Database Users

Security flaw

I have the fingerprint scan enabled in the lockscreen. I realized that to bypass that, all you have to do is press the home button twice to the camera mode, from there just hit the home button again and it takes you to your homescreen. That is a huge flaw that I cannot understand why it has not been addressed.

Nope, mine stays locked after leaving camera app. I have t mobile version.

Not on my sprint variant.

louie68 said:
I have the fingerprint scan enabled in the lockscreen. I realized that to bypass that, all you have to do is press the home button twice to the camera mode, from there just hit the home button again and it takes you to your homescreen. That is a huge flaw that I cannot understand why it has not been addressed.
Click to expand...
Click to collapse
I can confirm this is true with tmobile version..although it doesnt seem to work all the time.
This should really be addressed
Sent from my SM-N920T using XDA Free mobile app

Doesnt work on my AT&T note5, open up the camera and I can take pictures, once it's closed it locks again.

Op. Did you check your timer on your fingerprint lock? It is possible you are doing this inside the unlocked window before it locks itself.

OK I figured it out. It may still be a flawless but it's not a security issue. If you test it out with a finger that is not registered to the phone it won't work. In other words the only person who could access the phone doing this is the owner of the phone using one of the fingers that is registered on the phone.

calvin35 said:
OK I figured it out. It may still be a flawless but it's not a security issue. If you test it out with a finger that is not registered to the phone it won't work. In other words the only person who could access the phone doing this is the owner of the phone using one of the fingers that is registered on the phone.
Click to expand...
Click to collapse
Yea your right i did it with my wife and it didnt work for her. When your pressung the home button i beleive your finger print is being read at that time and if its ok takes you home if not bye bye...

You right.. Thanks
Sent from my SM-N920T using XDA Free mobile app

sshafranko said:
Yea your right i did it with my wife and it didnt work for her. When your pressung the home button i beleive your finger print is being read at that time and if its ok takes you home if not bye bye...
Click to expand...
Click to collapse
You're right , thanks!!

It's actually a bit amusing the fingerprint scanner is fast and accurate enough to create this impression.

Had me scared for a second cause mine "did" this too! Thankfully the finger print scanner on this phone is decent finally. The Note 4 was garbage, and even the S6 Edge when I had it was too slow to want to use it. Now this is just great.

You're right, I believe I activated the camera via home button at least three times before going to home screen.
Sent from my SM-N920T using Tapatalk

Hi
I agreed with the lock screen issue.
It can be reproduce easily
1) Log into your homescreen as normal (dont matter if u r using pin, password or fingerprint)
2) Now, Pressed the "Power botton", your screen should shutoff/blackout as normal
3) Next, Pressed the "Power botton" ... your screen will come back ON ..at this moment just swipe the middle of your screen...
Wah-la...u login without giving any password/fingerprint autheticantion.
Note:
I have set it to "Lock Instantly with Power Key" and Lock Automatically to "Imeadiately"
Hopefully Samsung will fixed it sooner
Regards
Radiowc
SNG5 black TMO -64GB

radiowc said:
Hi
I agreed with the lock screen issue.
It can be reproduce easily
1) Log into your homescreen as normal (dont matter if u r using pin, password or fingerprint)
2) Now, Pressed the "Power botton", your screen should shutoff/blackout as normal
3) Next, Pressed the "Power botton" ... your screen will come back ON ..at this moment just swipe the middle of your screen...
Wah-la...u login without giving any password/fingerprint autheticantion.
Note:
I have set it to "Lock Instantly with Power Key" and Lock Automatically to "Imeadiately"
Hopefully Samsung will fixed it sooner
Regards
Radiowc
SNG5 black TMO -64GB
Click to expand...
Click to collapse
Just tested and doesn't work, re-check that your settings were saved because I tried 5 times and I can only get it to "work" when I turn off "lock instantly with power key".
AT&T 64GB

Kaboose666 said:
Just tested and doesn't work, re-check that your settings were saved because I tried 5 times and I can only get it to "work" when I turn off "lock instantly with power key".
AT&T 64GB
Click to expand...
Click to collapse
Thank you.. i will try that again... anyway i also open a case with Samsung. Maybe of affect small amount of users.
Cheers!

Kaboose666 said:
Just tested and doesn't work, re-check that your settings were saved because I tried 5 times and I can only get it to "work" when I turn off "lock instantly with power key".
AT&T 64GB
Click to expand...
Click to collapse
I went back to see if I had lock immediately selected and I didnt. So I changed it to immediately then proceeded to do the same test before and wasn't able to by pass the lock screen. Good catch and you're right.
Sent from my SM-N920T using Tapatalk

Just to update... mine fixed after doing soft reset or reset back to factory settings. Now it works as design.
Just have to spend some extra time to restore after the reset.

Unlock 6P when laying on Desk?

