I can't believe this is not a "drop everything and get it fixed ASAP" bug. This makes me think there's probably tons of other similar bugs out there being exploited right now even with disclosure.
Accidental Google Pixel Lock Screen Bypass
11–20 of 475 posts
Re: Accidental Google Pixel Lock Screen Bypass
#12I was under the impression that decrypting storage actually requires the passcode of the phone, but this bug makes it look like the device is able to decrypt itself without any external input. Does anybody know more context about this? What's the point of encryption if the device can just essentially backdoor decrypt itself?
It seems to me this bug appears when a phone is booted, unlocked (and decrypted) once, and then locked again, but the decryption key still stays in memory.
Re: Accidental Google Pixel Lock Screen Bypass
#13Glad he got rewarded. Feels like this could have played out differently, if it had hit his disclosure deadline we might have been reading about him going to prison, such is the febrile nature of the legal situation around vulnerabilities.
Re: Accidental Google Pixel Lock Screen Bypass
#14I was under the impression that decrypting storage actually requires the passcode of the phone, but this bug makes it look like the device is able to decrypt itself without any external input. Does anybody know more context about this? What's the point of encryption if the device can just essentially backdoor decrypt itself?
[deleted]
Re: Accidental Google Pixel Lock Screen Bypass
#15I was under the impression that decrypting storage actually requires the passcode of the phone, but this bug makes it look like the device is able to decrypt itself without any external input. Does anybody know more context about this? What's the point of encryption if the device can just essentially backdoor decrypt itself?
In the write-up search for the bit that says "and one time I forgot to reboot the phone".
tl;dr: It's not an encryption bypass, it bypasses the lock screen once the phone has been unlocked once.
Re: Accidental Google Pixel Lock Screen Bypass
#16I was under the impression that decrypting storage actually requires the passcode of the phone, but this bug makes it look like the device is able to decrypt itself without any external input. Does anybody know more context about this? What's the point of encryption if the device can just essentially backdoor decrypt itself?
It didn't work on a fresh reboot, so presumably, it functioned like you're describing. But, when he swapped the sim live, without the reboot, the phone was already running with the key in memory.
Re: Accidental Google Pixel Lock Screen Bypass
#17Given the bug was already reported (and even more ignored) it seems like the $70,000 was really a “you made us do our jobs” fee.
It read like the payment came only when disclosure was imminent. Google basically extorted themselves into paying it to encourage pushing disclosure out a couple months.
Re: Accidental Google Pixel Lock Screen Bypass
#18It would be interesting to understand if it is also reproducible in other brands
Re: Accidental Google Pixel Lock Screen Bypass
#19I can't believe this is not a "drop everything and get it fixed ASAP" bug. This makes me think there's probably tons of other similar bugs out there being exploited right now even with disclosure.
I forget which Pixel generation.
For one generation Google I believe never shipped the ability to unlock your phone with your face. Despite having all the hardware on the phone, it just didn't have the feature.
This was a serious feature deficit viz a viz the relevant iPhone at the time.
The gossip was, the feature was finished, completely.
Had to be ripped out after external pen-testing bypassed it with Facebook photos.
They have many, big, problems.
Re: Accidental Google Pixel Lock Screen Bypass
#20This is a great example of why you should use iOS. Most android devices do not receive security updates long enough to get this update.
Since the author effectively tells you how to do it, all you need to do is find a pixel 4 or older and you’re golden.