Develop Bugs

[Q] Overriding pushed security policy on rooted phone?

My work pushes down a lock screen requirement on my phone. How can I remove this? or change the password strength requirements?

veli69 said:
My work pushes down a lock screen requirement on my phone. How can I remove this? or change the password strength requirements?
Click to expand...
Click to collapse
You can't! Does your company run Google Apps? If so the admin for your domain can log in and remove the requirement for you otherwise you can't take it off.

Cant? of course I can I just need to know how.. The phone is rooted I dont imagine there is anything that "cant" be done

You have to override the "phone administrators" function to make that happen, I do not know of any ROM's that have that functionality though.

veli69 said:
Cant? if course I can I just need to know how.. The phone is rooted I dont imagine there is anything that "cant" be done
Click to expand...
Click to collapse
Ha ha that doesn't matter at all. This is a policy sent down by your company. If you figure out a way I will be amazed.

Is this when you add an exchange account?
If so are you on 4.0.3?

tannor said:
Is this when you add an exchange account?
If so are you on 4.0.3?
Click to expand...
Click to collapse
im on 4.0.3. Its lotus notes traveler but the apps works on android 2.0 and greater

There used to be an app to do this on Froyo, but I haven't seen anything like it since. I also would love to see this. I'm on 4.0.3 using exchange mail for company mail, security policy enforced with PIN of course - would much rather use slide to unlock or face unlock.
FYI as a workaround you can use Touchdown which enforces the PIN unlock when opening the app rather than unlocking the phone.

phishie said:
There used to be an app to do this on Froyo, but I haven't seen anything like it since. I also would love to see this. I'm on 4.0.3 using exchange mail for company mail, security policy enforced with PIN of course - would much rather use slide to unlock or face unlock.
FYI as a workaround you can use Touchdown which enforces the PIN unlock when opening the app rather than unlocking the phone.
Click to expand...
Click to collapse
Which rom are you on? I am using a modified email.apk to bypass pin.
I cannot take it drives me crazy.

tannor said:
Which rom are you on? I am using a modified email.apk to bypass pin.
I cannot take it drives me crazy.
Click to expand...
Click to collapse
Manhattan IC111, you? Can you share the modified apk? This is the standard email you're referring to? Sounds great.

veli69 said:
My work pushes down a lock screen requirement on my phone. How can I remove this? or change the password strength requirements?
Click to expand...
Click to collapse
You could always just use the PIN and protect your work's potentially valuable IP. They're not just putting a PIN on your phone for fun...

martonikaj said:
You could always just use the PIN and protect your work's potentially valuable IP. They're not just putting a PIN on your phone for fun...
Click to expand...
Click to collapse
Sounds like a sysadmin. Not really the point of this thread.

phishie said:
Sounds like a sysadmin. Not really the point of this thread.
Click to expand...
Click to collapse
compliance with company policies... not really the point of the thread.

veli69 said:
My work pushes down a lock screen requirement on my phone. How can I remove this? or change the password strength requirements?
Click to expand...
Click to collapse
I really hope none of my information is being used by your company. It really is people like you that give the large companies you work for such a bad rap about privacy concerns.

phishie said:
Manhattan IC111, you? Can you share the modified apk? This is the standard email you're referring to? Sounds great.
Click to expand...
Click to collapse
I am using mine on AOKP b21, 4.0.3.
I did not make the email.apk, but know how to do it, now that I finally know how to decompile it.
but take a look at this thread might find what you need, to be honest too much controversy in this one:
http://forum.xda-developers.com/showthread.php?t=1412717

ZeroBarrier said:
I really hope none of my information is being used by your company. It really is people like you that give the large companies you work for such a bad rap about privacy concerns.
Click to expand...
Click to collapse
Why do you presume I deal with sensitive data?

Security

why dont they make a apk or zip with the security feature when someone trys to unlock the ur phone with wrong passcode it takes a picture, if the technology is available why not use it. Some people want to be sure that no one touches there phone, just the way i feel thanks, and im going to keep posting my thoughts maybe someone will notice.

Cerberus App, Lookout, and other security apps have the feature you are looking for.
Sent from my Note 3 using Tapatalk

joe recipe said:
why dont they make a apk or zip with the security feature when someone trys to unlock the ur phone with wrong passcode it takes a picture, if the technology is available why not use it. Some people want to be sure that no one touches there phone, just the way i feel thanks, and im going to keep posting my thoughts maybe someone will notice.
Click to expand...
Click to collapse
Look in playstore
TWEAKED 2.0 ELEMENT V2.0 NOTE 3

a lil different after someone picks up the phone and attemps to ulock it, it takes the picture then sends u a text and tells u that someone tried to unlock it

joe recipe said:
a lil different after someone picks up the phone and attemps to ulock it, it takes the picture then sends u a text and tells u that someone tried to unlock it
Click to expand...
Click to collapse
That is exactly what Cerberus does. At least for me, but I got the donated version.
Sent from my SM-N900T using Tapatalk

joe recipe said:
why dont they make a apk or zip with the security feature when someone trys to unlock the ur phone with wrong passcode it takes a picture, if the technology is available why not use it. Some people want to be sure that no one touches there phone, just the way i feel thanks, and im going to keep posting my thoughts maybe someone will notice.
Click to expand...
Click to collapse
Uh? Dude you understand that we have an *UNLOCKED* bootloader? If you lost your phone it is pretty much toast. Now you wish we had a locked bootloader with KNOX..

mi camera

I used my friend phone(Mi A2),opened camera and found that he has many options in manual mode and 2 for my Lite, so why XIAOMI did that and is our phone doesn't support these options?!

A2 camera hardware is waaaay better. So is the app that comes with it. If you want the same app your friend has, you have to install Magisk and download a module called Xiaomi Mi A2 camera. I guess you'll have to download the camera2API enabler, too.
I have it. However, it doesn't show the "lens" option. But everything else, is there.

adriakus said:
A2 camera hardware is waaaay better. So is the app that comes with it. If you want the same app your friend has, you have to install Magisk and download a module called Xiaomi Mi A2 camera. I guess you'll have to download the camera2API enabler, too.
I have it. However, it doesn't show the "lens" option. But everything else, is there.
Click to expand...
Click to collapse
You have magisk? Or you have it by default?

Medo22 said:
You have magisk? Or you have it by default?
Click to expand...
Click to collapse
I have magisk

i want to install it but I have a doubt of making problem as I use my phone for daily work

Medo22 said:
i want to install it but I have a doubt of making problem as I use my phone for daily work
Click to expand...
Click to collapse
It's pretty easy and straight forward if you follow the steps carefully. You just have to read it carefully, more than one time, and see if you understand every single step you have to do. If you don't, ask before starting. Pay special attention to the numbers (versions and so). Then, once you have all you need and you understand it all, you can go for it. If not, and you don't have any experience tampering with android phones, stay clar until you can be without a phone for a couple days. In my experience, nothing really bad ever happens. But true is that your phone might be useles for a couple days if you mess up in one important step (unlikely). But there is always a solution. Just gotta ask and do some digging and you'll sort it out.

adriakus said:
It's pretty easy and straight forward if you follow the steps carefully. You just have to read it carefully, more than one time, and see if you understand every single step you have to do. If you don't, ask before starting. Pay special attention to the numbers (versions and so). Then, once you have all you need and you understand it all, you can go for it. If not, and you don't have any experience tampering with android phones, stay clar until you can be without a phone for a couple days. In my experience, nothing really bad ever happens. But true is that your phone might be useles for a couple days if you mess up in one important step (unlikely). But there is always a solution. Just gotta ask and do some digging and you'll sort it out.
Click to expand...
Click to collapse
Thank you, I have also xperia Z and installed everything in it exposed then magisk and had some problems and solved it, the problem here is that I can't lose it for one day once I have another phone I can try it, thanks again

Question FaceID for pixel 6 pro?

Hi, i was wondering if its possible to port the face recognition option we used to have on older android versions as a mod on the pixel 6 pro. I believe they used the front camera.
Are there any accuracy problems associated with using front camera?
I just needed a faster option to unlock at work as my hands get kinda dirty and the FP sensor on pixel 6 is sensitive to dust unlike the one on my pixel 3 XL (RIP legend).
If there is a solution that exists already, please forgive my naivety and point me to the thread/discussion for it. Thank you!

I don't think there is currently a solution and I doubt there will be unless Google includes it later.
Can you use smart unlock, with your works WiFi? Or location unlock if it has that?

There were reports that FaceID is in the code, but that it was not used on the P6 because it drains the battery. Since the battery is not great as is, I can see the point. I also wonder how secure it is, as Apple uses dedicated hardware to ensure security (thus the notch), but Google seems to rely on the camera alone -- I assume it's a more secure unlock than the totally inon-secure fake FaceID unlocks on many Chinese phones, like Xiaomi.
On another note, I am trying to use my Garmin watch as a trusted device, but about half the time it doesn't work and the phone would ask for PIN. The trusted device implementation, at least with a watch, is kind of a joke, so I am thinking of disabling it at this point.

