UPDATE2: Lennyuk has confirmed that you shouldn't be affected by this so long as you're using the latest S3 rom.
Lennyuk said:
Ok so confirmed, if you are on the latest S3 rom (and maybe other samsung phones) your phone should no longer auto-launch the USSD code to do a factory reset.
Click to expand...
Click to collapse
UPDATE: Here is a video of this vulnerability being performed at Ekoparty 2012 over the weekend: http://www.youtube.com/watch?v=Q2-0B04HPhs
I'll keep this quick in order to make sure everyone is aware of this exploit that has been published. I found it here: http://www.exquisitetweets.com/collection/tomscott/1762
Apparently the USSD code to wipe a S3 can be trigged in a browser iframe. Obviously this is bad bad BAD. Until there is a fix for this please keep your wits about you and avoid any hyperlinks to pages from untrusted sources.
Code:
the USSD code to factory data reset a Galaxy S3 is *2767*3855# can be triggered from browser like this: <frame src="tel:*2767*3855%23" />
MOD EDIT: workaround here
chrisfu said:
I'll keep this quick in order to make sure everyone is aware of this exploit that has been published. I found it here: http://www.exquisitetweets.com/collection/tomscott/1762
Apparently the USSD code to wipe a S3 can be trigged in a browser iframe. Obviously this is bad bad BAD. Until there is a fix for this please keep your wits about you and avoid any hyperlinks to pages from untrusted sources.
Code:
the USSD code to factory data reset a Galaxy S3 is *2767*3855# can be triggered from browser like this:
Click to expand...
Click to collapse
What the... why should this even work?! They need to fix this asap. Does it mean the frames can trigger other s3 codes? And is this only for s3, Samsung phone, or android in general?
Sent from my GT-I9300 using xda app-developers app
kofiaa said:
What the... why should this even work?! They need to fix this asap. Does it mean the frames can trigger other s3 codes? And is this only for s3, Samsung phone, or android in general?
Sent from my GT-I9300 using xda app-developers app
Click to expand...
Click to collapse
Yep, you can trigger other USSD codes too. It's just that one that is the game-changer and will make Samsung sit up and take notice. Looking at the simplicity of it it's a wonder it's not been discovered before. Unconfirmed, but I'd imagine this would affect all Samsung Android devices.
Update: Just to let you know, I'm investigating a way of removing the "tel:" URL handler now on my S3. If others can also investigate, we should have a short-term fix for this soon within the community.
does Samsung know about this has anyone informed them ? this is serious guys
Sent from my GT-I9300 using xda premium
port76 said:
does Samsung know about this has anyone informed them ? this is serious guys
Sent from my GT-I9300 using xda premium
Click to expand...
Click to collapse
I've tweeted @SamsungUK. They're as good as any other place to start. I'd suggest as many people bombard them as possible, just to get their attention. They can then let their primary Android devs know about this.
I've also tweeted @ChainfireXDA too, as he'd probably be quicker to react than Samsung. @supercurio is usually really good at helping out in such circumstances as well.
Easiest way to save yourself from this attack: set Chrome as your default browser, the TEL uri is not handled by chrome.
Just tested it on a SGS3 and Note... So just use chrome, and you are safe.
We have also contacted Samsung Finland about this.
sts_fin said:
Easiest way to save yourself from this attack: set Chrome as your default browser, the TEL uri is not handled by chrome.
Just tested it on a SGS3 and Note... So just use chrome, and you are safe.
We have also contacted Samsung Finland about this.
Click to expand...
Click to collapse
Chrome is my default browser.
I normallly root, remove apps I won't use like the default browser, then unroot.
sts_fin said:
Easiest way to save yourself from this attack: set Chrome as your default browser, the TEL uri is not handled by chrome.
Just tested it on a SGS3 and Note... So just use chrome, and you are safe.
We have also contacted Samsung Finland about this.
Click to expand...
Click to collapse
Yep, I can confirm that with Chrome on ICS.
Just to add, there is some information here regarding intents within Android. Revoking CALL_PHONE permissions would serve to block this attack within any HTML-rendering app.
http://developer.android.com/guide/appendix/g-app-intents.html
If they don't affect normal calling or text messaging, the CALL and DIAL intents could be temporarily revoked, and this would fix the issue. It should just mean that "tel:" URI's within iframes and "a" tags wouldn't work within any app that renders HTML.
hmmm... sorry but I dont understand what you are talking about..
whats the problem?
Ninfosho said:
hmmm... sorry but I dont understand what you are talking about..
whats the problem?
Click to expand...
Click to collapse
If you click a link which contains within it a line of malicious code, it can cause your SGS3 reset to factory defaults. Yep, a full wipe.
sts_fin said:
Easiest way to save yourself from this attack: set Chrome as your default browser, the TEL uri is not handled by chrome.
