[Q] Major security flaw with screen lock - G2 and Desire Z General

I have a SIM unlocked and unbranded Desire Z (not rooted). I've set the screen lock to 5 minutes and to require a pattern to unlock.
I've noticed that if I let the phone go to sleep, and then after 5 minutes flip out the keyboard, it unlocks it without requiring the unlock pattern. Does this happen to anyone else?

Yeah, I think this is by design. On Windows Mobile there was a reg key to enable / disable "unlock on slide" Maybe there is similar for Android.
Craig

I can't believe this would be by design, it completely undermines the security on the device. How could these be handed out to corporate customers when they can be unlocked by just flipping out the keyboard?
Also the behaviour is inconsistent. If I unlock using the power button, and then turn off the screen, if I flip out the keyboard to wake up again, I do require a pattern to unlock. But if I leave the device for 5 minutes and try again, it lets me straight in.

Ooops, I completely mis-understood your initial post.. The pattern is a sort of PIN screen isn't it..
Ignore me!
Craig

when i slide mine open, it shows me the unlock pattern screen in landscape

earni said:
when i slide mine open, it shows me the unlock pattern screen in landscape
Click to expand...
Click to collapse
Me too, I'm using the pattern also...

salemfox said:
Me too, I'm using the pattern also...
Click to expand...
Click to collapse
I get mixed results. Sometimes mine asks for the password, sometimes it doesn't. I've tried with a PIN, password and pattern. I seem to get the problem more often when the phone has been asleep for a long time, e.g. if I flip it open in the morning when I wake up.
In a way I am glad no one else has this but it's pretty annoying for me!

I get the same problem.
I've also found it to be sporadic. So far i'm thinking there is a pattern depending on what app you have on the screen when the phone locks or sleeps. For instance if its the home screen then it seems to be ok and on waking it prompts for a password. But on other apps it doesnt....

Do you have the same problem if you set the lock time to immediately? Maybe its some kind of problem with the timer.
With immediate lock time I cannot get into the phone without drawing the pattern, keyboard or no keyboard.

mashed_ash said:
So far i'm thinking there is a pattern depending on what app you have on the screen when the phone locks or sleeps. For instance if its the home screen then it seems to be ok and on waking it prompts for a password. But on other apps it doesnt....
Click to expand...
Click to collapse
I think you might have nailed it there. If I leave the mail app open and lock the screen or let it go to sleep, after a while I can unlock it by just opening the keyboard.
cartman09 said:
Do you have the same problem if you set the lock time to immediately? Maybe its some kind of problem with the timer.
With immediate lock time I cannot get into the phone without drawing the pattern, keyboard or no keyboard.
Click to expand...
Click to collapse
I am testing this and it seems to work properly so far. I'll keep it on lock immediately and see if it happens again. This is really crap though. Most users are going to keep the default of 5 minutes and be totally insecure ...

Related

How to bypass the lock screen.

Press the menu button twice in quick succession. Bye bye lock screen
nice tip! Good for those times when you have ever so slightly damp fingers (which makes swiping on the screen so difficult!)
Don't you then have the pattern/password thing to deal with?
With the amount of online integration on this phone you've gotta be crazy to not protect it, surely? Or is the pattern unlock not that secure anyway? I have no onscreen or vibration indicators turned on, is that enough?
The pattern lock still comes up.
I don't have the pattern lock enabled.
What data do store on the hero that you're worried about some else getting their hands on it? And are you really that worried about losing it- I've actually superglued mine to my hand. No chances taken with my baby.
snafle said:
What data do store on the hero that you're worried about some else getting their hands on it? And are you really that worried about losing it- I've actually superglued mine to my hand. No chances taken with my baby.
Click to expand...
Click to collapse
My main email for years? All the stuff that goes with that?
I don't have lock pattern and I only have to press menu once. I pressed it twice and the menu came up so I tried once and that worked too.
darkz said:
I don't have lock pattern and I only have to press menu once. I pressed it twice and the menu came up so I tried once and that worked too.
Click to expand...
Click to collapse
Press it once to turn screen on, then another time to remove swipe lock. If the screen is already on (in lock screen) then pressing menu twice will unlock then bring up the home screen (or whatever screen is behind the locked screen) menu.
If you press it in quick succession it will bypass the lock screen completely. Too quickly though, and you'll still see the lock screen.
Switchbitch said:
Press the menu button twice in quick succession. Bye bye lock screen
Click to expand...
Click to collapse
*having my Hero in my pocket... 10 minutes later my stuff in my pocket (not THAT stuff) have managed to call up a long distance call...*
Do you still think the doublepressing of the Menu button is a good idea?
I don't.
HTC has definitly made a mistake here since it shouldn't be that easy to unlock the phone.
I've had this exact problem, people receiving mysterious calls at all times from my pocket! I'd been trying to work out how it happened, but that might be the answer

