PSA: Watch what sites you loadTips


Last Updated: 2012-09-26 16:22:01
  1. Shabbypenguin

    Shabbypenguin Well-Known Member Developer

    Some of you may have heard the big news, there is a bit of html code that can remotely do a factory reset on your device while browsing around without your consent or way to stop it. the website has to have it setup and has to the stock web browser. since this exploit was released into the public it is unknown on if any sites may "maliciously" add it in. i cant confirm or deny that this device may be subject to this exploit, but its for teh best that you know anyways.

    the code can be viewed via a frame on a website, so some jerk posting the html code into a comment isnt gunna make the site screw your phone up. so it has to be setup to run the exploit, but since it is only a few lines im sure a few sites already have ill intentions. if anyone would like to test their device with the exploit i have a secret page setup that i have been testing my devices on. if it doesnt affect your device than ill post about it here and everyone can breathe a sign of relief.

    so far it seems its only samsung devices that are affected but many more could be.

    Advertisement
  2. qandres12

    qandres12 Well-Known Member

    shabby ill test this. im restoring my phone back to stock anyways so i might as well. pm me the secret link
  3. Rxpert83

    Rxpert83 Dr. Feelgood Moderator

    It's only touchwiz Samsung devices from what I've read
  4. Shabbypenguin

    Shabbypenguin Well-Known Member Developer

    its the browser not touchwiz.

    anyways may not be of any big concern, everyone is ranting about the sgs3 reset code since even the sgs2 has a diff code to reset it it means that the "exploit" may be on many devices but in order to effectively target them you would have to have every dialer code for every phone and i dont see that happening.

    a more likley solution is someone who knows of lets say the admire or lg motion, builds a new site that gets a lot of google hits like lgmnotionrecovery.com or something of teh sort and expects lg motion owners to pull it up on their device

    if you give me the dialer codes for this device ill make a page to test, im not gunna use teh factory reset one ill use something like debug menu etc
  5. qandres12

    qandres12 Well-Known Member

    the debug code for the dialer on the admire is ##33284#
  6. Shabbypenguin

    Shabbypenguin Well-Known Member Developer

  7. qandres12

    qandres12 Well-Known Member

  8. Shabbypenguin

    Shabbypenguin Well-Known Member Developer

    ok then. you guys are in teh same boat as teh prevail. id suggets using a different browser on sites you dont know etc
  9. qandres12

    qandres12 Well-Known Member

    it works. the site takes me to DATA menu. shabby what dialer code did you use?? i want to be able to disable the usb charging whenever i connect my phone to the computer since the computer doesnt charge the phone right. i can do that through the DATA menu just need the code :D

    EDIT: nevermind i got it lol. shabby you are missed here
  10. enigmadroid

    enigmadroid Well-Known Member

    I'll have the prawn please! :)

Share This Page