Connect with us
X
Categories:

Technology

Google Pixel screen-lock hack nets researcher $70,000

Published

on

Google Pixel screen-lock hack nets researcher $70,000
Share this post:

A security researcher scored a $70k bug bounty payout after accidentally discovering a Google Pixel lock-screen bypass hack.

The vulnerability, discovered by David Schütz, meant an attacker could unlock any Google Pixel phone without knowing the passcode. Google fixed the issue (tracked at CVE-2022-20465) with a November update, allowing Schütz to go public with his findings.

The vulnerability created a means for a potential hacker to bypass lock-screen protections such as fingerprint or PIN authentication and obtain physical access to a target device. The hack could be carried out with minimal technical skill against a range of mobile devices running Android, by following a series of steps.

Fortunately, the exploit is not something that would lend itself to remote exploitation.

Serendipity strikes

As explained in a blog post, Schütz came across the issue by chance when he forgot the PIN code of his Pixel phone and had to use the PUK code to regain access. After successfully completing the process, he noticed oddities in the lock screen he was confronted with.

“It was a fresh boot, and instead of the usual lock icon, the fingerprint icon was showing,” Schütz recalled. “It accepted my finger, which should not happen, since after a reboot, you must enter the lock screen PIN or password at least once to decrypt the device.”

After accepting his finger, the device crashed with a weird “Pixel is starting…” message, which Schütz addressed with a forced reboot.

Schütz decided to investigate the issue over subsequent days. On one occasion he forgot to reboot the phone, and just began from a normal unlocked state, locked the device, and hot-swapped the SIM tray, before carrying out the SIM PIN reset process.

After following this sequence before entering the PUK code and choosing a new PIN, Schütz was presented with his unlocked home screen.

The researcher realized that he had achieved a full lock screen bypass on the fully patched Pixel 6. The same trick worked on a Pixel 5.

Schütz realized the hack would be easily exploited by anyone, from spies to crooks and jealous spouses.

“Since the attacker could just bring his/her own PIN-locked SIM card, nothing other than physical access was required for exploitation. The attacker could just swap the SIM in the victim’s device, and perform the exploit with a SIM card that had a PIN lock and for which the attacker knew the correct PUK code.”

Patch puzzlement

Schütz reported the issue to Google and the tech giant processed and filed the bug promptly, but remediation took far longer.

RECOMMENDED  XSS in Gmail’s AMP For Email earns researcher $5,000

After telling Schütz the issue was a duplicate, and therefore not normally eligible for a bug bounty, Google failed to act for some weeks, before repeated chasing by Schütz and a demo of the exploit to Google staffers at a Google-run bug hunter event called ESCAL8 in September prompted action.

Shortly after this, Google said that even though Schütz’s report was a duplicate, it had only started working on a fix because of his submission, so the firm had decided to pay him a $70,000 bounty for the lock screen bypass.

The bug was fixed on November 5, allowing Schütz to disclose his findings and a video demonstrating the flaw.

The researcher deduced from code changes that Android security screens can be stacked “on top” of each other.

“When the SIM PUK was reset successfully, a .dismiss() function was called by the PUK resetting component on the ‘security screen stack’, causing the device to dismiss the current one and show the security screen that was ‘under’ it in the stack,” he explained.

“Since the .dismiss() function simply dismissed the current security screen, it was vulnerable to race conditions” that meant that the PUK resetting component could dismiss a unrelated security screen, changed by a background process.

Google has changed the code, so it explicitly calls the type of security screen to be dismissed.

The Daily Swig invited Google to comment, and asked Schütz follow-up questions about his experience in bug bounty hunting and mobile security. No word back as yet, but we’ll update this story as and when more information comes to hand.


