Samsung Galaxy S III bug lets anyone bypass password-protected lockscreen

[email protected] (Anupam Saxena)
March 8, 2013

Samsung_Galaxy_S_III

A user has discovered a security flaw in the Samsung Galaxy S III that allows anyone to bypass the lock screen of the phone by following a few simple steps.

Sean McMillan has posted a method to access the lock screen of the Galaxy S II on a mailing list. According to him the bug can be reproduced by following these steps:

1) On the code entry screen (of the lock screen) press Emergency Call

2) Then press Emergency Contacts

3) Press the Home button once

4) Just after pressing the Home button, press the power button quickly

5) If successful, pressing the power button again will bring you to the S3's home screen

McMillan mentions that it might take a few attempts to get the hack working and that sometimes the method works in one go while at others, it can take more than 20 attempts. He also adds that the method seems to work better when the mobile has auto rotation turned on. McMillan claims to have tested the method on three Galaxy S III devices.

We tried unlocking the screen of a Samsung Galaxy S III(GT-I9300 running Android 4.1.2) using the same method but weren't successful.

However, ZDNET says they were able to replicate the hack after a few attempts. The site states that the timing to replicate the issue is very small and that it is difficult to replicate it in the first attempt. But after bypassing the screen once, the bug stays on the device even when the phone's screen is turned back off and the phone stops asking the user for their PIN, password or pattern.

Just a few days back, another user, Terence Eden, had discovered a security flaw in the Samsung Galaxy Note II that allowed anyone to bypass the lock screen and take a look at the home screen app icons by following similar steps. But the hack didn't allow the hacker to use any of the apps.

Last month, a similar vulnerability was discovered in Apple iOS 6.1, allowing users to bypass the lock screen, following which Apple had acknowledged the issue and promised a fix.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
May 19,2020

Cybersecurity researchers on Monday warned of a Trojan malware campaign which is targeting India's co-operative banks using COVID-19 as a bait.

Seqrite, the enterprise arm of IT security firm Quick Heal Technologies, detected the new wave of Adwind Java Remote Access Trojan (RAT) campaign.

Researchers at Seqrite warned that if attackers are successful, they can take over the victim's device to steal sensitive data like SWIFT logins and customer details and move laterally to launch large scale cyberattacks and financial frauds.

According to the researchers, the Java RAT campaign starts with a spear-phishing email which claims to have originated from either the Reserve Bank of India or a nationalised bank.

The content of the email refers to COVID-19 guidelines or a financial transaction, with detailed information in an attachment, which is a zip file containing a JAR based malware.

Upon further investigation, researchers at Seqrite found that the JAR based malware is a Remote Access Trojan that can run on any machine which has Java runtime enabled and hence it can impact a variety of endpoints, irrespective of their base operating system.

Once the RAT is installed, the attacker can take over the victim's device, send commands from a remote machine, and spread laterally in the network.

In addition, this malware can also log keystrokes, capture screenshots, download additional payloads, and extract sensitive user information, Seqrite said, adding that such attack campaigns can effectively jeopardise the privacy and security of sensitive data at the co-operative banks and result in large scale attacks and financial frauds.

To prevent such attacks, users need to exercise ample caution and avoid opening attachments and clicking on web links in unsolicited emails.

Banks should also keep their operating systems updated and have a full-fledged security solution installed on all the devices, Seqrite advised.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
April 28,2020

Los Angeles, Apr 28: People who experience loss of smell as one of the COVID-19 symptoms are likely to have a mild to moderate clinical course of the disease, according to a study which may help health care providers determine which patients require hospitalisation.

The findings, published in the journal International Forum of Allergy & Rhinology, follows an earlier study that validated the loss of smell and taste as indicators of infection with the novel coronavirus, SARS-CoV-2.

According to the scientists from the University of California (UC) San Diego Health in the US, patients who reported loss of smell were 10 times less likely to be hospitalised for COVID-19 compared to those without the symptom.

"One of the immediate challenges for health care providers is to determine how to best treat persons infected by the novel coronavirus," said Carol Yan, first author of the current study and rhinologist from the UC San Diego Health.

"If they display no or mild symptoms, can they return home to self-quarantine or will they likely require hospitalisation? These are crucial questions for hospitals trying to efficiently and effectively allocate finite medical resources," Yan said.

The findings, according to the researchers, suggest that loss of smell may be predictive of a milder clinical course of COVID-19.

"What's notable in the new findings is that it appears that loss of smell may be a predictor that a SARS-CoV-2 infection will not be as severe, and less likely to require hospitalisation," Yan said.

"If an infected person loses that sense, it seems more likely they will experience milder symptoms, barring other underlying risk factors," she added.