Just tested it on a SGS3 and Note... So just use chrome, and you are safe.
We have also contacted Samsung Finland about this.
Click to expand...
Click to collapse
Update: it works also with chrome... So no helping there.
Update to update: chrome parses the TEL: link but does not run the USSD.
surely it depends if the browser is a system app or not?
If it is a system app chances are it has permissions to dial out, if not, it won't
EDIT:
If you are on an ICS rom please try this from whatever browsers you have installed and let me know which browser, if its a system or data app and what happens.
http://ninpo.qap.la/test/index.html
THAT LINK IS SAFE! IT TRIGGERS A SAFE USSD CODE NOT THE WIPE ONE
Lennyuk said:
surely it depends if the browser is a system app or not?
If it is a system app chances are it has permissions to dial out, if not, it won't
EDIT:
If you are on an ICS rom please try this from whatever browsers you have installed and let me know which browser, if its a system or data app and what happens.
http://ninpo.qap.la/test/index.html
THAT LINK IS SAFE! IT TRIGGERS A SAFE USSD CODE NOT THE WIPE ONE
Click to expand...
Click to collapse
Tried on Opera mobile:
-it ask me to click before triggering the code
-I click to launch the process
-then it just open the dialer with the code "11111" in it
SGS3 GT-I9300 ICS 4.0.4
Firefox: opens Phone app dialer, but nothing within.
Opera: Automatically suppresses frame loading and displays the warning.
Chrome: Opens Phone app dialer and shortly displays it, but does nothing.
So, from what I can tell, this *only* affects certain "TouchWiz" devices.
On standard Android, it will lauch the dialler - but the user has to hit the dial key for anything to happen.
And, depending on their device, hitting dial will try to send the code as a USSD rather than processing it internally.
Until Samsung issue an update there's little you can do other than replace the TouchWiz dialler.
It didnt work on the STANDARD GS3 browser.
The dialler opened up and there was NO number on the screen to dial. Hitting "call" brought up the last dialled number I had
Lennyuk said:
surely it depends if the browser is a system app or not?
If it is a system app chances are it has permissions to dial out, if not, it won't
EDIT:
If you are on an ICS rom please try this from whatever browsers you have installed and let me know which browser, if its a system or data app and what happens.
THAT LINK IS SAFE! IT TRIGGERS A SAFE USSD CODE NOT THE WIPE ONE
Click to expand...
Click to collapse
It's working on my HTC Desire, 2.3.4 rooted, default browser. Saw my IMEI.
It's also working on my Nexus S, 4.0.3, rooted, default browser. Saw my IMEI.
Then tried it on my SIII on 4.0.4, dialer shows up, but nothing happens.
Lennyuk said:
surely it depends if the browser is a system app or not?
If it is a system app chances are it has permissions to dial out, if not, it won't
EDIT:
If you are on an ICS rom please try this from whatever browsers you have installed and let me know which browser, if its a system or data app and what happens.
http://ninpo.qap.la/test/index.html
THAT LINK IS SAFE! IT TRIGGERS A SAFE USSD CODE NOT THE WIPE ONE
Click to expand...
Click to collapse
This affects firefox and chrome on an epic touch 4G.
And I'll see myself out
Tappin' Typin'
This is very serious and really bad, I just saw the news and checked if XDA members are aware and voila, everyone is worried. We really need a patch from Samsung as soon as possible. I wonder USSD codes exists in a lot of devices and not only Samsung phones, will it be vulnerable similar to us S3 users?
Android 4.1.1 and stock Phone app = safe. Code is displayed in phone app but nothing happens. But when i opened the link with touchpal dialer, IMEI has been displayed. When I clicked the link, system asked me which phone app i want to use to open. Either cancel it or choose a stock one and you are safe.
Related
Version 1.5.1 now available. It seems to be the same as version 1.5 that came out a couple of weeks back, except this version doesn't revert back to version 1 when you restart the phone - so a pretty fundamental improvement there.
thx for the news .. i'm happy i didnt got that prob from the begining
Oh yeah. Thanks for the news. Why did convert in the first place?
GT-I9000
Got it... But no changes since version 1.5 at all ?
Hi sorry for a noob question.When I open the Samsung Apps I can't find the Samsung Task Manager to download?How to download it?Thanks in advance!
firezero said:
Hi sorry for a noob question.When I open the Samsung Apps I can't find the Samsung Task Manager to download?How to download it?Thanks in advance!
Click to expand...
Click to collapse
Not showing on my UK Galaxy S either.
Anyone have the .apk file
Mine was downloaded when I updated to JM1, I didn't have to do anything, it was just there.
