5 ms·

In what way was the exploit a part of Android? I thought it was a touchwiz dialer issue that it automatically dialled USSD numbers without secondary confirmatio

by estel 14y ago

In what way was the exploit a part of Android? I thought it was a touchwiz dialer issue that it automatically dialled USSD numbers without secondary confirmation from the user?

dylancarruthers 14y ago
I'm not arguing either way but why would this be resetting via an USSD be a useful feature?
- jrabone 14y ago
  You can dial it blind on a bricked phone?
ryanmacg 14y ago
See this commit https://android.googlesource.com/platform/packages/apps/Contacts/+/39948dc7e34dc2041b801058dada28fedb80c388 https://android.googlesource.com/platform/packages/apps/Cont... it was an issue in any Android variant that featured autodial, I saw someone reporting it worked on CyanogenMod 7 for example and it also worked on some HTC devices
- spiffworks 14y ago
  CM7 user here. Can confirm that it is vulnerable. Easily fixed by installing a second dialer so that you'll always get a prompt. Also I can't find any info on whether cm7 supports USSD factory reset. Anybody aware?
jrabone 14y ago
No, I've confirmed that a random sample of HTC & Huawei phones around my office are also vulnerable. Nothing specific to TouchWiz. The thing that MIGHT be specific to Samsung is the actual remote wipe code, but relying on that is simply security-by-obscurity. I'd bet ALL phones have got some USSD code you'd rather not be instantly triggerable by a web page.
- andybak 14y ago
  From what I understand stock Android doesn't have the problem. Multiple manufacturers seem to have introduced the flaw in the same way with their customizations.
bmunro 14y ago
My Galaxy Nexus fails the test at http://dylanreeve.com/phone.php http://dylanreeve.com/phone.php Apparently the bug is fixed in 4.1 (I'm still on 4.0.4). I installed a temporary fix - TelStop. It just handles telephone Intents so that you get a popup asking you to choose an application.

5 ms·

In what way was the exploit a part of Android? I thought it was a touchwiz dialer issue that it automatically dialled USSD numbers without secondary confirmatio

by estel 14y ago

In what way was the exploit a part of Android? I thought it was a touchwiz dialer issue that it automatically dialled USSD numbers without secondary confirmation from the user?

dylancarruthers 14y ago
I'm not arguing either way but why would this be resetting via an USSD be a useful feature?
- jrabone 14y ago
  You can dial it blind on a bricked phone?
ryanmacg 14y ago
See this commit https://android.googlesource.com/platform/packages/apps/Contacts/+/39948dc7e34dc2041b801058dada28fedb80c388 https://android.googlesource.com/platform/packages/apps/Cont... it was an issue in any Android variant that featured autodial, I saw someone reporting it worked on CyanogenMod 7 for example and it also worked on some HTC devices
- spiffworks 14y ago
  CM7 user here. Can confirm that it is vulnerable. Easily fixed by installing a second dialer so that you'll always get a prompt. Also I can't find any info on whether cm7 supports USSD factory reset. Anybody aware?
jrabone 14y ago
No, I've confirmed that a random sample of HTC & Huawei phones around my office are also vulnerable. Nothing specific to TouchWiz. The thing that MIGHT be specific to Samsung is the actual remote wipe code, but relying on that is simply security-by-obscurity. I'd bet ALL phones have got some USSD code you'd rather not be instantly triggerable by a web page.
- andybak 14y ago
  From what I understand stock Android doesn't have the problem. Multiple manufacturers seem to have introduced the flaw in the same way with their customizations.
bmunro 14y ago
My Galaxy Nexus fails the test at http://dylanreeve.com/phone.php http://dylanreeve.com/phone.php Apparently the bug is fixed in 4.1 (I'm still on 4.0.4). I installed a temporary fix - TelStop. It just handles telephone Intents so that you get a popup asking you to choose an application.