Develop Bugs

Security flaw on SGS2?

So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.

A good reason for me not to buy this phone. Lol. Maybe someone can chime in. I know the att one has a flaw.
Sent from my iPad 2 using Tapatalk

I know that the pattern locks on my HTC EVO often can be bypassed by swiping the wrong pattern. I've seen this happen on my SGS2 as well. I haven't used the PIN or password security but maybe they have a similar problem.

Nope, the security on the SGS2 after a couple tries prevents you from trying again for 30 seconds, but it does not let you login via Gmail after any number of attempted tries, which makes me wonder what would you do if you forgot your password...besides a master reset.

how about you just ask her how shes getting past it lol

DyingBlade said:
So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.
Click to expand...
Click to collapse
I've seen a video about this on YouTube. I think if you press the home button while on the lockscreen it bypasses it. Check on YouTube and you'll find the video of a guy demonstrating this.
Sent from my SGH-T989 using xda premium

al52025 said:
how about you just ask her how shes getting past it lol
Click to expand...
Click to collapse
She won't tell me how lmao.
I've seen a video about this on YouTube. I think if you press the home button while on the lockscreen it bypasses it. Check on YouTube and you'll find the video of a guy demonstrating this.
Click to expand...
Click to collapse
That works only when there is no password lock and you have to press the home button twice to bring up voice command. I tried it with password lock an it doesnt work.

DyingBlade said:
She won't tell me how lmao.
if it were me i would definitively break up with her if she didnt tell me haha
Click to expand...
Click to collapse

DyingBlade said:
So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.
Click to expand...
Click to collapse
If she knows your gmail pw then its easy....
Sent from my SGH-T989 using xda premium

So, recently I put a lock on my phone (PIN lock and Password lock) and for some reason, my girlfriend has been able to get pass all of them. At first I thought I was using something too easy, like my name or our anniversary, so later on I tried a more random one that there is no way she could have known, but she also got pass that as well.
Does anyone know if there is a security flaw in our phones that allows it to bypass the password locks? I know that if I use Handcent, the popup text would show, but if you try to exit it or anything, it will go back to the password screen.
Click to expand...
Click to collapse
Sent from my SGH-T989 using xda premium

DyingBlade said:
She won't tell me how lmao.
That works only when there is no password lock and you have to press the home button twice to bring up voice command. I tried it with password lock an it doesnt work.
Click to expand...
Click to collapse
Then Idk how she's doing it. Maybe she just knows your password.
Sent from my SGH-T989 using xda premium

Gmail login does not popup after any number of tries and I created the most random password (agmekt56) and unless she's psychic, there's no way she could have known.

She may be a tech ninja.lmafo

Figured it out... Take a screenshot. Then sweep the screen. I was just amazed that it worked myself. Feel free to hit the thanks button. Hahaha #fail. Can't wait to try it on coworkers tomorrow!!!
Sent from my Herc + EagleBlood V1

Check for lock screen screenshots too...
Sent from my Herc + EagleBlood V1

DyingBlade said:
Gmail login does not popup after any number of tries and I created the most random password (agmekt56) and unless she's psychic, there's no way she could have known.
Click to expand...
Click to collapse
The only way for her to be able to get through either your Password, Pattern or PIN code is either if she knows it or takes a screen shot of it. So unless there is some sort of flaw in your software there's no other way. I've been trying this all morning and you get the 30 second unlock, then some amount of minutes and eventually you will hard lock the phone.

I don't know, I'll try to get it out of her haha. Cause theres no way she can know cause I made the password as random as I can.

I can get into my phone without a PIN after I receive a text message. Maybe she's getting in that way?
I made a quick vid to show this problem: vimeo . com / 31067628 (remove spaces)

raquel13 said:
I can get into my phone without a PIN after I receive a text message. Maybe she's getting in that way?
I made a quick vid to show this problem: vimeo . com / 31067628 (remove spaces)
Click to expand...
Click to collapse
Do you have some sort of customization on your phone? because I have tried that as well and it did not unlock my phone at all. I sent two text from my Motorola Atrix to my Samsung Galaxy S II and the pin code was not bypassed at all. I tried it with each one individually Pattern, Pin, Password and none of them were bypassed by receiving an e-mail, text nor a missed call notification.

