When iOS 6.1 was released, it introduced an as-of-yet unfixed lock screen bug that could give an attacker with physical access to an iPhone an entry to the phone dialer app and all of the information therein, including contact information, recent and missed calls, and voicemails. Now, a similar bug has been discovered by a Full Disclosure forum user for Samsung’s Galaxy S III, but the problem is more severe. Even if your phone is running the latest software update from Samsung, an attacker with physical access to your handset can bypass the lock screen entirely and access all of the applications and information on your phone. The process sounds simple, though any attacker with physical access to your phone would probably need some time to actually exploit it.
About Shelly Palmer
Shelly Palmer is the Professor of Advanced Media in Residence at Syracuse University’s S.I. Newhouse School of Public Communications and CEO of The Palmer Group, a consulting practice that helps Fortune 500 companies with AI strategy, implementation and governance, as well as technology, media and marketing. Named one of LinkedIn’s Top Voices in Technology, he is a bestselling author, covers tech and business for Fox 5’s Good Day New York, is a regular commentator on CNN, and writes the popular daily business blog Think About This. Follow @shellypalmer or visit shellypalmer.com.