{"id":15341,"date":"2011-05-18T10:59:16","date_gmt":"2011-05-18T13:59:16","guid":{"rendered":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/"},"modified":"2011-05-18T10:59:16","modified_gmt":"2011-05-18T13:59:16","slug":"vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas","status":"publish","type":"post","link":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/","title":{"rendered":"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.smart-gsm.com\/blog\/wp-content\/uploads\/2011\/05\/evil_android.png\" width=\"278\" height=\"340\" alt=\"Vulnerabilidad de android\" title=\"Vulnerabilidad de android\" class=\"center\" \/><br \/>\nDe acuerdo con un estudio de la Universidad de Ulm en Alemania, <b>el 99.7 por ciento de los smartphones y tablets Android poseen una vulnerabilidad de seguridad que es expuesta cuando el dispositivo se conecta a redes abiertas Wi-Fi<\/b>. Este agujero de seguridad podr\u00eda permitir el acceso a informaci\u00f3n y datos personales del usuario de los servicios Google como calendario, contactos y dem\u00e1s.<\/p>\n<p>La vulnerabilidad se originar\u00eda en el protocolo de autentificaci\u00f3n ClientLogin, cuya implementaci\u00f3n est\u00e1 limitada a Android 2.3.3 o anterior. Cuando el usuario se loguea, las credenciales son enviadas para su validaci\u00f3n y se devuelve un c\u00f3digo autenticador sin encriptar, en cuyo caso los atacantes pueden capturar este c\u00f3digo, que ser\u00e1 v\u00e1lido por 14 d\u00edas.<\/p>\n<p><!--more--><\/p>\n<p>&#8220;Para recolectar tales c\u00f3digos de autenticaci\u00f3n en escala masiva un adversario podr\u00eda crear un punto de acceso Wi-Fi con un SSID com\u00fan (evil twin) a una red sin encriptar, por ejemplo Starbucks, T-Mobile, attwifi [estos son nombres de redes que se encuentran pr\u00e1cticamente en cualquier lugar de las grandes ciudades de USA]. Con los ajustes por defecto, los tel\u00e9fonos Android se conectan autom\u00e1ticamente a una red previamente conocida y muchas aplicaciones intentar\u00e1n sincronizar inmediatamente. Mientras que la sincronizaci\u00f3n fallar\u00e1 (a menos que el adversario reenv\u00ede las peticiones), el adversario capturar\u00eda los c\u00f3digos de autenticaci\u00f3n para cada uno de los servicios que intent\u00f3 sincronizar.&#8221;, dice el informe.<\/p>\n<p>Este problema fue resuelto con Android 2.3.4, aunque la mayor\u00eda amplia de los tel\u00e9fonos celulares no corren esta versi\u00f3n del OS y mucho menos tienen fecha para recibir una actualizaci\u00f3n.<\/p>\n<p>Los investigadores sugieren apagar la sincronizaci\u00f3n autom\u00e1tica cuando se conecta a una red Wi-Fi abierta y p\u00fablica, o bien evitar las redes abiertas por completo.<\/p>\n<p><a href=\"http:\/\/www.mobileburn.com\/news.jsp?Id=14850\" target=\"_blank\">MobileBurn<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>De acuerdo con un estudio de la Universidad de Ulm en Alemania, el 99.7 por ciento de los smartphones y tablets Android poseen una vulnerabilidad de seguridad que es expuesta&#8230;<\/p>\n","protected":false},"author":1,"featured_media":15342,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[4],"tags":[17,298,119,861],"class_list":["post-15341","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-noticias","tag-android","tag-problemas","tag-seguridad","tag-vulnerabilidades"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas - Smart GSM Blog<\/title>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas - Smart GSM Blog\" \/>\n<meta property=\"og:description\" content=\"De acuerdo con un estudio de la Universidad de Ulm en Alemania, el 99.7 por ciento de los smartphones y tablets Android poseen una vulnerabilidad de seguridad que es expuesta...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/\" \/>\n<meta property=\"og:site_name\" content=\"Smart GSM Blog\" \/>\n<meta property=\"article:published_time\" content=\"2011-05-18T13:59:16+00:00\" \/>\n<meta name=\"author\" content=\"smartGSM\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/\"},\"author\":{\"name\":\"smartGSM\",\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/#\\\/schema\\\/person\\\/32cf3f2aec518c4f53b651a334a50777\"},\"headline\":\"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas\",\"datePublished\":\"2011-05-18T13:59:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/\"},\"wordCount\":318,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/wp-content\\\/uploads\\\/2011\\\/05\\\/evil_android1.png\",\"keywords\":[\"android\",\"problemas\",\"seguridad\",\"vulnerabilidades\"],\"articleSection\":[\"Noticias\"],\"inLanguage\":\"es-AR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/\",\"url\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/\",\"name\":\"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas - Smart GSM Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/wp-content\\\/uploads\\\/2011\\\/05\\\/evil_android1.png\",\"datePublished\":\"2011-05-18T13:59:16+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/#\\\/schema\\\/person\\\/32cf3f2aec518c4f53b651a334a50777\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#breadcrumb\"},\"inLanguage\":\"es-AR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es-AR\",\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/wp-content\\\/uploads\\\/2011\\\/05\\\/evil_android1.png\",\"contentUrl\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/wp-content\\\/uploads\\\/2011\\\/05\\\/evil_android1.