PDA

View Full Version : Electronics Android security flaw


pr_capone
09-27-2012, 07:42 AM
Figure there are Android phone users out there that don't visit the Media Center that might be affected by this which is why this is in the Lounge. I have added the QR code below that will link you directly to the test site (in case you aren't reading from your mobile).

SCAN:
http://qr.kaywa.com/?s=8&d=http%3A%2F%2Fwww.isk.kth.se%2F%7Erbbo%2Ftestussd.html

OR CLICK:
http://www.isk.kth.se/~rbbo/testussd.html

http://www.pcworld.idg.com.au/article/437505/how_check_your_android_phone_vulnerable_ussd_security_flaw/


A security flaw has been discovered on various Android smartphones that allows a USSD code to perform a factory reset without any confirmation prompt. Is your Android phone at risk? Here's how to find out.

The USSD flaw was highlighted overnight at a Security Conference in Buenos Aires, Argentina by Ravi Borganokar, a researcher in the telecommunications department at the Technical University of Berlin. It was first said to occur only on various Samsung smartphones running the TouchWIZ UI overlay, but it has since been discovered that the problem can affect various other Android phones, too.

The USSD codes themselves aren't a problem, but on some Android phones these can be executed without a confirmation prompt. Some of these codes, typed into the phones keypad, are harmless (such as the one used to display a phone's IMEI number) but other codes can factory reset the phone. USSD codes typically start with an asterisk (*) followed by numbers and almost always end with a hash (#).

On Android phones that don't require a confirmation prompt, a factory reset USSD code can be dialled automatically by the phone. While it's almost impossible to dial the code into the dialler accidentally, this code could be embedded into a URL link, a QR code, or an SMS by a hacker. This would mean you phone would be factory reset as soon as you opened the malicious link.

To check if your Android phone is vulnerable, follow these steps:

1. Visit this link through your phone's Web browser. Don't worry, it's a test page so it's not going to reset your phone!

2. If your phone's dialler pops up and shows a number, your phone isn't affected and there's no need to worry. This is shown below on a Sony Xperia go:

http://cdn-us1.idg.com.au/gim/id/62508/res/24

However, if your phones dialler pops up and immediately displays a pop up menu with your IMEI number, your phone is vulnerable to this security flaw. This is displayed below on a Samsung Galaxy S III:

http://cdn-us1.idg.com.au/gim/id/62510/res/24

To fix this security flaw until your carrier or manufacturer issues a patch for the problem, you can download an app called TelStop. You can find it in the Google Play Store here.

ZepSinger
09-27-2012, 08:12 AM
Thanks for this. Apparently no issue with my Galaxy Nexus.

Z

htismaqe
09-27-2012, 08:36 AM
Thanks. My Motorola Droid X2 and my wife's Motorola Electrify were both affected.

Dr. Gigglepants
09-27-2012, 08:39 AM
My HTC Amaze is apparently vulnerable as well.
Posted via Mobile Device

Lzen
09-27-2012, 08:48 AM
Thanks. Apparently, my Xperia X10 is vulnerable.

BCD
09-27-2012, 09:12 AM
Mine is too.

I'm not worried about it.

Factory reset doesn't hurt the phone.

Sure, you can lose pics and music on your device, but you should back that stuff up anyway.

Fish
09-27-2012, 09:17 AM
Mine is too.

I'm not worried about it.

Factory reset doesn't hurt the phone.

Sure, you can lose pics and music on your device, but you should back that stuff up anyway.

LMAO...

If this were an iPhone flaw, this thread would have 100 posts already. At least 30 or so from you....

jiveturkey
09-27-2012, 09:20 AM
Galaxy Nexus is clear

Mr. Flopnuts
09-27-2012, 09:20 AM
So mine brought up my keypad with no numbers no imei or whatever. I'm on the S3.

DaFace
09-27-2012, 09:21 AM
LMAO...

If this were an iPhone flaw, this thread would have 100 posts already. At least 30 or so from you....

I'm sure you're right, but many of us who bitch frequently switch ROMs anyway. I've done a factory reset on my phone 3-4 times in the past month alone, so this wouldn't be any big deal.

-King-
09-27-2012, 09:24 AM
My phone is affected.
Posted via Mobile Device

pr_capone
09-27-2012, 09:30 AM
LMAO...

