Azimuth Security: May 2013

Azimuth Security: May 2013 <body onload='MM_preloadImages('http://www.azimuthsecurity.com/images/a_02.gif','http://www.azimuthsecurity.com/images/r_02.gif','http://www.azimuthsecurity.com/images/t_02.gif','http://www.azimuthsecurity.com/images/s_02.gif')'><script type="text/javascript"> function setAttributeOnload(object, attribute, val) { if(window.addEventListener) { window.addEventListener('load', function(){ object[attribute] = val; }, false); } else { window.attachEvent('onload', function(){ object[attribute] = val; }); } } </script> <div id="navbar-iframe-container"></div> <script type="text/javascript" src="https://apis.google.com/js/platform.js"></script> <script type="text/javascript"> gapi.load("gapi.iframes:gapi.iframes.style.bubble", function() { if (gapi.iframes && gapi.iframes.getContext) { gapi.iframes.getContext().openChild({ url: 'https://www.blogger.com/navbar.g?targetBlogID\x3d509652393303233687\x26blogName\x3dAzimuth+Security\x26publishMode\x3dPUBLISH_MODE_HOSTED\x26navbarType\x3dBLUE\x26layoutType\x3dCLASSIC\x26searchRoot\x3dhttp://blog.azimuthsecurity.com/search\x26blogLocale\x3den\x26v\x3d2\x26homepageUrl\x3dhttp://blog.azimuthsecurity.com/?m%3D0\x26vt\x3d-4433879647623530723', where: document.getElementById("navbar-iframe-container"), id: "navbar-iframe", messageHandlersFilter: gapi.iframes.CROSS_ORIGIN_IFRAMES_FILTER, messageHandlers: { 'blogger-ping': function() {} } }); } }); </script>

	project zeus

	"You will not be informed of the meaning of Project Zeus until the time is right for you to know the meaning of Project Zeus."

Archives

	Current Posts
	April 2010
	May 2010
	August 2010
	September 2012
	February 2013
	March 2013
	April 2013
	May 2013
	June 2013
	December 2013
	March 2014
	January 2015

Posts

Exploiting Samsung Galaxy S4 Secure Boot

posted by Anonymous @ 5/23/2013 10:36:00 AM

Launched in April 2013, the Samsung Galaxy S4 is expected to be one of the top-selling smartphones of the year, having sold 10 million units in its first month of sales. While the majority of released models include an unlocked bootloader, which allows users to flash custom kernels and make other modifications to the software on their own devices, AT&T and Verizon branded devices ship with a locked bootloader that prevents these types of modifications. In this post, I'll provide details on how Samsung implement this locking mechanism, and publish a vulnerability in the implementation that allows bypassing the signature checks to run custom unsigned kernels and recovery images.

Read more »

56 comments

Contact