Linked by Thom Holwerda on Tue 25th Sep 2012 21:14 UTC, submitted by bowkota
PDAs, Cellphones, Wireless On the same day I bought a brand new iMac and switched back to Mac (no joke!), and teased the employees at the Apple retailer with my Galaxy SII, Samsung goes around and pulls something idiotic like this. TouchWiz, Samsung's Android skin, has a very severe flaw which passes digits along from JavaScript (via their modified browser) to the modified dialler, allowing your device to be factory reset (!) by just visiting a link - via NFC, QR, or plain. This doesn't affect all Samsung devices, but those that are affected are all TouchWiz devices. This just proves once again that you should either buy Nexus, or make the switch to Cyanogenmod (or any of the other AOSP-based ROMs).
Permalink for comment 536510
To read all comments associated with this story, please click here.
phoudoin
Member since:
2006-06-09

The root bug is in the stock Android Dialer app, and was fixed in 4.0.4. An hotfix patch was pushed toward custom ROMs makers, but it seems that phone markers were more busy polishing their custom look & feel than fixing venulverality holes.

Meanwhile, install and make it default TEL handler this proxy dialer quickly hacked by XDA developers last night:

https://play.google.com/store/apps/details?id=org.mulliner.telstop

Reply Score: 3