Definitely enjoying the Nexus 6P after getting it yesterday. After bringing it to work that, I have to say that it's a little frustrating having to pick it up to unlock it with the fingerprint reader on the back. Coming from a Galaxy S6 this wasn't an issue since it was on the front. Besides that I'm definitely enjoying this phone more.
I was thinking about getting a dock for it, but realizing it would be the and issue. This is where double tap to wake would really come in handy if a dev ends up figuring out a way to get that to work (if it's even possible).
I was going to try to look into making my fitbit a trusted device if possible which could help the issue. Anyone else struggling a bit with the same thing? I really like having the fingerprint reader on the back otherwise. Or anything else people are using for this? I definitely don't want to set a trusted location at work...
Thanks in advance!
-J
Sent from my Nexus 6P using Tapatalk

are you to lazy to press the power button on the side and punching in a code?

While the phone is face up on the desk you can still unlock the phone by swiping up from the bottom of the screen and using your normal unlock method. The other option is to lay it face down and touch the sensor before picking it up.

I was thinking about not using Smart Lock because of the finger print sensor. I found it convenient to have it unlock paired to my smart watch because of this reason. I don't have to pick it up to unlock.

I Smart Lock with my Pebble Time, and a 5 second lock delay when not paired. I wear my watch when I'm out of the house but it usually stays within range and unlocked when I'm at home as well. I do find myself still using the fingerprint scanner to wake the device as I take it out of my pocket even when a PIN isn't required.

nbaj2k said:
Definitely enjoying the Nexus 6P after getting it yesterday. After bringing it to work that, I have to say that it's a little frustrating having to pick it up to unlock it with the fingerprint reader on the back. Coming from a Galaxy S6 this wasn't an issue since it was on the front. Besides that I'm definitely enjoying this phone more.
I was thinking about getting a dock for it, but realizing it would be the and issue. This is where double tap to wake would really come in handy if a dev ends up figuring out a way to get that to work (if it's even possible).
I was going to try to look into making my fitbit a trusted device if possible which could help the issue. Anyone else struggling a bit with the same thing? I really like having the fingerprint reader on the back otherwise. Or anything else people are using for this? I definitely don't want to set a trusted location at work...
Thanks in advance!
-J
Sent from my Nexus 6P using Tapatalk
Click to expand...
Click to collapse
Unfortunately I've never found smartlock with a fitbit reliable. It only senses the fitbit when the fitbit syncs....it's not always connected. But for real....press the side button and punch in your pin. 1st world problems.

I turned off the finger print scanner for this reason alone. Now I'm just waiting for NRT (I'm too lazy to manual root these days) to be updated so i can root it and fix the rotation on the lockscreen and hopefully add double tap to wake as well. I normally have my phone on a cell phone stand when I'm at my desk, so its always in landscape. Not having the lockscreen able to rotate is dumb, especially in the car. I'm also thinking of just putting one of those NFC stickers on that cell phone stand at work. Just need to find the ones i have.

Dt2w is available with flar2's kernel now

Double tap to wake is available with stock kernel, as well. Just need to enable it using the code in flar2's kernel thread. Of course, this requires root.
On topic, I find myself lifting the phone up to use my fingerprint to unlock the device. Sure, I could double tap it and input my pattern, but it seems easier to just pick it up.

Wasn't trying to come across as lazy (although I'm sure I did!) Just adjusting to the fingerprint reader on the back and was trying to get different thoughts. I'm possibly going to give double tap to wake a try, thanks for mentioning that.
Sent from my Nexus 6P using Tapatalk

Dont worry about it, I don't like it either. A sensor in front is just as easy to use and unlike the rear sensor can be used without picking up the phone. Nor do I want to enter in my very long and complex password every time I want to check my notifications, use the calculator, etc. as the phone sits next to me on the desk. Calling this lazy is baffling to me, I work hard to lay out my phone out and configure it so it can perform with absolute maximum efficiency allowing me to get get to and use any application or the phone itself with the minimum time invested. Of course everyone knows they can enter their password as an alternative, suggesting it is pointless and why anyone would want to I cant guess.
For me in the most part it's a non issue because the majority of times when I have the phone sitting next to me in that scenario it's at work or at home and the phone is already unlocked. Double tap and I'm rolling. Course I knew all this going in but I had hoped I'd make friends with the rear location and that hasn't happened and probably wont. I like this phone, pretty darn solid device but its not perfect.

If the sensor was on the front, people would complain it wasn't on the back. Can't please everyone with that.
In my opinion, it's in the perfect spot. Coming form a Nexus 6 and before that a Moto X 2013, I loved the dimple and always put my finger there naturally. The Nexus Imprint is the same way. Today I forgot my Pebble Time on the charger so Smart Lock isn't active. Using the sensor is working great instead of entering my PIN. I think the placement on the back makes the most sense because there is already a way to unlock from the front (touch screen). Putting both on the front would likely mean a bigger device/smaller screen or very odd placement (off the the side of the speaker or something). The only happy medium would be putting it on the side with the power button, but that could still mean you'd wear out the physical power button using it all the time. The Nexus Imprint has no moving parts and saves your power button for the good stuff like getting into the bootloader.