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Inicio\",\"item\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/\",\"name\":\"smartGSM noticias de tel\u00e9fonos\",\"description\":\"smartGSM\",\"alternateName\":\"smartGSM\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es-AR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.smart-gsm.com\\\/blog\\\/#\\\/schema\\\/person\\\/32cf3f2aec518c4f53b651a334a50777\",\"name\":\"smartGSM\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es-AR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/788bac405e347f783dc6965e5c98b7479eb56f1d952d7b0c37ded964387c3356?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/788bac405e347f783dc6965e5c98b7479eb56f1d952d7b0c37ded964387c3356?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/788bac405e347f783dc6965e5c98b7479eb56f1d952d7b0c37ded964387c3356?s=96&d=mm&r=g\",\"caption\":\"smartGSM\"},\"sameAs\":[\"https:\\\/\\\/www.smart-gsm.com\\\/blog\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas - Smart GSM Blog","robots":{"index":"noindex","follow":"follow"},"og_locale":"es_ES","og_type":"article","og_title":"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas - Smart GSM Blog","og_description":"De acuerdo con un estudio de la Universidad de Ulm en Alemania, el 99.7 por ciento de los smartphones y tablets Android poseen una vulnerabilidad de seguridad que es expuesta...","og_url":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/","og_site_name":"Smart GSM Blog","article_published_time":"2011-05-18T13:59:16+00:00","author":"smartGSM","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#article","isPartOf":{"@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/"},"author":{"name":"smartGSM","@id":"https:\/\/www.smart-gsm.com\/blog\/#\/schema\/person\/32cf3f2aec518c4f53b651a334a50777"},"headline":"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas","datePublished":"2011-05-18T13:59:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/"},"wordCount":318,"commentCount":0,"image":{"@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#primaryimage"},"thumbnailUrl":"https:\/\/www.smart-gsm.com\/blog\/wp-content\/uploads\/2011\/05\/evil_android1.png","keywords":["android","problemas","seguridad","vulnerabilidades"],"articleSection":["Noticias"],"inLanguage":"es-AR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/","url":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/","name":"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas - Smart GSM Blog","isPartOf":{"@id":"https:\/\/www.smart-gsm.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#primaryimage"},"image":{"@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#primaryimage"},"thumbnailUrl":"https:\/\/www.smart-gsm.com\/blog\/wp-content\/uploads\/2011\/05\/evil_android1.png","datePublished":"2011-05-18T13:59:16+00:00","author":{"@id":"https:\/\/www.smart-gsm.com\/blog\/#\/schema\/person\/32cf3f2aec518c4f53b651a334a50777"},"breadcrumb":{"@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#breadcrumb"},"inLanguage":"es-AR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/"]}]},{"@type":"ImageObject","inLanguage":"es-AR","@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#primaryimage","url":"https:\/\/www.smart-gsm.com\/blog\/wp-content\/uploads\/2011\/05\/evil_android1.png","contentUrl":"https:\/\/www.smart-gsm.com\/blog\/wp-content\/uploads\/2011\/05\/evil_android1.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.smart-gsm.com\/blog\/vulnerabilidad-en-android-expone-claves-de-google-en-redes-wi-fi-publicas\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https:\/\/www.smart-gsm.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad en Android expone claves de Google en redes Wi-Fi p\u00fablicas"}]},{"@type":"WebSite","@id":"https:\/\/www.smart-gsm.com\/blog\/#website","url":"https:\/\/www.smart-gsm.com\/blog\/","name":"smartGSM noticias de tel\u00e9fonos","description":"smartGSM","alternateName":"smartGSM","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.smart-gsm.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es-AR"},{"@type":"Person","@id":"https:\/\/www.smart-gsm.com\/blog\/#\/schema\/person\/32cf3f2aec518c4f53b651a334a50777","name":"smartGSM","image":{"@type":"ImageObject","inLanguage":"es-AR","@id":"https:\/\/secure.gravatar.com\/avatar\/788bac405e347f783dc6965e5c98b7479eb56f1d952d7b0c37ded964387c3356?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/788bac405e347f783dc6965e5c98b7479eb56f1d952d7b0c37ded964387c3356?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/788bac405e347f783dc6965e5c98b7479eb56f1d952d7b0c37ded964387c3356?s=96&d=mm&r=g","caption":"smartGSM"},"sameAs":["https:\/\/www.smart-gsm.com\/blog"]}]}},"_links":{"self":[{"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/posts\/15341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/comments?post=15341"}],"version-history":[{"count":0,"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/posts\/15341\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/media\/15342"}],"wp:attachment":[{"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/media?parent=15341"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/categories?post=15341"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.smart-gsm.com\/blog\/wp-json\/wp\/v2\/tags?post=15341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}