[Q] to require pin or not.. - Android Software/Hacking General [Developers Only]

I've been thinking about removing the security pin on my phone so I just slide to unlock instead of requiring a pin.. I have motoblur and can remotely wipe the phone if I lose it (if someone doesn't find it and remove sim first ) the reason is im just sick of putting my pin in all the time.. I don't keep any major personal information on the phone.. the worst thing would be access to any cached emails or txt mags if found by a not nice person.. any major security issues I might not be thinking of? Do you require a pin or not? And why?
Sent from my MB860

No thoughts?
Sent from my MB860

I've never used a lock pattern or pin. I use another security device that came free with my pants: my pocket.
Just keep track of your belongings.

iwasapirate said:
I've never used a lock pattern or pin. I use another security device that came free with my pants: my pocket.
Just keep track of your belongings.
Click to expand...
Click to collapse
+ 1
Ten char
Sent from my ADR6300 using XDA App

iwasapirate said:
I've never used a lock pattern or pin. I use another security device that came free with my pants: my pocket.
Just keep track of your belongings.
Click to expand...
Click to collapse
Second that. Sercurity is important, but putting in a pattern or pin everytime would get extremely old/annoying.

I also thought about the pin, but decided it would be too much everytime I want to use the phone, but I suppose once you set it up you would get used to it like anything else.

How many times a day to you wake up your telly? lol thats alot of pin entering.

Related

Wave secure free lifetime account

You have until tomorrow to download wave secure for android and get a free lifetime account for whatever phone (sim) you put it on! Go and get now!
I'd love to but I still cannot activate because I dont have text messaging on my phone, it does not work with google voice messages
Posted on their forum, its a known issue.
Gr8gorilla said:
You have until tomorrow to download wave secure for android and get a free lifetime account for whatever phone (sim) you put it on! Go and get now!
Click to expand...
Click to collapse
Thanks, planned on signing up at some point but just did it now while it's free
Thanks for the heads up. Just signed up, it was easy as pie. Already have my SMS backed up and tried the remote location feature - it was accurate within a block, which was impressive. Can't beat the price, too!
Had it for a while.. cannot stress how awesome it is, get it while you can!
Rusty! said:
Had it for a while.. cannot stress how awesome it is, get it while you can!
Click to expand...
Click to collapse
+1
everyone I know with android devices went and signed up after I gave them a quick demo.
If you uninstall this, then you're screwed? Can you ever get it back?
as far as I know signing up on the site sets up an account that is good for whatever sim you registered.
Also there is a an app on the market now that locks down your phone if wave secure is uninstalled! even more protection for your device.
You may not get the phone back but at least whoever steals it cant use it either.
dmo580 said:
If you uninstall this, then you're screwed? Can you ever get it back?
Click to expand...
Click to collapse
If you mean as far as the free account goes, as long as you have created your account on phone and website, should be able to reinstall at any time.
Well they can hard reset, but a random thief/finder may not know that.
I have the uninstall protection.
AWESOME.
*downloads*
Rusty! said:
Well they can hard reset, but a random thief/finder may not know that.
I have the uninstall protection.
Click to expand...
Click to collapse
wouldn't that be the same as a remote with wave secure? I guess if they wiped the phone as soon as they stole it before you had a chance to lock it down. Once its locked they can't reset, or is there some other way to reset that I am not aware of?
Reset via the bootloader, indefensible.
How does this program compare to Mobile Defense? I have that installed on my N1 right now, but if people here like Wave Secure more, I might make the switch over. Thanks!
Get it while it's free and decide for yourself... you don't have to use it if you prefer Mobile Defence
Gr8gorilla said:
wouldn't that be the same as a remote with wave secure? I guess if they wiped the phone as soon as they stole it before you had a chance to lock it down. Once its locked they can't reset, or is there some other way to reset that I am not aware of?
Click to expand...
Click to collapse
Pull the battery?
Thanks for letting us know. It would be shame to miss a life time subscription on this.
That being said... i'm a bit disappointed with it. Location service is really bad... all it does it show your phone at the closest tower. It showed my phone almost a half a mile away. No way I would ever find it. Also, any command issued seems to take forever, or, as I just saw, not work at all "Your phone failed to lock". The first time it locked but took an abnormal amount of time (their words). I'm guessing its the fact that its a Singapore SMS coming into AT&Ts network.
None the less, it can only get better. Thanks again.
legend1222 said:
Pull the battery?
Location service is really bad... all it does it show your phone at the closest tower. It showed my phone almost a half a mile away. No way I would ever find it.
Click to expand...
Click to collapse
Sounds like it couldn't get location from your GPS and failed back to cell tower location. When I do it sitting in my house it shows a a circle no bigger then my property centered on my house on google maps!
Thanks for the heads up! *downloads*
What he said ^
Awsome! I did this without even knowing! :d

