Hi guys,
I realized that the lockscreen is doing nothing in the sense of the security on the S2. I am using a lock pattern and sometimes when I get a text call, or press the sleep/wake button a couple times, I can unlock the screen without the pattern. Anyone else notice this?
I read about this a while ago, some bug with TouchWiz 4.0
security *FLAW* found...
Bascotie said:
Hi guys,
I realized that the lockscreen is doing nothing in the sense of the security on the S2. I am using a lock pattern and sometimes when I get a text call, or press the sleep/wake button a couple times, I can unlock the screen without the pattern. Anyone else notice this?
Click to expand...
Click to collapse
Yup, I noticed this also... on my 2nd day... I was *informed* that if I truly wanted to SECURE the phone 100% with PIN/PASSWORD/Pattern, I would have to choose LOCK immediately, otherwise, every other swipe the phone can be unlocked without it... EXACTLY like you experienced it.
Just change it to IMMEDIATE and you should be fine...
lonewolf69 said:
Yup, I noticed this also... on my 2nd day... I was *informed* that if I truly wanted to SECURE the phone 100% with PIN/PASSWORD/Pattern, I would have to choose LOCK immediately, otherwise, every other swipe the phone can be unlocked without it... EXACTLY like you experienced it.
Just change it to IMMEDIATE and you should be fine...
Click to expand...
Click to collapse
You want to set the Lock Timeout to Immediately (to clarify things) Located in Settings->Location and Security->Timeout
Related
Hello everyone,
I found a big time glitch on the lock screen. If your screen is locked and you let it time out that top layer with the time on it appears when you cut it back on. Just move it out the way and your phone is unlocked without a pattern code needed. How do I stop this?!?!?
mtorre5 said:
Hello everyone,
I found a big time glitch on the lock screen. If your screen is locked and you let it time out that top layer with the time on it appears when you cut it back on. Just move it out the way and your phone is unlocked without a pattern code needed. How do I stop this?!?!?
Click to expand...
Click to collapse
DUDE, do you read any of tech blogs? This was reported over the weekend and ATT and Samsung are working on a fix. Just sayin its a known issue and I don't believe a fix has been issued.
Actually I dont, but thanks for the info
Go to
Settings/location and security/timeout
And set the lock screen to immediately
Sent from my SAMSUNG-SGH-I777 using XDA App
jank0023 said:
DUDE, do you read any of tech blogs? This was reported over the weekend and ATT and Samsung are working on a fix. Just sayin its a known issue and I don't believe a fix has been issued.
Click to expand...
Click to collapse
A fix has not been issued but a workaround has been.
I have a feeling none of you will like the actual fix. The work around more like a fix. The only bug here is the pattern unlock screen showed up when it shouldn't. And it has nothing to do with security breach or not.
mtorre5 said:
Hello everyone,
I found a big time glitch on the lock screen. If your screen is locked and you let it time out that top layer with the time on it appears when you cut it back on. Just move it out the way and your phone is unlocked without a pattern code needed. How do I stop this?!?!?
Click to expand...
Click to collapse
NO WAY! I'm so glad you pointed this out for all of the rest of us.
dayv said:
Go to
Settings/location and security/timeout
And set the lock screen to immediately
Sent from my SAMSUNG-SGH-I777 using XDA App
Click to expand...
Click to collapse
Working as intended ... This is the setting to make it work how you want!!!!
my personal fix was to use No Lock to turn off that stupid swipe thing, and added WidgetLocker.
moopile said:
Working as intended ... This is the setting to make it work how you want!!!!
Click to expand...
Click to collapse
No, still not working properly. I hope at&t gets a fix soon
Sent from my SAMSUNG-SGH-I777 using xda premium
Dxtra said:
No, still not working properly. I hope at&t gets a fix soon
Sent from my SAMSUNG-SGH-I777 using xda premium
Click to expand...
Click to collapse
I set my timeout to "Immediately", let the screen go off, and have to enter pattern to get back in.
Dxtra said:
No, still not working properly. I hope at&t gets a fix soon
Sent from my SAMSUNG-SGH-I777 using xda premium
Click to expand...
Click to collapse
Here is how is suppose to work (when you have the timeout in Lock settings, not display settings, set to anything other than immediately:
1. You power on the phone, you need enter the unlock pattern.
2. You hit power button or let the display time out, the phone screen goes off.
3a. If you wake up the phone within the timeout period you set above, you should be at a normal swipe screen without the need to enter your unlock pattern.
3b. If you wake up the phone after the timeout period, you should see a pattern unlock screen and you need to enter the unlock pattern to unlock your phone.
The bug is in 3a, it showed the pattern unlock screen instead of the normal swipe screen. That's what confuseed a lot ppl. There is no security risk here. It works as it is designed to do but Samsung made a mistake to display a wrong screen.
This timeout feature is designed to be a convience feature so that you don't have to pattern unlock your phone frequently if you're actively using it. You will only be asked for pattern unlock if the phone idles for certain amount of time you set. If you don't like this and like to be asked to unlock everytime, you should set the time out to immediately anyway.
foxbat121 said:
Here is how is suppose to work (when you have the timeout in Lock settings, not display settings, set to anything other than immediately:
1. You power on the phone, you need enter the unlock pattern.
2. You hit power button or let the display time out, the phone screen goes off.
3a. If you wake up the phone within the timeout period you set above, you should be at a normal swipe screen without the need to enter your unlock pattern.
3b. If you wake up the phone after the timeout period, you should see a pattern unlock screen and you need to enter the unlock pattern to unlock your phone.
The bug is in 3a, it showed the pattern unlock screen instead of the normal swipe screen. That's what confuseed a lot ppl. There is no security risk here. It works as it is designed to do but Samsung made a mistake to display a wrong screen.
This timeout feature is designed to be a convience feature so that you don't have to pattern unlock your phone frequently if you're actively using it. You will only be asked for pattern unlock if the phone idles for certain amount of time you set. If you don't like this and like to be asked to unlock everytime, you should set the time out to immediately anyway.
Click to expand...
Click to collapse
Have you actually gave this try. I completely understand how the time out period works and I guess we all do, but your not getting where the bugs are in plural because there's two I found.
Bug 1. No matter what's your time out, it's not supposed to let you in the phone without you actually putting the password. If you let the screen sleep in the lock screen next time you wake the phone there's no password to put in. It let's you in
Bug 2. If you set time out to immediately. The Password protection lockscreen disabled right after you unlock your phone.
Sent from my SAMSUNG-SGH-I777 using xda premium
Dxtra said:
Bug 1. No matter what's your time out, it's not supposed to let you in the phone without you actually putting the password. If you let the screen sleep in the lock screen next time you wake the phone there's no password to put in. It let's you in
Click to expand...
Click to collapse
That's the whole reason why you have a timeout setting in lock screen. If you wake up the phone within timeout (timeout of the lock screen, not timeout of the display), you don't have to unlock it. If you don't like this, set to immediately.
I don't use pattern lock (which is ridiculously easy to crack). I have exchange policy on my phone with PIN password. It does not suffer from any bugs like pattern lock.
Don't understand what your mean in bug #2.
foxbat121 said:
That's the whole reason why you have a timeout setting in lock screen. If you wake up the phone within timeout (timeout of the lock screen, not timeout of the display), you don't have to unlock it. If you don't like this, set to immediately.
I don't use pattern lock (which is ridiculously easy to crack). I have exchange policy on my phone with PIN password. It does not suffer from any bugs like pattern lock.
Don't understand what your mean in bug #2.
Click to expand...
Click to collapse
Dude, it's buggy period. Before you even go any further. Give the lock screen a try. It's all around the Internet.
http://www.youtube.com/watch?v=Jvbjr4tf_Nk&feature=youtube_gdata_player
Sent from my SAMSUNG-SGH-I777 using xda premium
I see, you're the one that refuse to listen/read.
foxbat121 said:
I see, you're the one that refuse to listen/read.
Click to expand...
Click to collapse
I like the feature; same as on Honeycomb.
I got a simple pattern lock for my phone and it works everytime at each first try I make.
Just a minute ago, it didn't work. It skipped some dots even when my pattern gesture is precisely correct. Is this a known bug? Do you sometimes experience skipping dots even when you knew you have drawn the correct pattern?
GameSlim said:
I got a simple pattern lock for my phone and it works everytime at each first try I make.
Just a minute ago, it didn't work. It skipped some dots even when my pattern gesture is precisely correct. Is this a known bug? Do you sometimes experience skipping dots even when you knew you have drawn the correct pattern?
Click to expand...
Click to collapse
Try to rest the pattern and then restart the phone. It should work fine after that.
I noticed today that my screen lock isn't working most of the time. Anyone else having this problem? I've tried resetting it without luckluck
Sent from my SAMSUNG-SGH-I717 using xda premium
If you mean using a PIN or pattern then yes, I have noticed this. If you set a PIN and lock the screen manually (pressing the power button) then it should require a PIN to unlock the screen, but it does not. It still does if the timer setting expires but it should require a PIN anytime you lock the screen. This is the same security bug that the skyrocket had. You can bypass the bug by setting the timer to immediate but that is such a pain to put in your in your PIN every time the screen times out...
planoman said:
If you set a PIN and lock the screen manually (pressing the power button) then it should require a PIN to unlock the screen, but it does not. It still does if the timer setting expires but it should require a PIN anytime you lock the screen.
