Samsung's Tizen scores high on vulnerabilities, says researcher

Samsung's Tizen scores high on vulnerabilities, says researcher

Tizen is an operating system designed for a multitude of device types.

To be fair, Tizen is not found in the Galaxy 8 so the enthusiasm which the Tame Apple Press is reporting this story is probably a little desperate.

With Tizen, which is an open source operating system based on Linux, Samsung is trying to offer an alternative OS to a market dominated by Google's Android and Apple's iOS. However, it looks like Samsung not only has worry about the Central Intelligence Agency but also every other hacker out there as its home-grown Tizen OS is reportedly riddled with critical security flaws that could affect more than just its Smart TVs. Neiderman himself started looking at Tizen after buying a Samsung TV running the operating system, but he has found that the flaws also exist in the company's smartphones.

Any operating system in the world suffers from unknown zero-day vulnerabilities. He said Tizen's code may be "the worst he'd ever seen" and that the people who wrote it "don't have any understanding of security". He added that there is a widespread improper use of the strcpy () function in C, which is notorious for making devices vulnerable to risky functions that are well known to experienced C and C++ programmers. "It's like taking an undergraduate and letting him programme your software". Since the store has the highest level of clearance on a Tizen device, this is the "Holy Grail" for hackers as it will allow them to "update a Tizen system with any malicious code [they] want". However, that means most Samsung smart TVs and smartwatches are still prone to remote hacking.


"I haven't seen a lot of interest in Tizen from developers, and it hasn't been widely deployed - so you don't have the interest in it that you'd see in something like Android", Keeper Security's Tiquet said.

That's a damning accusation for Samsung's platform, which is used in millions of smartphones and the company's Gear smartwatches, in addition to some IoT appliances. One security hole in particular is reason for extreme concern, as it allows hackers to hijack the Samsung TizenStore app. According to Neiderman, much of Tizen's code base has been borrowed by Bada, an old Samsung mobile OS which was discontinued, but most of the vulnerabilities he located were from code that was specifically written for Tizen within the last two years.

Consumers should be concerned about the vulnerabilities Neiderman discovered in Tizen, maintained James Scott, a senior fellow with the Institute for Critical Infrastructure Technology. The worst vulnerability revolves around the Tizen Store because it has the most permissions on the device. However, Samsung did tell Motherboard that it's now working with Neidermanto "mitigate any potential vulnerabilities".

Related News:

  • Zika causes birth defects in one in 10 pregnancies: US study

    Zika causes birth defects in one in 10 pregnancies: US study

    Only Texas and Florida have reported cases of local virus transmission, so women thus far remain at a very low risk in the U.S. Overall, the risk of severe birth defects was about 5 percent among women who were infected with Zika during pregnancy.
    Distracted Driving in Chilliwack got the bucket treatment this week

    Distracted Driving in Chilliwack got the bucket treatment this week

    The Connecticut Department of Transportation urges you to put your phone down when you get behind the wheel. When you get behind the wheel, be an example to your family and friends by putting your phone away.
    Supreme Court sets higher bar for education of students with disabilities

    Supreme Court sets higher bar for education of students with disabilities

    That family said their 5th grader with autism was turned away from a Douglas County public school because of his special needs. As is the situation with most Supreme Court cases, however, the ruling affects more than just the plaintiff named in the case.
  • West Ham striker Diafra Sakho back for Arsenal clash

    Arsenal have 54 points from 29 games - four behind Manchester City, who have played a game more , in fourth. If we show the same spirit we showed against City, we will win football games.

    Flynn's New Financial Forms Reveal Russia Connection

    But Schiff's visit to the White House to review what he said was the same intelligence Nunes reviewed only opened a new wound. According to his financial snapshot, Flynn received $827,055 in salary and bonus from his firm, Flynn Intel Group, alone.
    UN Security Council to meet tomorrow on Syria gas attack

    UN Security Council to meet tomorrow on Syria gas attack

    Syria's leading opposition group, the National Coalition, accused the "regime of the criminal Bashar" of being behind the attack. She said the attack "is a dramatic reminder of the fact that the first priority is, as in any conflict, stopping the fighting".
  • 'Misbah to play career's last Test series in West Indies'

    'Misbah to play career's last Test series in West Indies'

    Davis said top cricket teams perform at a high level consistently, something the West Indies have failed to do. The governing board of PCB has expressed rage on Shahryar Khan's remarks about Misbah-ul-Haq.
    A New Patch Coming Thursday, Future to Address Most Concerns

    A New Patch Coming Thursday, Future to Address Most Concerns

    EA often outsources work and animation from one internal studio to others, so this is nothing new for the publisher . Mass Effect Andromeda has been under fire since its release for its plethora of bugs and awkward animation.
    Modi congratulates J&K youth for building Chenani - Nashri Tunnel