I use smart lock with locations for my home and office so i don't need to unlock the phone when it's on a desk at work or at home. I also set my phone lock to 20 min after sleep and to not lock instantly when power button is pressed. I don't see the need for your phone to be constantly locked. If I leave it somewhere it will lock in 20 mins but if I'm actively using it then I don't want to to keep locking.

nonnasmyladie said:
I use smart lock with locations for my home and office so i don't need to unlock the phone when it's on a desk at work or at home. I also set my phone lock to 20 min after sleep and to not lock instantly when power button is pressed. I don't see the need for your phone to be constantly locked. If I leave it somewhere it will lock in 20 mins but if I'm actively using it then I don't want to to keep locking.
Click to expand...
Click to collapse
I do the same thing. I made home and work trusted places and use the phone at my desk without having to worry about unlocking it.

I personally use Smart Lock with my Moto 360. Works well for me.

lizardrod said:
I do the same thing. I made home and work trusted places and use the phone at my desk without having to worry about unlocking it.
Click to expand...
Click to collapse
I could never get smart location to work for me. it's really odd that yours stays unlocked at home.

valapsp said:
I could never get smart location to work for me. it's really odd that yours stays unlocked at home.
Click to expand...
Click to collapse
I don't use it, but I've seen people say that it works better if you setup four locations directly around your home instead of just one centered on it. This way they overlap and if you're in any of them, you'll be unlocked. The very center being the most saturated area with all four circles overlapping.

Security Unlock Issue

I have a security issue, unless its me being silly.
I am fully stock unrooted.
I have never had any problem until today and I realised my phone unlocked without a pass code or finger print, I know this because I always wear rubber gloves and have to type the pin in to get into my phone, I do this day in day out and today after several unlocks it stopped asking for the pin.
I have uploaded a video showing what happens
It funny though because when I click the lock on the bottom of the unlock screen it prompts me for a pin or finger print, but if I don't touch the lock, just a simple swipe unlocks it.
Is there something I have pressed by accident which causes this?
https://youtu.be/67jmZpLGTMc

Kickasskev said:
I have a security issue, unless its me being silly.
I am fully stock unrooted.
I have never had any problem until today and I realised my phone unlocked without a pass code or finger print, I know this because I always wear rubber gloves and have to type the pin in to get into my phone, I do this day in day out and today after several unlocks it stopped asking for the pin.
I have uploaded a video showing what happens
It funny though because when I click the lock on the bottom of the unlock screen it prompts me for a pin or finger print, but if I don't touch the lock, just a simple swipe unlocks it.
Is there something I have pressed by accident which causes this?
https://youtu.be/67jmZpLGTMc
Click to expand...
Click to collapse
Check your smart lock settings. Is anything enabled?

adotkdotjh said:
Check your smart lock settings. Is anything enabled?
Click to expand...
Click to collapse
its not in use

Kickasskev said:
I have a security issue, unless its me being silly.
I am fully stock unrooted.
I have never had any problem until today and I realised my phone unlocked without a pass code or finger print, I know this because I always wear rubber gloves and have to type the pin in to get into my phone, I do this day in day out and today after several unlocks it stopped asking for the pin.
I have uploaded a video showing what happens
It funny though because when I click the lock on the bottom of the unlock screen it prompts me for a pin or finger print, but if I don't touch the lock, just a simple swipe unlocks it.
Is there something I have pressed by accident which causes this?
https://youtu.be/67jmZpLGTMc
Click to expand...
Click to collapse
I can't replicate the issue here - not sure what would cause this other than the smart bluetooth lock as suggested by the above poster.

Azarin said:
I can't replicate the issue here - not sure what would cause this other than the smart bluetooth lock as suggested by the above poster.
Click to expand...
Click to collapse
I haven't changed anything, I have cleaned the finger print sensor, no new apps installed.
Weird

Put it on charge and it's fixed it's self!
Sent from my Nexus 6P using Tapatalk

Bypassing Fingerprintsensor bug?

Hi everyone,
I notice that I can bypass my fingerprintsensor with tapping 3 times with the wrong finger on it and after the third time, the phone is unlocked.
I am on the last stock oxygenOS.
Does somebody else have this bug?

No.

No.

Yes I found that since the 1st day.
Now I tried twice with with a unregistered finger with the 3rd try another unregistered finger and it is unlocked!!!!
not all the time.
Sent from my ONEPLUS A5000 using Tapatalk

Doesn't happen to me. Have you got a pattern enabled?
After 3 failed finger print attempts the phone prompts for a pattern.

