Security expert: Samsung's Tizen operating system is a hacker's dream

tizen security multiple exploits os samsung suwon south korea 4 1500x1000
Tizen, Samsung’s open-source operating system, is riddled with vulnerabilities. That’s according to Motherboard, which spoke with an Israel-based Tizen security expert.

Samsung’s Tizen contains as many as 40 unknown bugs, or zero-days, that could allow a cyber criminal to hack devices without needing to physically access them. “It may be the worst code I’ve ever seen,” Amihai Neiderman, a Kaspersky Labs researcher, told Motherboard. “Everything you can do wrong there, they do it. You can see that nobody with any understanding of security looked at this code or wrote it.”

One security flaw involving TizenStore, Tizen’s app store, could let a hacker pack malicious code with a software update. TizenStore takes measures to ensure that only verified software is installed on Tizen devices, but those measures can be overridden. “You can update a Tizen system with any malicious code you want,” said Neiderman.

Another flaw exploits buffer overrun, a condition that occurs when the space to which data is being written is too small for the data. Tizen’s protections against it are insufficient, Neiderman said.

And Tizen failed to use encryption for secure connections when transmitting certain data. “They made a lot of wrong assumptions about where they needed encryption,” Neiderman told Motherboard.

The problem stems in part from unwieldy code. Neiderman told Motherboard that much of the Tizen code base is old and borrows from previous Samsung projects, including Bada, a discontinued mobile phone operating system. “You can see that they took all this code and tried to push it into Tizen,” he said.

That’s bad news. Samsung, in a long-running effort to reduce its reliance on Google’s Android operating system, is shipping a growing number of devices with Tizen.

“Tizen is going to be Samsung’s next biggest thing. We might see the new Galaxies running Tizen, it could happen that soon. But right now Tizen is not safe enough for that.”

Tizen powers more than 30 million of the company’s smart TVs, tens of millions of Samsung Gear smartwatches, and prototypical smart washing machines and refrigerators. And it’s in smartphones as well. Samsung has Tizen running on phones in countries like Russia, India, and Bangladesh, and plans to have 10 million Tizen phones in the market this year.

Samsung told Motherboard that it’s working with Niederman to address the bugs. “We are fully committed to cooperating with Mr. Neiderman to mitigate any potential vulnerabilities. Through our SmarTV Bug Bounty program, Samsung is committed to working with security experts around the world to mitigate any security risks.”

Mobile

Samsung commits to improving the Galaxy S10’s ultrasonic fingerprint sensor

The Galaxy S10 has a new ultrasonic fingerprint sensor under the screen, and while it's better than other examples, people have experienced problems. Samsung has committed to making further accuracy improvements over time.
Computing

Windows updates shouldn't cause problems, but if they do, here's how to fix them

Windows update not working? It's a more common problem than you might think. Fortunately, there are a few steps you can take to troubleshoot it and in this guide we'll break them down for you step by step.
Gaming

Play your games whenever you want with a MicroSD card for your Nintendo Switch

The Nintendo Switch uses cartridge-based games, but its internal storage may fill up quicker than you would think. Here's what you should consider when picking out a MicroSD card to expand your Switch's storage capacity.
Computing

Enjoy Windows on a Chromebook with these great tips and tricks

If you want to push the functionality of your new Chromebook to another level, and Linux isn't really your deal, you can try installing Windows on a Chromebook. Here's how to do so in case you're looking to nab some Windows-only software.
Mobile

Sony's Xperia 10 smartphone boasts a 6-inch screen and is now available

Sony took the wraps off of three new phones at Mobile World Congress 2019, including the new Xperia 1, which is the company's new flagship phone and the first with a 4K OLED display with a 21:9 aspect ratio.
Mobile

FCC to help first responders pinpoint 911 callers in multistory buildings

When someone calls 911 from their cell phone, wireless carriers provide operators with an approximate location. Now the FCC wants the carriers to provide vertical location data to pinpoint 911 callers inside multi-story buildings.
Mobile

Latest Samsung Galaxy smartphone will pop up on April 10

Samsung will show at least one new Galaxy phone off on April 10, it has confirmed in a teaser tweet. The Galaxy A90 may make its first appearance, and it's rumored to have a pop-up camera and a notch-less screen.
Mobile

Leaked ZTE concept phones are crazy, possibly fake, and totally worth seeing

Renders of what may be ZTE concept phones may show how the manufacturer could avoid using the notch on future devices. They're crazy -- and maybe not even real -- but they're definitely worth looking at.
Mobile

The iPad Mini, Apple’s tiny tablet, makes a return with powerful specs

Apple has finally revealed the iPad Mini. With all-new and upgraded specs, support for the Apple Pencil, and a fantastically inclusive price, here's everything you need to know about the iPad Mini.
Mobile

The Apple iPad Air is the power-packed tablet for everyone

The iPad Air is the less serious cousin to Apple's iPad Pro range, and it's the perfect addition to your coffee table. But it's no less powerful. Here's everything you need to know about the iPad Air.
Mobile

Get excited for your Sony Xperia 10 or 10 Plus by getting it set up just right

If you've picked up one of the Sony's more affordable smartphones, you may be be wondering what hidden depths lie within. We've got some handy Sony Xperia 10 tips for you here to help you get to grips with your new phone.
Deals

This is the one thing you need to do before giving your child a smart phone or tablet

Monitoring your kids' digital habits can be a challenge in today’s high-tech age, but great parental control software like Qustodio gives parents a much-needed advantage Read on to find out how you can protect your child from online…
Mobile

How to choose an iPad in 2019: A practical guide to Apple’s tablets

Selecting an iPad from Apple's lineup can be intimidating, but it doesn't have to be. Our comprehensive guide should put the numbers and specs in practical, easy-to-understand terms. Find your ideal iPad with the help of our guide.
Mobile

These voice-changing apps will have you punking friends and family like a pro

Have you ever wanted to call your friends as Darth Vader or Alvin from the Chipmunks? If you want to play a prank on your friends, we have the best voice-changer apps for iOS and Android, whether you want to record audio or make a call.