[Feature Request] Disable Quick Unlock for PIN/Password - Paranoid Android Features Development

Hi,
I would like to see the ability to disable the quick unlock feature.
I feel this is a security issue to have it enabled by default. Currently you could type however many PIN's/passwords you want and android will never log an invalid attempt.
Makes it too easy for those brute force robots.[emoji6]
Thanks

Quick unlock shouldn't change the policy on login attempts
#stayparanoid

It does, as an attempt is only registered if you hit the enter/return key

Please log this in the bug tracker. Https://paranoidandrid.atlassian.net
#stayparanoid

Related

[Q] WidgetLocker not replacing default lockscreen

I like using WidgetLocker and it's been working generally well until I realized it does not replace the default lockscreen. After my 3 minute screen timeout for my Droid 2 to lock up, I have to unlock using WidgetLocker and then the default lockscreen. Is there a way so that I do not see the default lockscreen itself? BTW, I am using a pattern lock.
I use an app called "no lock" and it works really well.
I'm the dev of WidgetLocker.
The issue you are experiencing is because the standard swipe unlock is tied to the pattern (and pin and password) security on Motorola phones. I haven't yet found a way around this. There's two methods I may use to solve this (possibly both options)
1) Implement security into WidgetLocker.
2) Use root to bypass the intermediate swipe unlock
The advantage of using the system's security is that it's for sure protected at phone boot, it's harder for a third-party-app to guarantee that. The advantage of WidgetLocker's own security is that it wouldn't require root (Then again maybe it would for at-boot protection) and would allow more options.
I don't know when I will have a solution to this, I just know it will NOT be in the next update. If you just purchased and this issue is causing you to not use WidgetLocker email me ([email protected]) with your order number (and mention this thread) and I can cancel/refund the order.
No Lock will disable your security. I don't remember offhand if LockBot Pro just completely bypasses the security or has the same issue, but it doesn't solve the problem.
Thread moved to General.
Alright, thanks guys for the good info. I'll continue to use WidgetLocker just because I like it that much, and I hope a solution can be found some time in the future. Thanks!
So, any updates? I'm now unlock homescreen 3 times ). Widgetlocker+Standart_SlideLocker+Pattern. Temporary removed widgetlocker.
[email protected] said:
I'm the dev of WidgetLocker.
The issue you are experiencing is because the standard swipe unlock is tied to the pattern (and pin and password) security on Motorola phones. I haven't yet found a way around this. There's two methods I may use to solve this (possibly both options)
1) Implement security into WidgetLocker.
2) Use root to bypass the intermediate swipe unlock
The advantage of using the system's security is that it's for sure protected at phone boot, it's harder for a third-party-app to guarantee that. The advantage of WidgetLocker's own security is that it wouldn't require root (Then again maybe it would for at-boot protection) and would allow more options.
I don't know when I will have a solution to this, I just know it will NOT be in the next update. If you just purchased and this issue is causing you to not use WidgetLocker email me ([email protected]) with your order number (and mention this thread) and I can cancel/refund the order.
No Lock will disable your security. I don't remember offhand if LockBot Pro just completely bypasses the security or has the same issue, but it doesn't solve the problem.
Click to expand...
Click to collapse
i know it's an old thread and problem, but i thought i'd just throw this idea out there...
my current security solution for Motorola phones (Droid X and Bionic) is to enable PIN security. this means that i do not have to depend on a third party app to lock my phone down at boot (which is difficult as you point out).
while using my phone at home, i temporarily disable the PIN security using Switchpro widget's "Auto ScreenLock" toggle (i think No Lock work too). when my phone is rebooted, the Motorola security is automatically active again, and i have to select Switchpro widget again to temporarily disable the PIN security if i choose, or i can leave it enabled if i'm at work or someplace else where the likelihood of losing my phone is increased.
unfortunately this means i can't really use WidgetLocker because whenever i' have PIN security enabled, i have to deal with the extra swipe of the stock lock screen. yes, the new feature for auto-swiping works and is cool, but it's a bit slow and awkward.
Possible solution: if WidgetLocker included a separate post-boot security PIN feature that was reasonably secure while the phone is on (and without disabling the stock security PIN), then i would be in heaven. this would allow me to leave system security PIN in place (protecting me during boot), i would have to swipe and enter my PIN twice the first time i enter my phone after boot (once for system PIN, once for WidgetLocker), then i could disable the system PIN via Switchpro widget (or No Lock) and only have the WidgetLocker PIN on subsequent attempts to unlock my phone until the next reboot. i used exactly this process on my Droid X with LockBot Pro, but LockBot Pro is not compatible with the Bionic.
is this description even remotely clear? i realize that it might be a confusing sequence for some folks, but it would totally address the issue of security during boot and post-boot while also being able to use this excellent app on Motorola phones.
just a thought...
Please use the Q&A Forum for questions Thanks
Moving to Q&A
Hi,
I got the same problem as the threadstarter. Any progesses made? Teslacoil hompage says:
Can I use WidgetLocker with a security lockscreen?
Yes, but it depends on your configuration. Some devices force their own slider, before the security slider. This means WidgetLocker, then system slider, then system security. Generally Samsung and HTC devices don't have this issue, and other devices don't have this issue when using Pattern security rather than PIN or Password. WidgetLocker includes a work around for root users to "auto-swipe" the system slider.
Click to expand...
Click to collapse
On my Galaxy S2 this workaraound does not auto-slide the systemslider... What's wrong with it?
Have a Atrix 2 here and as PhilDX said, it is kinda slow and awkward. When I have the pattern security active and swipe the Widgetlocker lock, it kinda "flashes" my homescreen then goes to the pattern. Also, even though I have autoswipe enabled, but sometimes the original lockscreen pops up.
Great program though, LOVE that I can put widgets on the lockscreen^^
Hello, My phone is SGS2-GTI9100G model.
Can I ask any method to prevent exit active applications from the task manager?
I have a similar problem
[email protected] said:
I'm the dev of WidgetLocker.
The issue you are experiencing is because the standard swipe unlock is tied to the pattern (and pin and password) security on Motorola phones. I haven't yet found a way around this. There's two methods I may use to solve this (possibly both options)
1) Implement security into WidgetLocker.
2) Use root to bypass the intermediate swipe unlock
The advantage of using the system's security is that it's for sure protected at phone boot, it's harder for a third-party-app to guarantee that. The advantage of WidgetLocker's own security is that it wouldn't require root (Then again maybe it would for at-boot protection) and would allow more options.
I don't know when I will have a solution to this, I just know it will NOT be in the next update. If you just purchased and this issue is causing you to not use WidgetLocker email me ([email protected]) with your order number (and mention this thread) and I can cancel/refund the order.
No Lock will disable your security. I don't remember offhand if LockBot Pro just completely bypasses the security or has the same issue, but it doesn't solve the problem.
Click to expand...
Click to collapse
My (unrooted) Samsung Stratosphere's Default lockscreen keeps Activating and overriding WidgetLocker. WidgetLocker doesn't even show up or if it does it pops up after I've already unlocked the phone. I have tried setting WL homehelper as home but default still replaces it, then widgetlocker locks the screen at random while I'm in the middle of something. I also tried no lock which disabled all lockscreens temporarily before stock kicked in and locked the phone. is there a way to fix this without root?

