Go Back   Android Forums > Android Phones > Kyocera Rise

Get excited for the Samsung Galaxy S5! Find everything you need and discuss it in our Galaxy S5 Forum!

test: Reply
 
LinkBack Thread Tools
Old January 2nd, 2013, 10:50 AM   #1 (permalink)
db2
Member
Thread Author (OP)
 
Join Date: Dec 2012
Location: Somewhere in the vicinity of Betelgeuse
Posts: 253
 
Device(s): Samsung Reverb
Carrier: 800000 or 1900000 hertz

Thanks: 28
Thanked 55 Times in 38 Posts
Default Security: The Rise is vulnerable to the USSD remote wipe attack

USSD is the name given to those "star codes" that you punch in to your dialer to make the phone do things. There's a bug in dialers prior to 4.1, in which the dialer accepts such codes from a webpage just as though they had been put in manually, meaning it executes the dialer *#whatever# code. This can be used to essentially make your phone do a factory reset without your consent.

This app will intercept the attempt without interfering with normal phone operations:
https://play.google.com/store/apps/details?id=net.thauvin.erik.android.noussd&hl=en

From this XDA post:
http://forum.xda-developers.com/showthread.php?t=1908482

The other thing you can do is install an alternative dialer, retaining the original, so every dial attempt requires interaction. The NoUSSD solution is better because it doesn't get in the way like that.

Once we get JB, if we ever get JB, this problem won't apply.

db2 is offline  
Last edited by db2; January 2nd, 2013 at 11:04 AM. Reason: changed post type to "support"
Reply With Quote
The Following User Says Thank You to db2 For This Useful Post:
AndyOpie150 (January 5th, 2013)
sponsored links
Old January 17th, 2013, 10:20 AM   #2 (permalink)
Member
 
Join Date: May 2012
Location: Northern NJ, USA
Gender: Male
Posts: 116
 
Device(s): LG Optimus F3, Kyocera Event, LG Optimus V - all r00t3d! R.I.P. Kyocera RiSE (was rooted)
Carrier: Virgin Mobile USA

Thanks: 52
Thanked 26 Times in 20 Posts
Thumbs up

Great tip.

If the avast virus scanner is installed, and have it set up to run in the background, the phone will be protected from this attack.
daffyducknj is offline  
Reply With Quote
Reply

Kyocera Rise
Current Rating:
Rate this Phone:

The Kyocera Rise shares the same specs as its brother, the Kyocera Hydro, but it covers a different niche. Instead of being water resistant, it has a slide-out QWERTY keyboard. Specs include a 1 GHz processor, 512 MB of RAM, Android 4.0 and a 3.5... Read More



Go Back   Android Forums > Android Phones > Kyocera Rise
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 04:35 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.