Beards said:
Not showing on my UK Galaxy S either.
Anyone have the .apk file
Click to expand...
Click to collapse
Showing here on JPK firmware.
Not showing on mine, neither.
XXJF3 (Maybe that's the reason)
Hi guys,
This is the apk for Task Manager 1.5.1. Fetched this from Samsung apps on JM8. Hope this helps!
How come it says application not installed when I try to install it?
Sent from my GT-I9000 using Tapatalk
For some reason I can't install it. What do I do?
Sent from my GT-I9000 using XDA App
Apologies guys, was stupid enough to upload the wrong apk! Updated my initial post with the correct one. Try it and let me know if it works better... well at least it won't be worse
wtf permissions?
I was going to install the 1.5.1 release from the Samsung app store, but finally held back: The permissions it's asking for are not quite to my liking.
This app requires each and every permission there is, e.g. change UI settings, send SMS and MMS, make telephone calls, read emails, change APN settings, change global system settings...
Did all of you ignore this, or were you shown other permission requests?
cooldoud said:
Apologies guys, was stupid enough to upload the wrong apk! Updated my initial post with the correct one. Try it and let me know if it works better... well at least it won't be worse
Click to expand...
Click to collapse
Many thanks.... downloaded and will try it out later.
marty1976 said:
I was going to install the 1.5.1 release from the Samsung app store, but finally held back: The permissions it's asking for are not quite to my liking.
This app requires each and every permission there is, e.g. change UI settings, send SMS and MMS, make telephone calls, read emails, change APN settings, change global system settings...
Did all of you ignore this, or were you shown other permission requests?
Click to expand...
Click to collapse
Noticed that as well, but it's the first update I installed for the Task Manager. I assumed it already had those permissions, and decided to trust Samsung. Some might argue it's not such a good idea
There are more apps in the Samsung store that require odd permissions and I just called Samsung Mobile Germany to ask the supporters why this is.
Not that I expected anything else, but what I was told is just wrong.
I was told the following:
- These applications are from Google (i.e. programmed by Google)
- These permissions are set in Google accounts
- this is no risk as the applications for 100% sure won't make calls or send SMS / MMS
This is so poor as a support answer... And a really poor programming style as well, 'cause it contradicts the idea that programmers should only require those permissions in their manifest that are acually needed.
Not gonna install that crap anyway. What if Samsungs servers are hacked and distributing modified versions of these applications? They're not gonna pay my excessive cellphone bill, should this be true, aren't they?
cooldoud said:
Hi guys,
This is the apk for Task Manager 1.5.1. Fetched this from Samsung apps on JM8. Hope this helps!
Click to expand...
Click to collapse
Hi cooldoud Thanks for the file.
thx m8 its works,maybe u know how can i see this app like widget?
Beards said:
Not showing on my UK Galaxy S either.
Anyone have the .apk file
Click to expand...
Click to collapse
It's showing on my UK Galaxy S, what firmware do you have?
[Q] Phone app, Contacts app rant
I love my SGS, hence i want to rant about it
Dialing from contacts, phone takes always one extra step than other phones.
if i already took the time to set defaults manually,
(1) why do i have to select the number to call again (contacts, solution could be viewing button on far right from the contact name) or
(2) when i use smart dial and am satisfied with first suggestion why do i have to select it then press call (phone app, if i want to call other suggestions they already show it separately in a drop down)?
after a month of using my sgs i still hold the phone to my ear and wait for a while, until i realize i hadn't pressed the green button.
(3) in contacts app i can search my friends by nickname, but ONLY IF i edited their nickname through contacts app, i.e. if it's imported from gmail and i never edited it on my phone it fails to find by nickname.
(4) smart dial is not so smart as it can't search by nickname, unless it's the only field for the contact in the phone's phonebook, huh? so i have to manually add new contacts to phone, then link them, for my closest people (phone app) if it's okay for a handful of people but starting from 20 i start cursing samsung app devs
(5) for my business contacts... it avoids searching by last name, what? (phone app)
then the editing, grouping etc... but since i don't add people daily i can make it work through other apps.
so are there solutions, that you know of, to these woes ?
1. I think the default number only applies outside the contact app (like a shortcut). But if you open it from contact it has to show you all the contact info (otherwise how else can dial the other numbers of that contact that is not the default??).
2. I think this is to cater for the 3G video call option.
3/4/5. It is kind of lame the phone app search only matches from beginning of name and not the entire string. (Hopefully new firmware can cater to this). Luckily the global search (i.e. long press menu key) matches everything. You may want to use this to find instead of opening the phone/contact app. It is much faster
In the contacts settings you can set the order to last name before first name, then you can search by last name.
