+

Cookies on the Business Insider India website

Business Insider India has updated its Privacy and Cookie policy. We use cookies to ensure that we give you the better experience on our website. If you continue without changing your settings, we\'ll assume that you are happy to receive all cookies on the Business Insider India website. However, you can change your cookie setting at any time by clicking on our Cookie Policy at any time. You can also see our Privacy Policy.

Close
HomeQuizzoneWhatsappShare Flash Reads
 

Hacking an Android phone can be as simple as typing in a really long password

Sep 21, 2015, 16:24 IST

Advertisement
Flickr/Rob Bulmahn

Android 5.0 "Lollipop," the latest version of the Android phone operating system, is vulnerable to a simple hack that involves typing in a password so long that it causes the phone to crash before then booting to the unlocked home screen. 

The vulnerability, discovered by John Gordon, is easy to exploit: simply open the phone's "Emergency Call" feature, type a few characters and the repeatedly copy-and-paste them. The pasted text becomes longer and longer - Gordon's reaches over 160,000 characters - and, as such, harder for the phone to handle.

Next, open the camera app which causes the phone to ask for a password into which the 160,000 character string is pasted. After a few minutes the phone restarts, booting straight to the unlocked home screen. 

Gordon told CNN Money that he informed Google in August and the company has released a patch, but many users could remain affected due to the lag in Android software updatesThis hack is the latest in a long line of vulnerabilities that appear in major operating systems, including a text message hack that affected Android which was discovered in July and a malware hack that affects iOS discovered in September. 

NOW WATCH: REVEALED: The TSA has a master key for your locked luggage and now people are making copies

Please enable Javascript to watch this video
You are subscribed to notifications!
Looks like you've blocked notifications!
Next Article