issus on the unlock screen

feel lag on when is unlocking. did any one having a same problem with me??
please delete this post...
The unlock swipe would lag for the following reasons:
1. Your wifi was turned on but is off because of screen being off. You turned on the screen which makes the phone re-enable wifi and connect to a network. This process will lag the swipe animation.
2. You used some kind of app (ie. JuiceDefender) that would disable APN (3G) when your screen is off. Turning the screen on again will make the phone to try to reconnect to 3G and this will also lag the swipe animation.
3. You just turned on your phone and because things are still loading at startup, doing the swipe will lag.
Tip: Try to wait for 5 seconds after turning the screen on and then do the swipe motion. It should go back to normal.
If none of that applies to you, do a factory reset =)
this is my second time to hard reset it but still the same.
I often find that swiping doesn't unlock the phone; the arrow won't go all the way to the edge of the screen (it sometimes just stops halfway). When that happens, I press the power button to lock the screen, then try the process again. 9 times out of 10 it'll work fine the second time.
This happens when the WiFi is off, and I am not using any APN software, nor have I just switched the phone on.
It doesn't really bother me, unless this happens when a call comes in, and I can't answer it! (it often takes me a few swipes to answer a call, and I have to swipe it slowly and carefully)
shanespencer said:
I often find that swiping doesn't unlock the phone; the arrow won't go all the way to the edge of the screen (it sometimes just stops halfway). When that happens, I press the power button to lock the screen, then try the process again. 9 times out of 10 it'll work fine the second time.
This happens when the WiFi is off, and I am not using any APN software, nor have I just switched the phone on.
It doesn't really bother me, unless this happens when a call comes in, and I can't answer it! (it often takes me a few swipes to answer a call, and I have to swipe it slowly and carefully)
Click to expand...
Click to collapse
you might have a problem with your screen where some parts wont respond to your touch
download any drawing programs " i find magic marker " is the best from the market place. its free. and tap dots all over your screen, if there is/ are parts that doesnt response to your tap from the first time, that means u have problem with the screen and its not accepting your touch input. which is why your swipe doesnt go all the way sometimes.
Yes there is lag on the unlock screen. I see it as just bad programming by SE.
-------------------------------------
Sent via the XDA Tapatalk App
My swype keep changing direction, anyone nows how to set it to a particular side?
@mirdones - it changes sides when you start with your finger at the top of the swipe arc and slide your phone across the screen (left to right or right to left)..
@everyone - my swipe unlock occasionally stops about 3 quarters of the way along.. all I do is re-swipe from where it stopped and it's fine - that said, it doesn't happen as much now that I have stopped using task killers and startup auditor.
I find that instead of a slow swipe more of a flick works well for me.
Does anyone know if its possible to disable the se lock and just use the android one?
gavriel18 said:
Does anyone know if its possible to disable the se lock and just use the android one?
Click to expand...
Click to collapse
...would love to know this too

[L3 II] Screen auto locks while surfing.