If you want to call default number just flick the contact name right. Flick it left for message.
pippin88 said:
If you want to call default number just flick the contact name right. Flick it left for message.
Click to expand...
Click to collapse
Hey thanks for the tip
was it in the manual? (which i never read for any device....)
Well thats just great.
I am seriously so fed up with Samsung its not even funny. I am never buying one of there products ever again.
I said that I would never buy another Samsung product after my last Samsung phone, the Instinct. That was by far the worst phone I have ever owned. I with I had have stuck to that promise.
Oh well. I guess I learned the wrong way.
I think I might just try to sell this pos for as much as I can get for it and buy an HTC Desire HD.
Piece of crap! Grrrrrrrrr
I have put up with this phones issues for months, thinking wait for froyo and see if it helps things. To my delight froyo just became available for o2 uk customers, so I quickly updated. I was like a child with a new toy...but now feel like its broke/lost!
Firstly firstly beaufiful widgets doesn't seen to work properly on froyo. But my main gripe is the new found super lag. I cant even type this message without the phone stuttering! Scrolling up and down in anything...it stutters...like wtf?
Whats my best bet? Hard reset? If so how do I do it? If I backup my contacts on kies will it restore to a factory rest phone?
Any advice is welcome!
Btw running JP3
Sent from my GT-I9000 using XDA App
djglenn1337 said:
I have put up with this phones issues for months, thinking wait for froyo and see if it helps things. To my delight froyo just became available for o2 uk customers, so I quickly updated. I was like a child with a new toy...but now feel like its broke/lost!
Firstly firstly beaufiful widgets doesn't seen to work properly on froyo. But my main gripe is the new found super lag. I cant even type this message without the phone stuttering! Scrolling up and down in anything...it stutters...like wtf?
Whats my best bet? Hard reset? If so how do I do it? If I backup my contacts on kies will it restore to a factory rest phone?
Any advice is welcome!
Btw running JP3
Sent from my GT-I9000 using XDA App
Click to expand...
Click to collapse
backup your apps with titanium backup
factory reset
restore (only user apps and data, no system data)
Thanks for the reply. How do I actually factory reset? Can't find it in settings
Sent from my GT-I9000 using XDA App
djglenn1337 said:
Thanks for the reply. How do I actually factory reset? Can't find it in settings
Sent from my GT-I9000 using XDA App
Click to expand...
Click to collapse
Settings/Privacy/Factory Data reset
I feel your pain.
Even going to JPO theres still lag, and the number of hacks that have to be done to get away from RFS and make the phone actually perform like it should is crazy.
I ended up defecting to an iPhone 4, but still have the SGS waiting for the day when its lag free and performing the way it should.
IMO the SGS "could" be way better than the iPhone, but it just needs Samsuck to pull the finger out.
cheetah2k said:
I feel your pain.
Even going to JPO theres still lag, and the number of hacks that have to be done to get away from RFS and make the phone actually perform like it should is crazy.
I ended up defecting to an iPhone 4, but still have the SGS waiting for the day when its lag free and performing the way it should.
IMO the SGS "could" be way better than the iPhone, but it just needs Samsuck to pull the finger out.
Click to expand...
Click to collapse
I did the same and defected to iPhone 4. I will be selling my Galaxy S as I don't believe Samsung will resolve the issues. They have had plenty of time to do this already and nothing has happened. Even with the XDA Developers showing them the problems and coming up with solutions they still have a laggy phone whcih lacks in so many way's. Don't even get me started on Kies.
In the end I bought an iPhone 4 and iPad wifi. Using iTunes and everything is working correctly.
Do yourself a favour...........
No no, its a great phone
Just need to apply mods/hacks/roots etc to make it work apparently and when update comes out you undo it all then redo it all again and hope for best.
I think it would be a great phone if it didn't lag so much.
Sent from my GT-I9000 using XDA App
JP3 is sh*t. use another firmware
use doc's or darky's and wait for cm6.1 that'll surely be free from lags.
I will have to disagree. I got my galaxy s 3 months replacing iphone 3gs. It came with eclair 2.1 and it was perfect. I did the froyo update the day it came out with the reg hack and kept on getting freezes and force close. Did a factory reset and everything was fine. Did the new official update JPA with no reset and again perfect. The only program that lagged a little was email. Did the one click lag fix and now everything is smooth and fast. With over 50 apps i have no problems at all. My only gripe is that it should have more available ram and with flash on the browser stutters on flash heavy sites.
Apart from that i am very happy. By the way a get sattelite lock on my gps from a cold start in 30 seconds!
Sent from my GT-I9000 using XDA App
What most users are forgetting is when you upgrade the ROM from Eclair to Froyo you MUST perform a Factory Reset.
