Security expert shows that Android and Nokia NFC can be hacked -- under certain conditions

[![DNP Security expert shows that Android and Nokia NFC can be hacked under certain conditions][1] ][2]

A research consultant has revealed to _Ars Technica_ that he can force [NFC][3]-equipped Android and Nokia phones to run malicious code in several ways -- but only with specific devices and constraints. The first violation used the [near-field Google Beam][4] function, but only affected certain NFC phones running ICS or Jelly Bean. This could allow an evildoer to send a malicious website to an unsuspecting victim to possibly compromise their data. The next exploit was limited to a Gingerbread-equipped Google Nexus S, since later Android releases patched the bugs necessary for the hack. It allowed a so-called tag to access the NFC functions in the OS, and with a little more legwork could offer up access to more malicious programs. The final invasion was made on the Meego-powered [Nokia N9][5], which the expert controlled by [Bluetooth, using NFC][6] -- as long as the dupe overrode the defaults and enabled that function. If so, a hacker could dial out from the phone, send messages or upload and download files, depending on which security settings were enabled. Fortunately, exact hardware and software combinations aside, nefarious types would still have to be within an inch or two of your phone to enable their NFC box of tricks. Take a look at the source for the full interview.

Filed under: [Cellphones][7], [Wireless][8]

[Security expert shows that Android and Nokia NFC can be hacked -- under certain conditions][2] originally appeared on [Engadget][9] on Thu, 26 Jul 2012 15:39:00 EDT. Please see our [terms for use of feeds][10].

######

[Permalink][11] | ![source][12][Ars Technica][13] | [Email this][14] | [Comments][15]

[1]: http://www.blogcdn.com/www.engadget.com/media/2012/07/nfc-07-26-12-02.jpg
[2]: http://www.engadget.com/2012/07/26/security-expert-NFC-hacks-android-nokia/
[3]: http://www.engadget.com/tag/nfc
[4]: http://www.engadget.com/2011/10/19/android-beam-takes-us-to-the-future-of-close-proximity-data-exch/
[5]: http://www.engadget.com/tag/nokia+n9
[6]: http://www.engadget.com/2011/06/21/nokias-play-360-bluetooth-speaker-uses-nfc-daps-to-pair-with-yo/
[7]: http://www.engadget.com/category/cellphones/
[8]: http://www.engadget.com/category/wireless/
[9]: http://www.engadget.com
[10]: http://www.weblogsinc.com/feed-terms/
[11]: http://www.engadget.com/2012/07/26/security-expert-NFC-hacks-android-nokia/ (Permanent link to this entry)
[12]: http://www.blogsmithmedia.com/www.engadget.com/media/post_label_source.gif
[13]: http://arstechnica.com/security/2012/07/android-nokia-smartphone-hack/
[14]: http://www.engadget.com/forward/20286776/ (Send this entry to a friend via email)
[15]: http://www.engadget.com/2012/07/26/security-expert-NFC-hacks-android-nokia/#comments (View reader comments on this entry)

URL: http://www.engadget.com/2012/07/26/security-expert-NFC-hacks-android-nokia/