If this were an iPhone flaw, this thread would have 100 posts already. At least 30 or so from you....

A big reason why there aren't 100 posts in this thread already is because of the minute differences between UI's depending on brand and carrier. Not all Android phones were affected by this while a security gap of this nature on an iPhone would most likely affect every single one.

Reaper16
09-27-2012, 09:32 AM
Thanks for the heads-up.

Pestilence
09-27-2012, 09:33 AM
My EVO isn't affected.

Thanks for the heads up though!

BCD
09-27-2012, 09:35 AM
I'm sure you're right, but many of us who bitch frequently switch ROMs anyway. I've done a factory reset on my phone 3-4 times in the past month alone, so this wouldn't be any big deal.

Yep.

Zero worries on my end.

Rausch
09-27-2012, 09:36 AM
LMAO...

If this were an iPhone flaw, this thread would have 100 posts already. At least 30 or so from you....

I suspect those will be on the way.

Jobs was a fucking Nazi but (good or bad) he cared about his product. Honestly he was fucking Narcissus with his products.

Whatever you think the quality of Apple was before he died I have serious doubts it gets any better now. It will undoubtedly become more access-able but (YAY for coorporate!) I doubt you'll see the same emphasis on making a quality product over being a PC that looks like Ikea furniture...

Dr. Gigglepants
09-27-2012, 09:37 AM
On a side note, about 2 months ago I got into my car and put my phone in the "handle" of the drivers side door where it usually rides. When I got to my destination I grabbed my phone and unlocked it, the screen that greeted me wanted me to confirm or cancel a reset...I wonder if this is related.
Posted via Mobile Device

Deberg_1990
09-27-2012, 09:38 AM
My iPhone is not affected!

Pablo
09-27-2012, 10:31 AM
My S3 is fine. Thanks though.

Saul Good
09-27-2012, 10:40 AM
My phone is safe.
http://i85.photobucket.com/albums/k70/cbcat/rotaryphone.jpg

Fish
09-27-2012, 11:02 AM
I suspect those will be on the way.

Jobs was a fucking Nazi but (good or bad) he cared about his product. Honestly he was fucking Narcissus with his products.

Whatever you think the quality of Apple was before he died I have serious doubts it gets any better now. It will undoubtedly become more access-able but (YAY for coorporate!) I doubt you'll see the same emphasis on making a quality product over being a PC that looks like Ikea furniture...

Apple's quality has already decreased since Jobs died. And the future of Apple looks pretty shitty at the moment. I've not been happy with much they've done over the last year or more. And what is known about their future plans looks really awful. I'm afraid Apple is not going to be more accessible in the future. I expect quite the opposite.

Apple has completely abandoned the enterprise usage of their products. They no longer care about the enterprise environment at all(Fuck corporate!). Several people high up on the Apple corporate ladder have told me that directly. Their focus is now on the hipster experience using thin shiny gadgets, and the interconnectivity of Apple devices.

I was simply trying to point out the difference in attitude toward Apple flaws and Android flaws. Android flaws are discovered, and users are saying "Yeah, my phone was compromised, but meh... I'd only lose this and this and this..." But when Apple flaws are discovered, there's a platoon of Apple haters that instantly jump on board to laugh and point fingers at stupid Apple users. Lots of examples of this... I just find it fascinating that there's such a stark contrast between support of the two.

BCD
09-27-2012, 11:13 AM
I was simply trying to point out the difference in attitude toward Apple flaws and Android flaws. Android flaws are discovered, and users are saying "Yeah, my phone was compromised, but meh... I'd only lose this and this and this..." But when Apple flaws are discovered, there's a platoon of Apple haters that instantly jump on board to laugh and point fingers at stupid Apple users. Lots of examples of this... I just find it fascinating that there's such a stark contrast between support of the two.

The difference is, Android users recognize the flaws and limitations of Android, and do not consider it the 'end all, be all' of devices.

Rausch
09-27-2012, 11:25 AM
Apple's quality has already decreased since Jobs died. And the future of Apple looks pretty shitty at the moment.

At some point it will go back to the point like when they were selling units a Sears.

That's a shame, a disgrace, but inevitable...

