These things happen from time to time, especially when dealing with such complex software with so many edge cases and even more so with software with special privileges like Gemini\u2019s ability to run from the lock screen.<\/p>\n
In traditional \u201chacking\u201d circles, this is known as an authentication bypass vulnerability or a lockscreen bypass. It is always so fascinating to observe what things people find or often stumble upon. You can see the short video for yourself. Still, it goes something like this: The user has mindfully disabled access from Gemini to certain apps like Messages, so naturally, once someone with physical access to the device tries to call upon Gemini from the lock screen and tell it to send a message, the phone asks for a PIN. So far so good.<\/p>\n
Now the \u201cmagic\u201d and clearly broken bit \u2013 the user then presses the \u201cAdd attachment\u201d button simultaneously with the Continue button, and that bypasses the PIN for some reason. And from there, it\u2019s not just SMS message privileges either. The video shows that the \u201cattacker\u201d managed to re-enable access to WhatsApp, even though it had been previously turned off in Gemini settings as well. Fascinating stuff.<\/p>\n
Apparently, this particular vulnerability has been reported since May on Android 16 and is \u201cknown\u201d by Google, and there is a fix already on the way. It affects more than just Pixel devices, too, though we don\u2019t have conclusive information on which Android flavors are vulnerable.<\/p>\n
Anyway, as we said, these things happen from time to time and not only on Android either. For instance, entire dedicated online communities are searching for such edge case bypass conditions on iOS and often with more malicious intent than simply sending an unauthorized SMS, like unlocking and reselling blocked stolen phones.<\/p>\n
Source<\/a> | Via<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"These things happen from time to time, especially when dealing with such complex software with so many edge…\n","protected":false},"author":2,"featured_media":699305,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[2306,86,56,54,55],"class_list":["post-699304","post","type-post","status-publish","format-standard","has-post-thumbnail","category-mobile","tag-mobile","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/699304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=699304"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/699304\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/699305"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=699304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=699304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=699304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}