Millions of Samsung Galaxy Phones May Be Vulnerable to Hackers

If you’re one of the millions of users of a Samsung Galaxy phone, you might be a potential target for a malicious hacker.
A report released today by NowSecure, a security firm located in Chicago, found that a glitch in Swift, the keyboard software used by default on all Samsung Galaxy devices could allow a remote attacker to compromise your phone.
This particular bug makes the phone vulnerable to what is known as a “man in the middle” attack. The Swift software consistently sends requests to a server, checking for updates. To someone with the right knowhow, though, it’s possible to impersonate Swift’s server and send through software that can be used to gain control of the device.
The main problem with this vulnerability is that there’s no real solution. The Swift keyboard is so integrated into Samsung’s software that it cannot be removed or disabled — even if it is switched out with a different keyboard app. Steering clear of unsecured Wi-Fi networks will make you less likely to be targeted, but it won’t render you invulnerable.
Related: 10 Biggest Tech Flops of the Century
Swift runs with elevated permissions, giving it pretty much free rein around the phone. This means that a hacker that worms his way into it can also access the Galaxy’s microphone and camera, track the user’s location or listen to their calls. They can even install apps.
NowSecure claims to have made Samsung and Google’s Android team aware of this vulnerability in late 2014, and Samsung reportedly has made a patch available to network providers. It’s not clear, though, whether providers have pushed out the patch to users yet. Many networks have a record of being notoriously slow to push through updates and security patches, and NowSecure’s tests found a number of Galaxy phones on different carriers were still vulnerable as of Tuesday.
If you’re of a more technical bent, you may be interested in seeing the details of NowSecure’s report on their blog. If you’re of a less technical bent, you might want to check with your carrier and try to avoid insecure Wi-Fi networks.
Chart of the Day: A Buying Binge Driven by Tax Cuts
The Wall Street Journal reports that the tax cuts and economic environment are prompting U.S. companies to go on a buying binge: “Mergers and acquisitions announced by U.S. acquirers so far in 2018 are running at the highest dollar volume since the first two months of 2000, according to Dealogic. Thomson Reuters, which publishes slightly different numbers, puts it at the highest since the start of 2007.”
Number of the Day: 5.5 Percent

Health care spending in the U.S. will grow at an average annual rate of 5.5 percent from 2017 through 2026, according to new estimates published in Health Affairs by the Office of the Actuary at the Centers for Medicare and Medicaid Services (CMS).
The projections mean that health care spending would rise as a share of the economy from 17.9 percent in 2016 to 19.7 percent in 2026.
Trump Clearly Has No Problem with Debt and Deficits

A self-proclaimed “king of debt,” President Trump has produced a budget that promises red ink as far as the eye can see. With last year's $1.5 trillion tax cut reducing revenues, the White House gave up even trying to pretend that its budget would balance anytime soon, and even the rosy economic projections contained in the budget couldn’t produce enough revenues, however fanciful, to cover the shortfall.
The Trump budget spends as much over 10 years as any budget produced by President Barack Obama, according to Jim Tankersley of The New York Times. And it projects total deficits of more than $7 trillion over the next decade — "a number that could double if the administration turns out to be overestimating economic growth and if the $3 trillion in spending cuts the White House has floated do not materialize in Congress,” Tankersley says.
Trump — who once promised to both balance the budget and pay down the national debt — isn’t the only one throwing off the shackles of fiscal restraint. Republicans as a whole appear to be embracing a new set of economic preferences defined by lower taxes and higher spending, in what Bloomberg describes as a “striking turnabout” in attitudes toward deficits and the national debt.
But some conservatives tell Tankersley that the GOP's core beliefs on spending and debt remain intact — and that spending on Social Security and Medicare, the primary drivers of the national debt, are all that matters when it comes to implementing fiscal restraint.
“They know that right now, a fundamental reform of entitlements won’t happen," John H. Cochrane, an economist at Stanford University’s Hoover Institution, tells Tankersley. "So, they have avoided weekly chaos and gotten needed military spending through by opening the spending bill, and they got an important reduction in growth-distorting marginal corporate rates through by accepting a bit more deficits. They know that can’t be the end of the story.”
Democrats, of course, have warned that the next chapter in the tale will involve big cuts to Social Security and Medicare. Even before we get there, though, Tankersley questions whether the GOP approach stands up to scrutiny: "This is a bit like saying, only regular exercise will keep America from having a fatal heart attack, so, you know, it's ok to eat a few more hamburgers now."
Part of the Shutdown-Ending Deal: $31 Billion More in Tax Cuts

Margot Sanger-Katz and Jim Tankersley in The New York Times: “The deal struck by Democrats and Republicans on Monday to end a brief government shutdown contains $31 billion in tax cuts, including a temporary delay in implementing three health care-related taxes.”
“Those delays, which enjoy varying degrees of bipartisan support, are not offset by any spending cuts or tax increases, and thus will add to a federal budget deficit that is already projected to increase rapidly as last year’s mammoth new tax law takes effect.”
IRS Paid $20 Million to Collect $6.7 Million in Tax Debts

Congress passed a law in 2015 requiring the IRS to use private debt collection agencies to pursue “inactive tax receivables,” but the financial results are not encouraging so far, according to a new taxpayer advocate report out Wednesday.
In fiscal year 2017, the IRS received $6.7 million from taxpayers whose debts were assigned to private collection agencies, but the agencies were paid $20 million – “three times the amount collected,” the report helpfully points out.
Like what you're reading? Sign up for our free newsletter.