Comment Re:Hmm (Score 1) 95
I cannot believe..........no wait....I cannot understand why these things aren't being made with security at the forefront. Surely anyone with half a brain realises that every point of communication with a phone is a potential point of exploitation. LOCK IT DOWN PEOPLE - FOR BLINKY'S SAKE, THIS HAS BEEN GOING ON TOO LONG.
For the nexus phone, the actual exploit was in the browser, NFC was just used to open the browser without the user being asked to do so. On the nokia, the actual exploit was in the bluethooth stack. This particular implementation allows bluetooth device pairing over NFC even if bluetooth is turned off on the phone, so now with NFC the exploit is reachable without the users knowledge. The exploit in the bluetooth stack allows for root access on the device. So the biggest problem with current NFC implementations is they don't ask the user anything, just act on what the other side is giving you. That is the real problem, because now one may change the payment terminal to hack your phone. If I hold my phone against a payment terminal and it asks me to pair a bluetooth device I'll just deny it, but with the current phones, I'm not asked anything. Info from this site (dutch): http://tweakers.net/nieuws/83354/beveiligingsonderzoeker-waarschuwt-voor-misbruik-nfc.html