I am using Trusted Location. Seems like its working fine. Google 'begs' to have you turn 'on' location function for several of its niceties to work. So security joins the growing pile.

old_fart said:
I am using Trusted Location. Seems like its working fine. Google 'begs' to have you turn 'on' location function for several of its niceties to work. So security joins the growing pile.
Click to expand...
Click to collapse
Trusted location is poor security, for many reasons.
Anyone at the location can unlock your phone, so for most of us it's not a solution.

My security is my phone is always on me. I never have left a phone anywhere, lost one, or had one stolen...

roirraW edor ehT said:
My security is my phone is always on me. I never have left a phone anywhere, lost one, or had one stolen...
Click to expand...
Click to collapse
Then you don't need to lock it at all. Problem solved

MacGuy2006 said:
Then you don't need to lock it at all. Problem solved
Click to expand...
Click to collapse
Was about to say this. Wifi/Location unlocking when at work is not a good idea.
There is a reason why we lock our phones, and no human is perfect - you might forget it for a moment, or get distracted - whatever.
If someone doesn't care for security in any way (I am perfect & my phone will 24/7 stay on me, no matter what) then he/she/is doesn't need any sort of security active in the first place.

Morgrain said:
Was about to say this. Wifi/Location unlocking when at work is not a good idea.
There is a reason why we lock our phones, and no human is perfect - you might forget it for a moment, or get distracted - whatever.
If someone doesn't care for security in any way (I am perfect & my phone will 24/7 stay on me, no matter what) then he/she/is doesn't need any sort of security active in the first place.
Click to expand...
Click to collapse
Yeah until you want to you a service like "Google pay" you have to have a lock on your phone or you can't use it.

ansh1996 said:
Hi, i was wondering if its possible to port the face recognition option we used to have on older android versions as a mod on the pixel 6 pro. I believe they used the front camera.
Are there any accuracy problems associated with using front camera?
I just needed a faster option to unlock at work as my hands get kinda dirty and the FP sensor on pixel 6 is sensitive to dust unlike the one on my pixel 3 XL (RIP legend).
If there is a solution that exists already, please forgive my naivety and point me to the thread/discussion for it. Thank you!
Click to expand...
Click to collapse
It can certainly be done, but you'll have to write some of the code for it yourself. There are a number of open source facial recognition packages available that you can leverage for this.

roirraW edor ehT said:
I don't think there is currently a solution and I doubt there will be unless Google includes it later.
Can you use smart unlock, with your works WiFi? Or location unlock if it has that?
Click to expand...
Click to collapse
I work in construction and so there's usually no wifi at work. And the location differs almost everyday so that won't be a viable solution as well.

MacGuy2006 said:
There were reports that FaceID is in the code, but that it was not used on the P6 because it drains the battery. Since the battery is not great as is, I can see the point. I also wonder how secure it is, as Apple uses dedicated hardware to ensure security (thus the notch), but Google seems to rely on the camera alone -- I assume it's a more secure unlock than the totally inon-secure fake FaceID unlocks on many Chinese phones, like Xiaomi.
On another note, I am trying to use my Garmin watch as a trusted device, but about half the time it doesn't work and the phone would ask for PIN. The trusted device implementation, at least with a watch, is kind of a joke, so I am thinking of disabling it at this point.
Click to expand...
Click to collapse
If the only major issue is battery than i would rather google give us an option to enable it if we want. That way i could turn it on while im at work.

MacGuy2006 said:
Trusted location is poor security, for many reasons.
Anyone at the location can unlock your phone, so for most of us it's not a solution.
Click to expand...
Click to collapse
I agree.
roirraW edor ehT said:
My security is my phone is always on me. I never have left a phone anywhere, lost one, or had one stolen...
Click to expand...
Click to collapse
Unfortunately i am extremely forgetful..its something i have to live with so i can definitely not be trusted as the only security for my device hahah
Morgrain said:
Was about to say this. Wifi/Location unlocking when at work is not a good idea.
There is a reason why we lock our phones, and no human is perfect - you might forget it for a moment, or get distracted - whatever.
If someone doesn't care for security in any way (I am perfect & my phone will 24/7 stay on me, no matter what) then he/she/is doesn't need any sort of security active in the first place.
Click to expand...
Click to collapse
I agree 100%.
Konfuzion said:
Yeah until you want to you a service like "Google pay" you have to have a lock on your phone or you can't use it.
Click to expand...
Click to collapse
I use google pay as well so yeah no security is off the table haha

96carboard said:
It can certainly be done, but you'll have to write some of the code for it yourself. There are a number of open source facial recognition packages available that you can leverage for this.
Click to expand...
Click to collapse
Oh. I know a little bit about coding maybe this could be a learning project for me. Would you know what framework i can use to bypass phone security? LSposed, Magisk or maybe some other?

