The security flaws in Android are increasing. Despite Google’s efforts to fix these errors as soon as possible, the great success of this mobile operating system makes both security researchers and hackers seeking potential vulnerabilities in this system and, as has happened on this occasion, are discovered new ways to exploit this system.
Google a few months ago implemented within the “Google Settings” a new tool to locate and lock the device remotely in case of loss or theft module. Several security researchers have discovered that this new module presents an important vulnerability in Android 4.3 that allows skipping and eliminate malicious security screen lock applications.
To exploit this vulnerability is not necessary to have root permissions to access this module. Any malicious application could disable screen locking and allow anyone to access the device and all the content stored on it. [click to continue...]