Information Security News mailing list archives

THC Nokia Phone Unlock


From: InfoSec News <alerts () infosecnews org>
Date: Thu, 14 Sep 2006 01:07:45 -0500 (CDT)

Forwarded from: The Unknown Security Person... 

 The Hacker's Choice is proud to release
     http://www.thc.org/thc-nokia-unlock


The tools exploits a design flaw on nokia mobile phones
to remove the phone-lock.

 From Nokia's webpage:

    "The Phone Lock prevents your phone data from being accessed if
    your phone is stolen.

    "The lock code is a number that prevents unauthorized persons from
    using your phone. These control codes are for your protection."


 The Design flaw:

    The Phone Lock disables the key pad, bluetooth and the USB port. This
    makes it impossible to access the data stored on the device without
    knowing the correct code.

    Nevertheless the MMC is not disabled. Nokia's OS has a lot of undocumented
    features. One of them are 'recognizer' that can be used to execute a
    program when the phone boots.

    A recognizer is loaded and executed when a drive is mounted. The MMC
    is mounted when it is placed into the mobile phone _even_ when the phone
    is locked.


Yours sincerely,

The Hackers Choice
http://www.thc.org


_________________________________
HITBSecConf2006 - Malaysia 
The largest network security event in Asia 
32 internationally renowned speakers 
7 tracks of hands-on technical training sessions. 
Register now: http://conference.hitb.org/hitbsecconf2006kl/


Current thread: