Samsung Galaxy devices may have backdoor to user data

Samsung Galaxy devices may have backdoor to user data

Security researchers have discovered a ‘backdoor’ flaw on Samsung Galaxy devices where hackers can remotely access the devices and meddle with data.

The Free Software Foundation, creators of a free version of Android called Replicant OS, discovered that the proprietary program running on the applications processor in charge of handling the communication protocol with the modem actually implements a backdoor that lets the modem perform remote file I/O operations on the file system.

Paul Kocialkowski from the Free Software Association explained: “This program is shipped with the Samsung Galaxy devices and makes it possible for the modem to read, write, and delete files on the phone's storage. “On several phone models, this program runs with sufficient rights to access and modify the user's personal data” he added.

Kocialkowski said that "provided that the modem runs proprietary software and can be remotely controlled, that backdoor provides remote access to the phone's data, even in the case where the modem is isolated and cannot access the storage directly." “This is yet another example of what unacceptable behaviour proprietary software permits,” he said.