This web site uses cookies to improve your experience. By viewing our content, you are accepting the use of cookies. To find out more and change your cookie settings, please view our cookie policy. Close

Samsung Galaxy S3 bitten by lock screen bypass bug

A bug lurking within the Samsung Galaxy S3 lets any old so-and-so access your smart phone's personal data, bypassing the phone's lock screen completely.

The glitch was discovered by one Sean McMillan, ZDNet reports, and follows on from a similar glitch which allowed momentary access to the homescreen and apps on the Galaxy Note 2.

The glitch is tough to replicate, but requires no technical know-how or tinkering. Instead, you simply press a sequence of buttons from the lock screen with careful timing, and eventually you'll be granted access to the phone in full.

I was able to replicate the glitch, bypassing a pattern lock screen on a Galaxy S3 running Android 4.1.1, while ZDNet writes that it was able to repeat the error on an S3 running Android 4.1.2. The glitch isn't easy to perform, and I succeeded only once in about 30 attempts.

Once you've successfully leapt past the lock screen, pressing the lock button subsequent times will open the phone at the homescreen every time, continually skipping the pattern lock screen. I had to restart the phone to get the lock screen to kick back in again.

Fingers crossed Samsung fixes this worrying glitch with an update sharpish, as it means anyone who physically holds your mobile could -- with enough patience -- tap their way into your smart phone, and all accompanying files therein.

Are you able to replicate the glitch on your Samsung Galaxy S3? Do you think your smart phone is secure enough? Let me know in the comments, or on our Facebook wall.

Comments 25

Add your comment

Damien2501's avatar

Damien2501 7 March, 2013 09:54

Hmm this sounds awfully familiar:

http://appleinsider.com/articles/13/02/25/another-lockscreen-passcode-flaw-found-in-apples-ios-61

Damien2701's avatar

Damien2701 7 March, 2013 10:06

No system is fully watertight there are always going to be exploits. we just have to hope Samsung, Apple, Google and whoever else can all keep one step ahead and fix problems quickly

anonymous's avatar

anonymous 7 March, 2013 10:11

@Damiern 2501

Can we expect another lawsuit from either Apple or Samsung over copyright?

"We had this problem first!"

anonymous's avatar

anonymous 7 March, 2013 10:14

Yep - notice the lack of CNET covering near enough exactly the same bug on iPhone running iOS6 that was reported last month. Also the least this article should have done was put it in the context of the same issue being on iOS6.

Any comments on that Luke!!??

This is either bad journalism or shameless bias.

Damien2701's avatar

Damien2701 7 March, 2013 10:29

The bug on iOS requires you to physically plug the phone into a computer and hack into it whereas the bug with the S3 just requires you to press buttons in a certain time and order so is much more dangerous and noteworthy. Why does everyone think theres a big conspiracy going on. As many people think Cnet are bias towards Apple as think they are bias towards Samsung

anonymous's avatar

anonymous 7 March, 2013 10:38

Damien2701 - watch the video on the register

http://www.theregister.co.uk/2013/02/15/iphone_hack_allows_access_to_contacts_and_phone/

The video shows the iOS6 hack and there is no computer. Watch it yourself, it is a pretty short video. Yes people shout bias a lot of the time but in this case it is pretty clear. Or it could just be lame reporting or an elaborate way to troll for comments as CNET must surely be aware that iOS6 has the same issue.

anonymous's avatar

anonymous 7 March, 2013 10:40

actually cnet DID cover the iphone lock screen bug.

you didn't need to plug it in, it was a similar hack to this samsung one.

so stop getting your knickers in a twist.

anonymous's avatar

anonymous 7 March, 2013 10:54

The US CNET covered the story but he UK site must have been busy reporting on Jony Ive being awarded a blue peter badge or something.

Knickers well and truly twisted!

http://crave.cnet.co.uk/mobiles/apples-jony-ive-wins-gold-blue-peter-badge-50010438/

Damien2501's avatar

Damien2501 7 March, 2013 10:59

@anonymous 10:11 Aha Loool

@anonymous 10:38 I was about to post the same link!

 A Non Mouse's avatar

A Non Mouse 7 March, 2013 11:14

Hmm. Now i can't confirm this works on an S3 , however the flaw on the GNII does NOT seem to work on a phone with an encrypted PIN such as mine as i have now tryed it umpteen times and have not been able to get in. So either it is extremely tricky that your Average Joe has next to no chance to do it or it does not work on encrypted devices.

anonymous's avatar

anonymous 7 March, 2013 11:37

After doing this bypass with the button configuration, I got to the home screen but was unable to access the dropdown notifications screen. I guess that doesnt matter though because there are other menus to deal with those options.

anonymous's avatar

anonymous 7 March, 2013 13:08

This is why Blackberry phones are for the business minded. Have never seen a security story about Blackberry and its OS.

anonymous's avatar

anonymous 7 March, 2013 13:44

No they just take their service down for days at a time due to engineer retardation...

Goldsmith's avatar

Goldsmith 7 March, 2013 16:20

again, just buy iphone 5 . or wait for 5s ;)

Damien2501's avatar

Damien2501 7 March, 2013 16:40

Again Goldsmith, iPhone 4 :) Same thing, only hundreds of pounds less :))

CaptainPicard's avatar

CaptainPicard 7 March, 2013 16:55

@Luke What if security apps, like LookOut, is "Device Administrator", can you hack it then??

anonymous's avatar

anonymous 7 March, 2013 21:23

I've tried to do that on my phone Galaxy S3

https://www.youtube.com/watch?v=HVJaj0hNppU

anonymous's avatar

anonymous 8 March, 2013 08:08

samsung galaxy s3 bitten by lock screen

anonymous's avatar

anonymous 8 March, 2013 14:39

It's based on this one http://seclists.org/bugtraq/2013/Feb/120 (reported earlier) this one is very easy to reproduce and works every time.

I’ve not been able to reproduce this full bypass.

Patrick Cantellow's avatar

Patrick Cantellow 9 March, 2013 17:39

tried doing this on mine could not do it

anonymous's avatar

anonymous 9 March, 2013 18:29

I tried on mine, but I was not able to bypass the lock screen.

anonymous's avatar

anonymous 11 March, 2013 14:32

Tried it on four different phones of people I know and got through on all of them. Any fix in the works yet?

anonymous's avatar

anonymous 14 March, 2013 06:25

Hmm,this sounds good!....still good in some ways like for the people who forgot the pattern of their lock screen. Someone could easily help him or her through this. I wanna share this to get some ideas guys http://www.oneclickroot.com/android-security/samsung-galaxy-s3-bug-allows-anyone-to-bypass-the-lock-screen/

anonymous's avatar

anonymous 23 March, 2013 06:17

my password

anonymous's avatar

anonymous 23 March, 2013 06:19

password screen

Post your comment

Make your comment count. Log in or register to skip the 'Are you human?' question and get an avatar

Your email will not be displayed with your comment

Copy the letters and numbers to prove that you're human. You won't have to do this if you log in or register

Your comment must comply with the Terms of Use

Best mobile deals

Samsung Galaxy S3 »

Samsung Galaxy S3

Phone FREE

£24.00 per month

500 mins

5000 texts

data

3 Mobile 24 month contract

Samsung Galaxy S3

Phone FREE

£22.00 per month

300 mins

Unlimited texts

data

O2 24 month contract

Samsung Galaxy S3

Phone FREE

£22.00 per month

600 mins

Unlimited texts

data

O2 24 month contract

About CBS Interactive

Copyright © 2013 CBS Interactive Limited. All rights reserved.