[Q] How do I remove lockscreen password/pin?

I added a pin code to lock my device but when I tried to go back into settings to remove the code, there were no options anymore to enable/disable lockscreen pin/password. Fortunately for me my pin was not a long one but my OCD is keeping me from enjoying my device since now I realize the device has a lockscreen bug.
I just yesterday changed the lockscreen setting to a PIN and reverted back to "Unsecure". I'm on KM7 and it was done under "Security" in "Settings", every option was available there.
Did you by any chance encrypt your tablet? It's not possible to use the encryption feature and not have a PIN or passphrase.
gokpog said:
I just yesterday changed the lockscreen setting to a PIN and reverted back to "Unsecure". I'm on KM7 and it was done under "Security" in "Settings", every option was available there.
Did you by any chance encrypt your tablet? It's not possible to use the encryption feature and not have a PIN or passphrase.
Click to expand...
Click to collapse
I didn't encrypt the tablet (that takes about an hour and I did my 4 digit pin in a few seconds) but when I went back into "Location & Security" the option to set lockscreen password no longer was present. I am using a stock Wi-Fi 16GB model that I bought at Staples when they had the $100 off coupon.
I had to do some research and apparently I am not the only one having this problem.
http://androidforums.com/samsung-galaxy-tab-10-1/387231-lock-screen-bug.html
leo876 said:
I added a pin code to lock my device but when I tried to go back into settings to remove the code, there were no options anymore to enable/disable lockscreen pin/password. Fortunately for me my pin was not a long one but my OCD is keeping me from enjoying my device since now I realize the device has a lockscreen bug.
Click to expand...
Click to collapse
I had this same problem on my GTab2 7.0 running stock ICS. Super frustrating. I finally realized it was being caused by my having an Exchange account for my employer's email that was enforcing a policy of not removing the lock screen security. This was even though I didn't have a password and didn't need one when I set it up. I uninstalled Touchdown (my Exchange account) and the "none" option reappeared. After removing the lock screen security, I reinstalled Touchdown and now everything works fine again without a lock screen pin.

