Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Android Privacy Security

Down the Rabbit Hole With a BLU Phone Infection (threatpost.com) 43

msm1267 writes: BLU phones, marketed as affordable Android devices, have recently been pulled from Amazon and other retailers after allegations the devices were infected with spyware and posed a privacy threat to users. This is the tale of one such victim who purchased 11 devices that instantaneously began serving pop-up ads and downloading unwanted applications. The phones were analyzed and the root of the issue in this case was uncovered.

Down the Rabbit Hole With a BLU Phone Infection

Comments Filter:
  • I wonder if stuff like this could be mitigated by BLU having the kernel drivers available, if not open-sourced, so people could make custom ROMs. Perhaps get LineageOS as a viable option on the devices?

    That way, there would be some faith that the phones would have been shipped clean and decently secure.

    • I wonder if stuff like this could be mitigated by BLU having the kernel drivers available, if not open-sourced, so people could make custom ROMs.

      Not everything that makes up all the needed bits for these devices have open sourced drivers. That's no excuses for at least releasing the open parts. However, this is actually a larger existential problem, so much so, that the maintainer of Android's Open Source Project AOSP basically quit his job and basically asked what's the f***ing point if an OS doesn't do anything on modern hardware. The Nexus 4 and 7 devices made by Google included lots of hardware that just was never going to be able to have dri

      • by tlhIngan ( 30335 )

        This is the thing about ads in apps. Those ads have to come from somewhere and you are putting a lot of trust in the person who's delivering those ads that those ads are trojans. Now you as a firmware company might also have your own ad agency (I know weird combination) as well, so basically people come to you and you design and deliver the ad. But if that's not you (more likely situation), then someone else designs the ad and sends it to the delivery network, the delivery network either sends it directly t

        • Well, the interesting bit is that the two Trojans identified as being the culprits didn't use the ads and app installs for anything else but to rake in unearned cash. They themselves autoroot any device they find themselves on and then the show begins. The question is, did the Chinese firmware company intentionally use those trojans, or not. I would have to think that they did, considering their past behavior.

  • by Zombie Ryushu ( 803103 ) on Thursday October 12, 2017 @03:21PM (#55357865)

    BLU Needs to stop locking their boot loaders, and start letting people LineageOS their devices. ADUPS is turning into a Meanace!

  • That way any crapware on the phone can be castrated. It comes down to carefully choosing the phone to make sure it is not hosed with either carrier crapware or manufacturer crAPPS.

    Polaroid tried to break into the unlocked market and seems to be failing without having a secret revenue stream. Their 6 inch dual sim is a decent and super cheap phone and is as close to a stock android install as I have seen. I bought one for my wife and found it to be free from adware and garbage apps. Obviously some of the ch

  • I tried a BLU device because of the price. But the quality control was horrible. The backlight was not even and often did not work. Decided to go to the next tier and got a Wiley Fox and could not be happier.

  • Reliable Excavation Demolition wants to know!

  • I got a Blu R1 Plus last spring on Amazon for $160. I am very happy with it. It doesn't have any unremovable crap on it or Amazon ads. It is a very nice piece of hardware imo. I mean obviously it isn't the same quality as Nexus 6P or something. I don't know of any other $160 phones that are as good though.

Everybody needs a little love sometime; stop hacking and fall in love!

Working...