Screen first turns down in brightness and then auto locks while I'm surfing the web using Chrome. So I have to make sure I do some tap or something to avoid it.
How do I disable this annoyance ? I don't want automatic screen-saving/locking while I'm using the web browser, what the heck ...
AnotherLie said:
Screen first turns down in brightness and then auto locks while I'm surfing the web using Chrome. So I have to make sure I do some tap or something to avoid it.
How do I disable this annoyance ? I don't want automatic screen-saving/locking while I'm using the web browser, what the heck ...
Click to expand...
Click to collapse
settings/display/ u will find it there keep it to 1 minute
ArjunrambZ said:
settings/display/ u will find it there keep it to 1 minute
Click to expand...
Click to collapse
But normally I want the screen to lock quickly to avoid weird things happening when I put it in my pocket
Why doesn't Chrome disable the lock screen ?
AnotherLie said:
But normally I want the screen to lock quickly to avoid weird things happening when I put it in my pocket
Why doesn't Chrome disable the lock screen ?
Click to expand...
Click to collapse
When you put your phone in your pocket, I assume you lock it before you do using the lock button. Settings the display timeout to one minute means that your phone will wait one minute before locking itself. So after one minute, your phone's screen will become dark and lock itself.
TahaX said:
When you put your phone in your pocket, I assume you lock it before you do using the lock button. Settings the display timeout to one minute means that your phone will wait one minute before locking itself. So after one minute, your phone's screen will become dark and lock itself.
Click to expand...
Click to collapse
I don't lock it manually each and every time I put it away. But I may have to start doing it since Chrome and/or Android doesn't have a sensible option to not lock the phone while I'm on the web browser, wtf that sucks :crying:
At least it doesn't lock while a video is playing.
AnotherLie said:
I don't lock it manually each and every time I put it away. But I may have to start doing it since Chrome and/or Android doesn't have a sensible option to not lock the phone while I'm on the web browser, wtf that sucks :crying:
At least it doesn't lock while a video is playing.
Click to expand...
Click to collapse
Try to set it to no timeout and enable a slide screen lock to prevent your phone from having a party while it's in your pocket. This will drain your battery though, because the screen is awake constantly.

Pin/pattern often needed to unlock?

