Security Flaw: Bypass Lock Screen with Android File Transfer App

Serafon

\n\nThere is a bug in the UMI Touch ROM that allows anyone to browse, copy, and delete all files on the phone simply by connecting it to a Mac and launching the Android File Transfer app from Google, even when it is locked and secured with a pattern or PIN.

bencebacsi

Serafon replied at 2016-5-18 13:01
The latest FOTA update (Update v3.0.3.-20160510) does not address the security issue I reported; all ...

This issue is still under investigation. Anyway it's not a unique problem. For example, iPhone 5-6 and iPad models are also affected by a such issue.

bencebacsi

Dear Serafon,

This security issue has been confirmed. Thank you for reporting it. The engineers will look into this problem and process the required actions as soon as possible. That correction will be added in a later update. I ask for your patience until.

Sincerely,
Bence

Serafon

The latest FOTA update (Update v3.0.3.-20160510) does not address the security issue I reported; all user data can still easily be extracted from the phone even when it is locked and secured with a passcode, pattern, or fingerprint.