PDA

View Full Version : Android security flaw lets attackers in using a large password



wraggster
September 17th, 2015, 19:59
http://o.aolcdn.com/hss/storage/midas/34532e7e6d3572721f548beeed23074b/202401359/motog-fb2.jpg (http://www.engadget.com/2015/09/16/android-lock-screen-bypass-flaw/)
There have been plenty of security holes involving mobile device lock screens (http://www.engadget.com/2013/09/21/ios-7-bug-lockscreen-emergency-call/), but a recently discovered (http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/) Android flaw may give you more reasons than usual to be cautious. The technique bypasses the lock screen on most versions ofAndroid Lollipop (http://www.engadget.com/2015/03/09/android-5-1/) by crashing it with any large-enough password -- all you need to do is work with that text while the camera app is open, and then enter it into the password prompt. When the attack works, you have as much access as the hardware's rightful owner.

http://www.engadget.com/2015/09/16/android-lock-screen-bypass-flaw/