EDIT: dkotoric has realised this is due to using the double tap to sleep function on some launchers. Locking your device with that prevents the fingerprint scanner from allowing access for some reason.
So today was my first full day with the 6P. It's a truly great device.
A whole bunch of times though when I've come to unlock the device I've had to put in my pattern because it won't accept the fingerprint scanner.
The icon at the bottom of the lock screen that should be a fingerprint is just a lock symbol. If I then lock the phone again and reunlock it works as expected.
Not sure if this is a software bug or some setting I've got wrong. Can't see a pattern for when it does it though. I've switched 'require pattern on restart' off which has made no difference.
Sent from my Nexus 6P using Tapatalk
Josh98 said:
So today was my first full day with the 6P. It's a truly great device.
A whole bunch of times though when I've come to unlock the device I've had to put in my pattern because it won't accept the fingerprint scanner.
The icon at the bottom of the lock screen that should be a fingerprint is just a lock symbol. If I then lock the phone again and reunlock it works as expected.
Not sure if this is a software bug or some setting I've got wrong. Can't see a pattern for when it does it though. I've switched 'require pattern on restart' off which has made no difference.
Sent from my Nexus 6P using Tapatalk
Click to expand...
Click to collapse
I've experienced that on one occasion today. That was after no occurrence in a full day's use yesterday. I put it down to slightly incorrect/incomplete/inaccurate finger print scans when it's set up.
Had no issues yet, used it for 2 days.
I have a pin set for after a reboot and it will ask for pin if I accidentally use pthe power button to switch on.
So far my finger print has not failed once o. My two index fingers.
I set up my finger print with a central / top end / bottom end / left edge / right edge and its worked fine
Been super accurate for me
Sent from my Nexus 6P using Tapatalk
I recommend using your main finger on different angles rather than using 5 different fingers when setting it up. ?
Sent from my HTC One_M8 using Tapatalk
I've setup each index finger once and it hasn't skippes a beat. I'd setup your finger again and this time move your finger around after every press to get different angles.
Sent from my Nexus 6P using Tapatalk
I haven't had any issues whatsoever. You could setup each index finger as 2-3 different fingers if you want to improve accuracy too.
Still waiting on my 6P, but I do have the 5X. Installed all of my usual apps when I received the phone. Set up fingerprint scanner. For the life of me couldn't figure out what the heck was going on. Every time I would unlock the phone it would go to PIN screen. I had read all of the reviews on how fantastic the FPS was. Started to get really annoyed. In fact I did a factory reset to see if this would help. This time I didnt install apps just set up FPS. Worked flawlessly. Installed apps again and what do you know stopped working again. Then it hit me, I have an app called ScreenOFF. Basically I could touch the screen and it would turn the screen off without hitting the power button. Uninstalled app and FPS worked perfectly. SO, be careful if you have any of these types of app as it seems it screws up the ability to bypass lock screen
It seems to have sorted itself over night. Hasn't done it so far today. Thanks guys.
Sent from my Nexus 6P using Tapatalk
what I notice is I use lock app and apex launcher so I have it set up to double tap on screen to lock the device. If I lock the device using this method I can no longer unlock the device with my fingerprint. I have to use the lock pattern. Then I have to lock the phone again via power button in order to use fingerprint scanner?
dkotoric said:
what I notice is I use lock app and apex launcher so I have it set up to double tap on screen to lock the device. If I lock the device using this method I can no longer unlock the device with my fingerprint. I have to use the lock pattern. Then I have to lock the phone again via power button in order to use fingerprint scanner?
Click to expand...
Click to collapse
Holy **** you're right yeah that's been my issue the whole time doing the same with Action Launcher. Been so used to using it it didn't occur to me that's the cause. That's annoying.
Sent from my Nexus 6P using Tapatalk
Josh98 said:
Holy **** you're right yeah that's been my issue the whole time doing the same with Action Launcher. Been so used to using it it didn't occur to me that's the cause. That's annoying.
Sent from my Nexus 6P using Tapatalk
Click to expand...
Click to collapse
I have your issue but I am not using any sort of double tap to lock apps. also I am using google now launcher.
Yea this happens when you use a third party app or launcher to lock the device via a double tap on the home screen. I set up a gesture in Nova Launcher to lock the device via a double tap on the homescreen and when I do I cannot unlock the phone via Imprint. There is just a lock symbol instead of the Imprint symbol and the only way to unlock it is using the pin. It seems that right now the only way to use Imprint to unlock the device is when you lock the device using the power/sleep button. Using any 3rd party software without root access to lock the device will only let you unlock the device via the pin instead of Imprint.
EDIT: Everything works fine with root access. If you grant the app performing the screen lock root access then you will be able to lock the screen with say a gesture like double tapping the home screen and then you will still be able to unlock the device via Imprint.
I had this issue as well where my 6P would ask for my pin after using the fingerprint scanner. It would do this many times per day.
What I have found to stop this from happening is removing the administrator rights from all the apps that uses it to lock the screen. It seems that the phone will ask for a pin when a 3rd party app locks the screen.
So I'll just rely on Android locking the screen on its own vs entering the pin so many times a day along with the fingerprint scanner.
guitar1238751 said:
Yea this happens when you use a third party app or launcher to lock the device via a double tap on the home screen. I set up a gesture in Nova Launcher to lock the device via a double tap on the homescreen and when I do I cannot unlock the phone via Imprint. There is just a lock symbol instead of the Imprint symbol and the only way to unlock it is using the pin. It seems that right now the only way to use Imprint to unlock the device is when you lock the device using the power/sleep button. Using any 3rd party software without root access to lock the device will only let you unlock the device via the pin instead of Imprint.
EDIT: Everything works fine with root access. If you grant the app performing the screen lock root access then you will be able to lock the screen with say a gesture like double tapping the home screen and then you will still be able to unlock the device via Imprint.
Click to expand...
Click to collapse
Are you just using nova as far as root access? I'm so used to just having greenify lock the screen, but I'm having this issue
Akomack said:
Are you just using nova as far as root access? I'm so used to just having greenify lock the screen, but I'm having this issue
Click to expand...
Click to collapse
I'm actually using loads of root apps including Greenify. (Though I'm not using greenify anymore) Everything is working fine. Are you having the issue when locking via a greenify gesture? I didn't even know Greenify had a screen locking gesture lol. Or do you mean the Imprint issue occurs after Greenify puts the device to sleep automatically?
guitar1238751 said:
I'm actually using loads of root apps including Greenify. (Though I'm not using greenify anymore) Everything is working fine. Are you having the issue when locking via a greenify gesture? I didn't even know Greenify had a screen locking gesture lol. Or do you mean the Imprint issue occurs after Greenify puts the device to sleep automatically?
Click to expand...
Click to collapse
Greenify has a widget that will hibernate and shut the screen off. I ended up finding this app that will shut the screen off and allow me to use the fingerprint to wake/unlock the device. :good:
So far, the only 3rd party app that I've found that can shut the screen off without root and without needing the pin again is Gravity Screen https://play.google.com/store/apps/details?id=com.plexnor.gravityscreenofffree&hl=en
It has a few widgets that you can link your double tap homescreen gesture to. Specifically, I'm using Lightning Launcher and link the double tap to the "Off" shortcut. The other shortcuts will lock the phone and then you'll need the pin again instead of just the fingerprint.
However, I think the way this app accomplishes this is to first blank the screen off with just a black overlay and then set the screen timeout to around 10seconds (it sets it right back to whatever you had before by the time you wake the screen again). So far, I haven't had a problem with this since the app also has "in pocket protection" in which it will keep the screen from turning back on if the proximity sensor is covered. So if you double tap to sleep but then put it in your pocket before the 10 seconds is up, it won't turn it back on. If you have it sitting on your desk, you can double tap to sleep, but then tap again on the black screen within the first 10 seconds to see the navigation keys again. This also has the weird side effect of not being able to use the fingerprint reader during those 10 seconds, because technically the screen is still on. This was a little unsettling at first since I couldn't figure out why the fingerprint reader wasn't vibrating when I thought the screen was "off". To me, it's not that big of a deal so it's fine with me.

