Overcoming the flash limitation of Moto E with Rs.10 – Not POSSIBLE

Update : Its impossible to have flash on Moto E as it doesnt support USB OTG, the hack was tried on Moto G before Moto E was available assuming it has OTG like Moto G. This post is just for reference. 

 

With a pricing of just Rs.6999 Moto E beats them all. Okay Moto E is out, with just one major limitation. It doesn’t have an LED flash. So here’s an idea to have flash on Moto E with just 10 Indian bucks if you have a USB OTG connector. Just solder an LED with a series resistor to USB connector. See the  result on a Moto G …Same applies to Moto E.

2014-05-13 16.05.52 2014-05-13 16.05.31

All you need is an LED, resistor and USB OTG cable.

2014-05-13 16.04.39Here’s the flash powered by Moto USB port.

The same technique can be used on any Android Phone or tab without flash. Practically we use the LED intended for camera flash more as a flash light in the dark. And yes if you have the USB OTG cable and led fixed you have it. Limitation is that we are taking the power for the LED from the battery directly through the USB connector using hardware. Battery can be drained fast based on the current drawn by the LED.

More than marketing ploy and to have product segmentation, companies get rid of the LED flash. I guess its not the cost.

ICICI Mobile security vulnerability with imobile application activate mobile banking or loose your money..

Disclaimer: I don’t endorse any cracking or stealing activity. I had sent a message to ICICI regarding this issue on 9/8/2011and got the reply as below

Dear Mr. Issac,

We value your relationship with ICICI Bank.

Thank you for your feedback. We appreciate the efforts you have taken in order to improve our service standards and processes.
Your suggestions will go a long way in helping us improve the features on our website and security measures.
We look forward for more opportunities to be of service to you.

Sincerely,
X XXXXXXX
Account Manager
ICICI Bank Limited

—–Original Message—–

Subject:  RE: Password Related Issues

Ok received and changed password.
Its too bad that spaces are not allowed in passwords as its easy to create tough passwords with spaces in between.

BTW I have found a serious security flaw in your ICICI bank mobile application for android. Who should be contacted for security related issues ?

Sunish

I tried to use contact option on ICICI web site to report the issue, but could not find any link nor did I find any link related to reporting security issue on a site wide search. The contact option forces the customer to use messaging system of internet banking whenever the option ‘other’ is selected.

image 

 

Now to the real issue :
You don’t need ATM pin or any external authentication tools to activate iMobile app but just ICICI bank debit card (PIN NOT REQUIRED). The danger is when you have an ICICI bank account and you have not started using iMobile.

It should work on all platforms, be it android, iphone, windows mobile or symbian.

Scenario 1: Somebody steals your mobile and wallet containing ICICI bank debit card

The thief can transfer money and perform all transactions possible within the iMobile application by following the process below.

Steps to activate imobile and do whatever including tranferring funds using IMPS, shopping, mobile recharge, air ticketing and whatever.

  1. Install imobile on the victim’s phone or another phone with the victim’s SIM.
  2. Run the application and it will ask for a 4 digit pin for registration. (Yes the thief can put whatever pin he wants to use iMobile)
  3. It will go through the grid based authentication for which all you need is the debit card .

That’s it the thief has full access to iMobile with all transaction permissions with the daily limits through App.

The process of activation is explained here http://www.icicibank.com/mobile-banking/download.html#down. Step 3 without ATM pin is the problem step.

Essentially the grid based security is useless without asking for atm pin and that’s the flaw which was there ever since ICICI had the mobile apps released.

If you are already using iMobile app then nothing to fear as you got to enter the application PIN to start the app. If you have registered your mobile number for mobile banking but not yet activated iMobile, then if you loose that SIM with ICICI debit card, man you can get into trouble if you have big balances Smile