Major security flaw (for privacy freaks) - Elephone P8000

If you're keeping your phone permanently unlocked, don't bother reading this.
But if you're a privacy freak like me, who doesn't want any prying eyes or fingers through their device, mind the following simple statement:
ALARM(S) WILL UNLOCK YOUR PHONE.
Wide open. No matter what locking system you have (of those available in the stock ROM), if you set up an alarm, the alarm goes off and anyone else shuts it up, that simple action will unlock the phone.
You have been warned.

Good find
Sent from my Elephone P8000 using XDA Free mobile app

Also issue with fingerprint scanner/phone lock
I just found that though I selected fingerprint to secure the P8000 I can easily unlock the phone swiping upwards on the lockscreen. There is no alarm or message shown.
Stephan

cyvr1 said:
I just found that though I selected fingerprint to secure the P8000 I can easily unlock the phone swiping upwards on the lockscreen. There is no alarm or message shown.
Stephan
Click to expand...
Click to collapse
How else should the Chinese police be able to easily check you for compliance towards the Chinese government? [emoji4]

cyvr1 said:
I just found that though I selected fingerprint to secure the P8000 I can easily unlock the phone swiping upwards on the lockscreen. There is no alarm or message shown.
Stephan
Click to expand...
Click to collapse
when i setup my fingerprint records, it also made me enter a password! so whenever my swipe failed, I could enter with the password! not sure how it allowed you that!!

