Man-In-The-Disk

Video thumbnail (Frame 0) Video thumbnail (Frame 12132) Video thumbnail (Frame 13351) Video thumbnail (Frame 14056) Video thumbnail (Frame 14567) Video thumbnail (Frame 15390) Video thumbnail (Frame 16862) Video thumbnail (Frame 17635) Video thumbnail (Frame 19692) Video thumbnail (Frame 20822) Video thumbnail (Frame 21652) Video thumbnail (Frame 25004) Video thumbnail (Frame 25673)
Video in TIB AV-Portal: Man-In-The-Disk

Formal Metadata

Title
Man-In-The-Disk
Title of Series
Author
License
CC Attribution 3.0 Unported:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
2018
Language
English

Content Metadata

Subject Area
Abstract
Most of modern OS are using sandboxing in order to prevent malicious apps from affecting other apps or even harming the OS itself. Google is constantly reinforcing Android’s sandbox protection, introducing new features to prevent any kind of sandbox bypass. In this talk we want to shed new light on a less known attack surface which affects all Android devices and allows an attacker to hijack the communication between privileged apps and the disk, bypassing Android’s latest sandbox protection. The problem begins when privileged apps interact with files stored in exposed areas, and even worse, some of them will unintentionally break the sandbox by insecurely appending such data to its confinements. Can you imagine if someone could execute code in the context of your keyboard, or install an unwanted app without your consent? Well… It’s hardly within the realm of imagination. The external storage and network based vulnerabilities we discovered, can be leveraged by the attacker to corrupt data, steal sensitive information or even take control of your device.
Android (robot) State observer Context awareness Group action Presentation of a group Beta function Transportation theory (mathematics) Multiplication sign Open set Mereology Data model Bit rate Cuboid Endliche Modelltheorie Extension (kinesiology) Information security Partition (number theory) Vulnerability (computing) Physical system Area Boss Corporation Software developer Computer file Moment (mathematics) Data storage device Sound effect Price index Electronic signature Connected space Category of being Type theory Data management Process (computing) Permanent Telecommunication Software framework Normal (geometry) Self-organization Right angle Quicksort Row (database) Mobile app Computer file MIDI Electronic program guide Ultraviolet photoelectron spectroscopy Directory service Data storage device Rule of inference 2 (number) Goodness of fit Crash (computing) Read-only memory Profil (magazine) Vector graphics Ideal (ethics) Information Key (cryptography) Weight Android (robot) Content provider Planning Computer network Basis <Mathematik> Cartesian coordinate system System call Doubling the cube Personal digital assistant Collision
Tablet computer Mobile app Googol Computer file Ferry Corsten Googol Android (robot) MIDI Data storage device Translation (relic) Menu (computing) Library (computing)
Android (robot) Wechselseitige Information Asynchronous Transfer Mode Trail Computer file Android (robot) Data storage device Insertion loss Data storage device Translation (relic) 2 (number) Tablet computer Googol Robotics Googol IRIS-T Species Library (computing)
Pattern recognition Boss Corporation Presentation of a group Computer file Googol Computer file Android (robot) Data storage device Data storage device
Installation art Mobile app Computer file Chemical equation Line (geometry) Structural load Moment (mathematics) Data storage device Client (computing) Data storage device Client (computing) Cartesian coordinate system Approximation Arithmetic mean Data management Resultant Physical system
Group action Computer file Computer file Interior (topology) Data storage device Planning Client (computing) Data storage device Electronic signature Electronic signature Googol Googol Normed vector space File archiver Speech synthesis Formal verification Quicksort Metropolitan area network Social class Form (programming) Data compression
Installation art Bit rate Hash function Computer file Moment (mathematics) Physical law MIDI Sampling (statistics) Formal verification Web browser Web browser
Mobile Web Installation art Personal digital assistant Multiplication sign 1 (number) Convex hull Water vapor Game theory Web browser
Point (geometry) Game controller Functional (mathematics) Group action Computer file Decision theory MIDI Real-time operating system Data storage device Computer programming Area Product (business) Web 2.0 MiniDisc Implementation Fuzzy logic Game theory Library (computing) Fiber (mathematics) Social class Mobile app Key (cryptography) Physical law Moment (mathematics) Android (robot) Java applet Data storage device Stress (mechanics) Code Permutation Word Arithmetic mean Process (computing) Personal digital assistant Right angle Musical ensemble Procedural programming Fingerprint Library (computing)
Web page Metric system Trail Information Open source Run time (program lifecycle phase) Android (robot) Code Open set Arm Emulator Befehlsprozessor Kernel (computing) Software framework Fuzzy logic Library (computing)