ansh1996 said:
Oh. I know a little bit about coding maybe this could be a learning project for me. Would you know what framework i can use to bypass phone security? LSposed, Magisk or maybe some other?
Click to expand...
Click to collapse
Nononono, wrong approach. You do NOT want to bypass phone security. You want to integrate into it. Android is an open source operating system, just find the code where the 4 included unlock mechanisms are defined (swipe/pattern/pin/password), and add your own in the same way.

ansh1996 said:
I work in construction and so there's usually no wifi at work. And the location differs almost everyday so that won't be a viable solution as well.
Click to expand...
Click to collapse
Root option to enable a Quick Setting to enable/disable lock - if that's possible?

ansh1996 said:
If the only major issue is battery than i would rather google give us an option to enable it if we want. That way i could turn it on while im at work.
Click to expand...
Click to collapse
Fax cus I'm sure that "don't turn off screen if I'm looking at it" feature uses battery and it's ALWAYS ON when you're on your phone if you turn it on. Face ID only on when you use it, how can that even affect battery ?

Pixel 5 has face ID on one of the custom Roms, can't remember which one though.

wgrant said:
Pixel 5 has face ID on one of the custom Roms, can't remember which one though.
Click to expand...
Click to collapse
But is it a secure lock like Apple's Face-ID or is it a gimmick like on the various Chinese phones, that's more for "entertainment purposes only?"

96carboard said:
Nononono, wrong approach. You do NOT want to bypass phone security. You want to integrate into it. Android is an open source operating system, just find the code where the 4 included unlock mechanisms are defined (swipe/pattern/pin/password), and add your own in the same way.
Click to expand...
Click to collapse
Yes that is a better way of looking at it. Thank you for the insight!
roirraW edor ehT said:
Root option to enable a Quick Setting to enable/disable lock - if that's possible?
Click to expand...
Click to collapse
That would basically mean i have no security when i disable it, only that i would be able to do so faster haha
intp.pisces said:
Fax cus I'm sure that "don't turn off screen if I'm looking at it" feature uses battery and it's ALWAYS ON when you're on your phone if you turn it on. Face ID only on when you use it, how can that even affect battery ?
Click to expand...
Click to collapse
Yeah but it would only be looking for one thing. Maybe all the battery used on image processing for FaceID adds up over the many unlocks during the course of the day. Thats why i am keen to have it enabled only while I'm at work as the FP works fine in all other circumstances.
wgrant said:
Pixel 5 has face ID on one of the custom Roms, can't remember which one though.
Click to expand...
Click to collapse
Oh, that would definitely be worth taking a look. Ill will try and find out over the weekend if i can. Thanks!

Question Block 13 update?

I just got notified that my pixel 6 pro will update to A13 in two days, and there seems to be nothing I can do about it.
Does anyone know how to block it and stop any future updates? I've already got 'automatic updates' turned off, but that isn't stopping it.
What do I need to freeze, or what command line do i need to run, to clean this up and stop updates, especially A13?

I assume if your phone rooted, automatically updating will fail

It doesn't, and I lose root, that's what I thought last security update— which is why i'm concerned

christiebunny said:
I just got notified that my pixel 6 pro will update to A13 in two days, and there seems to be nothing I can do about it.
Does anyone know how to block it and stop any future updates? I've already got 'automatic updates' turned off, but that isn't stopping it.
What do I need to freeze, or what command line do i need to run, to clean this up and stop updates, especially A13?
Click to expand...
Click to collapse
Yes tap build 7 times for Developer Settings and disable automatic updatea

You could unlock the bootloader (which would require a device wipe) and then reinstall your current build of Android manually. That would be one of the only ways to officially disable automatic updates as well as update notifications.

I don't think that there's any way you'll be able to permanently avoid it. At least one other person who was rooted on Android 12 got the OTA to 13 even though they had automatic updates already disabled and it actually installed successfully - they lost root until they manually re-rooted it, but it was a surprise it updated successfully via OTA.
You may be able to delay it some buy factory resetting and some other things, but it's a big "maybe", and ultimately I don't think there's any way for you to avoid it.
biggiesmalls657 said:
Yes tap build 7 times for Developer Settings and disable automatic updatea
Click to expand...
Click to collapse
The OP you quoted says:
christiebunny said:
I've already got 'automatic updates' turned off, but that isn't stopping it.
Click to expand...
Click to collapse

roirraW edor ehT said:
I don't think that there's any way you'll be able to permanently avoid it. At least one other person who was rooted on Android 12 got the OTA to 13 even though they had automatic updates already disabled and it actually installed successfully - they lost root until they manually re-rooted it, but it was a surprise it updated successfully via OTA.
Click to expand...
Click to collapse
I "think" I've seen 3 instances of where someone was rooted but successfully completed the OTA, although 2 may have been from the same person. Maybe it was even the same person mentioning it 3 times, lol. Not really sure.
Makes me wonder if they removed the pre-OTA block verifications when going from A12 to A13 or just a fluke situation.