Related

[Q] Lock screen and unlock pattern

Hi All!
I found a few threads on the Internet in different forums with no answer so I thought I'll ask the pros:
When I'm using Pin or Password to unlock the phone, I get the standard lockscreen display before I can unlock the phone, so it goes:
On/Off Button -> Lock Screen -> Pin / Password
The problem is when I'm using an unlock pattern, the lock screen gets skipped, so it goes:
On/Off Button -> Unlock Pattern
This is very annoying since I like to use the lockscreens mute function without having to unlock the phone. Apparently there is no way of changing this with settings so I was wondering if anyone know of a patch or another way to have the lockscreen AND the unlock pattern?
I'm using the Oxygen 2.0 RC6 Gingerbread Rom on my Desire but this seems to be a generel "issue" with stock Android Roms (Hero Roms and Froyo Roms is the same) - Sense based Roms behave different.
Thx for any hint!
*bump*
I am having a similar issue and my searching only found this thread.
While at work (2/3rds of my waking life) I use my phone at work to see where my next appointment is. It's very convenient to just glance down and see what meeting I have next by only hitting the power button. From what I have seen there are a lot of apps which will add this functionality to the lock screen.
The problem is when I add a passcode (required by work) it replaces the unlock screen with the passcode screen. I have seen that other Android phones do not do this, but the Captivate does. I've tried four different roms and all have this same behavior.
Is it possible to have the unlock screen come up, and when the phone is unlocked to prompt the passcode? I can't find a setting anywhere and the third party apps like Flylock have a jarring user experience in this configuration.
Thanks
...
Mabus the Mad said:
Is it possible to have the unlock screen come up, and when the phone is unlocked to prompt the passcode? I can't find a setting anywhere and the third party apps like Flylock have a jarring user experience in this configuration.
Thanks
Click to expand...
Click to collapse
The purpose of the pattern lock is to prevent unauthorized use of the phone. So it doesn't make sense if you put the lock screen over the pattern lock(or combined them) as you, or any stranger, will be able to issue commands(mute, read messages, weather, music etc. there are lots of widgets running on the lock screen) to the phone BEFORE unlocking it.
The security of the pattern lock will be totally compromised.
So the only choice is pattern lock over lock screen. I don't see how this makes anything easier. And I won't go into how it will create huge security loopholes/bypass the pattern lock completely if widgets or anything is allow to run on/over the lockscreen.
Perhaps I am using the wrong terminology, I should be referring to it as the "Unlock Screen" (Settings -> Display -> Unlock Screen). From this screen it appears that you can:
1) View the time
2) Unlock the phone
3) Mute the phone
4) See the notification bar (Vibrate, Battery, Signal, Pending notifications, etc)
I would actually like to add:
5) Next calendar appointment with location
6) Weather
This is all actions / information I want available at a glance and without unlocking the phone. Once I attempt to unlock I would like to be presented with the pattern / pin security. In this way all my private information remains hidden, but the information I use the most often while walking / driving is readily available.
I am also good with anyone else being able to pick up my phone and perform the actions I listed on the unlock screen. I believe this information is available from the unlock screen on the Windows Phone and iPhone (assuming it's your only notification, their notification system sucks).
Mabus the Mad said:
This is all actions / information I want available at a glance and without unlocking the phone. Once I attempt to unlock I would like to be presented with the pattern / pin security. In this way all my private information remains hidden, but the information I use the most often while walking / driving is readily available.
Click to expand...
Click to collapse
That PERMISSION to allow you do issue commands to your phone will compromise the security of the pattern/pin lock screen. You need to understand the core concept of the pattern lock screen is to be secure - no unauthorized use of the phone, whether it's as small as viewing notifications to fullon running widgets/apps.
Plus your definition of being secure doesn't equate to everyone's definition of security. It fine for you to display messages on the securely locked phone but it's definitely not for some of my friends who have really sensitive data on their phone.
I was not trying to advocate this behavior to everyone, just wondering if it was possible to set this up myself. One of the things I like about this phone is that everyone can customize it to fit their own tastes.
Actually, I think I found my solution. Flashed to CM7 last night. The pattern screen still had the behavior as the 2.2 roms but the passcode had the behavior I was looking for.
Well the thing is: When using PIN or Password to unlock, you can actually use the lockscreen to mute etc. before unlocking. And using the original HTC Rom, this is possible using unlock pattern, too. Everyone will have to decide for themself if he cosiders this function a thread to security, its just really annoying that I have to decide between unlock pattern and unlock screen even tho it should not be a problem technicaly. Cyanogen guys apparently have this on their list, but with minor priority. I'm really close to moving back to a HTC rom actually...
this bugs me too.. I like the PATTERN cause it's kind of unique and cool plus when you enter your pattern there is no "OK" key you have to press like you do when using PIN/PASSWORD which for some reason annoys me.. I suppose it's another line of defense against prying eyes that make it that much more work to try different pin options.. I don't know maybe it's to annoy them into giving up?.. Anyways, I've opted to use the PIN option because I too like seeing the Lock Screen and any info it has and I really don't see it as that big a security hole seeing the small amount of info on the lock screen.. unless you're running a ROM or app that has popups for messages and such.. and if it really is then Google should make the behavior that you do pattern then to the lock screen. of course I'm sure their reasoning for this is the pattern is a more difficult form of security to breach so there is benefit and no harm from taking you straight into the unlocked phone once the correct pattern has been entered. that doesn't mean we have to agree with the mighty G on this and I'm sure either Devs cooking in the ROM kitchen could change the behavior if they saw the want in the community, maybe a patch could be made or an app that changes the behavior. anyways, that's my $.02
If any of you guys find a solution around this issue please let us know!
Haven't seen any solution yet, how about you guys?

