Live data from Hacker News

USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

exquisitetweets.com

81–90 of 186 posts

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#81
post #64

Earlier quoted context omitted.

It wouldn't affect anyone because no one has ever scanned a QR code in an ad

[deleted]

I actually found them quite useful as a bookmarking tool when comparison shopping appliances at retail stores. They usually had code to the retailer's page for the appliance, and another for the manufacturer's page.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#82
post #35

Looks like this thread may have been a source for the code initially [1] [1] http://forum.xda-developers.com/showthread.php?t=1687249

Well, the number and similar ones like that has been known for years. The new issue here is that they can be auto-called using a -tag in HTML.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#84

Classic case of a developer putting a backdoor in (for testing) and forgetting to take it out. I'm curious as to how long it will take to patch it and if there will be any fallout over this (they are the number 1 phone producer in the world).

No their not lol... Apple & HTC sell more phones then they do.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#85
post #65
post #23

Earlier quoted context omitted.

I was in a British train station the other day and saw a poster containing 20 QR codes, one for each of a set a possible journeys from the station. Since I'm techy and had time to kill I scanned it, waiting to see the timetable information. Sadly the company who installed the posters was having some downtime, so it just errored. The annoying thing was that they were really just a URL shortening company, forwarding yo…

My local bus company has failed to grasp QR codes in a mind-bogglingly thorough way. Every stop has a poster with a QR code on it, advertising that you can now look up when the next bus will be here by scanning the QR code. The first thing you might notice is that the poster is actually a photo of a QR code on a poster, and is taken at an angle sufficient to render scanning the QR code impossible. The second thing yo…

Fun :).

Lothian Buses in Edinburgh has done the right thing: they've stuck QR codes to each of their information signs, which direct you to the correct page on their mobile site, and the official Android app is registered for the URLs too.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#86

Classic case of a developer putting a backdoor in (for testing) and forgetting to take it out. I'm curious as to how long it will take to patch it and if there will be any fallout over this (they are the number 1 phone producer in the world).

No their not lol... Apple & HTC sell more phones then they do.

Are you sure about that? A simple google search for "samsung sells most phones" says otherwise.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#87
post #65
post #23

Earlier quoted context omitted.

I was in a British train station the other day and saw a poster containing 20 QR codes, one for each of a set a possible journeys from the station. Since I'm techy and had time to kill I scanned it, waiting to see the timetable information. Sadly the company who installed the posters was having some downtime, so it just errored. The annoying thing was that they were really just a URL shortening company, forwarding yo…

My local bus company has failed to grasp QR codes in a mind-bogglingly thorough way. Every stop has a poster with a QR code on it, advertising that you can now look up when the next bus will be here by scanning the QR code. The first thing you might notice is that the poster is actually a photo of a QR code on a poster, and is taken at an angle sufficient to render scanning the QR code impossible. The second thing yo…

Maybe they got the idea from Google Code, which helpfully shows me a QR code for the tarball I'm about to download, for all those times I'm using the browser on my desktop and the IDE on my phone.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#88
Here's a safe version of the exploit that displays your IMEI: http://kristofferR.com/samsung.html

Check the html in your desktop browser first, for all you know I might as well be a malicious douchebag.

The exploit seems to require a stock Samsung Galaxy dialer, works fine on my cheap Samsung Galaxy Y but not on my friend's modded S3 with a vanilla Android dialer.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#89

Here's a safe version of the exploit that displays your IMEI: http://kristofferR.com/samsung.html Check the html in your desktop browser first, for all you know I might as well be a malicious douchebag. The exploit seems to require a stock Samsung Galaxy dialer, works fine on my cheap Samsung Galaxy Y but not on my friend's modded S3 with a vanilla Android dialer.

Can anyone confirm that this is not only a safe USSD, but that it triggers the exploit? I am not an owner of a S3, but would love to be able to help show some of my non-tech friends whether they are vulnerable to this or not

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#90

Here's a safe version of the exploit that displays your IMEI: http://kristofferR.com/samsung.html Check the html in your desktop browser first, for all you know I might as well be a malicious douchebag. The exploit seems to require a stock Samsung Galaxy dialer, works fine on my cheap Samsung Galaxy Y but not on my friend's modded S3 with a vanilla Android dialer.

Right now, the frame's source is tel:*%2306%23
Post reply on HN