AndroidTV

356 readers

1 users here now

Discussion of the Android TV Operating System and devices that run it. For a list of official Android TV and Google TV devices please visit the Android TV Guide - www.androidtv-guide.com. This community is unofficial and is not affiliated with Google in any way.

founded 1 year ago

MODERATORS

spiritedpause

1.3 million Android-based TV boxes backdoored; researchers still don’t know how (arstechnica.com)

submitted 2 months ago by [email protected] to c/androidtv

5 comments fedilink hide all child comments

Researchers still don’t know the cause of a recently discovered malware infection affecting almost 1.3 million streaming devices running an open source version of Android in almost 200 countries.

Security firm Doctor Web reported Thursday that malware named Android.Vo1d has backdoored the Android-based boxes by putting malicious components in their system storage area, where they can be updated with additional malware at any time by command-and-control servers. Google representatives said the infected devices are running operating systems based on the Android Open Source Project, a version overseen by Google but distinct from Android TV, a proprietary version restricted to licensed device makers.

you are viewing a single comment's thread
view the rest of the comments

[–] j4k3 19 points 2 months ago

There are no open source versions of android in practice. Android is open source. However, it is designed to enable orphaned proprietary kernels. This is the scheme Google cooked up to leverage the open source Linux kernel to enable theft of ownership and planned obsolescence. If the hardware was fully documented at the bit register level, or the source code for the kernel modules (drivers) that connect the System on Chip and modem to the kernel were properly merged into the mainline kernel, this issue likely would not have happened. If this were the case, these devices would be running open source software. These devices leverage open source software but are entirely proprietary and kept outside of both the community's reach and any true ownership by the end consumer.