diff options
Diffstat (limited to 'markdown/2012_09_replicant-2-3-0005-images-fixing-the-ussd-vulnerability.md')
| -rw-r--r-- | markdown/2012_09_replicant-2-3-0005-images-fixing-the-ussd-vulnerability.md | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/markdown/2012_09_replicant-2-3-0005-images-fixing-the-ussd-vulnerability.md b/markdown/2012_09_replicant-2-3-0005-images-fixing-the-ussd-vulnerability.md index c2dd50d..12c0573 100644 --- a/markdown/2012_09_replicant-2-3-0005-images-fixing-the-ussd-vulnerability.md +++ b/markdown/2012_09_replicant-2-3-0005-images-fixing-the-ussd-vulnerability.md @@ -9,13 +9,13 @@ the vulnerability: intents can basically dial a number and start a call without asking confirmation to the user. That could seem harmless at first sight, but it turns out it also works with USSD codes, and some of them are very powerful. This is mostly the case of vendor-specific USSD codes (that are -not included in Replicant), which could erase the phone’s user data. +not included in Replicant), which could erase the phone's user data. -What’s also problematic about this is that web pages can trigger such intents +What's also problematic about this is that web pages can trigger such intents (through an iframe with the `tel:` prefix for instance). Since this vulnerability was present in our Replicant images (although the -damage was reduced as we don’t include vendor-specific USSD codes), we decided -to include the fix in our code base and release new images. That’s nearly the +damage was reduced as we don't include vendor-specific USSD codes), we decided +to include the fix in our code base and release new images. That's nearly the only new feature of these images (Galaxy S also got a nasty graphic bug fixed). |