高通芯片存缺陷 安卓手机爆出重大漏洞!

 Security experts have uncovered a serious security flaw in Android phones which could leave millions of users vulnerable to hackers². The finding comes from an expert who says that phones running full disk encryption (FDE) and Qualcomm chips are most at risk.

安全专家最近披露了安卓手机存在的一个严重安全漏洞，这将使得数以百万计的用户容易受到黑客的攻击。公布这一发现的一位专家表示，使用全磁盘加密和高通芯片的手机是最危险的。

An investigation³ by security analyst⁴ Gal⁵ Beniamini of the Israeli Defense⁶ Forces revealed that devices are particularly vulnerable to so called 'brute⁷ force attacks' – where hackers overwhelm security measures using a persistent⁸ trial and error approach.

以色列国防军安全分析师盖尔·贝尼亚米尼在发布的一份调查报告中声称，这些手机设备在所谓的“暴力破解”下脆弱不堪。“暴力破解”是指黑客持续采用实验和“错误策略”的方法来破解安全措施。

Android rolled out full disk encryption (FDE) on all devices from Android 5.0, which involves the phone generating a 128-bit master key based on the user's password. However, the way in which the key is stored on the device means it could potentially be easily cracked by cyber criminals and even law enforcement agencies.

从安卓5.0系统开始，安卓在所有设备上都推出了全磁盘加密，这使得在用户密码基础上，手机能够生成一个128位的万能钥匙。但是，这份钥匙存储在手机中的方式却并不安全，从而有可能使得网络犯罪分子、甚至执法机构很轻易地就破解。

高通芯片存缺陷 安卓手机爆出重大漏洞!

Phone encryption was central to the recent FBI case involving Apple, in which authorities wanted the tech firm to break the encryption of an iPhone used by one of the attackers in the San Bernardino shootings in the US. In this case, the iPhone ran 256-bit FDE, which not even Apple could crack.

在最近FBI和苹果的案件中，手机加密是其核心问题。当局获得了圣贝纳迪诺枪击案中一名袭击者所使用的iPhone手机，他们想要苹果破除手机的加密，但是这个手机使用的是256位全磁盘加密，甚至连苹果公司都不能破解。

According to Neowin, these are namely flaws in how Qualcomm processors verify security and Android kernels⁹ – the core operating system.

据Neowin透露，在高通处理器判别安全和安卓芯片（核心处理系统）的时候，就会出现所谓的漏洞。

On a blog post outlining the full technical details of the Android hack¹, Beniamini explains that while both Google and the chip-maker have been made aware of the vulnerabilities, users may require hardware upgrades to fix the issue.

在一篇概述安卓黑客全部技术细节的博文中，贝尼亚米尼表示，虽然谷歌和高通已经意识到了这个漏洞，不过用户们也许可以要求更新硬件来解决这一问题。

He wrote: 'I've been in contact with Qualcomm regarding the issue prior to the release of this post, and have let them review the blog post. As always, they've been very helpful and fast to respond. Unfortunately, it seems as though fixing the issue is not simple, and might require hardware changes.'

他写道：“在这篇博文发表之前，我就一直和高通公司在联系，以求解决这个问题，我还让他们查阅了这篇博文。跟以往一样，他们非常快捷地提出了一些有用的回应。但是不幸地是，要解决这一问题并非一件易事，而且可能会需要更新硬件。”

The post explained how vulnerable phones could be targeted through everyday activities including email, web browsing¹⁰ and text messages.

这篇博文解释了手机在黑客的针对下是多么脆弱，他们只要进行一些日常的活动，例如邮件、网络浏览器和短信等就可以了。

A spokesperson for Google told MailOnline: 'We appreciate the researcher's findings and paid him for his work through our Vulnerability Rewards Program. We rolled out patches for these issues earlier this year.'

谷歌的一位发言人在接受《每日邮报》采访时表示：“我们很感激这位研究家的发现，并且用'漏洞奖励项目'来嘉奖他的研究。今年早些时候我们推出了针对这些问题的补丁。”

1 hack   

n.劈，砍，出租马车；v.劈，砍，干咳

参考例句：

• He made a hack at the log.他朝圆木上砍了一下。
• Early settlers had to hack out a clearing in the forest where they could grow crops.早期移民不得不在森林里劈出空地种庄稼。

2 hackers   

n.计算机迷( hacker的名词复数 )；私自存取或篡改电脑资料者，电脑“黑客”

参考例句：

• They think of viruses that infect an organization from the outside.They envision hackers breaking into their information vaults. 他们考虑来自外部的感染公司的病毒，他们设想黑客侵入到信息宝库中。 来自《简明英汉词典》
• Arranging a meeting with the hackers took weeks againoff-again email exchanges. 通过几星期电子邮件往来安排见面，他们最终同意了。 来自互联网

3 investigation   

n.调查，调查研究

参考例句：

• In an investigation,a new fact became known, which told against him.在调查中新发现了一件对他不利的事实。
• He drew the conclusion by building on his own investigation.他根据自己的调查研究作出结论。

4 analyst   

n.分析家，化验员；心理分析学家

参考例句：

• What can you contribute to the position of a market analyst?你有什么技能可有助于市场分析员的职务？
• The analyst is required to interpolate values between standards.分析人员需要在这些标准中插入一些值。

5 gal   

n.姑娘，少女

参考例句：

• We decided to go with the gal from Merrill.我们决定和那个从梅里尔来的女孩合作。
• What's the name of the gal? 这个妞叫什么？

6 defense   

n.防御，保卫；[pl.]防务工事；辩护，答辩

参考例句：

• The accused has the right to defense.被告人有权获得辩护。
• The war has impacted the area with military and defense workers.战争使那个地区挤满了军队和防御工程人员。

7 brute   

n.野兽，兽性

参考例句：

• The aggressor troops are not many degrees removed from the brute.侵略军简直象一群野兽。
• That dog is a dangerous brute.It bites people.那条狗是危险的畜牲，它咬人。

8 persistent   

adj.坚持不懈的，执意的；持续的

参考例句：

• Albert had a persistent headache that lasted for three days.艾伯特连续头痛了三天。
• She felt embarrassed by his persistent attentions.他不时地向她大献殷勤，使她很难为情。

9 kernels   

谷粒( kernel的名词复数 )； 仁； 核； 要点

参考例句：

• These stones contain kernels. 这些核中有仁。
• Resolving kernels and standard errors can also be computed for each block. 还可以计算每个块体的分辨核和标准误差。

10 browsing   

v.吃草( browse的现在分词 )；随意翻阅；（在商店里）随便看看；（在计算机上）浏览信息

参考例句：

• He sits browsing over[through] a book. 他坐着翻阅书籍。 来自《简明英汉词典》
• Cattle is browsing in the field. 牛正在田里吃草。 来自《简明英汉词典》