• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Help PSA: Watch what sites you load

Shabbypenguin

Extreme Android User
Mar 28, 2011
5,381
5,072
36
Some of you may have heard the big news, there is a bit of html code that can remotely do a factory reset on your device while browsing around without your consent or way to stop it. the website has to have it setup and has to the stock web browser. since this exploit was released into the public it is unknown on if any sites may "maliciously" add it in. i cant confirm or deny that this device may be subject to this exploit, but its for teh best that you know anyways.

the code can be viewed via a frame on a website, so some jerk posting the html code into a comment isnt gunna make the site screw your phone up. so it has to be setup to run the exploit, but since it is only a few lines im sure a few sites already have ill intentions. if anyone would like to test their device with the exploit i have a secret page setup that i have been testing my devices on. if it doesnt affect your device than ill post about it here and everyone can breathe a sign of relief.

so far it seems its only samsung devices that are affected but many more could be.

edit: Samsung prevail, Admire and teh ZTE warp are ll suseptible to the core exploit. you can test without wiping your device here

www.shabbypenguin.com/data
 
Samsung Galaxy Ace bro. No debug menu with stock browser.

For Opera see the pic

2rom892.png


If I click, the dialer opens
 
Upvote 0
Samsung Galaxy Ace bro. No debug menu with stock browser.

For Opera see the pic

If I click, the dialer opens

this only works in teh stock browser. i was confused about the device you were using due to this being the attain 4g forums :p

what happens if in your dialer you dial ##3282#?

if nothing then you prolly just need a diff dialer code, isnt teh ace a gsm device?
 
Upvote 0
the dialer showing up is what you want, thats a feature. what you dont wanna see is the hidden menu due to it

Ok, Check this out... Just to confirm Ill post a couple screens below showing what occurred when I went to your link w/ the stock browser:

(Ignore the AirDroid toast, it's unrelated. I was using it for the screens)

exptestsshot1.jpg


After I clicked on the dialer it took me here:

exptestsshot2.jpg
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones