CHINA TOPIX

11/22/2024 02:07:04 pm

Make CT Your Homepage

Research Discovers Android Security Flaw Among Smartphone's Lockscreens

Android Screenlock Settings

(Photo : Reuters) Android security flaw lets attackers in using a large password.

A researcher at the University of Texas' information security office, John Gordon, found out an alarming security flaw within Android Lollipop that lets anyone to bypass the password lockscreen. The study also gives details on a bug that can occur in some Android devices means copying and pasting a long password can cause it to crash - giving forbidden and unnecessary access even if your phone is locked.

Like Us on Facebook

Likewise, it has also been cleared out that the reported vulnerability is only present if the user has chosen a password - and not a pin code or a pattern to unlock your phones. This security flaw only seems to be possible if an attacker has initially gained physical access to the mobile device; otherwise, it would be a bit tough to do so.

According to Gordon, the said research came up with its findings when he tried inputting a huge string of characters into the password entry screen when the camera app was active, the lockscreen became destabilized, causing it to crash and return to the homescreen.

"Type a few characters [in the emergency call screen], e.g. 10 asterisks," analyst Gordon wrote to explain the process. "Double-tap the characters to highlight them and tap the copy button; then, tap once in the field and tap paste, doubling the characters in the field. Repeat this process of highlight all, copy, and paste until the field is so long that double-tapping no longer highlights the field. This usually occurs after 11 or so repetitions," he further added.

However, Engadget included in its report that smartphone manufacturers are getting more effective and efficient on coming up with mobile features that address timely security fixes and avoid related glitches and bugs.

Full details of the said research can be viewed at the University of Texas blog. Most importantly, mobile enthusiasts and security experts strongly recommend you to change your screen lock settings to either a pin code or a pattern for added protection and caution.

Real Time Analytics