Forums » Mobile Computing » Cell Phones and Multi-Function Devices » Android bug executes typed text on G1

Android bug executes typed text on G1

rated by 0 users
This post has 3 Replies | 1 Follower

Top 10 Contributor
Posts 7,264
Points 185,425
Joined: Sep 2007
Reply
News Posted: Mon, Nov 10 2008 10:40 AM

The Android based G1 (or Google) phone sold exclusively in the states by T-Mobile apparently executes typed text entered in any text entry box including on a web page or in the address book. Handsets running Android release 1.0 TC4-RC29 or earlier are affected by this flaw. What makes matters worse is the fact that the commands are executed as the "Root" user. Due to the Open Source nature of the Android OS, the bug was caught by users and traced down to a few lines of code in the init.rc system file.



To try this out:

"...Save anything you’re working on (this will reboot your phone!), open the keyboard tray on your G1, ignore anything you see on the screen, and type these 8 keystrokes: <return>-r-e-b-o-o-t-<return>. Poof, your phone will reboot. This only works on a real phone, not in the emulator, and only with firmware version 1.0 TC4-RC29 and earlier.

From the home screen select Menu > Settings > About phone, and look for the Build number (near the bottom). If you see this...

    kila-user 1.0 TC4-RC29 115247 ota-rel-keys,release-keys

then you’re vulnerable. If you see anything later than RC29 then you already have the fix."
Top 10 Contributor
Posts 5,249
Points 77,735
Joined: Aug 2003
Location: United States, Virginia
Moderator
Reply
bob_on_the_cob replied on Mon, Nov 10 2008 3:52 PM

LOL that is just fantastic. I was reading about this the other day. The story I read only talked about reboot. I wonder what other fun things you can execute.

  • | Post Points: 20
Top 50 Contributor
Posts 2,056
Points 26,770
Joined: May 2008
Location: U.S.
Reply
3vi1 replied on Tue, Nov 11 2008 12:32 PM

Unquestionably, someone will promote the idea that typing 'rm -rf /' will completely unlock the phone and give you free calling.

People read the stupidest things.  Like this sig, for instance.

  • | Post Points: 20
Top 10 Contributor
Posts 5,249
Points 77,735
Joined: Aug 2003
Location: United States, Virginia
Moderator
Reply
bob_on_the_cob replied on Tue, Nov 11 2008 1:26 PM

3vi1:

Unquestionably, someone will promote the idea that typing 'rm -rf /' will completely unlock the phone and give you free calling.

lol! That's just mean.

  • | Post Points: 5
Page 1 of 1 (4 items) | RSS