Lughnasadh said:
I "think" I've seen 3 instances of where someone was rooted but successfully completed the OTA, although 2 may have been from the same person. Didn't go back to check the posts.
Click to expand...
Click to collapse
I think I've seen more than one person report this too, but wasn't sure, and as I always say, I keep forgetting the old stuff. What was I talking about?
Lughnasadh said:
Makes me wonder if they removed the pre-OTA block verifications when going from A12 to A13 or something else is going on.
Click to expand...
Click to collapse
I suspect (but pretty obvious) that they have ways of force-pushing updates through despite the automatic update setting (or it's broken in typical Google fashion), but I think it's the former.
Then I believe they made a command decision that the vulnerability is too bad and that they felt they must force it on everyone. Again, given Google's reputation, this could've easily been an accident as well - "who pushed the red button!?!?!?"
And then the further command decision to push over top of modded, or at least simply rooted, devices as much as possible. I wonder what happens in the case someone has truly modified their software more aggressively at the root level. It wouldn't surprise me if it would've still overridden in those cases.
While, of course, those would be questionable actions for them to take (if these are actually true in the first place), I either partially or mostly agree with them, but just on principle, I can't wholeheartedly agree with them. Somewhere in the 40%-99% range.
If true, hopefully this is a very rare occurrence and not going to be how it is from now on. I will wait patiently to observe how things go.

What's the reason for avoiding the update? A13 is a pretty minor update from A12.1. In fact, I'd go so far as to say they should have called it A12.2.

96carboard said:
What's the reason for avoiding the update? A13 is a pretty minor update from A12.1. In fact, I'd go so far as to say they should have called it A12.2.
Click to expand...
Click to collapse
this exactly I also want to know, is there any reason for not upgrading to A13 when coming from A12?
Only thing I could think of is some apps which might not yet work on A13...but thats about it?!

Annil said:
this exactly I also want to know, is there any reason for not upgrading to A13 when coming from A12?
Only thing I could think of is some apps which might not yet work on A13...but thats about it?!
Click to expand...
Click to collapse
V4A, at least in my case. I'm not updating until its compatible, or I find a better alternative.

96carboard said:
What's the reason for avoiding the update? A13 is a pretty minor update from A12.1. In fact, I'd go so far as to say they should have called it A12.2.
Click to expand...
Click to collapse
Android 13 cannot be modified is one reason...

Tulsadiver said:
Android 13 cannot be modified is one reason...
Click to expand...
Click to collapse
I'm concerned about app compatibility, magisk, and how much control I'll lose.
As it is, even on 12, I can't change anything in /system, it's locked RO. I'm tired of not having control over a phone I paid for that's supposedly 'unlocked', but isn't

Tulsadiver said:
Android 13 cannot be modified is one reason...
Click to expand...
Click to collapse
Could you explain your theory on this?

christiebunny said:
I'm concerned about app compatibility, magisk, and how much control I'll lose.
As it is, even on 12, I can't change anything in /system, it's locked RO. I'm tired of not having control over a phone I paid for that's supposedly 'unlocked', but isn't
Click to expand...
Click to collapse
Compatibility seems remarkably intact, magisk works as intended, and there is no evidence of any change in what control you have.

96carboard said:
Could you explain your theory on this?
Click to expand...
Click to collapse
Modified SystemUI bootloops.

Tulsadiver said:
Modified SystemUI bootloops.
Click to expand...
Click to collapse
Ok? How are you modifying it?

96carboard said:
Ok? How are you modifying it?
Click to expand...
Click to collapse
Same way I always have.

Tulsadiver said:
Same way I always have.
Click to expand...
Click to collapse
That answer really doesn't help anyone.

96carboard said:
That answer really doesn't help anyone.
Click to expand...
Click to collapse
Any like these:
Stand alone Clock, Navbargone, Battery Icon Gone, etc. Mods
For stock rooted only. For most part, these cannot be flashed together. These mods use the SystemUI Patcher Module Template by @Jai_08 By @cool_modules on telegram. After Installing this module, your screen will relock after every reboot of...
forum.xda-developers.com