Figured it out!
Okay, so I figured it out. It's not a security flaw in the SGS2 itself, but more from handcent. When I get a text from handcent, it automatically pops up with the text message on my screen (quick text) and also unlock my screen. It is only supposed to unlock it when viewing the message, but after I reply to the message it should automatically relock my screen. But, this is not the case with the SGS2, when I get a text the message will pop up, but when I reply to it, it brings me to the unlock screen but when I swipe to unlock, it does not ask for the PIN/password.
So if any of you guys are using Handcent, I would turn the pop up feature off.

The most annoying thing about some web sites.....

.... even this one is
When you click on the Logout button a popup pops up and asks
"Are you sure you want to log out?"
Yes, I am sure I want to log out - that's why I clicked on the b***** Logout button.
Arrrrarrrgh

I hear you it gets annoying
Sent from my SGH-T959V using XDA

@OP,
What if you are on mobile and you accidentally clicked on it while you were trying to do something like pinch and zoom? The reason why it asks for confirmation is so that, if you made a mistake, you will save yourself from having to put in your password again.

No. It is other people trying to save someone else because they think the world is stupid!

egzthunder1 said:
@OP,
What if you are on mobile and you accidentally clicked on it while you were trying to do something like pinch and zoom? The reason why it asks for confirmation is so that, if you made a mistake, you will save yourself from having to put in your password again.
Click to expand...
Click to collapse
^ Detect the user agent and throw the pop up only for mobile devices not PCs.

It requires a lot more effort to develop different UIs for multiple platforms. It's easy to keep things the same across user-agents until someone complains. Occam's Razor and whatnot.

If this one extra click is causing you trouble then my advice is to not use any kind of software or website ever again. I'm fairly certain that this kind of annoyance will pop up elsewhere and I'd hate for anyone to have to experience such a hardship twice.
Sent From My Fingers To Your Face.....

I've just returned after a 3 year absence - I see that the Log Out button is still asking if I am too stupid to log out without help. I'm going to find myself a hole somewhere without "any kind of software or website".

Captcha bug

Hi,
There seems to be an infuriating bug with the site. I keep getting captcha prompts despite entering the correct information.
I know this because if I enter incorrect information the I get a correct error message saying the Captcha didn't match.
However, if I enter correct data then I still get a form rejection with words to the effect that XDA adds a captcha for those with less than 10 posts.
This is a fairly major bug because there's no way for me to contact anyone, including site administrators.
Obviously the bug is intermittent.

captcha bug still here
captainbadger said:
Hi,
There seems to be an infuriating bug with the site. I keep getting captcha prompts despite entering the correct information.
I know this because if I enter incorrect information the I get a correct error message saying the Captcha didn't match.
However, if I enter correct data then I still get a form rejection with words to the effect that XDA adds a captcha for those with less than 10 posts.
This is a fairly major bug because there's no way for me to contact anyone, including site administrators.
Obviously the bug is intermittent.
Click to expand...
Click to collapse
BUG still here today, 7-27-2014

No problem here, apparently. Can you give steps to replicate the problem?

We're using the industry-used reCaptcha. It's difficult to prevent spammers. I know it's frustrating sometimes, but it's a necessary evil to keep XDA free of spam.

svetius said:
We're using the industry-used reCaptcha. It's difficult to prevent spammers. I know it's frustrating sometimes, but it's a necessary evil to keep XDA free of spam.
Click to expand...
Click to collapse
So how do we get through this?

If you guys could provide some screenshots of you entering in the proper code and the system rejecting it, that would be helpful.

I've been testing this, sometimes I do get an incorrect code but usually the next time it is fine.
You can use the round 'reload' button to get a new one if it fails.
If you continually have a problem with it even though it is entered correctly, maybe let me know your IP, and what browser plugins you may use.

Hi
I tried to join this forum yonks ago and could not get past captcha so I hope you don't mind me using this post to say the new photo image is much easier than the joined together hard to read letters.
Some sites use a form of joining to defeat spammers requiring joiners to rotate image a number of times, randomized of course to the correct way up. As you can guess this requires a real human....rather than a fake human like me....giggles to pass the test.
I also found I could login via google account
Hope that helps someone

Also - no errors for me, but 11 rounds?!?
11 rounds of selecting images seems a bit excessive..?
And another 6 to post this message!