    Modi congratulates J&K youth for building Chenani - Nashri Tunnel

    Modi earlier inaugurated a new 10.9 km road tunnel which will shorten the driving time between Jammu and Srinagar by two hours. It has traffic and fire control systems, video surveillance, FM connectivity and transverse ventilation systems.
  • AOL and Yahoo Merge to Become… OATH

    AOL and Yahoo Merge to Become… OATH

    Department of Justice indicted four men, including two officers with Russia's FSB security agency, in connection with those hacks. A rep for Yahoo declined to comment beyond a statement from Mayer when the Verizon deal was first announced past year .
    Ralph Lauren closing flagship Manhattan store and other locations

    Ralph Lauren closing flagship Manhattan store and other locations

    The restructuring plan is part of the company's Way Forward Plan that's been around since last June. The company has eliminated layers of management, slashed 1,000 jobs and closed about 50 stores.

    Israeli cabinet approves new settlement, first in 2 decades

    Israel says the status of settlements as well as other issues, such as security, should be resolved in peace talks. Turkey also condemned the Israeli decision in a statement released Friday.


Most liked

Pistons vs. Raptors: One last-ditch effort for a playoff push
We got a reminder of that Tuesday, when Lance Stephenson upset the Raptors at the end of the Pacers' 108-90 win. But despite the Pacers' double-digit lead, there was still plenty of drama in the closing seconds.

Marshawn Lynch to the Raiders is Looking Real Legit
Schneider and McKenzie worked together for the Packers and because of that, Schneider said he expected the talks to be "smooth". The addition of Marshawn Lynch would instantly turn the Oakland Raiders into serious contenders for a Super Bowl run in 2017.

Multiple Scandals Erupt At Fox News
It's watched more than any other cable network, including the entertainment ones, and O'Reilly leads the way. Fox News acknowledged the advertiser pullouts in a statement from a senior advertising sales exec.

Daughter of 9/11 policeman dies at pancake-eating contest
Last September, 15 years after the attacks, Caitlin Nelson posted a picture on Facebook of herself with her father. As Boston.com reports, a 64-year-old Australian man had a heart attack during a pie eating contest in 2013.

Gut-wrenching end for Gonzaga
He clutched the ball and screamed near the sideline at University of Phoenix Stadium once the Tar Heels were assured of victory. Through NCAA spokesman David Worlock, national coordinator of basketball officials JD Collins said the play was not reviewable.

96 lawyers urge ME senators to oppose Gorsuch nomination
They pointed to the possibility that the new justice would tip the balance on several key issues before the court. In fact, a Senate rules change does appear to be Republicans' one route to put Gorsuch on the court.

Trump says US is ready to act alone on North Korea
Former US defence secretary Ash Carter, who served under Barack Obama, said the US has "always had all options on the table". Tensions have escalated over North Korean moves to accelerate its weapons development.

Trump signs bill blocking online privacy regulation
Per Comcast's statement, the rollback of regulations doesn't mean they'll sell customers' personal information. Additionally, the rules would have required those companies to protect customers' data against hackers.

Boeing: First major deal with Tehran since Trump took office
Rouhani is likely to run a campaign highlighting economic benefits of the nuclear deal, which opened Iran to foreign investment. The European Union blacklisted Aseman from European skies in December because of safety concerns.

The BlackBerry brand may soon appear on tablets, wearables, and more
COPYRIGHT VIOLATION WARNING: This news story was posted by The Cerbat Gem and is the sole property of of The Cerbat Gem. RBC moved its rating on BlackBerry to "Sector Perform" while eliminating its speculative risk qualifier on the stock.

Roger Federer, Microsoft's Gates to play doubles for charity
Federer leads the points race for a spot in the ATP World Tour Finals in London-by a significant margin. Both players agreed the match was closer than the score and decided by a handful of points.

Arsenal vs West Ham
West Ham are now in the midst of an injury crisis, with six players set to miss the encounter with the Gunners. Attack: I think we might see Wenger freshen things up in attack with Olivier Giroud coming back in up front.

Rob Gronkowski Rushes Ring at Wrestlemania, Does Wrestling to Wrestler
The backstory: Gronk is buddies with wrestler Mojo Rawley (this bond appears to be legitimate, based on a post-match interview ). In one of the early and most insane moments of WrestleMania 33, an National Football League superstar stepped into the ring.

Islanders captain Tavares to miss final week of season
It was the Islanders' first game since Tavares was sidelined by a left hamstring injury in a 2-1 win over New Jersey on Friday. If Robin Lehner gets the start in goal for the Sabres , he'll try to continue his strong play. "That first was not our best".

De Blasio Says No Plans for Jail on Staten Island
Once the goal is reached, this would allow the majority of inmates to depart from Rikers, causing the facility to close. Last week Mayor de Blasio estimated a 10 year timeline before Rikers could be completely shut down.