at-risk-due-to-security-flaws...

 

Now, my question to those people, who just for the sake of a little gain in performance, signed a petition to ban Exynos, where will you go now? I believe you will not buy Snapdragon after this, and Exynos is the option if you buy Samsung devices. Will you still buy Snapdragon devices? Or will you gain some sense and buy devices which have DSP security in their processors? Comment your thoughts down below.

15 Comments
帕里克
Expert Level 1
Others
😀😀😀 good one. i knew it from first exynos released. thats why Samsung had developed its own processor. in early times when i say it to people, they don't believe it
Abdul_Rahman
Active Level 9
Others
So that's why Samsung manufacturing exynos processors for thier customers. Samsung is most trusted brand in India.It never cheat with us .
Others
yeah exynos might be slow but it is safe
Š
Expert Level 5
Others
Qualcomm have found the solution for the vulnerabilities and informed mobile manufacturers to send out security patches.
Till then devices are at risk.
But they need access to your device first through third party application from non trusted source.
As long the user dont download and install pirated apps they are safe.
Anikroyale
Expert Level 5
Others

These are hardware level issues, cannot be addressed via software updates.  Sometime ago, Intel had similar issues, which are fixed in the current generation of CPUs, but the older generations are still vulnerable, and Intel could not do anything. This issue can be masked, but cannot be removed, which means that these devices will be at risk, no matter what Qualcomm does.

Š
Expert Level 5
Others
Are you sure you have read those articles before posting or copy pasted only reading headlines?
Anikroyale
Expert Level 5
Others

I said that these are not proper "fixes", these are just closing the backdoors which lead to these flaws and trying to prevent hackers from attacking, but these hardware level issues cannot be addressed so simply, you have to make new CPUs to resolve these. Hackers can break the security and access the backdoors.

Š
Expert Level 5
Others
The problem is in the codes of the DSP chip. It can be changed by the manufacturer qualcomm and OEMs if they have permission.
Š
Expert Level 5
Others
https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/amp/

This is the original article. All other you have posted is quoting it. Check it.