wraggster
October 24th, 2012, 20:35
Heads up CyanogenMod users — you will want to update to the latest nightly build as it turns out that your unlock patterns were accidentally logged (http://arstechnica.com/security/2012/10/cyanogenmod-logged-swipe-gestures-used-to-unlock-android-devices/). The fix has been committed and is in the latest build (https://github.com/CyanogenMod/android_frameworks_base/commit/56c014f289e04c0fd769af55c861b6e7bf7b4280). While not easy to access (it requires access to a backup image or the device), it was a potential security hole. It was added back in August when Cyanogen added the ability to customize the screen lock size.
http://tech.slashdot.org/story/12/10/24/0220230/cyanogenmod-android-roms-accidentally-logged-screen-unlock-patterns
http://tech.slashdot.org/story/12/10/24/0220230/cyanogenmod-android-roms-accidentally-logged-screen-unlock-patterns