Amazon’s Exclusive Prime Moto G5 Plus Has A Security Flaw

-


Amazon’s Prime Exclusive Moto G5 Plus has a security flaw baked into a lockscreen ad making it easier than one would think to bypass the lockscreen and get into the phone. The process is actually rather simple which perhaps makes the whole thing more alarming. According to users who have the Prime Exclusive Moto G5 Plus as well as the Prime Exclusive Moto G5, the process starts by trying to unlock the phone with the fingerprint sensor, and once the sensor doesn’t recognize the fingerprint, you can press the power button and then tap on the button on-screen that says view lockscreen ad, which leads to the phone granting access to the user and the lock being bypassed.

 In the video below, you can see the bypass in action which takes less than a few seconds to go through the entire process. Going through the steps above, once the “view ad” button is tapped, it unlocks and goes straight to Amazon to view the product that was being advertised, at which point the user can just tap the on-screen home button and it will go straight to the home screen.

 This presents quite a problem in the event that your phone is lost or stolen, but then again it’s worth remembering that first the phone would have to be lost or stolen, and the person who has possession of it at that point would also have to know about this particular bypass, and that’s assuming that the flaw isn’t patched by the time someone were to get a hold of your device. So while this is an issue it’s not one that should necessarily worry too many users as there are a few things that would need to fall into place. For example, Moto Display needs to be enabled and if it’s not then this bypass will not work. In addition to this, you have to tap the view ad button pretty quickly after hitting the power button, and if not then the screen will just lock again. That said, you can avoid having this be a security issue if you disable Moto Display, though that would keep you from getting to use the feature. There’s no indication of when or if this will get a fix from Amazon.

 Link: https://youtu.be/uKl9RNwKeUM

Comments

Post a Comment

Popular posts from this blog

How to download a file using command prompt (cmd) Windows?

-
Image
If you’re like most Internet users, you download various types of files now and then. You either download these files with your web browser or some download manager software. Have you ever considered downloading files using the command prompt i.e. CMD? If not, we recommend you to try it. It’s quite interesting apart from being very useful as well. In this article, we’ll show you how to download a file using command prompt aka CMD. How to download a file using command prompt?   There are several useful commands for the Command Prompt and one of them is  bitsadmin . Though bitsadmin has several uses, here we shall limit this article to its role in downloading files only. If you want to read the details about bitsadmin syntax, continue reading this section. Otherwise, you can scroll down to the next section –  Downloading a file .   The syntax of bitsadmin is : BITSADMIN [/RAWRETURN] [/WRAP | /NOWRAP] command   As you know, the parts of the syntax inside ...
Read more

The future of Artificial Intelligence: 6 ways it will impact everyday life

-
Image
Technology moves at breakneck speed, and we now have more power in our pockets than we had in our homes in the 1990s. Artificial intelligence (AI) has been a fascinating concept of science fiction for decades, but many researchers think we’re finally getting close to making AI a reality.  NPR notes that in the last few years, scientists have made breakthroughs in “machine learning,” using neural networks, which mimic the processes of real neurons. This is a type of “deep learning” that allows machines to process information for themselves on a very sophisticated level, allowing them to perform complex functions like facial recognition. Big data is speeding up the AI development process, and we may be seeing more integration of AI technology in our everyday lives relatively soon. While much of this technology is still fairly rudimentary at the moment, we can expect sophisticated AI to one day significantly impact our everyday lives. Here are 6 ways AI might affect us in the ...
Read more

How to Include ThreeJs in Your Projects

-
Image
HOW TO INCLUDE three.js IN YOUR PROJECTS There are quite a few different ways to include three.js in your JavaScript application, some of them simple, some of them a little more complex, however, they all boil down to one simple idea: you need to include one (and  only one) of these three files in your project: three.js three.min.js three.module.js You can view them all  on the three.js GitHub repo , which we’ll explore in the next chapter. Each of these files a version of the three.js core, meaning that once you’ve included one of them in your application, you are all ready to get started in creating beautiful 3D scenes. There are two main ways to include these files in your project: include them in a  script tag  in your HTML import them directly into your JavaScript files. We’ll explore how to do in Section Two What’s the Difference Between these Files? The  three.js  file is intended to be included in a  <script> ...
Read more