[Q] Widget Locker Help

I have been trying to get Widget Locker working on my One but have hit an issue. I am thinking I may not be able to fix this without Root but I wanted to run it by the community to verify.
I have my phone linked to an Exchange server that forces a 4 digit pass-code onto the device. So from the default lock screen I swipe up and then get the keypad to unlock the device.
Widget Locker replaces the main screen and 60% of the time when I unlock the device it takes me to the keypad directly.
The other 40% of the time is the issue. When I unlock from Widget Locker it takes me to the default screen where I would swipe up. From this point I can ether swipe up and unlock or shut off the screen. When I try again it usually works perfectly.
Is there any way to get consistent behavior from Widget Locker without root? What I would expect would be to unlock and be taken to the keypad 100% of the time.
I would love to use widget locker, but I always get a 3-7 second delay with turning on my phone. Sorry I can't help you.
calash said:
I have been trying to get Widget Locker working on my One but have hit an issue. I am thinking I may not be able to fix this without Root but I wanted to run it by the community to verify.
I have my phone linked to an Exchange server that forces a 4 digit pass-code onto the device. So from the default lock screen I swipe up and then get the keypad to unlock the device.
Widget Locker replaces the main screen and 60% of the time when I unlock the device it takes me to the keypad directly.
The other 40% of the time is the issue. When I unlock from Widget Locker it takes me to the default screen where I would swipe up. From this point I can ether swipe up and unlock or shut off the screen. When I try again it usually works perfectly.
Is there any way to get consistent behavior from Widget Locker without root? What I would expect would be to unlock and be taken to the keypad 100% of the time.
Click to expand...
Click to collapse
Go into Settings and set the HTC lockscreen to none. It forces the phone to only use WL, and you never see the stock lockscreen. Works for me,
gomorrah said:
Go into Settings and set the HTC lockscreen to none. It forces the phone to only use WL, and you never see the stock lockscreen. Works for me,
Click to expand...
Click to collapse
That kills the security on the phone. We need to have ether a pin or password unlock to secure the device. Even without it I would want a pattern unlock at the least to keep it somewhat safe.
I expanded my search a bit and this seems to be a common problem on phones that have any sort of lockscreen security. What I cant understand is why it does work some times, but not others. It does not appear to be a timing issue but I cannot narrow down what else would randomly (apparently random) trigger the stock lock screen yet work other times.
calash said:
That kills the security on the phone. We need to have ether a pin or password unlock to secure the device. Even without it I would want a pattern unlock at the least to keep it somewhat safe.
I expanded my search a bit and this seems to be a common problem on phones that have any sort of lockscreen security. What I cant understand is why it does work some times, but not others. It does not appear to be a timing issue but I cannot narrow down what else would randomly (apparently random) trigger the stock lock screen yet work other times.
Click to expand...
Click to collapse
No, it doesn't. The HTC lockscreen and the Security lockscreen are two different things. You can have the HTC lockscreen set to none, and still have the option to unlock with any of the various lock methods(i.e. PIN, Pattern, Face Unlock, etc...) I know this is true because I use it everyday. I use WL, have my HTC lockscreen set to none, and still have to enter a PIN to unlock my phone. And have no delay when using WL once the phone is booted.
gomorrah said:
No, it doesn't. The HTC lockscreen and the Security lockscreen are two different things. You can have the HTC lockscreen set to none, and still have the option to unlock with any of the various lock methods(i.e. PIN, Pattern, Face Unlock, etc...) I know this is true because I use it everyday. I use WL, have my HTC lockscreen set to none, and still have to enter a PIN to unlock my phone. And have no delay when using WL once the phone is booted.
Click to expand...
Click to collapse
And I am an idiot. You are completely correct. I am trying it now, thank you.
Edit: Working like a charm. If anybody else is having this issue the setting is under Personalize, lock screen style.
Thanks again!