Extend the timeout for security lock screen ?

Hi
I want to extend the timeout for security lock screen.
From 10 min to maybe 10 hours.
I use password on lockscreen and don't want to type in the password
many times a day.
I just try "Delayed lock" , but it don't work on my SGS 2 with android 2.3.5
Any other programs that can extend the timeout ??
Or can I do some change in a system file to extend it ?
I'm interested in this too. I am getting fed up with having to type a password after every time my screen switches off (which is currently set to 1min to save battery). Ideally I would like to have a setting for the screen to turn off and a separate setting to enforce the lock, e.g. screen turns off after 1min but does not lock until maybe 10mins (or what ever the user sets) later.
Super Cool !! I solved the problem myself today !!
Now screenlock is not get active, even with password enabled.
The solution on the Samsung Galaxy S II
Install app "SGS Secret Code"
Start the app and select "Power Button Settings"
Mark "Shutdown"
That's all.
Can you clarify what the app really did?
First the "SGS secret code" app doesn't exist. There is "SGS secret codes". Is that the app you used? This just provides short cuts to entering special codes via the dialler.
Have you permanently disabled the lock screen asking for a password / code? I don't understand how it works from your brief description.
Yes. it's "SGS secret codes"
It's disable the screenlock. The screen will never get lock. Even with password or pattern installed for the screenlock.
The screenlock will never get activ. If the screen are turn-off and you push the home
button, the screen just turn-on, with no asking for password or pattern.
Thanks for clarifying but maybe I'm missing something here.
So basically this circumvents the screen lock password / code. Why not just disable the screenlock password / code from the settings?
The point of having the password if for security so I'm not entirely comfortable with disabling it altogether. I just want the time-out for the actual password lock to be independently configurable from the screen time-out. So for example screen shuts off after one minute but the lock doesn't actually lock for another 10 mins.
I understand you asking about this.
The reason is that I use a program that requires is a screenlock with a minimum of 8 characters with both numbers and letters.
Every time I start this program, it go out and see if there is activated a screenlock
with 8 character, otherwise program does not start.
This way I keep the safety screenlock, but it will just never be activated.
OK I see. Unfortunately your solution doesn't help me. Oh well I'll keep looking...

Cool idea for android lockscreen

This is and idea about pattern unlock,what if we enter one pattern to unlock the phone and another to launch and app like camera.This would be awesome as enabling swipe to unlock with security is annoying and a waste of time!

[Q] S3 and android screen lock security

Hello!
I have a very specific question and don't know where to start looking.
When i look permissions for a specific app, then there is sometimes something like this: disable your screen lock
Does this mean that the app can disable screen lock and activate itself through lock screen?
I think if your screen lock is pattern based then it won't come through and when it's swipe based then it will work.
I want one specific app to be able to prompt itself through pattern based screen lock.
if i would use CyanogenMod and someone would change something in the code then it would be doable?
Funny thing is, that in Samsungs official android 4.1 it worked that way (and was in their words "a bug").
it's not working in andoird 4.3 anymore: bug fixed i guess. but i loved that bug.
AFAIK, only camera is able to bypass pattern or password lock.
VictorLapin said:
AFAIK, only camera is able to bypass pattern or password lock.
Click to expand...
Click to collapse
the app is Estonian mobile personal idententification tool called mobiil-id
you can legally identify yourself in banks that way
when my screen security if set for pattern and when i try to authenticate somewhere, pin query comes through screen lock and i enter pin and phone does not unlock itself at all and goes back to sleep.
but when security is set for pattern, then i must unlock screen manually to enter pin. i can hear beep sound though.
probably should try to find some cm programmer who knows if there is a way to manually make some exceptions.
there is a possibility to compile your own cm and then deploy it. if it were some minor change, then i would do it myself with some help.
i know it's kinda security breach, which i'm willing to take.

Categories

Resources