Doing so will eliminate a lot of the problems with current Apps.
Animal06 said:
No no, its a great phone
Just need to apply mods/hacks/roots etc to make it work apparently and when update comes out you undo it all then redo it all again and hope for best.
I think it would be a great phone if it didn't lag so much.
Sent from my GT-I9000 using XDA App
Click to expand...
Click to collapse
I can't tell if you're being sarcastic or not.
Ok, been using the phone on and off today without to much trouble...
Till now. Just disconnected phone from charger and and tried facebook app, no go apk failed, same with xda app etc etc. stock browser started but font size was huge and screen res wrong. Power off fixed it... Scary stuff
Sent from my GT-I9000 using XDA App
sounds like what happened when my SD card started showing signs of failing.
prepare for the worst.
knock on wood, my replacement hasn't acted up yet.
Ok, been using the phone on and off today without to much trouble...
Till now. Just disconnected phone from charger and and tried facebook app, no go apk failed, same with xda app etc etc. stock browser started but font size was huge and screen res wrong. Power off fixed it... Scary stuff
Click to expand...
Click to collapse
lol this has happened a few times to ppl....just out luck
Hi,
i recently received my transformer, and there seems to be some issues displaying Korean.
As you can see from the attachment, specific letters are being overlapped, making it almost impossible to read.
It happens in every app... dolphin HD, Gmail app, Stock, but I don't think it happens when I type.
What can I do?
thank you
Tell Asus. Send them a tweet and/or contact them on Facebook. I don't visit Korean sites a lot, but did test some out and see the same problem.
I just sent them a tweet. Hopefully they see it.
DKYang said:
Tell Asus. Send them a tweet and/or contact them on Facebook. I don't visit Korean sites a lot, but did test some out and see the same problem.
I just sent them a tweet. Hopefully they see it.
Click to expand...
Click to collapse
Thank you very much for the tweet!
I have also sent them an email about it... so hopefully they fix the issue.
I have also came across a thread about not being able to type in korean using the dock, has that been fixed?
Thanks again!
Opera mobile and firefox beta displaying korean fine... hmm.
But flash doesn't work well in opera or firefox...
Youtube main page says to install flash even though already installed... Some videos says it cannot be played on this device. But some play okay? weird.
That happens to me too. It seems to be the problem of the rendering engine of the default web browser. For me, the symptom happens when you type in an input form of a web page, but does not occur when you put words in, for example, the URL box. Also, it happens after a syllable block starting with 'ㅍ' or 'ㅎ'. Hopefully they can release a fix for this soon.
Btw, it's really good to see some Korean TF101 users... I never could find anyone in Korean forums.
it is pretty annoying that it can't display korean properly on apps...
Also glad to see a fellow Korean user of transformer
sam problem here..
Havebeen looking for asolution for almost an hour... nothing useful...
Mostly korean in apps r displayed fine but the problem is when it displayed on browser...
Fourtunately im not quite much using korean when doing some tasks on the tablet..
But itz so annoying. Hope asus provide some solution for this.
Try typing in "about:debug" without quote sin the URL and then going into Settings -> Debug and disabling wide view or opengl rendering (or both) and restart browser and see if it helps.
it does not work....
frosty5689 said:
Try typing in "about:debug" without quote sin the URL and then going into Settings -> Debug and disabling wide view or opengl rendering (or both) and restart browser and see if it helps.
Click to expand...
Click to collapse
But thanks...
Asus replied my email.
He wrote just like this "close!"
My question was "do you have plan to fix this?"
What a polite answer!
So , I just received an update an hour ago and successfully installed it. I was already on ICS before that, and I'd like to know what this update is about. Are there any fixes? do know where I can get a hold of their change log?
Thanks
dotslashbin said:
........... do know where I can get a hold of their change log?
Thanks
Click to expand...
Click to collapse
There isn't one.
bigstarrynight said:
There isn't one.
Click to expand...
Click to collapse
ohh , thats odd. i"m wondering if the kernel but that causes wake locks were fixed.
By the way, I'm located in Singapore
dotslashbin said:
ohh , thats odd. i"m wondering if the kernel but that causes wake locks were fixed.
By the way, I'm located in Singapore
Click to expand...
Click to collapse
There is a topic about the update in which Dr. Ketan says the following:
UPDATE what is new
- POPup PLAY watch movies when you mailing…. (Galaxy SIII)
- Restart button is green.
- Some icons changed.
- Faster.
- Signature unlock.
dotslashbin said:
ohh , thats odd. i"m wondering if the kernel but that causes wake locks were fixed.
By the way, I'm located in Singapore
Click to expand...
Click to collapse
HiYa from Scotland!!