Risk factors for COVID-19 previously reported by other studies include age, and underlying medical conditions, such as chronic lung disease, serious heart conditions, diabetes, and obesity.

In the current study, the scientists made a retrospective analysis between March 3 and April 8 including 169 patients who tested positive for COVID-19 at UC San Diego Health.

They assessed olfactory and gustatory data for 128 of the 169 patients, 26 of whom required hospitalisation.

According to the researchers, patients who were hospitalised for COVID-19 treatment were significantly less likely to report anosmia or loss of smell -- 26.9 per cent compared to 66.7 per cent for COVID-19-infected persons treated as outpatients.

Similar percentages were found for loss of taste, known as dysgeusia, they said.

"Patients who reported loss of smell were 10 times less likely to be admitted for COVID-19 compared to those without loss of smell," said study co-author Adam S. DeConde.

"Moreover, anosmia was not associated with any other measures typically related to the decision to admit, suggesting that it's truly an independent factor and may serve as a marker for milder manifestations of Covid-19," DeConde said.

The researchers suspect that the findings hint at some of the physiological characteristics of the infection.

"The site and dosage of the initial viral burden, along with the effectiveness of the host immune response, are all potentially important variables in determining the spread of the virus within a person and, ultimately, the clinical course of the infection," DeConde said.

If the SARS-CoV-2 virus initially concentrates in the nose and upper airway, where it impacts olfactory function, that may result in an infection that is less severe and sudden in onset, decreasing the risk of overwhelming the host immune response, respiratory failure, and hospitalisation, the scientists added.

"This is a hypothesis, but it's also similar to the concept underlying live vaccinations," DeConde explained.

"At low dosage and at a distant site of inoculation, the host can generate an immune response without severe infection," he added.

Loss of smell, according to the study, might also indicate a robust immune response which has been localised to the nasal passages, limiting effects elsewhere in the body.

Citing the limitations of the study, the scientists said they relied upon self-reporting of anosmia from participants, which posed a greater chance of recall bias among patients once they had been diagnosed with COVID-19.

They added that patients with more severe respiratory disease requiring hospitalisation may not be as likely to recognise or recall the loss of smell.

So the researchers said more expansive studies are needed for validating the results.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
January 22,2020

New Delhi, Jan 22: "Don't get into a trap. Your security is in your hands," the Border Security Force (BSF) has said issuing its social media rules for its officers and men. It has directed them not to use 42 mobile applications and show caution while using Facebook, Twitter and WhatsApp.

"Be cautious while using social media," said the BSF in a circular issued recently.

"Before using WhatsApp, Facebook, Twitter and other social media platforms, one needs to keep in mind that you are border guarding force and Central Civil Services (Conduct) Rules rule duly are applicable," it said.

It further pointed out that by commenting/writing about or forwarding unverified reports and rumours one violates laws of land.

"Several times unverified reports would be presented in way that they are absolutely true and start believing it. Seeing such post always use your commonsense and never get into the trap (sic.)," it state adding that the anti-national elements uses social media to propagate their agenda to cause unrest in India.

A picture clicked by Border Security Force personnel and posted on a social media platform remains there for always. Therefore, one should use officially approved pictures about any incident or untoward incidents related to Border Security Force, stated the circular. It pointed that unauthorised persons should not engage into taking pictures of the incidents.

It also highlighted how through social media, a few BSF personnel have fallen into trap of espionage racket carried out by enemy countries.

"Our security and respect is in our hands. Always think twice whether you are doing correct by accepting friendship requests from unknown persons, especially women and girls," it cautioned the troopers and officers.

It also highlighted that while going on leave and joining back the force, always follow the rules and regulations laid out for safety and security. "This is for your own safety," it stressed in the end.

The BSF has also issued a list of 42 mobile applications that needs to be completely avoided by serving BSF officers and jawans.

They are MI store, Weibo, Wechat, Shareit, Truecaller, UC News, UC Browser, Beautyplus, NewsDog, Viva Video - QU video Inc, Parallel Space, Apus Browser, Perfect Corp, Virus Cleaner - HI Security Lab, CM browser, MI Community, DU recorder, Vault Hide - No mobile Security, Youcam Makeup, Cachecleaner DU Apps Studio, DU battery saver, DU privacy, 360 security, DU Browser,Clean master - Cheeta Mobile, Baidu Translate, Wonder Camera - Bindu Inc, ES Ifle Explorer, Photo Wonder, QQ international , QQ music, QQ Mail, AA player, QQ News Feed, Wesync, QQ security Center, Selfie City, Mail Master, Mi Video Call -Xaomi and QQ launcher.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.