Incident: Samsung Galaxy S8 and S9 Text Messaging App Sending Photos.

Published Date: 2018-07-03

Postmortem Analysis
Timeline 1. The software failure incident of Samsung's default text messaging app on the Galaxy S8 and S9 smartphones sending photos to random contacts without permission happened in July 2018 [73414].
System 1. Samsung default text messaging app on Galaxy S8 and S9 smartphones [73414]
Responsible Organization 1. Samsung - The default text messaging app on Samsung Galaxy S8 and S9 smartphones was responsible for sending photos to random contacts without permission [73414].
Impacted Organization 1. Users of Samsung Galaxy S8 and S9 smartphones [73414]
Software Causes 1. The software cause of the failure incident was a potential bug in the default text messaging app on Samsung Galaxy S8 and S9 smartphones, which was sending photos to random contacts without permission [73414].
Non-software Causes 1. User routine triggering maximum power saving mode leading to unintended actions [73414] 2. Update to the default text messaging app enabling Rich Communication Services (RCS) causing unexpected behavior [73414]
Impacts 1. The software failure incident resulted in users' entire photo galleries being sent to random contacts without their permission, causing a breach of privacy and potential embarrassment [73414]. 2. Users were unaware of the picture messaging activity as the Samsung Messages app did not show any sign of sending the photos, leading to a lack of control and visibility over the data being shared [73414]. 3. The incident caused confusion and concern among users, as they discovered that their phones had sent photos without their knowledge, raising questions about the security and reliability of the messaging app [73414]. 4. Affected users had to resort to alternative solutions such as switching to other text messaging apps or disabling access to phone storage for the Samsung Messages app, disrupting their usual communication routines and potentially impacting their user experience [73414].
Preventions 1. Implement thorough testing procedures before releasing software updates to ensure that new features like Rich Communication Services (RCS) do not introduce unintended consequences [73414]. 2. Conduct comprehensive security and privacy assessments to identify and address potential vulnerabilities that could lead to unauthorized data sharing [73414]. 3. Provide clear communication to users about any changes or updates to the software that may impact their privacy or data security [73414].
Fixes 1. Samsung issuing a fix for the default text messaging app on the Galaxy S8 and S9 smartphones to address the issue of sending photos to random contacts without permission [73414].
References 1. Reddit users [73414] 2. Samsung's support forums [73414]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident related to sending photos to random contacts without permission has happened again within the same organization. Reddit users reported that similar incidents occurred with different users experiencing their Samsung phones sending photos to random contacts without their knowledge. One user mentioned that their wife's phone and their own phone had sent their entire photo gallery to random contacts on different nights. Another user mentioned that their phone, under maximum power saving mode, had sent photos to two or three people without their consent. These incidents suggest a recurring issue with the Samsung default text messaging app on Galaxy S8 and S9 smartphones [73414]. (b) The software failure incident has also happened at multiple organizations. The incident involves the default text messaging app on Samsung Galaxy S8 and S9 smartphones, affecting users who reported the problem on Reddit and Samsung's support forums. The issue involves the app silently sending photos to random contacts without the user's permission. This incident highlights a potential vulnerability or flaw in the default text messaging app that could impact users across different organizations using Samsung smartphones [73414].
Phase (Design/Operation) design, operation (a) The software failure incident in Article 73414 seems to be related to the design phase. Users reported that the issue of the Samsung Messages app sending photos to random contacts without permission started after an update to the default text messaging app on their Samsung smartphones that enabled Rich Communication Services (RCS). This update introduced the feature of picture messaging, which seems to have caused the problem. Users mentioned that the issue appeared to be related to the Samsung SMS app being updated from the Galaxy Store, indicating a potential problem introduced during the development or update process [73414]. (b) Additionally, the incident could also be related to the operation phase. Users mentioned that their phones sent photos to random contacts when certain conditions were met, such as the phone being on maximum power saving mode due to low battery, which triggered a routine set with Good Lock. This indicates that the operation or specific usage patterns of the phone, like activating power-saving modes, could have contributed to the unexpected behavior of the messaging app [73414].
Boundary (Internal/External) within_system (a) The software failure incident reported in Article 73414 falls under the category of within_system failure. The issue with Samsung's default text messaging app on the Galaxy S8 and S9 smartphones sending photos to random contacts without permission seems to be originating from within the system itself. Users reported that the Samsung Messages app was silently sending photos to random contacts without any indication on the user's end. Additionally, affected users mentioned that the problem might be related to an update to the default text messaging app that enabled Rich Communication Services (RCS), a feature meant to enhance messaging capabilities [73414].