It's early days, but I'm sure guys will be into 4.0.4 and find out exactly what's good and what isn't. Just one thing, don't factory re-set until we see positive news about the eMMc brick bug that affects the SGN running ICS
My note is not hot after upgraded to 4.0.4 and it is faster, the pattern lock screen changed. Wake lock still testing on it. (Need to test out if this extends the battery)
Sent from my GT-N7000 using xda app-developers app
My galaxy note is running perfectly now, that means faster, and I dont' have to do all those tricks to get a deep sleep.
However, what I am about is this feature that I read somewhere. Too bad I was in a hurry that time, and didn't get a chance to save the link , but what it mentioned was that this "premium" version gave the capability where you can directly write into the s-note app, without the need to open the app. I am imagining that if you you have it on your main screen, you can directly write to it already, unlike before when it needed to open the app before you can do something.
Was these all true? or did I assume wrong?
dotslashbin said:
My galaxy note is running perfectly now, that means faster, and I dont' have to do all those tricks to get a deep sleep.
However, what I am about is this feature that I read somewhere. Too bad I was in a hurry that time, and didn't get a chance to save the link , but what it mentioned was that this "premium" version gave the capability where you can directly write into the s-note app, without the need to open the app. I am imagining that if you you have it on your main screen, you can directly write to it already, unlike before when it needed to open the app before you can do something.
Was these all true? or did I assume wrong?
Click to expand...
Click to collapse
Yes, u must be referring to the quick S Note, but this is available on 4.0.3 already.
S Memo Quick Note>>>
http://forum.xda-developers.com/showthread.php?t=1765415
S Memo doesn't open after ICS 4.0.4 Update on GT-N7000
Hi Folks,
I updated my GT-N7000 to ICS 4.0.4 update (87Mb, India) through OTA, and after that the S Memo doesn't open at all. The Application does 'open' but gives a black screen before displaying a message, 'Unfortunately, S Memo couldn't open' and gives me an option to cancel or wait.
Its been a few days since the update and i tried emptying cache, clearing application data and also wiping partition cache but none of it worked.
Please provide a solution for this issue as S Memo is like a canvas for me.
Thanks
does anyone know if its safe to root from here directly and flash from it directly? or do i still need a aosp before flashing new roms
This only effects stock / Touchwiz based ROMs using Samsung's stock Dialer a.k.a. contacts.apk . AOSP or AOKP based ROMs are NOT affected by this bug.
UPDATE XXLRT Not Affected. Earlier versions ARE affected.
trevmar said:
.
My Galaxy Note N7000 rooted, with GingerBread XXLA4 (thanks Dr Ketan) is vulnerable. But a pop-up first asks me if I want to send the call to GrooveIP or the Dialer. I am unlikely to ignore that pop-up now...
.
Click to expand...
Click to collapse
zylor said:
Tested on:
GT-N7000 4.0.4 XXLRT
GT-i9100 with PA 2.13 4.1.1
with:
Chrome
Dolphin
Dolphin Beta
Stock Browser
Float Browser
All applications in latest version!
None of them triggered the bug
Click to expand...
Click to collapse
via Android Central:
A major security vulnerability has been discovered in some TouchWiz-based Samsung smartphones, including the Galaxy S3. The bug was first demonstrated by security expert Ravi Borgaonkar at the Ekoparty security conference. It involves the use of a single line of code in a malicious web page, and immediately triggers a factory reset without prompting the user, and without allowing them a way to cancel the process. Even more serious is the possibility that this could be paired with a similar glitch that can render the user's SIM card inoperable. And as the malicious code is in URL form, it can also be delivered via NFC or QR code.
We've confirmed that the code, when used on a web page, does indeed trigger an immediate factory reset on our Verizon Galaxy S3 running Ice Cream Sandwich. Presumably, because the built-in browser is common to all S3 models, other versions will also be affected. Others have reported that the Galaxy S2, Galaxy Ace and Galaxy Beam are susceptible, too. As far as we can tell, though, the vulnerability does not seem to affect Samsung phones running stock Android, like the Galaxy Nexus. Similarly, Google Chrome on Samsung handsets is not susceptible to the bug, nor are other browsers we tested.
The vulnerability is the result of the way native the Samsung browser and dialer apps handle USSD codes and telephone links. USSD codes are special codes that can be entered in the keypad to perform certain functions, like enabling call forwarding, or accessing hidden menus on the device. On Samsung phones, there's also a USSD code for resetting the phone (and presumably another for nuking your SIM). That, combined with a glitch in the browser which allows phone numbers to be automatically dialed, results in a particularly nasty issue for anyone unfortunate enough to run by a malicious web page.