Get More Stories Like This On: Facebook: @AllNaijaEntertainment, Twitter: @AllNaijaEntertainment
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

iQoo 12: Global version of ex-flagship smartphone upgrades to Android 15
Technology2 hours ago

iQoo 12: Global version of ex-flagship smartphone upgrades to Android 15

RedMagic 10 Pro and RedMagic 10 Pro Plus to follow RedMagic Nova global release with huge ultra-bright displays
Technology3 hours ago

RedMagic 10 Pro and RedMagic 10 Pro Plus to follow RedMagic Nova global release with huge ultra-bright displays

OnePlus 13 posts impressive sales numbers before anticipated global release
Technology3 hours ago

OnePlus 13 posts impressive sales numbers before anticipated global release

Ruud van Nistelrooy updates Leny Yoro injury after Manchester United defender is pictured in training
Sports8 hours ago

Ruud van Nistelrooy updates Leny Yoro injury after Manchester United defender is pictured in training

Cole Palmer injury update leaves him in doubt for Chelsea against Arsenal
Sports8 hours ago

Cole Palmer injury update leaves him in doubt for Chelsea against Arsenal

Police kill two suspected kidnappers in Delta State
News8 hours ago

Police kill two suspected kidnappers in Delta State

Atiku congratulates Trump on US election victory
News8 hours ago

Atiku congratulates Trump on US election victory

Chief of Army Staff, Lagbaja passed away at age 56
News8 hours ago

Chief of Army Staff, Lagbaja passed away at age 56

Vector reveals one thing he doesn't understand about Africans
Entertainment8 hours ago

Vector reveals one thing he doesn’t understand about Africans

People always tell me to smile more — CKay
Entertainment9 hours ago

People always tell me to smile more — CKay

Hermes Iyele announces the death of his mother
Entertainment9 hours ago

Hermes Iyele announces the death of his mother

General22 hours ago

Skylar Grey – Everything I Need [LYRICS]

General22 hours ago

[Music] Diddy – Dirty Money – “Coming Home” Feat. Skylar Grey

General22 hours ago

Diddy – Dirty Money – “Coming Home” Feat. Skylar Grey [LYRICS]

General22 hours ago

[Music] African China – Amen

General22 hours ago

[Music] African China – Baba God

General22 hours ago

African China – Baba God [LYRICS]

General22 hours ago

Machine Gun Kelly (MGK) “Home” Feat X Ambassadors & Bebe Rexha [LYRICS]

General23 hours ago

Passenger – Let Her Go [LYRICS]

General23 hours ago

[Music] Eminem – “No Love” Feat. Lil Wayne

General23 hours ago

Eminem – “No Love” Feat. Lil Wayne [LYRICS]

Music23 hours ago

[Music] Tatiana Manaois – Buzz Kill

General23 hours ago

Tatiana Manaois – Buzz Kill [LYRICS]

General23 hours ago

James Blunt – Goodbye My Lover [LYRICS]

General23 hours ago

Major Lazer – “Particula” Feat. Nasty C , Ice Prince, Patoranking & Jidenna [LYRICS]

General23 hours ago

James Blunt – You’re Beautiful [LYRICS]

General23 hours ago

Justin Timberlake – Mirrors [LYRICS]

General23 hours ago

[Music] Darey – “Pray For Me” feat. Soweto Gospel Choir

General23 hours ago

Eminem – “Love The Way You Lie” Feat. Rihanna [LYRICS]

General23 hours ago

Goldlink ft. Miguel – Got Friends [LYRICS]

General24 hours ago

Sia – I’m Still Here [LYRICS]

General24 hours ago

Yo Gotti ft. Nicki Minaj – Rake It Up [LYRICS]

General24 hours ago

Shane McMahon – Here Comes The Money [LYRICS]

General24 hours ago

Journey – Faithfully [LYRICS]

General24 hours ago

[Music] Journey – Faithfully

General24 hours ago

Eminem – Not Afraid [LYRICS]

General24 hours ago

[Music] Journey – Don’t Stop Believin’

General1 day ago

Journey – Don’t Stop Believin’ [LYRICS]

General1 day ago

21 Savage – Bank Account [LYRICS]

General1 day ago

Demi Lovato – Sober [LYRICS]

