Serious security flaw found, will wipe the S3 clean

[goin_nil]

New malicious hack would allow a website to wipe certain Galaxy S devices clean with irreversible effects [VIDEO]

http://phandroid.com/2012/09/25/new...evices-clean-with-irreversible-effects-video/

 

[dmmarck]

Yup, our own blog covered it

Major security vulnerability in some Samsung phones could trigger factory reset via web page | Android Central

 

[Tarpit_Carnivore]

Users at XDA have confirmed that it will not affect the Chrome browser [VULNERABILITY] Remote wipe via iframe USSD trigger - xda-developers

 

[dmmarck]

I wish these sites would read more, the vulnerability is limited to the stock browser. Users at XDA have confirmed that it will not affect the Chrome browser [VULNERABILITY] Remote wipe via iframe USSD trigger - xda-developers

I know Phil said it on G+, is it not said in the blog post?

 

[Tarpit_Carnivore]

I know Phil said it on G+, is it not said in the blog post?

I posted this before seeing your post. I've seen more than a few just say it's a huge flaw without pointing out the specific point of intrusion. The post on AC points out more specifics than I've seen in other places. You guys always tend to do go a little deeper than just screaming for a headline.

 

[cgardnervt]

International and att versions are already patched from my understanding. Sprint, Verizon and Tmo models are the ones at risk.

I know its in the readings...I'm just adding this information for anyone who is lazy!

This is as of...9/25/2012

CJ

 

[Rev2010]

They say turning off "Service Loading" fixes it but I don't see that option anywhere.


Rev.

 

[dmmarck]

I posted this before seeing your post. I've seen more than a few just say it's a huge flaw without pointing out the specific point of intrusion. The post on AC points out more specifics than I've seen in other places. You guys always tend to do go a little deeper than just screaming for a headline.

That's why we're the best

Sent from my Galaxy Nexus using Android Central Forums

 

[alan sh]

Does anyone know what version of firmware fixes this? I'd like to know if mine is affected.

thanks

Alan

 

[icwhatudidthere]

Lol my AT&T GS3 still tells me there are no software updates available and I bought it on release day. Maybe I'll hit this page to force an upgrade.

And in the meantime it'll at least fix that stupid Copy/Paste/Crash bug that Samsung isn't doing anything about.

 

[mzanette]

Jelly Bean to the rescue!!!

 

[funkylogik]

think my softwares up to date but i use Go Contacts Dialer so is that safe?

also id love to know that short-code to nuke the sim, i have a friend who just loves to be pranked

ps. should we disable stock Contacts?

global s3, UK. Ask me anything and ill reply even if its just an intelligent (or stupid) guess

 

[Srambo217]

Jelly Bean to the rescue!!!

For those in 4G areas. Everyone else that lives in 3G only areas will experience frequent data drops with any 4.1 based ROM.

 

[funkylogik]

For those in 4G areas. Everyone else that lives in 3G only areas will experience frequent data drops with any 4.1 based ROM.

explain mate?

global s3, UK. Ask me anything and ill reply even if its just an intelligent (or stupid) guess

 

[Srambo217]

explain mate?

global s3, UK. Ask me anything and ill reply even if its just an intelligent (or stupid) guess

There's not much to explain.(With the Verizon model anyway] There's a bug with all CM10 based ROMs where 3G is consistently dropped. Some people (and a mean a very small amount) don't get this issue, but most others do. 4G is not effected, but 3G is. I know from experience

 

[funkylogik]

thanks mate. guessin cyanogen will fix it and hopefuly samsung JB wont have the bug

global s3, UK. Ask me anything and ill reply even if its just an intelligent (or stupid) guess

 

[Srambo217]

I just tried the 09252012 unofficial build and the problem persists. It's a shame.

On another note, I assume people have frozen the stock browser and dialer to prevent this wipe issue? Perhaps we should make a quick 'to-do' list in the OP?

Sent from my SCH-I535 using Android Central Forums

 

[funkylogik]

first thing i checked that id already disabled it lol. 3rd party dialer works fine with stock disabled (unlike sms (Messages app)
....stock browser cant be disabled btw

global s3, UK. Ask me anything and ill reply even if its just an intelligent (or stupid) guess

 

[goin_nil]

When the fix is ready, does it have to go through the carrier (Verizon, Sprint, etc) first, causing a longer delay?

 

[Ricky Babalu]

I just tested mine and it FAILED!!!!!!!!!!! It shows my IMEI

:'''''''(