Face Unlock is really unsafe - Galaxy Tab 10.1 Q&A, Help & Troubleshooting

For all interested in this feature, do a simple test:
Take a photo with another handy from the user with face unlock and hold the handy with picture against the other to unlock with face unlock
works!

Yes it is unsafe, and it is stated by Google also. Only a pin code, or better a password, is what provides the highest security.
Sent from my amazing 10.1 galaxy tab

Related

[Q] Fingerprint Scanner Idea, unsure how to procede

I love the simplicity of unlocking my phone with the fingerprint scanner. It's feels more secure than a passcode and is much faster. But, I'm not likely to recover the phone if it's ever stolen, for obvious reasons. So I had an idea.
What if the lockscreen allowed you to merely swipe to unlock to a fake phone profile/homescreen. With only the fingerprint scanner unlocking to the real one. Think of the possibilities! You could:
Activate a tracking app until a valid fingerprint scan.
Hide your phone activity from snooping girlfriends/boyfriends/friends. Maybe some functionality could be hacked into the default apps to hide certain contacts/conversations in this mode.
Create logs of activity, with screenshots and keylogging, to catch said snoops or criminals in the act.
I'm just a little unsure of how accomplish this. Any help would be appreciated.

[Q] No swipe to unlock after adding CA certificate

As the title says.
Upon adding CA certificate im asked to choose PIN for credential storage, which is ok, same thing as on my DHD.
But after that, im unable to use swipe for unlocking. I really really dont want to enter PIN, password or gesture every time im unlocking TFP, its so anoying.
If i clear credentials, swipe is again able to choose. But i really need that CA certificate to connect to wifi when im at work
Yep, functioning as designed.
Sent from my Transformer Prime TF201 using Tapatalk
Yeah, that is how everything is supposed to work. I get the same thing when I install my company's security certificate when I set up my work email on my Prime. I think the company can control it (ie: require a password or not) but from their point of view company security trumps your convenience
Generally, by installing the security cert, you are agree to give access to remote wipe and enhanced security. That's how it is for my Outlook exchange. If I go to the web mail for outlook, I can wipe my device remotely.
Any way to bypass it? Or i ll have to just wait for custom roms..
Rebkos said:
Any way to bypass it? Or i ll have to just wait for custom roms..
Click to expand...
Click to collapse
Bypassing it (with or without a rom) may leave you in an awkward position employment wise - depending on your employer.
Rebkos said:
Any way to bypass it? Or i ll have to just wait for custom roms..
Click to expand...
Click to collapse
Apparently you don't work in the IT Security department at your company.
Well, on my DHD i have the same certificate installed and im still using swipe to unlock
I dont know if my employer do or do not find this disturbing. I just know, that a guy from IT dept has DHD as well and he is doing it same way
Im just to lazy to use anything else to unlock my TFP than swipe and also my gf sometimes uses it at home and i dont want here to know my "secret" password, pin or gesture so what im doing now, is adding certificate everytime i arrive to work, and deleting it when im leaving, and well, thats stupid also, but what else i can do
try then app No Lock.
Thanks man. I would still prefer to have to swipe to unlock device. But no locksreen is still 100x better than entering pin, password or gesture.

App Request: Fingerprint Lock

I looked for a request section but didn't find one. So sorry if this is in the wrong place.
What I'm imagining is having the ability to register one or more fingerprints to unlock the device, and another fingerprint to lock the device and ask for a password. For example, I could use my thumb to unlock the device and my other thumb to lock the device and ask for a password.
I'm someone who is pretty concerned with security and privacy so the first time I thought of this was when I heard of a case in Virginia where the court ruled that police can force you to unlock you phone using the fingerprint scanner but can't force you to give up a password. I suppose it could have other uses too but that's the main idea.

Can Mate20 Pro Face ID Unlock Be Geolocked and/or Temporarily Disabled?

Hi everyone, I'm a potential Mate20 Pro customer, but I need more information on the features:
1. Is it possible to temporarily disable the face unlock, similar to the iPhone X?
Here is how Apple implements mechanism to disable it: https://mic.com/articles/191653/heres-how-iphone-users-can-disable-face-id#.GFGUiwnJH
2. Is it possible to geolock Face Unlock, so it works in your own home, but is disabled in other places?
Thank you.
Anyone?
Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock
leo72793 said:
Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock
Click to expand...
Click to collapse
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.
oops double post
Bamboo-Toolkit said:
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.
Click to expand...
Click to collapse
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol
Dunno about geo locking (that might need a 3rd party app) but there is an option to require the eyes to be open.
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
Unless that is the LEO is carrying matchsticks
---------- Post added at 07:06 AM ---------- Previous post was at 06:09 AM ----------
Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time
With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps
leo72793 said:
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol
Click to expand...
Click to collapse
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
panman1964 said:
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
[/COLOR]Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time
Click to expand...
Click to collapse
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
AndiThebassman said:
With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps
Click to expand...
Click to collapse
Thanks, this is helpful.
For Huawei go to secure lock settings and enable "Show lockdown button on power off screen", when you try to power off your phone there will be an extra option called lockdown when you select this your phone can only be unclocked by PIN (if you've set it)
Bamboo-Toolkit said:
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
Thanks, this is helpful.
Click to expand...
Click to collapse
huawei offer privacy area in secuirty&privacy. use 2nd passoword enter privacy mode. told them your main password and hide your 2nd password. DO NOT BELIEVE IN MOVIES, YOU UNABLE TO RESIST TORTURE. this is right to protect yourself and your date. but in privacy mode use phone sim card 2. you keep sim card out.

Question about enabling face recognition on second or third user profile

Hi everyone,
I own a Huawei P20 Lite for 3 years now but only as my second phone (I'm a Pokemon GO player and I use this phone for playing on my second account, the one of my sister and the one of my friend ). I would like to unlock it faster when I'm using another profile than my main. I can use the fingerprint reader but with the original case it has, my finger doesn't fit the hole the reading surface.
That's why I would like to use face recognition on those two second user profiles, but it seems that the face unlock option is only available on main user profile. Do you know a trick I could use to enable it on those profiles or do I have to change the stock ROM for a custom one ?
Have a nice day
Livier

Categories

Resources