Google has been working on the new mobile operating system Fuchsia for several years. Time and again, the builds end up in the test labs of security companies, such as Quarkslab. They have now given the very early Fuchsia version the title “security fortress”.
Google’s mobile operating system Android should become more secure. This is what the advertising and search engine giant has set itself in 2016 and is simultaneously developing the mobile operating system Fuchsia. According to Google, this will not be the successor to Android, but probably at least elements of Fuchsia will flow into Android.
Fuchsia is no longer based on the Linux kernel, but on a new one called Zircon, which according to Quarkslab is much more secure. This is because it is a micro-kernel, which is less susceptible to attack, according to the French security company.
Fuchsia uses isolated components
The operating system is divided into individual components that use their own virtual file system. In addition, they each run sandboxed and separated from the micro kernel on the user side. The architecture is thus designed for maximum kernel security, so that a weakness in the Bluetooth protocol, for example, cannot be used to attack the entire system.
The components can and should communicate with each other, for example to send data or instructions to other components. According to Quarkslab, however, the architecture of the system makes it impossible to gain control over other parts or the entire system via a security hole – something that is also called an exploit.
Weakness in “legacy” interface
But Quarkslab did find a gap in their test series, namely in the legacy interface – in other words, compatibility with Android. You can find all the technical information about Quarkslab’s tests and the architecture of Fuchsia on the security provider’s website.
Note: In an earlier version of this article, Fuchsia was referred to as the successor to Android. At least according to official information from Google, Fuchsia is not supposed to replace Android.