Fingerprint screen unlock

Hi.
I'm new user of LGG6. Previous i was on Nexus devices.
Is there any way so set unlocking with fingerprint ONLY? So, without additioanl pattern, PIN or smth.?
Thank you!
I found that second security is needed only first time, after device boot if you use fingerprint screen unlock.
But, if I use DT2W unclok method I have to use PIN,/pattern ...
So, any way to remove that, BUT keep fingerprint unlock?
(i know i can remove screen lock method, but than fingerprint is automaticly removd too)
I removed this kind of protection on my Nexus, but it requires root.
Just add a trusted location etc then it will unlock with no passcode and fingerprint only.
akulp said:
I found that second security is needed only first time, after device boot if you use fingerprint screen unlock.
But, if I use DT2W unclok method I have to use PIN,/pattern ...
So, any way to remove that, BUT keep fingerprint unlock?
(i know i can remove screen lock method, but than fingerprint is automaticly removd too)
I removed this kind of protection on my Nexus, but it requires root.
Click to expand...
Click to collapse
Are you locking the phone using an app (like Nova Launcher) to double-tap to lock/sleep? if yes, then double tap the status bar to sleep. then you can wake the phone using fingerprint only.
basicreece said:
Just add a trusted location etc then it will unlock with no passcode and fingerprint only.
Click to expand...
Click to collapse
Ok, this is partial solution ... Just for added locations.
Thnaky anyway.
akulp said:
Ok, this is partial solution ... Just for added locations.
Thnaky anyway.
Click to expand...
Click to collapse
Also add a trusted device like a BT watch or I'm sure there is a always on you option. Detects when you have phone with you.
HKSpeed said:
Are you locking the phone using an app (like Nova Launcher) to double-tap to lock/sleep? if yes, then double tap the status bar to sleep. then you can wake the phone using fingerprint only.
Click to expand...
Click to collapse
Yap, I'm using NL.
Thanks! Nice solution, but it 'll be hard to get used to use just status bar to lock.
The best solution is this one, but it only works if you are rooted (+twrp) and i'm not sure if last root method allow to chainging files on /system partition:
Then while still in TWRP go delete /data/system/locksettings.db
This should let you swipe to unlock your phone. Your fingerprints will still be saved and can be used once you set up a secure lock screen
Beside I would like to stay without root if it's not necessary.
basicreece said:
Also add a trusted device like a BT watch or I'm sure there is a always on you option. Detects when you have phone with you.
Click to expand...
Click to collapse
I don't use BT watch, any device ... All I can set is home/work location and CAR BT.
I dont' see any other usefull option for me.
akulp said:
I don't use BT watch, any device ... All I can set is home/work location and CAR BT.
I dont' see any other usefull option for me.
Click to expand...
Click to collapse
"On body Detection"
basicreece said:
"On body Detection"
Click to expand...
Click to collapse
Ok, now I set "on body detection" ... but. That kind of smart locking only works if you don't lock phone with duble tap (over Nova launcher in my case) nut you leave phone to lock after time.
So this is usefull only if I don't lock with double tap. But I like that option and I'm using it all the time.
Thanks anyway for your time and tips.

Understanding the proper use of Face Unlocking

With the Face unlock you need to have some kind of primary unlock. After I have the Face Unlock, why is it asking for my pattern unlock? Sometimes I see the silly face and sometimes I see the lock
What are your thoughts?
Thanks
67 views and not one thought?
pbman1953 said:
With the Face unlock you need to have some kind of primary unlock. After I have the Face Unlock, why is it asking for my pattern unlock? Sometimes I see the silly face and sometimes I see the lock
What are your thoughts?
Thanks
Click to expand...
Click to collapse
When is it asking for pattern unlock? If you are using for secure payments like Google Pay, it asks for pattern or fingerprint unlock as face unlock on 7T is not secure....Face unlock on 7T can only be used to unlock the device and nothing else...
Here's an example I just did. The phone is on my desk and dark. I picked up the phone, double tapped to wake the phone to the lock screen. I see the lock on the screen instead of the face icon
pbman1953 said:
Here's an example I just did. The phone is on my desk and dark. I picked up the phone, double tapped to wake the phone to the lock screen. I see the lock on the screen instead of the face icon
Click to expand...
Click to collapse
Using your example, when I double tap the screen it awakens the ambient display, showing me the time and any notifications that are on the screen. Also, the fingerprint scanner is active and lit up. I believe this is the intended behavior. The double tap simply wakes the ambient display.
If you want face unlock to kick in, you should press the power button.
One Plus told to switch to a pin instead of a pattern and it seems to work better. But you suggestion of using the power button is also on par, Thanks!
This problem also frustrates me. The issue is that the time out for face unlock to search for a face is WAY TOO SHORT.

From lock screen...?

Once I have provided the security credentials ie scanned fingerprint, or unlocked by face, is there any way for the phone to automatically open instead of requiring me to swipe?
thanks
bonerp said:
Once I have provided the security credentials ie scanned fingerprint, or unlocked by face, is there any way for the phone to automatically open instead of requiring me to swipe?
thanks
Click to expand...
Click to collapse
Just turn off stay on lockscreen in settings
and fingerprint should not stay on lockscreen...
vanshksingh said:
Just turn off stay on lockscreen in settings
and fingerprint should not stay on lockscreen...
Click to expand...
Click to collapse
hmm you must have a different version to me (One UI 3 is where I'm at) as not got that setting for fingerprint although have for face lock! Great consistency there....

Categories

Resources