Can't find answer anywhere - Exchange security and pattern unlock

I have the Inspire 4G and my office is using Exchange security so pattern unlock is disabled and now I can only use a pin. I hate typing in a pin.
I've read about a few methods to get pattern unlock working again but none of them seemed to work so far. I haven't seen any for the Inspire.
Any suggestions?
Grateful for any tips. Thanks!
Soundchasr said:
I have the Inspire 4G and my office is using Exchange security so pattern unlock is disabled and now I can only use a pin. I hate typing in a pin.
I've read about a few methods to get pattern unlock working again but none of them seemed to work so far. I haven't seen any for the Inspire.
Any suggestions?
Grateful for any tips. Thanks!
Click to expand...
Click to collapse
Security Pattern is not recognized by many institutions. So it is not supported. I think this is because the admin can reset it if its either PIN or password.
If it's not possible to get pattern to work is there a way around Exchange security altogether?
Soundchasr said:
If it's not possible to get pattern to work is there a way around Exchange security altogether?
Click to expand...
Click to collapse
Well that would pretty much render Exchange useless, wouldn't it?
Soundchasr said:
If it's not possible to get pattern to work is there a way around Exchange security altogether?
Click to expand...
Click to collapse
You could try that. But remember, these days corps are very very serious about security issues. Don't tamper or play around security stuff when it comes to ur job. Do u want to risk ur job for the sake something so trivial?
diablo009 said:
You could try that. But remember, these days corps are very very serious about security issues. Don't tamper or play around security stuff when it comes to ur job. Do u want to risk ur job for the sake something so trivial?
Click to expand...
Click to collapse
Agreed, if I found someone bypassing the lock on my old job they would be fired on the spot. I know IT is a pita for alot of people but it is there for a reason, if you agree with it or not.

ICS Face unlock not safe

Flashed my DS with ICS and thought the face unlock function was great.
One of my friends mentioned that it would work with a photo of my face.
All we did was take anphoto of my face and lined the camera up with the other screen and removed the glare and the phone unlocked.
Its a great function but not as safe as i had hoped.
Sent from my HTC Desire S using xda premium
slugger7 said:
Flashed my DS with ICS and thought the face unlock function was great.
One of my friends mentioned that it would work with a photo of my face.
All we did was take anphoto of my face and lined the camera up with the other screen and removed the glare and the phone unlocked.
Its a great function but not as safe as i had hoped.
Click to expand...
Click to collapse
Hardly news mate - this has been known for a long time.
Hahaha sorry just thought all of u should know about it hehehe. I went back to standard patern.
Sent from my HTC Desire S using xda premium
So there is a new feature on galaxy nexus,you have to wink your eyes after facing unlock...
ReznovHuang said:
So there is a new feature on galaxy nexus,you have to wink your eyes after facing unlock...
Click to expand...
Click to collapse
Is that just to prove that it is a living person? And not a photo?
While on this topic can someone explain the Samsung S3 thing were it unlocks when you look at it or something?
Sent from my HTC Desire S using xda premium
Basic face unlock is the same (without wink), but there is also a second option with face and voice, but I can't tell how safe it is and if it can be tricked with a picture and an audio record (have vpn set up and can't change to this unlock method).
But I guess it is still not as save as pattern, pin or password (this 3 are at least those I still can choose from).
About the wink within the gnex, sure safer, but still can be tricked with a video I guess.
Gesendet von meinem GT-I9300 mit Tapatalk 2
Sliding a ring to the center of the screen is much safer method, for sure!
Pattern unlock can also normally be guessed from looking at the greasy smudges onscreen!
Sywepd form my DsereiS
ben_pyett said:
Pattern unlock can also normally be guessed from looking at the greasy smudges onscreen!
Sywepd form my DsereiS
Click to expand...
Click to collapse
Just for advanced hackers muahaha!
ben_pyett said:
Pattern unlock can also normally be guessed from looking at the greasy smudges onscreen!
Sywepd form my DsereiS
Click to expand...
Click to collapse
If there is many overlapping it's not that easy, pin and password can also be easily cracked if you use your birthday or name of your kid I.e.
In the end every method can be cracked, but at pattern, pin and password you at least are able to make it safer while using complex pass keys.
But sure your right that password and pin are the safest methods when they are used in a safe way.
Gesendet von meinem GT-I9300 mit Tapatalk 2
Are u trying to hide porn from ur girlfriend? Lol jk. Sorry
I used to put a password but then after getting a data plan and included in a few group chat, they lock just seem like an additional unescessary option.
Unless ofcourse ur're a type of person who has a habit of leaving the phone around or have friends who will use ur phone facebook account to make random embarrassing post and have sensitive password inside then it is a must.
rain987 said:
Are u trying to hide porn from ur girlfriend? Lol jk. Sorry
I used to put a password but then after getting a data plan and included in a few group chat, they lock just seem like an additional unescessary option.
Unless ofcourse ur're a type of person who has a habit of leaving the phone around or have friends who will use ur phone facebook account to make random embarrassing post and have sensitive password inside then it is a must.
Click to expand...
Click to collapse
Yes my friends do like to make messed up jokes like that.
But as they said with the patern if you overlap your path its not as easy to see and you can make it invisible then it only shows the wrong patterns entered.
I have a nice function on my phone tjat when someone enters the pattern or password in and its wrong three times in a row it takes a photo with the front facing camera and emails it to my email account. Did that with a app called cerberus
http://market.android.com/search?q=pname:com.lsdroid.cerberus . Its like the ultimate security app for android phones.
It does more than what I've mentioned.
Sent from my HTC Desire S using xda premium
slugger7 said:
Yes my friends do like to make messed up jokes like that.
But as they said with the patern if you overlap your path its not as easy to see and you can make it invisible then it only shows the wrong patterns entered.
I have a nice function on my phone tjat when someone enters the pattern or password in and its wrong three times in a row it takes a photo with the front facing camera and emails it to my email account. Did that with a app called cerberus
http://market.android.com/search?q=pname:com.lsdroid.cerberus . Its like the ultimate security app for android phones.
It does more than what I've mentioned.
Sent from my HTC Desire S using xda premium
Click to expand...
Click to collapse
+1 for cerberus . The best paid security app with root functionality. IMO