[Q] Any way to disable clip tray

I use keepassX to manage my passwords, but clip tray prevents the passwords from being cleared completely. I can manually clear them, but it's a huge pain. Is there anyway to disable clip tray? Solutions that require root are fine.

ubiquill said:
I use keepassX to manage my passwords, but clip tray prevents the passwords from being cleared completely. I can manually clear them, but it's a huge pain. Is there anyway to disable clip tray? Solutions that require root are fine.
Click to expand...
Click to collapse
Agreed - I tried to get an answer from LG electronics support and they couldn't help either. This is a huge security issue since the passwords can persist, even a reboot.
I found some old posts for the LG G2 that there apparently was some option available under Settings -> Security that allowed you to set a timer for the phone to clear out the "clip tray". Although, I can't find anything that suggests a way to do this in the LG G3 documentation on their website, and no one I talked to at their support had any idea what I was talking about.
They're convinced it's a feature that all the passwords I've saved from my LastPass account are visible and in the clear.

I also agree. It's annoying to have to open another app just to get a text box and clear it. Anyone found a solution for this? Thanks for the help.

LG Clip Tray - annoying message "Copied to clip tray"
I am using an LG G Pad 8.3 where this "Clip Tray" also exists.
The "Copied to clip tray" message when taking screenshots is a real annoyance when taking multiple screenshots because the message appears after a few seconds and takes time to fade out.
If not waiting long enough after each screenshot, the message (white letters in a black box) will be visible in each image.
Does anyone know how to disable/suppress that message?

chinmas said:
Agreed - I tried to get an answer from LG electronics support and they couldn't help either. This is a huge security issue since the passwords can persist, even a reboot.
I found some old posts for the LG G2 that there apparently was some option available under Settings -> Security that allowed you to set a timer for the phone to clear out the "clip tray". Although, I can't find anything that suggests a way to do this in the LG G3 documentation on their website, and no one I talked to at their support had any idea what I was talking about.
They're convinced it's a feature that all the passwords I've saved from my LastPass account are visible and in the clear.
Click to expand...
Click to collapse
My new phone is an LG, having found out about cliptray has also worried me. If you have ROOT, search for "cliptray.db" and "cliptray.db-journal". Mine was in directory, "/data/data/com.lge.systemservice/databases/".
Delete both these files and then make two directories with the same names. A file and a directory can't have the same name, and the cliptray doesn't know how to remove directories.

"Find my device" spontaniously activates

The "Find my device" voice, "I´m Here" spontaniously activates on my Moto G 5G Plus from time to time. I have deactivated "Find my device" in settings, but it stil comes on, quite loudly, even though the phone is set on silent. It can be quite annoying, especially if it does it in the middle of a meeting. Does enyone have an explanation and a solution?

Poul Erik said:
The "Find my device" voice, "I´m Here" spontaniously activates on my Moto G 5G Plus from time to time. I have deactivated "Find my device" in settings, but it stil comes on, quite loudly, even though the phone is set on silent. It can be quite annoying, especially if it does it in the middle of a meeting. Does enyone have an explanation and a solution?
Click to expand...
Click to collapse
Is it possible someone else has access to your account and is triggering it?

V0latyle said:
Is it possible someone else has access to your account and is triggering it?
Click to expand...
Click to collapse
I don't think so, but I can't rule it out. But the strange thing is, “Find my device" is deactivated. But a change of login is probably a good idea. I presume it is my Google account you are refering to.

Poul Erik said:
I don't think so, but I can't rule it out. But the strange thing is, “Find my device" is deactivated. But a change of login is probably a good idea. I presume it is my Google account you are refering to.
Click to expand...
Click to collapse
Yep.
Go to myaccount.google.com/security
Change your password and use a minimum of 8 characters with at least 1 of each: upper case, lower case, number, special character. You can make it easy by substituting characters or numbers for letters in a word: automobile becomes @Ut0mOb!l3
Turn on 2 step verification. Recommend you use your phone number as it's less likely that someone can intercept your texts, vs have access to your email if they already have your password
Next go to myaccount.google.com/device-activity and sign out any devices you don't recognize

Thanks for your detailed reply. By the time I read it, I had been through all the steps. Change of password, signouts and check for unauthorized activity. I couldn't find any, so I guess I'll just have to wait and see - unless others have better ideas.