Samsung Security Flaw - Galaxy Note II

Full details at http://shkspr.mobi/blog/2013/03/samsu...

Android 4.1.2 - the new firmware for the Samsung Galaxy Note 2 contains an interesting security flaw.

From the lock screen, hit the emergency dialer, hit the ICE button, hold down the home key, release.
You can then see the user's home screen. If you are quick, you will be able to launch apps and call any direct dial numbers.

This lockscreen bug is present on the N7100 running 4.1.2, stock launcher.

There is *no* way to defend against this attack. Works on pattern lock, pin, password, and face unlock.

Full details at http://shkspr.mobi/blog/2013/03/samsu...

• Category

  Science & Technology

[Jan de Vos]

XPeria S with Android 4.0 also has this vulnerability, although the period that the home screen is visible is actually smaller there. Same actions: press 'emergency call', and from that screen push 'home' - the home screen will very briefly show before the lock screen is visible again.

[Terence Eden]

Very interesting. Have you reported this to Sony? Have you got a video showing it in action?

[Sgt KastoR]

That's an android security flaw, not Samsung's. My Galaxy 5 has the same problem with android 3.5.7.

[Terence Eden]

Your Galaxy 5 is made by Samsung. As far as I can tell, this flaw isn't present in normal Android. Certainly not on the Nexus devices I have tried.

[shadoom]

Im sure liz eden will soon have a lot more frienda and sms spam... censor that number

[Terence Eden]

It's my home number. Feel free to ring it as often as you like - there's no phone attached to the landline.

[Terence Eden]

Sentences should start with a capital letter and end with a full stop.

They should not include casual homophobia.

Your trolling score is 2/10 (as you spelled both words correctly). Please try harder in future.

[omikronsc]

I think the bigger security breach is displaying telephone number of Liz Eden publicly on YouTube. ;)

[bbulat50]

Я звонил

[Jay Adi]

It is fixed now... in the latest ota update.

[VELOZAVR]

Кто нибудь пробовал звонить этой тете по номеру на экране?

[Freddie Lopez]

Apple fanboys in 3...2...1...

[gir489]

This exploit doesn't seem to work on my Galaxy S2 Skyrocket running stock 4.0.4. Seems weird it would be introduced in a later version rather than present in past versions and just missed.

[hotfreshrider]

FYI record *ALL* videos LANDSCAPE on something better than a potato! k thx.

[SUBWAYFLASHER]

Sometimes the huge black spaces annoy the eyes. They annoy my eyes so I understand what he's saying. There's no need to be so condescending.

[SUBWAYFLASHER]

In other words....... shadoom: why you mad tho?

[Pavan santani]

But if we use any type of App lock Software and we lock our contacts then this Flaw Can be patched