A bug lurking within the Samsung Galaxy S3 lets any old so-and-so access your smart phone's personal data, bypassing the phone's lock screen completely.
The glitch was discovered by one Sean McMillan, ZDNet reports, and follows on from a similar glitch which allowed momentary access to the homescreen and apps on the Galaxy Note 2.
The glitch is tough to replicate, but requires no technical know-how or tinkering. Instead, you simply press a sequence of buttons from the lock screen with careful timing, and eventually you'll be granted access to the phone in full.
I was able to replicate the glitch, bypassing a pattern lock screen on a Galaxy S3 running Android 4.1.1, while ZDNet writes that it was able to repeat the error on an S3 running Android 4.1.2. The glitch isn't easy to perform, and I succeeded only once in about 30 attempts.
Once you've successfully leapt past the lock screen, pressing the lock button subsequent times will open the phone at the homescreen every time, continually skipping the pattern lock screen. I had to restart the phone to get the lock screen to kick back in again.
Fingers crossed Samsung fixes this worrying glitch with an update sharpish, as it means anyone who physically holds your mobile could -- with enough patience -- tap their way into your smart phone, and all accompanying files therein.
Are you able to replicate the glitch on your Samsung Galaxy S3? Do you think your smart phone is secure enough? Let me know in the comments, or on our Facebook wall.



Comments 25
Add your comment
Damien2501 7 March, 2013 09:54
Hmm this sounds awfully familiar:
http://appleinsider.com/articles/13/02/25/another-lockscreen-passcode-flaw-found-in-apples-ios-61
Damien2701 7 March, 2013 10:06
No system is fully watertight there are always going to be exploits. we just have to hope Samsung, Apple, Google and whoever else can all keep one step ahead and fix problems quickly
anonymous 7 March, 2013 10:11
@Damiern 2501
Can we expect another lawsuit from either Apple or Samsung over copyright?
"We had this problem first!"
anonymous 7 March, 2013 10:14
Yep - notice the lack of CNET covering near enough exactly the same bug on iPhone running iOS6 that was reported last month. Also the least this article should have done was put it in the context of the same issue being on iOS6.
Any comments on that Luke!!??
This is either bad journalism or shameless bias.
Damien2701 7 March, 2013 10:29
The bug on iOS requires you to physically plug the phone into a computer and hack into it whereas the bug with the S3 just requires you to press buttons in a certain time and order so is much more dangerous and noteworthy. Why does everyone think theres a big conspiracy going on. As many people think Cnet are bias towards Apple as think they are bias towards Samsung
anonymous 7 March, 2013 10:38
Damien2701 - watch the video on the register
http://www.theregister.co.uk/2013/02/15/iphone_hack_allows_access_to_contacts_and_phone/
The video shows the iOS6 hack and there is no computer. Watch it yourself, it is a pretty short video. Yes people shout bias a lot of the time but in this case it is pretty clear. Or it could just be lame reporting or an elaborate way to troll for comments as CNET must surely be aware that iOS6 has the same issue.
anonymous 7 March, 2013 10:40
actually cnet DID cover the iphone lock screen bug.
you didn't need to plug it in, it was a similar hack to this samsung one.
so stop getting your knickers in a twist.
anonymous 7 March, 2013 10:54
The US CNET covered the story but he UK site must have been busy reporting on Jony Ive being awarded a blue peter badge or something.
Knickers well and truly twisted!
http://crave.cnet.co.uk/mobiles/apples-jony-ive-wins-gold-blue-peter-badge-50010438/
Damien2501 7 March, 2013 10:59
@anonymous 10:11 Aha Loool
@anonymous 10:38 I was about to post the same link!
A Non Mouse 7 March, 2013 11:14
Hmm. Now i can't confirm this works on an S3 , however the flaw on the GNII does NOT seem to work on a phone with an encrypted PIN such as mine as i have now tryed it umpteen times and have not been able to get in. So either it is extremely tricky that your Average Joe has next to no chance to do it or it does not work on encrypted devices.
anonymous 7 March, 2013 11:37
After doing this bypass with the button configuration, I got to the home screen but was unable to access the dropdown notifications screen. I guess that doesnt matter though because there are other menus to deal with those options.
anonymous 7 March, 2013 13:08
This is why Blackberry phones are for the business minded. Have never seen a security story about Blackberry and its OS.
anonymous 7 March, 2013 13:44
No they just take their service down for days at a time due to engineer retardation...
Goldsmith 7 March, 2013 16:20
again, just buy iphone 5 . or wait for 5s ;)
Damien2501 7 March, 2013 16:40
Again Goldsmith, iPhone 4 :) Same thing, only hundreds of pounds less :))
CaptainPicard 7 March, 2013 16:55
@Luke What if security apps, like LookOut, is "Device Administrator", can you hack it then??
anonymous 7 March, 2013 21:23
I've tried to do that on my phone Galaxy S3
https://www.youtube.com/watch?v=HVJaj0hNppU
anonymous 8 March, 2013 08:08
samsung galaxy s3 bitten by lock screen
anonymous 8 March, 2013 14:39
It's based on this one http://seclists.org/bugtraq/2013/Feb/120 (reported earlier) this one is very easy to reproduce and works every time.
I’ve not been able to reproduce this full bypass.
Patrick Cantellow 9 March, 2013 17:39
tried doing this on mine could not do it
anonymous 9 March, 2013 18:29
I tried on mine, but I was not able to bypass the lock screen.
anonymous 11 March, 2013 14:32
Tried it on four different phones of people I know and got through on all of them. Any fix in the works yet?
anonymous 14 March, 2013 06:25
Hmm,this sounds good!....still good in some ways like for the people who forgot the pattern of their lock screen. Someone could easily help him or her through this. I wanna share this to get some ideas guys http://www.oneclickroot.com/android-security/samsung-galaxy-s3-bug-allows-anyone-to-bypass-the-lock-screen/
anonymous 23 March, 2013 06:17
my password
anonymous 23 March, 2013 06:19
password screen