Always-on OK Google not always turning on the screen

Always-on OK Google is awesome, but for some reason it only turns on the screen about half the time for me.
When it doesn't turn the screen on, it still listens and reacts to commands though, but without the screen on I can't see what it's doing so I still have to manually press the power button to turn on the screen to see the results, effectively defeating the purpose of having it always on (for hands-free operations).
Is anyone else experiencing the same issue? Is there a solution?
Did you turn on Smart lock for OK google?
chichu_9 said:
Did you turn on Smart lock for OK google?
Click to expand...
Click to collapse
I did turn on Smart Lock, with trusted devices, trusted places, trusted face and trusted voice enabled.
Yeah I see it... it seems a little buggy, but for me it *always* comes on if it is locked. Not so much when it is unlocked (just sleeping).
I set the screen to lock 5 seconds after screen sleeps.
Solutions Etcetera said:
Yeah I see it... it seems a little buggy, but for me it *always* comes on if it is locked. Not so much when it is unlocked (just sleeping).
I set the screen to lock 5 seconds after screen sleeps.
Click to expand...
Click to collapse
Thanks for the confirmation. Come to think of it I only started to notice this issue after I set the screen to lock 5 minutes after the screen sleeps. I'm now setting it to 1 minute instead to get a better compromise between OK-Google-ability and convenience of not having to unlock while I use the phone frequently.
Hopefully Google will come around to fix this obvious bug in the not-too-distant future too.
ydooby said:
Always-on OK Google is awesome, but for some reason it only turns on the screen about half the time for me.
When it doesn't turn the screen on, it still listens and reacts to commands though, but without the screen on I can't see what it's doing so I still have to manually press the power button to turn on the screen to see the results, effectively defeating the purpose of having it always on (for hands-free operations).
Is anyone else experiencing the same issue? Is there a solution?
Click to expand...
Click to collapse
do u have on tap enabled? cause I had the same issue and fixed it by disabling on tap.
valapsp said:
do u have on tap enabled? cause I had the same issue and fixed it by disabling on tap.
Click to expand...
Click to collapse
Seems to help. But still inconsistent.

Categories

Resources