[![Line of CyanogenMod code means unlock gestures may have been logged locally on handsets](http://www.blogcdn.com/www.engadget.com/media/2012/10/cmmodloggingcodeht.jpg) ](http://www.engadget.com/2012/10/24/cyanogenmod-code-fixed-to-prevent-unlock-gesture-logging/)
If you're one of the [root](http://www.engadget.com/tag/root)-and-[ROM](http://www.engadget.com/tag/rom) brigade, it's also likely that you have a keen eye on what goes on under the hood of your mobile OS. It might, then, come as a surprise to users of [CyanogenMod](http://www.engadget.com/tag/cyanogenmod), that a line of code could have been logging your phone-unlock gestures and patterns. Gabriel Castro, a developer involved in the project, was surprised to spot the rogue logging, that seems to have been part of an update regarding grid sizes for screen locks in August. While there is no serious compromise to users (gaining access to the log file would involve a lot of work, and direct access to the phone) it will certainly be considered an unwelcome addition by many, and a reminder that open-source relies heavily on trust. The issue has been resolved in an update, so if you're at all unsettled at the thought, perhaps now is the time to get the latest build.
Filed under: [Cellphones](http://www.engadget.com/category/cellphones/), [Tablets](http://www.engadget.com/category/tablets/), [Mobile](http://www.engadget.com/category/mobile/)
[CyanogenMod code fixed to prevent unlock gestures from being logged locally on handsets](http://www.engadget.com/2012/10/24/cyanogenmod-code-fixed-to-prevent-unlock-gesture-logging/) originally appeared on [Engadget](http://www.engadget.com) on Wed, 24 Oct 2012 13:47:00 EDT. Please see our [terms for use of feeds](http://www.weblogsinc.com/feed-terms/).
######
[Permalink](http://www.engadget.com/2012/10/24/cyanogenmod-code-fixed-to-prevent-unlock-gesture-logging/) _place_holder;![](http://www.blogsmithmedia.com/www.engadget.com/media/post_label_VIA.gif)[ArsTechnica](http://arstechnica.com/security/2012/10/cyanogenmod-logged-swipe-gestures-used-to-unlock-android-devices/)  _place_holder;| _place_holder; ![source](http://www.blogsmithmedia.com/www.engadget.com/media/post_label_source.gif)[CyanogenMod](http://review.cyanogenmod.com/#/c/25214/3/core/java/com/android/internal/widget/LockPatternView.java), [GitHub](https://github.com/CyanogenMod/android_frameworks_base/commit/56c014f289e04c0fd769af55c861b6e7bf7b4280)  _place_holder;| _place_holder;[Email this](http://www.engadget.com/forward/20358919/) _place_holder;| _place_holder;[Comments](http://www.engadget.com/2012/10/24/cyanogenmod-code-fixed-to-prevent-unlock-gesture-logging/#comments)
URL: http://www.engadget.com/2012/10/24/cyanogenmod-code-fixed-to-prevent-unlock-gesture-logging/
No comments:
Post a Comment