Hasta La Gadget!

The emergency contacts (ICE) menu is proving to be a Pandora’s Box of lock screen vulnerabilities on several Samsung Galaxy handsets. Users are finding ways to exploit this weak point and the latest flaw that’s come to our attention employs the pop-up browser on the Note II as an accomplice. It requires the information ticker to be active (found in lock screen settings) so news bites and such are displayed on the screen you encounter when waking the device. Touch upon something to find out more and you’re sent to the lock screen; from there, head to the ICE menu to find a pop-up browser window containing the item you chose in the ticker. Within that window, anyone can access the handset’s clipboard or point the browser to sites holding personal data. Sure, it isn’t as bad as the bug that completely disables the lock screen — identified on the Galaxy S III, but also found to work on the Note II — but is just another reason to hope the mythical box is almost empty and at the bottom lies a fix.

Filed under: Cellphones, Software, Mobile, Samsung

Comments

Source: Ganesh’s Blog

Lock screens are around for a reason: to keep people from getting where they shouldn’t. They aren’t always infallible, though, and a few weeks ago, we saw a vulnerability in several builds of iOS 6 that granted access to the phone module without a passcode. Then, a couple of days ago, we reported on a Galaxy Note II bug that allows the quick-fingered to launch anything immediately behind the lock screen. Now, a similar flaw has been found on the Galaxy S III that breaks the lock screen altogether, permitting full use of the phone. To replicate the bug, you’ll need to tap the “Emergency Call” button on the lock screen, then go into the ICE (emergency contacts) menu. From there, press the home button, followed quickly by the power button, and that’s it. If successful, pressing the power button again will bring up the home screen straight away, and what’s more, the lock screen won’t return until the handset is restarted. Sounds worryingly simple, right? In our experience, not so much.

We first tried this method on an S III running Android 4.0.4 ICS, and a Note II for good measure, but to no avail. Then, we had a crack at an S III running 4.1.2 Jelly Bean, and were close to giving up trying to replicate it when voilà, it worked. We hoped to provide you with a video of the bug, but it must be camera shy. Despite literally hundreds of attempts in front of the lens and several more behind it, we’ve only managed it once — we found it impossible to nail down the correct timing between the home and power button pushes. Samsung’s likely aware of the bug already and when quizzed about the Note II vulnerability, said a fix for lock screen issues on affected “Galaxy devices” was in the works (read: they didn’t say the Note II specifically). We’ve reached out for comment just to be sure, but until a patch is provided, keep your phone concealed from nosey types who read tech sites and have saint-like patience.

Update: Samsung has responded, confirming a fix is indeed on its way:

“Samsung considers user privacy and the security of user data its top priority. We are aware of this issue and will release a fix at the earliest possibility.”

Filed under: Cellphones, Software, Mobile, Samsung

Comments

Via: SlashGear

Source: Full Disclosure

iOS is boring. It’s unconnected. It isn’t flexible. It’s slow. That’s generally the consensus. And while many look to Jony Ive’s new role as the answer, it doesn’t exactly solve these problems. So I thought I would give it a shot. More »

Microsoft is busy officially revealing all the bits and pieces that make up Windows Phone 8, and one of them is its new lock screen. Powered by Live Apps designed for Windows Phone 8 like Facebook, it lets apps directly update your lock screen with new photos and information. Exec Joe Belfiore is, as usual, excited about it, pointing to the “surprise” now waiting every time he picks up his phone. If pics from your last vacation popping up every time you turn your phone on doesn’t get you going ,just imagine sports scores or other relevant info you’ve picked pushed straight to the front, just a button press away.

Microsoft unveils new lock screen for Windows Phone 8 powered by Live Apps originally appeared on Engadget on Mon, 29 Oct 2012 13:19:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments