New issue
Advanced search Search tips

Issue 751871 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Aug 2017
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: ----
Type: Bug-Security


Participants' hotlists:
Hotlist-1


Sign in to add a comment

Security: remote access on Android

Reported by cherishd...@gmail.com, Aug 2 2017

Issue description



NOTE:person sent my (sideline)number to insurance co..... The company then called my sideline number.. then my real number..
  I started receiving short codes text sms...(on my real number) To then I found the shortcode texts are actual Java script vulnerabilities..I received a message stating that I needed to sign in to a Google browser on my phone to keep my account. my email was revoked by google.. stating I violated terms of agreement when I was on an internet connection. 
Shortcoded sms 95578,25102, 65720, 
My other account is Cherish.da.islands@gmail.com some of my emails have disappeared... You have my permission to review the account and port all data to the other account. Also.. if needed.. I am willing to allow Google to inspect what needs to be inspected....
 I've loaded McAfee and it says there is preloaded malware.. 
My apologies for not following the instructions.. I have ADHD.. And need assistance.

VULNERABILITY DETAILS. I could hear my camera clicking... Guest account was opened and cloud was computing my data and printing.. I have small children and I'm concerned for their safety with the following vulnerabilities!!! Please help

VERSION
Chrome Version: [x.x.x.x] + [stable, beta, or dev]
Operating System: 6.1

Attached is anything I could find possibly relevant.
 
Screenshot_20170802-183820.png
80.8 KB View Download
Screenshot_20170802-130950.png
110 KB View Download
Screenshot_20170731-183138.png
140 KB View Download
Screenshot_20170731-160235.png
172 KB View Download
Screenshot_20170731-160205.png
158 KB View Download
Screenshot_20170731-160118.png
150 KB View Download
Screenshot_20170725-150741.png
97.5 KB View Download
Screenshot_20170715-035622.png
136 KB View Download
Screenshot_20170715-025816.png
97.3 KB View Download
Screenshot_20170802-182830.png
117 KB View Download
I don't know if all of this is relevant.. I do know the dev 0666 thing was on my last phone and someone managed to use my phone as an internet portal to 8 people. (Different phone/different service)
  I loaded allot of apps in the past.. attempting to learn ethical hacking, due to the fact I'm sick of being a hackers victim. And also I enjoy teaching others how to not be vulnerable themselves.
Thanks for all you do. I appreciate you all.
Screenshot_20170711-192346.png
62.4 KB View Download
Screenshot_20170802-192404.png
186 KB View Download
Screenshot_20170802-192351.png
175 KB View Download
Screenshot_20170802-192555.png
168 KB View Download
Screenshot_20170802-192542.png
212 KB View Download
Screenshot_20170802-192512.png
182 KB View Download
Screenshot_20170802-192722.png
186 KB View Download
Screenshot_20170802-192729.png
205 KB View Download
Screenshot_20170802-192745.png
192 KB View Download

Comment 5 Deleted

These vulnerabilities are not available in the Google chrome search database. As you see.. I used Opera..
Thanks
Labels: OS-Android
Status: WontFix (was: Unconfirmed)
Summary: Security: remote access on Android (was: Security: remote access)
Nothing shown here represents a security vulnerability in Google Chrome.

It is indeed the case that installing malicious apps on Android puts your privacy and the security of data on your phone at risk (limited by the permissions granted to the applications).

Android 7 includes a new feature called "Google Play Protect" that can help discover malicious apps and remove them: https://support.google.com/accounts/answer/2812853?hl=en; Android help can be found here: https://support.google.com/android/?hl=en#topic=7340889

  I'm requesting your supervisor's opinion.
Thank you
Screenshot_20170802-194257.png
143 KB View Download
The screenshot in #8 indicates that the connection to the accounts.google.com page isn't secure. However, that's a bit misleading; the problem (as seen in the greyed out page behind the security info) is that you're looking at a network error page generated locally, not a HTTPS page from the server itself.
Project Member

Comment 10 by sheriffbot@chromium.org, Nov 9 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment