Develop Bugs

Security flaw on SGS2?

So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.

A good reason for me not to buy this phone. Lol. Maybe someone can chime in. I know the att one has a flaw.
Sent from my iPad 2 using Tapatalk

I know that the pattern locks on my HTC EVO often can be bypassed by swiping the wrong pattern. I've seen this happen on my SGS2 as well. I haven't used the PIN or password security but maybe they have a similar problem.

Nope, the security on the SGS2 after a couple tries prevents you from trying again for 30 seconds, but it does not let you login via Gmail after any number of attempted tries, which makes me wonder what would you do if you forgot your password...besides a master reset.

how about you just ask her how shes getting past it lol

DyingBlade said:
So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.
Click to expand...
Click to collapse
I've seen a video about this on YouTube. I think if you press the home button while on the lockscreen it bypasses it. Check on YouTube and you'll find the video of a guy demonstrating this.
Sent from my SGH-T989 using xda premium

al52025 said:
how about you just ask her how shes getting past it lol
Click to expand...
Click to collapse
She won't tell me how lmao.
I've seen a video about this on YouTube. I think if you press the home button while on the lockscreen it bypasses it. Check on YouTube and you'll find the video of a guy demonstrating this.
Click to expand...
Click to collapse
That works only when there is no password lock and you have to press the home button twice to bring up voice command. I tried it with password lock an it doesnt work.

DyingBlade said:
She won't tell me how lmao.
if it were me i would definitively break up with her if she didnt tell me haha
Click to expand...
Click to collapse

DyingBlade said:
So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.
Click to expand...
Click to collapse
If she knows your gmail pw then its easy....
Sent from my SGH-T989 using xda premium

So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.
Click to expand...
Click to collapse
Sent from my SGH-T989 using xda premium

DyingBlade said:
She won't tell me how lmao.
That works only when there is no password lock and you have to press the home button twice to bring up voice command. I tried it with password lock an it doesnt work.
Click to expand...
Click to collapse
Then Idk how she's doing it. Maybe she just knows your password.
Sent from my SGH-T989 using xda premium

Gmail login does not popup after any number of tries and I created the most random password (agmekt56) and unless she's psychic, there's no way she could have known.

She may be a tech ninja.lmafo

Figured it out... Take a screenshot. Then sweep the screen. I was just amazed that it worked myself. Feel free to hit the thanks button. Hahaha #fail. Can't wait to try it on coworkers tomorrow!!!
Sent from my Herc + EagleBlood V1

Check for lock screen screenshots too...
Sent from my Herc + EagleBlood V1

DyingBlade said:
Gmail login does not popup after any number of tries and I created the most random password (agmekt56) and unless she's psychic, there's no way she could have known.
Click to expand...
Click to collapse
The only way for her to be able to get through either your Password, Pattern or PIN code is either if she knows it or takes a screen shot of it. So unless there is some sort of flaw in your software there's no other way. I've been trying this all morning and you get the 30 second unlock, then some amount of minutes and eventually you will hard lock the phone.

I don't know, I'll try to get it out of her haha. Cause theres no way she can know cause I made the password as random as I can.

I can get into my phone without a PIN after I receive a text message. Maybe she's getting in that way?
I made a quick vid to show this problem: vimeo . com / 31067628 (remove spaces)

raquel13 said:
I can get into my phone without a PIN after I receive a text message. Maybe she's getting in that way?
I made a quick vid to show this problem: vimeo . com / 31067628 (remove spaces)
Click to expand...
Click to collapse
Do you have some sort of customization on your phone? because I have tried that as well and it did not unlock my phone at all. I sent two text from my Motorola Atrix to my Samsung Galaxy S II and the pin code was not bypassed at all. I tried it with each one individually Pattern, Pin, Password and none of them were bypassed by receiving an e-mail, text nor a missed call notification.

Figured it out!
Okay, so I figured it out. It's not a security flaw in the SGS2 itself, but more from handcent. When I get a text from handcent, it automatically pops up with the text message on my screen (quick text) and also unlock my screen. It is only supposed to unlock it when viewing the message, but after I reply to the message it should automatically relock my screen. But, this is not the case with the SGS2, when I get a text the message will pop up, but when I reply to it, it brings me to the unlock screen but when I swipe to unlock, it does not ask for the PIN/password.
So if any of you guys are using Handcent, I would turn the pop up feature off.

[Q] How to disable Lockscreen pattern

I made the the mistake of activating the lockscreen password feature of my Galaxy Note 2 and now I can't seem to deactivate the feature. When trying to turn off screen lock password/pattern, all options (Swype, motion, face unlock, face and voice, None) are disbled (greyed out) but the only active options are Pattern, Pin and Password. The grayed out options are written "disabled by administrator, encryption policy or credential storage"
Anyone know why its like this? How to go around this problem? By the way, I am using all stock.

Go to security-device administrators,uncheck if any app is there as admin.

jdomadia said:
Go to security-device administrators,uncheck if any app is there as admin.
Click to expand...
Click to collapse
Tried it.... didnt work...

You sure either using a VPN or exchange email with high security settings. Get rid of that and you'll be able to remove lock pattern

ozaghloul said:
You sure either using a VPN or exchange email with high security settings. Get rid of that and you'll be able to remove lock pattern
Click to expand...
Click to collapse
Thanks, VPN was the Culprit...

[Q] Sceen lock turned of by admisintrator

Hello Guys,
I have searched Xda for possible solution but still I haven't found one. I'm unable to set lockscreen to swipe or none options. They are grayed out.
I have cleared credentials, uninstalled vpn apps, and unchecked device admin. Ps, no exchange accounts has been set.
Currently I am on 4.2.2 official version.
Thanks in advance

adam2010 said:
Hello Guys,
I have searched Xda for possible solution but still I haven't found one. I'm unable to set lockscreen to swipe or none options. They are grayed out.
I have cleared credentials, uninstalled vpn apps, and unchecked device admin. Ps, no exchange accounts has been set.
Currently I am on 4.2.2 official version.
Thanks in advance
Click to expand...
Click to collapse
Under settings>security, is there an administrator account? Seems like it's locking you out of those settings. After the vpn apps have you deleted all saved vpn connections?
Well, even if nothing works, you can still use a lot of replacements like GO Launcher and many others....

AayushPathak said:
Under settings>security, is there an administrator account? Seems like it's locking you out of those settings. After the vpn apps have you deleted all saved vpn connections?
Well, even if nothing works, you can still use a lot of replacements like GO Launcher and many others....
Click to expand...
Click to collapse
There is Device administrators option and none of the apps are checked. I tried miui lock screen but it doesn't appear at all. Yes no trace of vpn. I don't know what is locking me out.

[Q] Cannot use knock code or disable screen lock

Hello I just got a LG G3 and was exploring the unbelievable amount of settings and customization abilities. I had a knock code on but then decided to try the pattern lock. When I went to try the facial recognition the option was greyed out and I couldn't select it. I then noticed I couldn't use the knock code or turn it off for that matter. Is there a setting I turned on that would disallow the use of these lock types?

Me to
The same thing happened to me. I had my lockscreen to patern and now I can't enable the knock code anymore. Have you already found a solution?

Sounds like it could be a security setting that disallows the use of certain screen unlock methods. I can't check this as I'm not on stock LG though. If you changed any other settings, change them back.

Same here, on both my LGs ( G2 and L Bello) , one is rooted (G2) the other (Bello) not ...
I only can lock screen with pattern, pin or password... Unable to access other methods as they are greyed. I don't known when this happen?
I had remove my self signed certificates, disabled the developper options etc ... nothing...
Strange behavior ?

Can you clear credentials?
Option becomes grey when its disabled by administrator. Clearing credentials should solve it.

DelBoy said:
Can you clear credentials?
Option becomes grey when its disabled by administrator. Clearing credentials should solve it.
Click to expand...
Click to collapse
You are right! After clearing all credentials , it works again... Thank you very much!
Something strange: after added one certificat, some lockscreen methods are disabled, this is ok, but if I delete this certificat, lockscreen methods stay disabled? I must 'clear all credentials' to enabled it again.
Anyway it works, thank you again.
[EDIT] Hum... on the L Bello, add a self signed certificat in the credentials disable the knock code lockscreen method even it is still active.
And on the LG G2 it's not possible to use the face unlock method with self signed certificat in credentials.

Adding password to Owner mode?

From the lock screen there's an option to switch "accounts", at the upper right hand corner.
Is there a way to (or how do you) assign a password to access the Owner account?

Capataz said:
From the lock screen there's an option to switch "accounts", at the upper right hand corner.
Is there a way to (or how do you) assign a password to access the Owner account?
Click to expand...
Click to collapse
Pretty sure, haven't tried this myself on this device yet (as I have no need for guest mode), all you need to do si go to Lockscreen settings and set up a password/pin there.
IIRC, guest mode is multi-user in disguise, and this is how I set up a pin for normal functions on my tablet, and restricted access for the guest account.
Hope this helps.

joel.maxuel said:
Pretty sure, haven't tried this myself on this device yet (as I have no need for guest mode), all you need to do si go to Lockscreen settings and set up a password/pin there.
IIRC, guest mode is multi-user in disguise, and this is how I set up a pin for normal functions on my tablet, and restricted access for the guest account.
Hope this helps.
Click to expand...
Click to collapse
Ah it does work, albeit sort of indirectly. If I add a PIN/Password to my lock screen then the guest user will not be able to go beyond my lock screen even if he/she switches to Owner mode.
But doing so means that I would have to enter a PIN/Password too each time I want to get passed my lockscreen. What I was looking for is that the PIN/Password be asked when switching to Owner account from Guest account itself, not the lockscreen of each account (or to-and-fro other accounts, if there are others).

True but you can now use Smart Lock in Lollipop to add a bunch of stay unlocked scenarios such as whenever you are holding the phone, certain gps locations you choose, Bluetooth or NFC devices whenever they are attached. Then your lock screen stays pretty much unlocked all the time you use it normally. But it will still ask for password or unlock pattern you choose when switching accounts.
Sent from my ASUS_Z00A using XDA Free mobile app

texla said:
True but you can now use Smart Lock in Lollipop to add a bunch of stay unlocked scenarios such as whenever you are holding the phone, certain gps locations you choose, Bluetooth or NFC devices whenever they are attached. Then your lock screen stays pretty much unlocked all the time you use it normally. But it will still ask for password or unlock pattern you choose when switching accounts.
Sent from my ASUS_Z00A using XDA Free mobile app
Click to expand...
Click to collapse
Ah I see. I havent meddled around with the Smart Lock feature yet, as I really just prefer the swipe-to-unlock. I find any other way to unlock to be cumbersome as 90% of the time it's only me using this phone, the 9% being my SO, and the 1% being other people like friends and relatives.
While my SO uses this phone in Owner mode, I was hoping I could switch it to Guest mode each time a friend borrows it to send a text or call etc. and have the confidence the he/she cannot switch back to Owner mode easily.
Then 99% of the time I'd just have swipe-to-unlock and I wouldnt have to worry about Smart Lock or other privacy/lock settings.
I was just comparing it to a PC, because this is like having multiple accounts in one phone. But it seems to have very little application when I can just switch back to the administator account (the Owner account) without any password.