critical security bug

---

Hi,

i've found a critical security bug in your CM9 Alpha image for the desire s.

If the phone is locked with a pattern and you plugin your usb data connect cable. The android will now ask, if you want to enable the usb storage.
so i have the full access to the sd memory card, while the phone is locked

Originally Posted by jeremiasw

Hi,

i've found a critical security bug in your CM9 Alpha image for the desire s.

If the phone is locked with a pattern and you plugin your usb data connect cable. The android will now ask, if you want to enable the usb storage.
so i have the full access to the sd memory card, while the phone is locked

I do hear what you're saying and appreciate you raising the concern, but, that's not really a critical issue is it? as if you locked your phone and I picked it up I could easily remove the SD completely and gain total access to it, unless you previously enabled encryption on the SD card.

Originally Posted by ben_pyett

I do hear what you're saying and appreciate you raising the concern, but, that's not really a critical issue is it? as if you locked your phone and I picked it up I could easily remove the SD completely and gain total access to it, unless you previously enabled encryption on the SD card.

I agree. Closing the barn door after the horse is bolted.