Google Nexus phones vulnerable to denial-of-service attack via SMS
Attackers could force phones from Google's Nexus line to reboot or fail to connect to the mobile Internet service by sending a large number of special SMS messages to them. — The issue was discovered by Bogdan Alecu …
Context & Ripple Effects
This is the third time in three years an SMS flaw has knocked a mobile platform offline: BGR reported in December 2010 that an Android bug sending messages to random recipients was being ignored by Google, and a year later Microsoft faced the same class of problem with the Windows Phone SMS attack that rebooted devices and disabled the messaging hub.
Researcher Bogdan Alecu's finding extends the pattern to Google's flagship hardware line itself — the Nexus devices meant to showcase stock Android. Wide same-day pickup across AllThingsD, CNET, Phone Arena and other outlets signals how sensitive any availability hole in the reference Android phone is for a platform whose installed base already dwarfs iOS.
First-order effects
- Nexus owners are directly exposed: a burst of special-class SMS messages can force their handsets to reboot or cut them off from mobile data until intervention, with no user action required beyond receiving texts.
- Google faces immediate patch pressure on its own reference devices, where it controls both software update cadence and the public example the line sets for the wider Android ecosystem.
Second-order effects
- Carrier networks absorb the collateral cost, since the attack works by flooding the SMS channel — the same delivery mechanism every subscriber shares, making targeted jamming of individual subscribers cheap for attackers.
- Other handset makers running near-stock Android inherit the exposure and will be judged against how quickly Google ships the fix, repeating the dynamic from the 2010 SMS bug that drew criticism for going unaddressed.
Third-order effects
- If the pattern holds — Android 2010, Windows Phone 2011, Nexus 2013 — the SMS/messaging layer is a structural weak point that survives across operating systems because the signaling path predates smartphones, pushing platform vendors toward rate-limiting and filtering at the modem or carrier level rather than app-level fixes.
The trend: SMS is proving a durable denial-of-service vector that recurs across mobile platforms regardless of vendor, forcing carriers and OS makers to treat the messaging channel itself as attack surface.