Please don't troll in this forum. Kristian, if you have real reason to believe that this represents active exploitation of a vulnerability please contact us at [email protected] with that evidence. As it stands, I see no reason to suspect that your claim is correct.
Jeremy, parts of Android which are resident on the boot and system partitions can come up before decryption. It sounds like there was a change in the order in which those things came up here, but I'm not 100% sure. If you're concerned or it causes problems for you, please file a bug on the public tracker and we'll have someone take a look. Thanks, Geremy Condra On Tue, Jul 29, 2014 at 10:20 AM, Jeremy Bothan <[email protected]> wrote: > Thanks for your reply. R u serious on this? What would mean to be tagged > by them and would a factory reset do any good? And finally - do you have > any stuff to read from that CCC-meeting you were mentioning? > > thx a lot and regards, > je > > Am Dienstag, 29. Juli 2014 18:24:40 UTC+2 schrieb Kristian Hermansen: >> >> NSA tagged you, probably via a SIM card vulnerability. At CCC this year >> in Germany, there were numerous such vectors discussed publicly... >> >> -- >> Regards, >> >> Kristian Erik Hermansen >> https://www.linkedin.com/in/kristianhermansen >> On Jul 29, 2014 6:07 AM, "Jeremy Bothan" <[email protected]> wrote: >> >>> Hi everyone, >>> >>> I've gotta Nexus 4 with Android 4.4 running. My phone is encrypted which >>> means - when I turn it on, I have to enter my encryption code in order to >>> unlock the phone and start the booting process. After that has finished, I >>> am asked to type in my SIM-PIN. So much for the *usual* way. >>> >>> Couple of month ago (guess under Android 4.1) my phone started acting >>> oddly: sometimes, when I put it on, it shows me a dialog to type in my >>> SIM-PIN - that BEFORE I am asked to enter the code to unlock the phone. >>> I've attached a screenshot. I find that strange since I was under the >>> impression that nothing can really run until the phone has been unlocked >>> via the correct encryption/decryption-code. The dialog almost looks like >>> the one presented after the booting-process is over. The background however >>> is completely black and one can only put in the code or shut the phone >>> down. >>> >>> So I am wondering - whats wrong with my phone? Is this just a bug or >>> might it be something serious - like spy software or anything else? How to >>> find out anyways? Any hint and help would be appreciated. >>> >>> Thx a lot, >>> Jeremy >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Android Security Discussions" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To post to this group, send email to [email protected]. >>> >>> Visit this group at http://groups.google.com/ >>> group/android-security-discuss. >>> For more options, visit https://groups.google.com/d/optout. >>> >> -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to > [email protected]. > Visit this group at > http://groups.google.com/group/android-security-discuss. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/d/optout.
