Android 16 Has A Clever Way To Defeat USB-Based Hacking
Contents
Android 16 appears to be setting things up for enhanced security and protection against attacks that use USB devices to breach security and possibly retrieve sensitive data. Google has long been vocal about its methods for improving security on Android to protect its users. Although the company has taken several measures to make Android a safer platform, one way it hasn’t really done a ton of work on is USB-based attacks. That appears to be changing with Android 16.
A new report from Mishaal Rahman (via Android Authority) showcases a feature that was found in the Android 16 Beta 4 release that blocks USB devices. According to Rahman, this new Security Mode uses Android’s Advanced Protection Mode to lock USB devices out, effectively making them inoperable on said device.
Android 16 enhances security by blocking USB devices when the phone is locked
Android allows the use of USB devices while your phone is unlocked. These could be anything from a USB storage device to a USB adapter for connecting peripherals, such as a keyboard. It makes sense to have this as a feature because lots of people use their Android devices for the storage of important files. Now, phones these days have tons of internal storage. However, some users might just prefer storing certain things on an external USB drive. On the same token, some users might employ an external keyboard for typing. All of that said, devices like these can pose a serious security risk if in the hands of hackers.
Google seems to be putting measures in place that will stop these devices from working if your device is locked. Say, when your phone is stolen, and the thief might be trying to break into your device to get at the sensitive information inside.
All of this works via Advanced Protection Mode, which doesn’t have a user-facing activation process. However, it was apparently possible to activate this mode manually to check out the new USB blocking capabilities. After that, things are pretty straightforward. If APM is active and the USB data signal blocking is enabled, plugging in a USB device like a storage drive won’t work. Android blocks it and notifies you that you need to unlock the device to use it.
Locking the phone won’t disconnect an already-connected device
One thing worth noting about this new security measure is that it’s intended to protect against unauthorized access for newly plugged-in USB devices. If a USB device is plugged in and then the phone is locked afterward, Android won’t force that USB device to disconnect.
That being said, there doesn’t seem like much of a reason for this to happen. If your device is unlocked, chances are you’re the one using it. The alternative is that a thief was able to get through your lock security. At that point, any USB device can be plugged in, and a thief/hacker isn’t going to lock your device again. As that would slow down whatever it is they’re trying to accomplish. Still, it might be good for Google to implement this anyway. As it’s entirely possible for a device to be locked again, even if a hacker is trying to prevent that scenario. Either way, this new form of protection seems to be coming. It’s not yet clear if Google will make this something users have readily available access to.