Flachief58
09-27-2012, 11:29 AM
Thanks, my Mytouch 4g was

DaFace
09-27-2012, 11:34 AM
The difference is, Android users recognize the flaws and limitations of Android, and do not consider it the 'end all, be all' of devices.

Well, some. I doubt that's true of the MAJORITY of Android users.

Fish
09-27-2012, 11:38 AM
The difference is, Android users recognize the flaws and limitations of Android, and do not consider it the 'end all, be all' of devices.

LOL.... you make blanket statements for both Android users and Apple users. Way to dispel the notion...

BCD
09-27-2012, 11:39 AM
Well, some. I doubt that's true of the MAJORITY of Android users.

Well, not at the level of Apple users.

Not even close.

Deberg_1990
09-27-2012, 11:49 AM
I was simply trying to point out the difference in attitude toward Apple flaws and Android flaws. Android flaws are discovered, and users are saying "Yeah, my phone was compromised, but meh... I'd only lose this and this and this..." But when Apple flaws are discovered, there's a platoon of Apple haters that instantly jump on board to laugh and point fingers at stupid Apple users. Lots of examples of this... I just find it fascinating that there's such a stark contrast between support of the two.


People just enjoy trying to bring down the "Top Dog" a notch.


See Microsoft, Wal Mart, etc.......

Personally, i dont care what other people buy or do with their money. It doesnt affect me. No one should be ridiculed for buying a product they like and enjoy.

DaFace
09-27-2012, 12:06 PM
Personally, i dont care what other people buy or do with their money. It doesnt affect me. No one should be ridiculed for buying a product they like and enjoy.

Yup. My complaints against Apple are philosophical rather than tangible. I won't buy an Apple product because I feel that the world would be a better place if they worked with the tech community more and stopped suing everyone for stupid shit. I couldn't care less if someone enjoys their stuff and wants to use it, though.

htismaqe
09-27-2012, 12:09 PM
I was simply trying to point out the difference in attitude toward Apple flaws and Android flaws. Android flaws are discovered, and users are saying "Yeah, my phone was compromised, but meh... I'd only lose this and this and this..." But when Apple flaws are discovered, there's a platoon of Apple haters that instantly jump on board to laugh and point fingers at stupid Apple users. Lots of examples of this... I just find it fascinating that there's such a stark contrast between support of the two.

Apple certainly had A LOT to do with building that type of mentality in the first place.

Apple had a deliberate marketing campaign in the 90's trying to paint the picture that their users are smarter and more hip than PC users.

vailpass
09-27-2012, 12:11 PM
Great PSA Capone, probably saved some people some trouble.
I'm rooted. Don't care.

vailpass
09-27-2012, 12:13 PM
Apple's quality has already decreased since Jobs died. And the future of Apple looks pretty shitty at the moment. I've not been happy with much they've done over the last year or more. And what is known about their future plans looks really awful. I'm afraid Apple is not going to be more accessible in the future. I expect quite the opposite.

Apple has completely abandoned the enterprise usage of their products. They no longer care about the enterprise environment at all(**** corporate!). Several people high up on the Apple corporate ladder have told me that directly. Their focus is now on the hipster experience using thin shiny gadgets, and the interconnectivity of Apple devices.

I was simply trying to point out the difference in attitude toward Apple flaws and Android flaws. Android flaws are discovered, and users are saying "Yeah, my phone was compromised, but meh... I'd only lose this and this and this..." But when Apple flaws are discovered, there's a platoon of Apple haters that instantly jump on board to laugh and point fingers at stupid Apple users. Lots of examples of this... I just find it fascinating that there's such a stark contrast between support of the two.

There can be no question that when it comes to Apple you know your shit front, back, and sideways. Props.

BCD
09-27-2012, 12:38 PM
People just enjoy trying to bring down the "Top Dog" a notch.


See Microsoft, Wal Mart, etc.......

.

I don't feel this way at all.

BCD
09-27-2012, 12:38 PM
Yup. My complaints against Apple are philosophical rather than tangible. I won't buy an Apple product because I feel that the world would be a better place if they worked with the tech community more and stopped suing everyone for stupid shit. I couldn't care less if someone enjoys their stuff and wants to use it, though.

This, exactly.

BCD
09-27-2012, 12:41 PM
Apple had a deliberate marketing campaign in the 90's trying to paint the picture that their users are smarter and more hip than PC users.

