Hackers can steal cloud computing time

A vulnerability in cloud-based mobile browsers may allow hackers to steal cloud computing time from users of such apps in mobile devices like smartphones and tablets, a tech site reported Thursday.

 

Security researchers from North Carolina State University and the University of Oregon said the cloud resources that do the heavy lifting can be tricked into doing "other things," according to an article posted on PC World.

 

"(It) depends on how well-provisioned the cloud browser platform is, as well as how large of a job the attacker is executing. Cloud browsers operators who are monitoring resource use will definitely notice a spike in service use. However, reacting to BMR (Browser MapReduce technique) jobs requires the operator to build additional defenses into their framework," it quoted NCSU assistant professor William Enck, a co-author of the paper, as saying.

 

Cloud browsing uses computing power from outside the mobile device to process web pages and deliver them to users. Examples of cloud-based browsers include Opera Mini and Android Silk.

 

PC World said the researchers tested their idea by storing pieces of data on URL-shortening sites, which tricked the cloud browser providers into performing computations for them.

 

Enck said the technique, if used maliciously, can give hackers "vast, temporary and completely anonymous" computing power that they may use for tasks like cracking passwords.

 

He and his fellow authors are to present the paper, titled "Abusing Cloud-Based Browsers for Fun and Profit," at the 2012 Annual Computer Security Applications Conference on Dec. 6 in Orlando, PC World said. — TJD, GMA News