without further ado here so. cohen thank you for them to this fall. i'm doing going to compromise on droid sandbox through a new manager in these attacks surface i will show housed a seamless two hundred m. y. colwall can attack and had to have two x. on storage and the again possibilities folse silent up with all asian. and you know said are subject to install a ups old human court is accused in context all foot and. c.'s do more popular apps. and. i'm still i'm so the slalom from wind and the and were connection planned and vulnerability research and the incision unicom my daily war. so let's begin does on droid security basics of course. hundred applications highly fortified by team and hundred implemented the concept of publication sand boss to easily to execution all won air from models and to the simplified more bill shoals of fooling things and i'm drawn to the occasion. because it's all in the process and to private storage accessible has the supplication only and the second communication between abseiled limited by android for animal. so each application hand the highest in the local musicians and to underwrite the implication same bowl and just part of an says collision of privilege attacks between them. andro tremble sprites han to do so for musicians and do it to meet up occasion hoxha school user data also used in future or so and to all these provisions came to group to three categories and normal weight and dangerous good musicians can be granted by user to nap. two and and your needs access to key system s. conflicts and storage. brings it brings told absentia sheep to devise a more extended permission situation this such as foreign exchange for saving souls silent up in installation and as the most popular each publications assigned reason her own signature also see the some under. lloyd compound and like me a job or ideal something else. and so it will be fine and to find a way for low privileged air from the show's category and to attack another arab strong the second thoughts category and trying to gain some privileges and soul and to that. and. there are a lot of types of docs old one and two was about to move the day i'm i'm going to hold about storage basis so no. what about on the implications for fuel costs and and droid abt heads off the bag so often brought up storage is still internal storage cheese beauty mammary always available and and accessible to and the private for which no one can get access. as for the top internal storage except the acts all. and as a way not the side effects on storage excellence for which he uses a partition own internal storage but traded between all the acts. the removal storage is actually used to cap which can be extracted from a device and the world to accessible as well firms have to speak to you for an external in the removal storage and. but the same same can sit hundred from corporate white swan a.p. eiffel selves and. why hundred means an extra in storage at all just a full use of someone to transfer want to share as an immediate danger like for told you how real data between the app sand the and transparent these day to visit the sea loose. old devices are limited in internal storage to much of the support of possible but no reason to save any sensitive into low opts to information in the extents torch. how it is difficult for the app the to get to store toxicities area we simply an app can ask it to the user for and. falls storage their missions of this is the same way as any hasn't been a musician and again global implications boxes global a global store top and that you should be noted that you can locate in the next onslaught of slightly more protected the recording boy in preventing all things on file absorbing and but. but youth said but the app and has set a global storage boxes that you can read and write any files insightful for the these the big story as well. let's look at possible move these could and a sexy noddy also a on application sam balks and most vocal or external store which uses scenarios w. notes on beta to external storage and after the concert is his date and mimics the rugby compressed into. most torch and the second scenarios it occasions holes maintain its working day down extra storage was out in any transporting and paul bowles these communications the madness can be hijacked so innings said but the epic in the right any file located in external storage provided millions of these. get back and soul i was shows it to you in one day defiantly region and external storage can lead to crash all foot android applications made you fly boring ends as he knows is the crashes the show still feels the call to execution insightful. the most challenging part of the fuel sonata it uses dig the moment when actually double dip file should be it only reason it's really right after the five download it was all this problem and file observant techniques can be used and the. and andrew publication is mostly job and the a better chilean maybe it's the its native also under a job offer a more provides file observer open in full file the profiles of starvation oil and coal ups organ can eighty far can be implemented using ninety five theses coal. and in case old private job did extorting next to all storage when ninety five based and metals with more war could but holding commensals based on time and still gives a job with donald base. let's get several examples off that means of these create an attack. and what i discovered it much more and that his presentation i know i took several extort costs from under its security guides for publication developers to show that is small enough to write a guide to operate in a new security gaps. and even biggest hundreds of endorse and don't fool the proposed rules. that just exhorts it you should perform infantile indication when camping data from external storage ok motivation with it's quite simply google translate holds its own plan to inflation by could just on next on storage so any sort but the abdomen right to continue rate the role.
while and to ride the regional file in an era in the exit on storage and associated to use in a google translate and to crash may to fly brew obese and put it on slate is a sofa in nature fiber it because the these library and handles farce as files. look into the next all storage and associated is the underdog to insulate. google don't sleep occasion i will show created them we do. you can see that that and.
i also just as the files located in the next on storage than to warsaw readable i have started my whole world cup occasion and the end just all right because out they absorb and to fly else the rock one and in mormon to one the translator and was too. to the translates your sleep it will be crushed.