Serious Android Lock Screen Vulnerability

Not sure if this is well known or not but if you lose your android phone and think that your 4 digit lock screen password is going to cut it, you may be wrong. I realize that most people here know multiple ways to get access to a device but I haven't seen this way before and thought it was unique.
A 4 digit password can be brute force hacked in 16.5 hours, using the USB rubber duckie developed by the guys at Hak5.
They have a detailed video posted over at: http://hak5.org/episodes/hak5-1217
It works because android doesn't implement longer wait times between unsuccessful pin entries. Every 5 tried it locks you out for 30 seconds. That's it! That's all! Every 5 times, 30 seconds over and over again! It never gets longer! Thus why it takes 16.5 hours to go from 0000 to 9999 with one second between attempts, and 30 seconds between every 5 attempts.
Hopefully this gets fixed in the next version of android. For comparison, BlackBerry has a 10 password rule and the phone gets wiped and Apple makes successive longer wait times and will ultimately lock itself and need to be plugged into the original syncing computer (I believe, not really a big Apple fan, so I don't know for sure)
Thanks for this information
The difference in the time it takes to break a 5 digit pin or a 10 digit pin is cRaZy
Sure, the wait times should be "smarter" - but if you're keeping TRULY sensitive information on your phone, just use a real password to unlock it, not a PIN.
Or, perhaps a solution in the spirit of Android would be to let people decide for themselves how they want it implemented. Some people wouldn't care and wouldn't want their data to be wiped after ten wrong tries - I mean, wow - that would suck if someone knew that and wanted to be malicious and wipe your phone for the lulz or whatever. Or if you wanted to let a kid play with it - which I've read a lot of people do (beats me, but hey). Other people who need tighter security could choose that.
Any tips on how to bypass or brute force the android pattern lock?
After a certain number of tries, Android will not allow you to unlock via PIN, and force you to enter a Google account registered on the phone.
Hacker can't get past that unless they know whose Google account is on the phone, and then they have to hack a Google account
Sent from my DROID2 using xda premium
I have never thought the android lock screen was any good if im honest. if you have a dirtyish screen you can actually see the pattern you draw.
Sent from my Nexus 7 using xda app-developers app
What gagdude said, after so many failed attempts you need to login via your associated Google account.
Ty for sharing
Sent from my MK16i using xda app-developers app
Hmmmm interesting, wonder how long it would take for the pattern method of unlocking.
xillusionzx said:
Hmmmm interesting, wonder how long it would take for the pattern method of unlocking.
Click to expand...
Click to collapse
Depends. A 4 digit PIN is 10*10*10*10=10000
A pattern can be from 9*8*7*6 to 9! possibilities
Sent from my Nexus 4
Hi!
I just think PIN is unuseful. I was cheated by one of my friend because he discovered the PIN of my phone. I give my phone to nobody no more. Now I have a phone without protection: it is more comfortable!
Put any password /pin, u can just boot into recovery, do a factory reset and it's all gone! Right? (in case of theft I'm talking about)
Thanks for the heads up, my mother in lay asked this about her new Note II today.
Lifehacker7 said:
Put any password /pin, u can just boot into recovery, do a factory reset and it's all gone! Right? (in case of theft I'm talking about)
Click to expand...
Click to collapse
As if someone who actually goes low enough to steal know what recovery is.
What I'm trying to say here us that the average person doesn't know what recovery is.
Sent from my Nexus 4
gagdude said:
As if someone who actually goes low enough to steal know what recovery is.
What I'm trying to say here us that the average person doesn't know what recovery is.
Sent from my Nexus 4
Click to expand...
Click to collapse
Just sayin!
Lifehacker7 said:
Just sayin!
Click to expand...
Click to collapse
I know; I used to worry about this until I asked my friend about it and he was like "what's recovery? Stop being a nerd." And then it hit me: people don't know what it even is, much less how to boot into it
Sent from my Nexus 4
Yeah, but all but the dumbest theives have the wits to Google search If they have an issue that's in the way of turning a profit (like a lock screen). It's occupational information even if it's not known to "normal" people. You know, like lock picking, hot wiring, et cetera. Not all theives are rock-stupid - and maybe some are, and but they're stealing phones they can't sell at low costs/for meth to someone who in fact does know how to make these devices much more profitable.
Sent from my Transformer TF101 using xda app-developers app
If someone steals my phone he can just flash a new rom on it.
No need to brute force the password/pin unless he's after my personal info/my messages.

