Researcher says Samsung will release patch for lockscreen hole

Mar 21, 2013 by Nancy Owano report

(Phys.org) —A security researcher, describing some of his about-me features as "mobile enthusiast" and "Linux fiddler," this week discovered a security hole on an Android Samsung phone. In a March 20 posting on his blog, Terence Eden said he found a hole that would allow hackers to gain control of a phone's apps, dialer, and settings, and, here's the kicker, even though the phone is locked with password, PIN or other security approach. Potential trouble-making by an intruder could start with the emergency dialer, with certain steps that could result in allowing the intruder to interact with the device and disable the lockscreen as well. Eden discovered the flaw on a Galaxy Note II running Android 4.1.2.

While the ploy only allows the a brief time to interact, repeats of the process would result in the intruder able to do unwelcome tasks such as making calls and viewing data. (Actually, noted the Naked Security blog, success in making headway with the glitch would require "lightning-fast reflexes" as well as a cancelled call to emergency services.)

This video is not supported by your browser at this time.

Eden said, in his blog posting, "I have discovered another in Samsung Android phones. It is possible to completely disable the lock screen and get access to any app - even when the phone is 'securely' locked with a pattern, PIN, password, or . Unlike another recently released flaw, this doesn't rely quite so heavily on ultra-."

All Android phones, however, are not vulnerable to the same hole, according to Eden. He said the problem does not occur on stock . "I have only tested it on a Galaxy Note II running 4.1.2 - I believe it should work on Samsung Galaxy SIII. It may work on other devices from Samsung."

Samsung is paying attention to the discovery. Eden reported his discovery to Samsung late last month and they are working on a patch, he said, "which they assure me will be released shortly."

Explore further: BlackBerry launches Classic in last-ditch effort

Related Stories

Samsung reveals new Galaxy Note II

Aug 29, 2012

Fresh off a legal battle with Apple, Samsung is announcing a new version of the Galaxy Note, an offbeat, oversized smartphone that's become a surprise hit.

Samsung says 5 mn new-model Galaxy handsets sold

Jul 27, 2011

South Korea's Samsung Electronics, the world's second-largest mobile phone maker, said Wednesday it had sold five million Galaxy S II smartphones worldwide since the device debuted in April.

Danger on ice: Android info thaws in cold boot attack

Feb 18, 2013

(Phys.org)—Can low temperatures yield access to information in the phone's memory? Researchers found that a "FROST" attack can unlock an Android's phone data. Their research findings discuss how hackers ...

Recommended for you

Gift Guide: Home products come with connectivity

10 hours ago

Do you really need an app to tell you to brush and floss? It seems every household appliance is getting some smarts these days, meaning some connection to a phone app and the broader Internet. But then what?

BlackBerry launches Classic in last-ditch effort

Dec 17, 2014

(AP)—BlackBerry is returning to its roots with a new phone that features a traditional keyboard at a time when rival Apple and Android phones—and most smartphone customers—have embraced touch screens.

Tag Heuer changes tune, now looking at smartwatches

Dec 16, 2014

Barely a few months after dismissing Apple's smartwatch, the new chief executive of luxury Swiss watchmaker Tag Heuer conceded Tuesday that such a hi-tech gadget might after all have a place in his firm's ...

Runtastic turns to VR for optimal workouts

Dec 16, 2014

Some people avoid technology altogether when it comes time to switch off stress and turn on a feeling of health and well-being. They put on a pair of shoes and start walking. They get on a bike and start ...

Gift Guide: Five fitness trackers offer wide range

Dec 16, 2014

There are several fitness trackers to choose from, varying in what they measure and how easy they are to use. Here are five, ranked from budget to sophisticated, to give you a sense of the range available. ...

User comments : 1

Adjust slider to filter visible comments by rank

Display comments: newest first

evropej
1 / 5 (1) Mar 23, 2013
lol FAIL

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.