After testing, I was shocked to see that this worked on my phone...but after a little testing, it only unlocks on the third attempt when the phone has a smartlock device connected and doesn't require a PIN anyways.
If I turn Bluetooth off, the third wrong finger button press simply turns on the screen and asks for my PIN.

ArkAngel06 said:
After testing, I was shocked to see that this worked on my phone...but after a little testing, it only unlocks on the third attempt when the phone has a smartlock device connected and doesn't require a PIN anyways.
If I turn Bluetooth off, the third wrong finger button press simply turns on the screen and asks for my PIN.
Click to expand...
Click to collapse
Smartlock was the key here!
I turned trusted places "home" off and on the 3rd try asked for the pin code.
So basically if I'm in trusted places or connected to a trusted device after 3 consecutive failed fingerprints it will open my phone without pin code

MAJED.y said:
Smartlock was the key here!
I turned trusted places "home" off and on the 3rd try asked for the pin code.
So basically if I'm in trusted places or connected to a trusted device after 3 consecutive failed fingerprints it will open my phone without pin code
Click to expand...
Click to collapse
I think that's the point of smart Lock... ? So you don't have to unlock even with FP. Just swipe up and it should unlock...

That is interesting. Would only work around safety devices/places?

A40 unable to fingerprint-lock after android-upgrade?

It's a small thing, but it bugs me in my daily use of my phone. I recently got my A40 and upgraded Android from 9 to 11, and now I can't lock the phone by touching the fingerprint sensor anymore . But unlocking works fine though. I have been googling around but noone seems to have this problem.
Do anyone in here have aclue to what might be the problem here ?

Since when could you even lock the phone using the fingerprint sensor?

Nonetheless, this is the XDA community of developers, and im sure a random person just needed this functionality on their phone, so they made and app for it..
Anyways, here's a link to a tutorial. It covers exactly what you want, and apparently the app is developed by a couple of XDA developers, so it should be safe too
How to Turn Off Android Screen with your Fingerprint Scanner
Those days are gone when we relied on passwords and PINs to unlock our Android smartphones. These days we have fingerprint and facial scanners. Most of
techviral.net
EDIT: Just realised that the downlaod link is broken lol, heres a link to the apk:
Download Fingerprint to Sleep (com.ztc1997.fingerprint2sleep) 0.2.0 APK | AAPKS
Download Fingerprint to Sleep 0.2.0:
aapks.com

PhotonIce said:
Since when could you even lock the phone using the fingerprint sensor?
Click to expand...
Click to collapse
From the get-go, when I bought my phone. Thought it was normal. My old Moto G5 did same thing. Really handy when you just need to view whatever is on the screen for a short moment.

Locking the screen means turning it off.. (and locking your device so that you have to scan your finger or use a pattern to unlock it again)
Opalappa_Sailing_Goose said:
From the get-go, when I bought my phone. Thought it was normal. My old Moto G5 did same thing. Really handy when you just need to view whatever is on the screen for a short moment.
Click to expand...
Click to collapse

Otherwise yes, the phone's screen will turn on on the lock screen if you touch the sensor and the fingerprint isnt recognised. That's not the same as locking your phone. Locking your phone is the equivalent of pressing the power button once, which puts your phone into sleep and forces you to unlock it again (via fingerprint/pattern etc)

Can you clarify what you're asking for here?
Do you want the screen t oturn on when you tap the sensor or do you want the screen to turn off when you tap the sensor?
And do you want it to unlock when you tap the sensor, or do you want it to turn the screen on onto the lockscreen so that you can see the time/notifications etc?
(The links I posted are for LOCKING your phone using the sensor (turning the screen off and locking it, causing you to have to unlock it again when you turn it back on), because that's what you asked for..

PhotonIce said:
Nonetheless, this is the XDA community of developers, and im sure a random person just needed this functionality on their phone, so they made and app for it..
Anyways, here's a link to a tutorial. It covers exactly what you want, and apparently the app is developed by a couple of XDA developers, so it should be safe too
How to Turn Off Android Screen with your Fingerprint Scanner
Those days are gone when we relied on passwords and PINs to unlock our Android smartphones. These days we have fingerprint and facial scanners. Most of
techviral.net
EDIT: Just realised that the downlaod link is broken lol, heres a link to the apk:
Download Fingerprint to Sleep (com.ztc1997.fingerprint2sleep) 0.2.0 APK | AAPKS
Download Fingerprint to Sleep 0.2.0:
aapks.com
Click to expand...
Click to collapse
I found the app. But somehow it didnt work on my phone. Only worked while app was open. And it made me unable to unlock with fingerprint
Thx anyway for the fast reply. Looks like I have to live with it for a while. Im pretty happy with my phone otherwise!