They are still trying to paint this picture.

Have you seen the latest ad about their screen size. 'Common sense'?

Fish
09-27-2012, 12:55 PM
Apple certainly had A LOT to do with building that type of mentality in the first place.

Apple had a deliberate marketing campaign in the 90's trying to paint the picture that their users are smarter and more hip than PC users.

Very few companies don't do that kind of thing. It's just marketing technique. Go watch a Mercedes Benz commercial. Per Mercedes Benz, every one of their drivers are sophisticated executives who need 300+ horsepower to drive to Starbucks. I don't see Mercedes haters in every single car thread though.

I couldn't give two shits how most of the products I use are marketed to the masses. That doesn't affect my personal user experience at all. But evidently, it bothers people who are "Anti-Apple"...

htismaqe
09-27-2012, 01:17 PM
Very few companies don't do that kind of thing. It's just marketing technique. Go watch a Mercedes Benz commercial. Per Mercedes Benz, every one of their drivers are sophisticated executives who need 300+ horsepower to drive to Starbucks. I don't see Mercedes haters in every single car thread though.

I couldn't give two shits how most of the products I use are marketed to the masses. That doesn't affect my personal user experience at all. But evidently, it bothers people who are "Anti-Apple"...

Mercedes NEVER made commercials flat out making fun of the competition...not just the competition but the competition's CONSUMERS, who might have potentially been Apple consumers at some point.

It's not that Apple makes "Apple is the best" commercials. It's that Apple makes "PCs are the worst" commercials. VERY few other companies do that. Hence my statement that Apple had a LARGE hand in making people "anti-Apple" in the first place.

DaFace
09-27-2012, 01:18 PM
Mercedes NEVER made commercials flat out making fun of the competition...not just the competition but the competition's CONSUMERS, who might have potentially been Apple consumers at some point.

It's not that Apple makes "Apple is the best" commercials. It's that Apple makes "PCs are the worst" commercials. VERY few other companies do that. Period.

That's probably also why there's so much vitrol amongst a lot of tech types (and therefore, message board users). Apple's commercials basically said that their products were for the cool kids, so all the nerds went elsewhere.

Fish
09-27-2012, 01:33 PM
Mercedes NEVER made commercials flat out making fun of the competition...not just the competition but the competition's CONSUMERS, who might have potentially been Apple consumers at some point.

It's not that Apple makes "Apple is the best" commercials. It's that Apple makes "PCs are the worst" commercials. VERY few other companies do that. Hence my statement that Apple had a LARGE hand in making people "anti-Apple" in the first place.

Really?

Well what about this? It's a Mercedes commercial that depicts Ferdinand Pich, the former owner of Audi and VW, as the grim reaper, and the driver dryly saying "Sorry" when his Mercedes brakes don't kill him like the owner of the competition wants...

<iframe width="640" height="360" src="http://www.youtube.com/embed/30a2dpHS_TU?feature=player_detailpage" frameborder="0" allowfullscreen></iframe>

BCD
09-27-2012, 01:39 PM
Really?

Well what about this? It's a Mercedes commercial that depicts Ferdinand Pich, the former owner of Audi and VW, as the grim reaper, and the driver dryly saying "Sorry" when his Mercedes brakes don't kill him like the owner of the competition wants...

<iframe width="640" height="360" src="http://www.youtube.com/embed/30a2dpHS_TU?feature=player_detailpage" frameborder="0" allowfullscreen></iframe>

LOL

I've never seen that, and most people wouldn't pick up on the play against Volkswagon/Audi.

siberian khatru
09-27-2012, 01:42 PM
Really?

Well what about this? It's a Mercedes commercial that depicts Ferdinand Pich, the former owner of Audi and VW, as the grim reaper, and the driver dryly saying "Sorry" when his Mercedes brakes don't kill him like the owner of the competition wants...

<iframe width="640" height="360" src="http://www.youtube.com/embed/30a2dpHS_TU?feature=player_detailpage" frameborder="0" allowfullscreen></iframe>

I'm glad you explained that, because otherwise I never would've gotten the reference and thought it was simply about Mercedes safety helping you cheat death.

I can't believe that was anything more than an in-joke, as so few consumers would know who Piech is/was. Unless that was a European commercial, and Piech is well known in Europe.