There are, of course, other applications of this glitch for vulnerability. The ability to automatically run numbers through the dialer could be used to call premium-rate phone numbers, for example.
But the fact that just visiting a web site could trigger your phone to factory reset itself, and nuke your SIM in the process, is a very serious issue. Until it's addressed, we'd recommend switching to Google Chrome immediately, and as an added precaution, disabling the built-in "Internet" app through Settings > Apps > All, if you're using an affected Samsung phone.
We've reached out to Samsung for comment on this issue, and we'll keep you updated with any information they provide.
Click to expand...
Click to collapse
Source:
http://www.androidcentral.com/major-security-vulnerability-samsung-phones-could-trigger-factory-reset-web-browser
The original article from Slashgear. They DO NOT mention the GT-N7000 specifically, but it shares so much with the GS2 that it is very likely to contain the same bug.
http://www.slashgear.com/samsung-galaxy-s-iii-remote-data-wipe-hack-discovered-25249061/
A single line of code can apparently trigger an unstoppable factory-reset of the Samsung Galaxy S III, security researchers have discovered, with the potential for malicious websites to wipe out users’ phones. The hack was detailed by Ravi Borgaonkar at the Ekoparty security conference, with a simple USSD code – that could be sent from a website, or pushed to the handset by NFC or triggered by a QR code – that can reset the Galaxy S III or indeed other Samsung handsets.
Although the phone user is able to see the process taking place, hitting back on the device will not stop the reset. For QR code readers that automatically load whatever website has been stored to each code, or indeed NFC readers that do the same with NFC tags, the user would have no warning – and no hope of stopping – their handset from running the malicious code.
Only Samsung devices running TouchWiz appear to be affected, with basic Android only showing the code in the dialer screen but not running it automatically, Pau Oliva reports. Samsung’s default, though, is to dial the code automatically.
Perhaps most concerning, it’s reportedly possible to double up on the attack, Borgaonkar says, including a USSD code that also kills the SIM card currently in the handset. That way, a single message could be used to wipe a Samsung phone and leave the user with a broken SIM too.
It’s also possible to push Samsung handsets straight to a website running the bad code using a WAP-push SMS message. For the moment, the advice is to deactivate automatic site-loading in whatever QR and/or NFC reader software you use, and be careful about clicking links that you don’t implicitly trust.
Update: The same code has been found to work on the Galaxy Beam, S Advance, Galaxy Ace, and Galaxy S II. However, the Samsung-made Galaxy Nexus, which runs stock Android, is not susceptible.
Update 2: Other Samsung device owners are claiming that the hack does not work on their device. We’re running our own tests and will update when we know more.
Update 3: Tweakers’ Arnoud Wokke has filmed a demo of the hack in action on a Galaxy S II.
Click to expand...
Click to collapse
And now some funny tweets
https://twitter.com/stuartgibson/status/250564113980338178
https://twitter.com/ceoStephenElop/status/250560153013846017
nickshertzer said:
https://twitter.com/stuartgibson/status/250564113980338178
https://twitter.com/ceoStephenElop/status/250560153013846017
Click to expand...
Click to collapse
I hope that doesn't work via tweeter, else we are screwed
It affects htc phones aswell, all the way back to the hero.
Sent from my GT-P3100 using xda premium
stoney73 said:
It affects htc phones aswell, all the way back to the hero.
Click to expand...
Click to collapse
Really? Source?
More info:
http://www.theverge.com/2012/9/25/3403928/samsung-touchwiz-reset-vulnerability
http://tweakers.net/nieuws/84578/regel-html-code-kan-galaxy-telefoons-resetten.html
The Galaxy Nexus and Galaxy Note are also not vulnerable to the problem.
Click to expand...
Click to collapse
That is a German translation, but per tweakers, the "Galaxy Note" with 4.0.4 update is not vulnerable. I believe it loads the code in your dialer, but does not automatically execute the command.
Again, CM9 / CM10 / AOKP / AOSP based ROMs are not affected. AFAIK, this deals with the way the Samsung Stock Browser handles malformed dialer links by automatically dialing them.
nickshertzer said:
Really? Source?
More info:
http://www.theverge.com/2012/9/25/3403928/samsung-touchwiz-reset-vulnerability
http://tweakers.net/nieuws/84578/regel-html-code-kan-galaxy-telefoons-resetten.html
That is a German translation, but per tweakers, the "Galaxy Note" with 4.0.4 update is not vulnerable. I believe it loads the code in your dialer, but does not automatically execute the command.
Again, CM9 / CM10 / AOKP / AOSP based ROMs are not affected. AFAIK, this deals with the way the Samsung Stock Browser handles malformed dialer links by automatically dialing them.
Click to expand...