Gnash (singer)
Music5 days ago

[Music] Gnash Ft Olivia O’Brien – I Hate you, I Love you

John Legend
Music2 days ago

[INSTRUMENTAL] John Legend – All Of Me

Alan Walker
Music6 days ago

Alan Walker – Faded [INSTRUMENTAL]

21 Savage
Music3 days ago

[Video] 21 Savage ft. Offset & Metro Boomin – Rap Saved Me

Wiz Khalifa
Music4 days ago

[Instrumental] Wiz Khalifa – See You Again ft. Charlie Puth

Salvation Ministry Choir Amen
Lyrics2 days ago

Salvation Ministry Choir – Amen [LYRICS]

General6 days ago

[Music] The Chainsmokers – ‘Don’t Let Me Down’ Feat. Daya

Powfu (singer)
Music5 days ago

[Music] Powfu – Death Bed (Coffee for Your Head) Feat. Beabadoobee

General5 days ago

[Music] Wyclef Jean – “Sweetest Girl (Dollar Bill)” Feat. Akon, Lil Wayne, Niia

General3 days ago

[Music] Zayn Malik – Entertainer

Wiz Khalifa - See You Again ft. Charlie Puth
Music5 days ago

[Music] Wiz Khalifa – See You Again ft. Charlie Puth

Music4 days ago

[Music] Exalted Tribe (HICC) – We Dey Halla

Anna Kendrick
Music5 days ago

[Music] Anna Kendrick – Cups (Pitch Perfect’s “When I’m Gone”)

General22 hours ago

[Music] Diddy – Dirty Money – “Coming Home” Feat. Skylar Grey

General2 days ago

[Music] John Legend – Love Me Now

Right Said Fred
Music5 days ago

[Music] Right Said Fred – Stand Up (For the Champions)

Salvation Ministries Mass Choir
Music2 days ago

[Music] Salvation Ministries Choir – Chioma Me Eh(Good God)

General1 day ago

[Music] Celine Dion – If That’s What It Takes

Salvation Ministries Mass Choir
Lyrics2 days ago

Salvation Ministries Choir – Chioma Me Eh(Good God) [LYRICS]

General1 day ago

[Music] P!nk – Try

General7 days ago

[Music] Shaggy – Strength Of A Woman

General2 days ago

[Music] Jaden Smith – Goku

Music4 days ago

[Music] Wiz Khalifa – See You Again (Remix) Feat Charlie Puth, Eminem, Tyga, & Chris Brown

R. Kelly
Music5 days ago

[Music] R. Kelly – World’s Greatest

General2 days ago

Magic! — Rude [LYRICS]

General24 hours ago

[Music] Journey – Don’t Stop Believin’

General3 days ago

[Music] Cardi B – Bartier Cardi ft. 21 Savage

General4 days ago

[Music] Tyga ft. Offset – Taste

General1 day ago

[Music] P!nk – “Just Give Me A Reason” Feat. Nate Ruess

General3 days ago

[Music] 21 Savage ft. Offset & Metro Boomin – Rap Saved Me

General7 days ago

[Music] Post Malone – Candy Paint

General6 days ago

[Music] R Kelly – When A Woman Loves

General1 day ago

[Music] African China – Western Union

General5 days ago

[Music] Luniz – “Got 5 On It” Feat. Michael Marshall (Tethered Mix from US)

General7 days ago

[Music] Shaggy – Church Heathen

General3 days ago

[Music] Lil Dicky ft. Chris Brown – Freaky Friday

Alec Benjamin (singer)
Music5 days ago

[Music] Alec Benjamin – Let Me Down Slowly

General6 days ago

[Music] Jessie J – ‘Bang Bang’ Feat. Ariana Grande & Nicki Minaj

Loren Allred
Music5 days ago

[Music] Loren Allred – Never Enough (From The Greatest Showman)

General2 days ago

[Music] Lil Durk – India Pt. II

ANE Billboard Hots



Join "ANE sabi" clique

Don't miss a thing, get ogbonge ANE latest updates to fuel your conversation daily.