Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

exquisitetweets.com

Post reply on HN
Print view View original

91–100 of 186 posts

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#91

Post by preds »

lwhi wrote: post #57
level09 wrote: post #44

I deployed this code on this page : http://flasharabia.com however the code doesn't seem to work ..

If you want to check the functionality - it would be far more responsible to use a non-destructive USSD code. e.g. *#06# displays the phone's IMEI number

Testing this myself, any USSD code that begins with * # launches the device's dialler with no characters dialled. Looking at the list of codes: http://umitem.blogspot.com.au/2010/10/samsung-galaxy-s-i9000...

The factory reset appears to be the only USSD "auto dialled" code that doesn't begin with *#. Which is rather unfortunate.

Edit: Actually, the IMEI code works on the Galaxy S2 running 2.3 (just tested) but not the Galaxy S3 running 4.0. My above comment refers to the S3.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#92

Post by weszlem »

JoeCortopassi wrote: post #89
kristofferR wrote: post #88

Here's a safe version of the exploit that displays your IMEI: http://kristofferR.com/samsung.html Check the html in your desktop browser first, for all you know I might as well be a malicious douchebag. The exploit seems to require a stock Samsung Galaxy dialer, works fine on my cheap Samsung Galaxy Y but not on my friend's modded S3 with a vanilla Android dialer.

Can anyone confirm that this is not only a safe USSD, but that it triggers the exploit? I am not an owner of a S3, but would love to be able to help show some of my non-tech friends whether they are vulnerable to this or not

It looks like it does not work. It opens telephone keyboard on my S3, but except that nothing happens. EDIT: i'm using Jelly Beans

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#93

Post by kristofferR »

WDYC wrote: post #90
kristofferR wrote: post #88

Here's a safe version of the exploit that displays your IMEI: http://kristofferR.com/samsung.html Check the html in your desktop browser first, for all you know I might as well be a malicious douchebag. The exploit seems to require a stock Samsung Galaxy dialer, works fine on my cheap Samsung Galaxy Y but not on my friend's modded S3 with a vanilla Android dialer.

Right now, the frame's source is tel:*%2306%23

Yup. %23 makes the #-sign, making the number *#06# which is the default IMEI code on most phones out there.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#94

Post by sssparkkk »

This is for real. Just confirmed the auto-execution of an USSD code on a Samsung Galaxy Mini II. Try the link below to see whether your device is vulnerable:

http://www.tinyurl.com/samsungexploit

It will show your firmware version by executing *#1234#.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#95

Post by moe »

mibbitier wrote: post #70
Dn_Ab wrote: post #61

Earlier quoted context omitted.

I would guess the opposite. QR codes are too early. They need to be scannable by a device that doesn't require reaching into your pocket, fumbling with your phone and then trying to get the right angle. Combining a couple projections, I see them going from utterly useless to gimmicky cool for a particular crowd within 2 years.

Ridiculous. Doesn't it seem idiotic to duplicate what we already have? (English characters) in some arcane non human readable, punch-card-esque idiocy? In a few years, all cellphones will be able to read english characters and words. There will be no need for QR punch-cards.

The information density of QR codes is much higher.

In a few years many people will also be walking around with AR-glasses (e.g. google glasses) which may very well scan the codes automatically and overlay them in the viewport with whatever they want to represent.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#96

Post by jlgreco »

Dn_Ab wrote: post #61
mibbitier wrote: post #11

Earlier quoted context omitted.

I've yet to scan one of these codes, or see anyone scanning one. It seems like something from the 90s just came back for one last dying breath.

I would guess the opposite. QR codes are too early. They need to be scannable by a device that doesn't require reaching into your pocket, fumbling with your phone and then trying to get the right angle. Combining a couple projections, I see them going from utterly useless to gimmicky cool for a particular crowd within 2 years.

Personally I think they would take off if we had some sort of large plastic dedicated device that plugged into your computer to scan these things. Perhaps shaped like a cat; people like cats.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#97

Post by WDYC »

kristofferR wrote: post #93
WDYC wrote: post #90

Earlier quoted context omitted.

Right now, the frame's source is tel:*%2306%23

Yup. %23 makes the #-sign, making the number *#06# which is the default IMEI code on most phones out there.

Yeah, doesn't exploit my Galaxy Nexus, though.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#98

Post by unreal37 »

uxp wrote: post #67
ljf wrote: post #23

Earlier quoted context omitted.

I was in a British train station the other day and saw a poster containing 20 QR codes, one for each of a set a possible journeys from the station. Since I'm techy and had time to kill I scanned it, waiting to see the timetable information. Sadly the company who installed the posters was having some downtime, so it just errored. The annoying thing was that they were really just a URL shortening company, forwarding yo…

The only semi-useful QR code I've ever seen in real life was on one of those little reminder cards in a parking garage to help you locate which floor you parked on. I say semi-useful because the QR code took you to a webpage that told you the same exact information the card had on it, and none of my friends or I could get reception inside the garage, so we all had to wait until we were out of the garage before figuri…

I once saw a QR code advertised in a Buenos Aries subway station that was just a QR code and nothing else. No graphics, logo, or ad copy around it. So having some time, I scanned it. It was just text, not a URL. (I don't remember what the text said. But it was basically just "buy slurm!"

Seemed pointless to me. This is how the public interacts with QR codes - they can't do anything that can't be done by pasting TEXT where the QR code would be.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#99

Post by jrabone »

lwhi wrote: post #57
level09 wrote: post #44

I deployed this code on this page : http://flasharabia.com however the code doesn't seem to work ..

If you want to check the functionality - it would be far more responsible to use a non-destructive USSD code. e.g. *#06# displays the phone's IMEI number

Seconded. This works beautifully as proof-of-concept against my S2 and a colleagues random HTC phone.

Re: USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page

#100

Post by corin_ »

emehrkay wrote: post #86
dubcanada wrote: post #84

Earlier quoted context omitted.

No their not lol... Apple & HTC sell more phones then they do.

Are you sure about that? A simple google search for "samsung sells most phones" says otherwise.

Which company sells the most isn't really relevant (to this particular topic) - check out what Wikipedia has to say on specifically S3 sales, with plenty of citations: http://en.wikipedia.org/wiki/Samsung_Galaxy_S_III#Commercial...
Post reply on HN