Rausch
09-27-2012, 01:43 PM
I'm glad you explained that, because otherwise I never would've gotten the reference and thought it was simply about Mercedes safety helping you cheat death.

No, I'm pretty sure that's the point...

mikeyis4dcats.
09-27-2012, 03:39 PM
RAZR MAxx is fine

htismaqe
09-27-2012, 03:58 PM
Really?

Well what about this? It's a Mercedes commercial that depicts Ferdinand Pich, the former owner of Audi and VW, as the grim reaper, and the driver dryly saying "Sorry" when his Mercedes brakes don't kill him like the owner of the competition wants...

<iframe width="640" height="360" src="http://www.youtube.com/embed/30a2dpHS_TU?feature=player_detailpage" frameborder="0" allowfullscreen></iframe>

Well, that's the first time I've ever seen that, but I guess I've been proven wrong. Shame on Mercedes Benz.

It certainly didn't receive NEARLY as much air time as this:

http://origin.arstechnica.com/journals/apple.media/thumb/200/200/getamac.jpg

htismaqe
09-27-2012, 03:58 PM
I'm glad you explained that, because otherwise I never would've gotten the reference and thought it was simply about Mercedes safety helping you cheat death.

I can't believe that was anything more than an in-joke, as so few consumers would know who Piech is/was. Unless that was a European commercial, and Piech is well known in Europe.

This.

Shag
09-27-2012, 04:15 PM
Well, that's the first time I've ever seen that, but I guess I've been proven wrong. Shame on Mercedes Benz.

It certainly didn't receive NEARLY as much air time as this:

http://origin.arstechnica.com/journals/apple.media/thumb/200/200/getamac.jpg

Samsung has been pretty aggressive with the Apple attack ads recently...

qabbaan
09-27-2012, 04:21 PM
"Sand on seashore"

Fish
09-27-2012, 04:48 PM
Samsung has been pretty aggressive with the Apple attack ads recently...

Yeah... good call. Samsung, the owner of iPhone's top competitor, hasn't had much problem making fun of their competition's customers. I guess they're another one of those VERY few companies who also do that....

<iframe width="640" height="360" src="http://www.youtube.com/embed/rdd0mxKg_Ok?feature=player_detailpage" frameborder="0" allowfullscreen></iframe>

Which has been going on since their last last revision with the SII....

<iframe width="640" height="360" src="http://www.youtube.com/embed/tNxDd3l0lEU?feature=player_detailpage" frameborder="0" allowfullscreen></iframe>

BCD
09-27-2012, 05:18 PM
Apple does make the coolest adapters...

:)

Fish
09-27-2012, 05:19 PM
Apple does make the coolest adapters...

:)

That was pretty funny..... :D

JASONSAUTO
09-27-2012, 05:20 PM
What is the chance of this actually happening to my phone?
Posted via Mobile Device

BCD
09-27-2012, 05:20 PM
Also, Apple seems to think everyone has the same size hands.

Fish
09-27-2012, 05:23 PM
What is the chance of this actually happening to my phone?
Posted via Mobile Device

Post your phone number up, and we can tell you pretty quickly... :thumb:

Sure-Oz
09-27-2012, 05:26 PM
My phones in the clear, thanks

Fish
09-27-2012, 05:28 PM
No, fuck dude.... Don't post your number on here. I was kidding. I hope you're not serious...

JASONSAUTO
09-27-2012, 05:32 PM
No, fuck dude.... Don't post your number on here. I was kidding. I hope you're not serious...

Holy fuck man, why would you do that to me?
Posted via Mobile Device

BCD
09-27-2012, 05:34 PM
LMAO

BCD
09-27-2012, 05:36 PM
Factory reset won't break the phone.

It just puts the phone back to like when you bought it.

Fish
09-27-2012, 05:40 PM
Holy fuck man, why would you do that to me?
Posted via Mobile Device

Man, I'm really sorry. I never thought you would actually post it up here. My initial post was completely sarcastic. I wouldn't ever post my phone number online. Especially not here...

I apologize, but I really thought you would know that. My bad, I should have made that more clear.