Bank app is forcing me into setting a PIN, how to bypass?

My bank app is forcing me into setting a PIN or security in lock screen, but I don't feel like setting it. Is there a way to bypass this or to fool the app into thinking I have the PIN set? My phone is rooted.
vfontanela said:
My bank app is forcing me into setting a PIN or security in lock screen, but I don't feel like setting it. Is there a way to bypass this or to fool the app into thinking I have the PIN set? My phone is rooted.
Click to expand...
Click to collapse
probally not since it may check serverside which might get you in trouble if they find your phone is rooted
gaberilde said:
probally not since it may check serverside which might get you in trouble if they find your phone is rooted
Click to expand...
Click to collapse
My girl's phone is not rooted and the same app is asking for the same thing. I only added the information about my phone being rooted because it could help bypass the verification system.
vfontanela said:
My bank app is forcing me into setting a PIN or security in lock screen, but I don't feel like setting it. Is there a way to bypass this or to fool the app into thinking I have the PIN set? My phone is rooted.
Click to expand...
Click to collapse
No, I'm pretty sure they have it locked so that won't work.
Honestly, it's ridiculous to even want to try, you'd be giving anyone an open door to your money. You as the user could NEVER keep it anywhere even close to being as secure as it is designed to be. As a matter of fact, it's probably even illegal even if you did find a way. Or at least will get you blackballed by your bank, maybe even other banks.
Moral of the story? It's best to leave it alone and do yourself a favor and let it keep your stuff secure as it is supposed to do.
Sent from my LGL84VL using Tapatalk
gaberilde said:
probally not since it may check serverside which might get you in trouble if they find your phone is rooted
Click to expand...
Click to collapse
Droidriven said:
No, I'm pretty sure they have it locked so that won't work.
Honestly, it's ridiculous to even want to try, you'd be giving anyone an open door to your money. You as the user could NEVER keep it anywhere even close to being as secure as it is designed to be. As a matter of fact, it's probably even illegal even if you did find a way. Or at least will get you blackballed by your bank, maybe even other banks.
Sent from my LGL84VL using Tapatalk
Click to expand...
Click to collapse
I'm not trying to bypass the bank app PIN. The bank app (which is passworded itself) is forcing me to set a PIN or pattern in my lock screen. I just don't feel like typing a password every time I use my phone.
vfontanela said:
I'm not trying to bypass the bank app PIN. The bank app (which is passworded itself) is forcing me to set a PIN or pattern in my lock screen. I just don't feel like typing a password every time I use my phone.
Click to expand...
Click to collapse
I know exactly what you asked the first time, my answer remains the same.
You could set a fingerprint probably, if your device has fingerprint feature.
Or, some devices can be unlocked by voice using "ok Google"
You can try finding a way to get the banking app allow using one of those methods. It wouldn't remove the need for it, but it would make it easier.
Sent from my LGL84VL using Tapatalk

Categories

Resources