Click to collapse
Im going by a tweet conversation between paul o brien and lennyuk. Apparently uptodate sammy firmwares are patched against it.
Sent from my GT-P3100 using xda premium
how about 3rd party browsers?
The xda thread on this on the SGS3 is here:
http://forum.xda-developers.com/showthread.php?t=1904629
It includes a link to test your own browser.
Sent from my GT-N7000 using xda premium
Best thing to take away from this:
DylanReeve said:
The issue has nothing to do with the browser. I've tested on ICS with Chrome, default browser and Dolphin - all behave the same way.
Test here: dylanreeve DOT com/phone.php (uses IMEI display USSD - it's totally safe).
The issue is with the stock dialer. If you can prevent that dialer from handling the tel: URL then you can either prevent or at least intervene in attack attempts. So the solution is... Install another dialer (probably any other dialer).
dylanreeve.posterous DOT com/remote-ussd-attack
(I can't post URLs yet)
Click to expand...
Click to collapse
However, again, it appears it is patched on latest Stock Note 4.0.4 ROMs. But, there is no confirmation that this is the case with older 4.0.3 or GB Stock ROMs.
And this (if you are still worried):
sts_fin said:
Easiest way to save yourself from this attack: set Chrome as your default browser, the TEL uri is not handled by chrome.
Just tested it on a SGS3 and Note... So just use chrome, and you are safe.
We have also contacted Samsung Finland about this.
Click to expand...
Click to collapse
nickshertzer said:
However, again, it appears it is patched on latest Stock Note 4.0.4 ROMs. But, there is no confirmation that this is the case with older 4.0.3 or GB Stock ROMs.
Click to expand...
Click to collapse
Yes when I clicked on a test link using the stock Samsung browser, all I got was the dialler pop up but nothing happened. I'm on the latest stock ICS 4.0.4 LRT ROM.
I sent the same link to a friend with an original Galaxy Tab which is running 2.3.6 Gingerbread and it made his device cough up his IMEI.
To my mind clearly his device was affected, but the stock browser on the LRT ROM at least appears safe.
Who want to try on Note just for fun
click on this from mobile, it will give you 'Link' press on it.
http://home.mattie-systems.nl/temp/telefoon.html
dont worry this have framed for *#06#, even it work then it will execute your IMEI but nothing
(ps:above posted link is third party link and doesn't exist on my Page or Page in my control, it may change from *#06# to other code without any notice, try at your own risk) though I can confirm on my Note 4.0.4 no codes executes ussd. Code directly)
If this execute your IMEI then OP said code will wipe data on note.
I have tested code one in OP too.
it has always bugged me that Samsung has so many dial codes. In the CDMA world you have enter the msl/spc, not so on GSM? But then getting the MSL can be rather trivial if the phone is rooted.
Sir i have overskreen,boat browser,stock browser.shud i delete them???
Sent from my GT-N7000 using xda app-developers app
A trivial workaround: install another dialer (for example, dialer one from the market). Now instead of directly dialing the dangerous code, you are asked which dialer to use.
How to escape if code get dialed accidentally -
This is just my experience (I don't claim it is safe)
This code first erases data on usb storage, so at first moment you see the screen, just remove battery, you may lose very small amount of data depending on how much time passed to remove battery, I have did this in past(yes on Note only) and I lost just 1-2 data folder, but phone memory was as it is.
Sent from my GT-N7000 using xda premium
MatanZ said:
A trivial workaround: install another dialer (for example, dialer one from the market). Now instead of directly dialing the dangerous code, you are asked which dialer to use.
Click to expand...
Click to collapse
Tested on stock 4.0.4 lri rom with the stock web-browers and none code is executed, even if the stock dialer is launched with the link provided by Dr Ketan.
With the app 'ex-dialer pro' this is not the same story, even if the option to auto-execute any ussd code is disabled, the code is executed, so, be carefull...
Specially if you have specified the other dialer as default app, not my case.
dr.ketan said:
How to escape if code get dialed accidentally -
This is just my experience
This code first erases data on usb storage, so at first moment you see the screen, just remove battery, you may lose very small amount of data depending on how much time passed to remove battery, I have did this in past(yes on Note only) and I lost just 1-2 data folder, but phone memory was as it is.
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
With all due respect, I don't think removing a battery during a format or delete operation is a wise thing to do.
I tested on LRG rooted stock rom and Stock browser. It shows the code in the dialer screen but you have to manually click on the call button.
I think if delete command issuing to sd card, it should not cause issue. Though you are right, I have added line on my post.
Sent from my GT-N7000 using xda premium
Another work around:
Install a program like 'Call confirm', which prompts you before doing the actual dial.
I love this program - I'm always accidentally hitting wrong names/etc with my fat fingers.
- Frank