the same stories the stone slate that most people are rushing to insulate the robot tonight and and as a library the immobile android the sole reason it is the school for mice. i think that everybody knows all came google obligation ok google so it's actually who was assistant and who is perceived as it added the loss of land species could mission files to extol storage resulting in a few patients so many as the second rabkin alright such files and and to crush.
you move eugene i saw again create a fresh i don't show all my them really also i would and i broke the old we do so but these if you give presentation filing wielding still old. the next fix your boss you should also exists cuticles file some extra storage really.
g l g and has it all in dorset for a publication us to see it as a result the devices and the old g a politician mammon manage it is actually audiobooks clients system have high produced and responsible. the loading installed in all such updates on all l.g. for the old the builder phones so it's means that but the ever done loads of updating tickets file sue external story chan to install certainly is also mixed on stores this means that mean he's got back and it can override such update installing. the ad. the moment which he was on the old before it's quite simple so i also to show another them or using algae.
so i just thought my whole world the occasion and ok look hot. a manager and i am shows it to their users for example not going to stop the public issues close to install some the algae related application for example from writer ok i don't install my famer i do but. you still from ride your. right now i think install some modification quite simple.
this is a sort of isn't as the old usually it is easy man to you.
you are responsible for this plan themes and falls on the old the forms the whole self updates the works to install a chance to gain same story i can go awry this file and thought in those that is on to any problem quite simply and and ethics or locate you should sign in that if i see the shortfall class look at the next onslaught. in his book. google sixty speech against all forms in the world and the the lords and voice bake it in archive two x. the to external storage very feisty condition and and decompress as fast as the internal storage its look nice will have to. the worsening that unification signature but. the second and third pot was the second so bottles all buried i'm not a comic actions this means that an attacker can override file a terrific asian. he asked. what is a problem with is ok and again into an obligation to only two flyover he and antics.
and as example show my browser the law itself up the to external storage but if i shot while i'm cash and installs of the beginning. i can override this is filed off the roof occasion you might be wondering how is it possible to bring to the ratings exact moment when filed when obtain he was through fired but the is not the but installation and says no but you began so a shoulder to zigzag. sample for example as an installation in purification a super separate and the mentally invokes excellence. so i'm going to be browser on ok full implications of its looks like it and i'm going to update its ensure a browser and an end in a buddy bought the moment when you the press of the bible.
dahl old end to end to a few cases. will be down and opposite of and i was about to install ok so i am attacker have water of time to install a new between roughly cation installation i quite simple the ride his father in the game and stole my mobile number one.
to summarize. web can all live right to file a key to the next on storage and underwood says no. and on production tool for and when he read english than to pull or abstinent and transparent whole that data through extra on storage. it allows it to look at what the to him and he does get back your wireless the practice abuses cent of course come from my sister. hundred publications sandbox. i had a few minutes so a let's let's look at how to find your money into the school not have built. when just approaching this problem i was quite surprised at what a little war can dispute exists and to and i could not find any pfizer of donation to the global flu to open a design is to gain than to and i might add decision was to program i want to set up to. the a solo that the two star get used to be made to fly brick publication the fiber is so fly because i'm going to crash seaport but no job and the youth such library under british law but it handles in winning week controllable file his implication can get picked in our case we can. although filers file a catered in the millions that external storage. in moment that their once a suitable native library and to this story based file found i'm going to implement miami simple job a program to produce that that flow that explore this mean that were the loading and parsing all flu. over the storage fire it's the old is implemented all das is just warding off target the calabrian cooling will want to and functions from salonen to and that the than to operate as it flies includes a group words job a program starts.
this is a real time we get example sofa adopted as much a used to fly until now to be within the will send rise in korea and extortion to your welcome to drive them and to do so in these point i just want to stress is that the optimist why is he is wary simple is with a simple procedure. so a second adopt but but how to class and the and i preferred fighting set up the based on the phoenix phones are products it's a flame also the american pfizer will put and the pfizer and you knew him in later and to i get the possibility to five hundred public.
nation need to fly burris said the preparation pauses several challenge us and are encouraged many pages while all the lead to us that unfortunately my bangs are but i'll tempted to supply any additional information was and still stick to everybody. i was interested in and of course you can download use that as open open source to. opened this when can try to find the oil and minerals the days when the ability to include. that. that.
Feedback