Saturday, September 13, 2014

[cegwxdda] Toggling airplane mode insecurely

Being able to toggle airplane mode, and in particular, turn it off, without entering the unlock code of a mobile device seems like a significant security flaw.

The device will likely immediately broadcast personal identifying information, and might become accessible through network exploits.

How much of a flaw is this compared to other attacks that someone with physical access to the device can do?  I.e., USB port.

No comments :