Nature (Human/Non-human) non-human_actions (a) The software failure incident in this case appears to be related to non-human actions. Users reported that their Samsung Galaxy S8 and S9 smartphones were sending photos to random contacts without their permission. The issue seemed to be happening silently without any action from the users, as one Reddit user mentioned, "My phone sent her my entire photo gallery over text but there was no record of it on my messages app" [73414]. Additionally, another user stated, "When her phone texted me her gallery, it didn’t show up on her end -- and vice versa" [73414]. (b) There is no explicit mention in the articles of the software failure incident being caused by human actions.
Dimension (Hardware/Software) hardware, software (a) The software failure incident related to hardware: - The incident reported in Article 73414 is related to the default text messaging app on Samsung Galaxy S8 and S9 smartphones sending photos to random contacts without permission. This issue seems to be linked to an update to the default text messaging app that enables Rich Communication Services (RCS), which is a software feature. However, there is a mention of the phone's battery being super low overnight, triggering maximum power saving, which could be considered a hardware-related factor affecting the incident [73414].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident reported in Article 73414 is non-malicious. Users reported that the default text messaging app on Samsung Galaxy S8 and S9 smartphones was sending photos to random contacts without permission. This issue seemed to be related to an update to the default text messaging app that enabled Rich Communication Services (RCS), which added features like picture messaging. Users mentioned that the photos sent were not malicious but rather seemed to be related to routine settings or updates to the app. Samsung is investigating the matter, and affected users are advised to contact Samsung directly or switch to another messaging app until a fix is issued. [73414]
Intent (Poor/Accidental Decisions) poor_decisions (a) The software failure incident related to the Samsung default text messaging app on Galaxy S8 and S9 smartphones sending photos to random contacts without permission seems to be more aligned with poor_decisions. This is because the incident appears to be linked to an update to the default text messaging app that enabled Rich Communication Services (RCS), which introduced the capability for picture messaging without proper user consent or awareness. This decision to implement RCS without adequate safeguards or user notifications led to the unintended consequence of photos being sent to random contacts without the user's knowledge [73414].
Capability (Incompetence/Accidental) accidental (a) The software failure incident related to development incompetence is not explicitly mentioned in the provided article. (b) The software failure incident related to accidental factors is evident in the article. Users reported that their Samsung phones were sending photos to random contacts without their permission, and the issue seemed to be related to an update to the default text messaging app that enabled Rich Communication Services (RCS). This unintended behavior of sending photos without the user's knowledge or consent indicates an accidental software failure incident [73414].
Duration temporary The software failure incident reported in Article 73414 can be categorized as a temporary failure. Users reported incidents of the default text messaging app on Samsung Galaxy S8 and S9 smartphones sending photos to random contacts without permission. The issue seemed to be triggered by an update to the default text messaging app that enabled Rich Communication Services (RCS), which added modern features like picture messaging. Users mentioned specific circumstances that led to the failure, such as the phone's battery being low and the maximum power-saving mode kicking in, or the app being updated from the Galaxy Store. Samsung was investigating the matter, indicating that it was not a permanent failure but rather a temporary issue that required further analysis and a fix to be issued [73414].
Behaviour crash (a) crash: The software failure incident reported in Article 73414 involves a crash behavior where the Samsung default text messaging app on Galaxy S8 and S9 smartphones is sending photos to random contacts without the user's permission. This behavior is causing the system to lose state and not perform its intended function correctly, as users are unaware of the picture messaging activity happening on their devices [73414].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property, theoretical_consequence The consequence of the software failure incident described in the articles is mainly related to the potential harm and property impact on users due to the software failure. Users reported that their phones were sending photos to random contacts without their permission, which could lead to privacy breaches and potential harm if sensitive or personal photos were shared inadvertently [73414]. Additionally, the incident could result in property damage if confidential or valuable information was shared with unintended recipients. The articles do not mention any direct consequences such as death, impact on basic needs, delays, or non-human entities being affected. The theoretical consequence discussed is the potential privacy breach and harm caused by the unauthorized sharing of photos [73414].
Domain information (a) The software failure incident reported in Article 73414 is related to the information industry, specifically the production and distribution of information. The incident involves Samsung's default text messaging app on the Galaxy S8 and S9 smartphones sending photos to random contacts without permission, affecting users' privacy and data security [73414].

Sources

Back to List