JASONSAUTO
09-27-2012, 05:42 PM
Man, I'm really sorry. I never thought you would actually post it up here. My initial post was completely sarcastic. I wouldn't ever post my phone number online. Especially not here...

I apologize, but I really thought you would know that. My bad, I should have made that more clear. lol got ya.

It was actually an area code with the next numbers spelling fuck you. 3825968. Lol. I'm not too bright but I'm smart enough to know better than that.
Posted via Mobile Device

Fish
09-27-2012, 05:47 PM
lol got ya.

It was actually an area code with the next numbers spelling fuck you. 3825968. Lol. I'm not too bright but I'm smart enough to know better than that.
Posted via Mobile Device

Ah geez.. you dick. I was feeling awful.

I figured you'd know better.

JASONSAUTO
09-27-2012, 05:48 PM
Ah geez.. you dick. I was feeling awful.

I figured you'd know better.

I would have let you stew on it but I could tell you felt terrible. I felt bad for getting you.
Posted via Mobile Device

BCD
09-27-2012, 05:49 PM
:LOL:

vailpass
09-27-2012, 05:49 PM
lol got ya.

It was actually an area code with the next numbers spelling **** you. 3825968. Lol. I'm not too bright but I'm smart enough to know better than that.
Posted via Mobile Device


LMAO That wasn't nice

htismaqe
09-27-2012, 06:50 PM
Yeah... good call. Samsung, the owner of iPhone's top competitor, hasn't had much problem making fun of their competition's customers. I guess they're another one of those VERY few companies who also do that....

video removed to save space...holy shit!

Which has been going on since their last last revision with the SII....

video removed to save space...holy shit!

I forgot about that one. You're right.

Look, I'm not anti-Apple. In fact, I'm strongly considering getting an Apple laptop for my next computer because it has everything I need software-wise in a rock solid hardware package.

I've been working in IT a long time and the Mac-sturbators (as I used to call them) were always constantly in everyone's face evangelizing and if you didn't use Apple, you were an idiot.

So I admit I have a pre-conceived notion.

JASONSAUTO
09-27-2012, 07:00 PM
LMAO That wasn't nice

I felt bad when I realized he actually felt bad about it. LMAO
Posted via Mobile Device

thabear04
09-27-2012, 07:08 PM
Guess I gotta rest my phone FML

pr_capone
09-27-2012, 07:54 PM
Guess I gotta rest my phone FML

Is it tired?

BCD
09-27-2012, 08:00 PM
Guess I gotta rest my phone FML

Huh?

Fish
09-27-2012, 08:24 PM
I forgot about that one. You're right.

Look, I'm not anti-Apple. In fact, I'm strongly considering getting an Apple laptop for my next computer because it has everything I need software-wise in a rock solid hardware package.

I've been working in IT a long time and the Mac-sturbators (as I used to call them) were always constantly in everyone's face evangelizing and if you didn't use Apple, you were an idiot.

So I admit I have a pre-conceived notion.

I was very anti Apple at one time. But a position became available at work for Apple support and I took it knowing little about Apple. I had the same fuck Apple attitude as everybody else. But I've now been Apple certified for 5 years and have worked on every model of Mac available. They make good products these days. Their logic boards (mobo) are engineered very well. Complete control of mobo circuitry makes for really nice hardware/software performance. Their MacBook Pros are very nice machines. Very sturdy. They run Windows better than many Wintel laptops. Most IT guys like them because they can triple boot OS X, Win, and Linux. For many, they're worth the additional cost.

Raiderhater58
09-27-2012, 11:00 PM
EVO 3-D not affected

thanks for heads up

thabear04
09-28-2012, 08:47 AM
Is it tired?

my bad i mean reset

BCD
09-28-2012, 10:26 AM
my bad i mean reset

Okay, why would you need to reset it?

Mr. Plow
09-28-2012, 06:37 PM
No, fuck dude.... Don't post your number on here. I was kidding. I hope you're not serious...

Just reading through the thread and got to Jasonsauto post.... then I see "Post your phone # and we'll tell you".... and then I see a deleted post.


LMAO

Mr. Plow
09-28-2012, 06:39 PM
lol got ya.

It was actually an area code with the next numbers spelling fuck you. 3825968. Lol. I'm not too bright but I'm smart enough to know better than that.
Posted via Mobile Device


Oh, it got better. LMAO