Header Banner
gadgethacks.mark.png
Gadget Hacks Shop Apple Guides Android Guides iPhone Guides Mac Guides Pixel Guides Samsung Guides Tweaks & Hacks Privacy & Security Productivity Hacks Movies & TV Smartphone Gaming Music & Audio Travel Tips Videography Tips Chat Apps
Home
Samsung

How to Patch the Latest Android "Master Key" Bugs on Your Samsung Galaxy S3

Jul 19, 2013 04:14 PM
Jul 19, 2013 04:16 PM
Warning symbol displayed on a smartphone screen.

A few weeks ago, Bluebox Security uncovered a bug that could potentially effect 99% of Android devices. Bug 8219321, dubbed the Master Key bug, works by allowing applications with modified code to pass Android's signature verification system, thereby bypassing security measures that normally wouldn't allow these apps to be installed.

How does this effect you? Well, modified apps can cause a lot of havoc on your Samsung Galaxy S3, the biggest concern being the availability to send out all of the information stored on your device. That means your contacts, messages, emails, passwords, and more can be accessed by the maliciously minded.

Literally days after the discovery of the Master Key bug, a Chinese firm called Android Security Squad discovered a similar exploit—Bug 9695860. While taking a different approach, the effects of this vulnerability are virtually the same as the Master Key bug.

Now that you know the danger, let's eliminate it!

Make Sure You're Rooted

You cannot patch these bugs unless you're rooted, so if you're not, check out my past guide for instructions.

Make Sure Unknown Sources Is Checked

By now, this should be a given for any softModder, but just in case you've turned it off, make sure to enabled Unknown sources by going to Menu -> Settings -> Security.

Install the Xposed Framework

Previously, I covered installing the Xposed Framework onto the Samsung Galaxy S4, and the process is the same for every Android device, including our GS3s—and it couldn't be simpler.

  1. Download and install the Xposed Framework APK onto your device.
  2. Open up the app and select Install/Update to ensure you're on the latest version.
  3. Reboot your device.
Xposed Installer application interface displaying options for framework installation and updates.
How to Patch the Latest Android "Master Key" Bugs on Your Samsung Galaxy S3
Xposed Installer application interface displaying options for framework installation and updates.
How to Patch the Latest Android "Master Key" Bugs on Your Samsung Galaxy S3

Install Master Key Dual Fix

App developer tungstwenty created Master Key Dual Fix to simply and easily patch these two potentially dangerous bugs. Now that you have the Xposed Framework installed and up to date, just download Master Key Dual Fix from Google Play and install like any other app.

Error message on mobile device regarding Hotfix for a software issue.

While accessible through your app list, this is a module that only works in conjunction with the Xposed Framework.

Activate the Module

Once you install the patch, you'll notice an extra notification in your Notification tray.

How to Patch the Latest Android "Master Key" Bugs on Your Samsung Galaxy S3

Go ahead and tap on the "Xposed module is not activated yet" notification and it'll launch into Xposed Framework. From there, tap the Modules tab and check the box next to "Master key dual fix."

How to Patch the Latest Android "Master Key" Bugs on Your Samsung Galaxy S3

Reboot Your Device

Unlike other Xposed modules, there are no settings to mess with. Once you've checked the module, you simply need to reboot for the patches to take effect.

Verify the Bugs Were Patched

After you've rebooted, head back to Xposed Framework (either through your app drawer or Settings), select the Master Key module, and make sure it states that you're safe. Look for the green text.

How to Patch the Latest Android "Master Key" Bugs on Your Samsung Galaxy S3

That's all there is to it! If you have any issues or questions, post away in the comments below.

You already know how to use your phone. With our newsletter, we'll show you how to master it. Each week, we explore features, hidden tools, and advanced settings that give you more control over iOS and Android than most users even know exists.

Sign up for Gadget Hacks Weekly and start unlocking your phone's full potential.

Related Articles

Comments

No Comments Exist

Be the first, drop a comment!