Viber exploit lets attackers bypass Android lock screens, for now

<div dir="rtl" style="text-align: right;" trbidi="on"><div dir="rtl" style="text-align: right;" trbidi="on"><div class="image-container" dir="ltr" style="text-align: center;"><img alt="Viber exploit lets users bypass Android lock screens, a fix is on the way video" data-src-height="340" data-src-width="620" src="http://www.blogcdn.com/www.engadget.com/media/2013/04/viber-android-exploit-1366899487.jpg" /></div><div dir="ltr" style="text-align: left;">If you're an Android user who prefers Viber for VoIP and messaging, you may not want to leave your phone unattended in the near future. Bkav Internet Security has discovered an exploit that will bypass the lock screen on Android phones new and old (including the Nexus 4) as long as pop-up notifications are active. While the exact actions vary from phone to phone, all that's really needed is an incoming message or two, a handful of taps and the back button to reach the home screen. App users can disable the pop-ups as a short-term workaround, although they thankfully won't have to do that for long when Viber promises that a patch is on the way. There's only a small chance that a malicious attacker will both get their mitts on your phone and know that you've got Viber installed, but we'd advise against using statistical probability as a security measure.</div></div><iframe allowfullscreen="" frameborder="0" height="360" src="http://www.youtube.com/embed/tb4y_1cz8WY?feature=player_embedded" width="640"></iframe></div>

Viber exploit lets attackers bypass Android lock screens, for now

If you're an Android user who prefers Viber for VoIP and messaging, you may not want to leave your phone unattended in the near future...

مزيد من المعلومات »

Google My Tracks update brings Drive integration and a lock screen widget

<div dir="rtl" style="text-align: right;" trbidi="on"><div dir="ltr" style="text-align: left;"> <img alt="Google gives My Tracks athletes Drive integration and a lock screen widget" data-src-height="340" data-src-width="620" src="http://www.blogcdn.com/www.engadget.com/media/2013/03/google-my-tracks-lock-screen-1363287004.jpg" /></div><div dir="ltr" style="text-align: left;">Cyclists and runners with Android phones have had a rare first-party option for keeping tabs on their performance through Google's My Tracks, but the app hasn't been entirely in step with those who upgrade their OS as quickly as they barrel down the street. It's back on pace with a quiet update: My Tracks now has a customizable lock screen widget for Android 4.2 users who want to know their distance or speed details at a glance. Whether or not you're running the latest and greatest Android version, the upgrade will sync finished tracks with Google Drive for safekeeping and sharing; extra-competitive types can also import KML files and view others' tracks for comparisons. Hit the source link if time (or simple oneupmanship) is of the essence.</div></div>

Google My Tracks update brings Drive integration and a lock screen widget

  Cyclists and runners with Android phones have had a rare first-party option for keeping tabs on their performance through Google's My...

مزيد من المعلومات »

Galaxy S III bug disables lock screen, grants full access, tests patience

<div dir="rtl" style="text-align: right;" trbidi="on"><div dir="ltr" style="text-align: left;"> <img alt="Galaxy S III bug disables lock screen, grants full access, tests patience" data-src-height="410" data-src-width="619" src="http://www.blogcdn.com/www.engadget.com/media/2013/03/dsc1521.jpg" /></div><div dir="ltr" style="text-align: left;">Lock screens are around for a reason: to keep people from getting where they shouldn't. They aren't always infallible, though, and a few weeks ago, we saw a vulnerability in several builds of iOS 6 that granted access to the phone module without a passcode. Then, a couple of days ago, we reported on a Galaxy Note II bug that allows the quick-fingered to launch anything immediately behind the lock screen. Now, a similar flaw has been found on the Galaxy S III that breaks the lock screen altogether, permitting full use of the phone. To replicate the bug, you'll need to tap the "Emergency Call" button on the lock screen, then go into the ICE (emergency contacts) menu. From there, press the home button, followed quickly by the power button, and that's it. If successful, pressing the power button again will bring up the home screen straight away, and what's more, the lock screen won't return until the handset is restarted. Sounds worryingly simple, right? In our experience, not so much.</div><div dir="ltr" style="text-align: left;"> We first tried this method on an S III running Android 4.0.4 ICS, and a Note II for good measure, but to no avail. Then, we had a crack at an S III running 4.1.2 Jelly Bean, and were close to giving up trying to replicate it when <em>voilà</em>, it worked. We hoped to provide you with a video of the bug, but it must be camera shy. Despite literally hundreds of attempts in front of the lens and several more behind it, we've only managed it once -- we found it impossible to nail down the correct timing between the home and power button pushes. Samsung's likely aware of the bug already and when quizzed about the Note II vulnerability, said a fix for lock screen issues on affected "Galaxy devices" was in the works (read: they didn't say the Note II specifically). We've reached out for comment just to be sure, but until a patch is provided, keep your phone concealed from nosey types who read tech sites and have saint-like patience.</div></div>

Galaxy S III bug disables lock screen, grants full access, tests patience

  Lock screens are around for a reason: to keep people from getting where they shouldn't. They aren't always infallible, though, an...

مزيد من المعلومات »