Click to expand...
Click to collapse
That's not a bug in either phone. Do you want to enter your pin every time you accidentally hit the power button? You don't have to set the timer to expire immediately, just set it fairly low.
techntrek said:
That's not a bug in either phone. Do you want to enter your pin every time you accidentally hit the power button? You don't have to set the timer to expire immediately, just set it fairly low.
Click to expand...
Click to collapse
Accidentally press the power button? I have never done that. I understand about the timer, but it should require a PIN if you lock the phone with the button. I tested this on my International GNote and my skyrocket (after the security fix) and they both work as they should...if it is not a bug it is not the same as the other Samsung phones running touchwiz 4. It is not a big deal but it does exit.
Edit: It was the SGSII on ATT not the skyrocket with the security bug.
The timer is there for this purpose:
* for most ppl who like the convienence of not to use PIN all the time, timer is a great feature. You only need PIN when you let it idle for a while.
* for those paranoid, set the timer to immediate and you get what you want.
There is no security issue. It's a new feature introduced in GB.
Remember, for most ppl, power button is a key/screen touch lock so that they can safely pocket the phone without worrying about butt dialing.
Bingo. You get the best of both worlds depending on your needs. I'm very happy mine doesn't lock right away.
planoman - don't worry, you'll hit the power button. In landscape mode it is right where your fingers sit (or if you have it the other way the volume button is right there).
Let me make this easier:
1. It is not a big deal.
2. It is not that way on my skyrocket or International GNote which have GB.
3. I understand about the timer. It works fine once the time set elapses.
4. If you want to lock the phone by intentionally pressing the power button to lock you phone before the timer kicks in, it will not lock.
5. The ATT Galaxy S II launched with the same thing and everyone called it a security flaw
http://articles.businessinsider.com/2011-09-30/tech/30228702_1_samsung-flaw-timeout
planoman said:
4. If you want to lock the phone by intentionally pressing the power button to lock you phone before the timer kicks in, it will not lock.
Click to expand...
Click to collapse
Hence you didn't under stand the timer at all. There are two timers: screen timer and lock timer. Don't confuse the two.
Let me make it easier for you to understand, the purpose of lock timer is to enable the lock screen when your phone idles pass the timer. Hit power button mearly inidcates that you are indeed put the phone into idle state, not start lock the phone. The actual lock won't be required until the timers elapses. This is a convienence feature so that more ppl will use the PIN lock on their phone (a good thing). A lot of ppl I know don't use PIN lock simply because they don't want to be bothered to entry PIN every 5 seconds. Yes, most ppl use power button to turn off the screen to save battery as well as avoid unintentional action on the phone. They don't use power button to LOCK the phone.
Since you like to use power button to LOCk the phone, you should set the timer to immdiate and call it a day.
5. The ATT Galaxy S II launched with the same thing and everyone called it a security flaw
http://articles.businessinsider.com/2011-09-30/tech/30228702_1_samsung-flaw-timeout
Click to expand...
Click to collapse
The reporters who called it security flaw don't understand the issue at all just like you. IIRC, BGR is the first one posted such thing. And we all know how BGR is ALWAYS correct on Android stuff
The bug in SG2 is rather a UI bug. Instead of showing you a normal swipe to unlock screen, it showed a pattern unlock screen but the underlying code works correctly (it doesn't need unlock pattern at that time). Hence it throw everyone off. The UI bug has been fixed in 2.3.6 update but the timer feature still works as it should.
foxbat121 said:
Hence you didn't under stand the timer at all. There are two timers: screen timer and lock timer. Don't confuse the two.
The reporters who called it security flaw doesn't understand the issue at all just like you. IIRC, BGR is the first one posted such thing.
The bug in SG2 is rather a UI bug. Instead of showing you a normal swipe to unlock screen, it showed a pattern unlock screen but the underlying code works correctly (it doesn't need unlock pattern at that time). Hence it throw everyone off. The UI bug has been fixed in 2.3.6 update but the timer feature still works as it should.
Click to expand...
Click to collapse
You know that feeling when you know you are right and someone is trying to argue a point and they just don"t get it? yeah..I have that feeling right now. Give it up. I know exactly what I am talking about.
If this was not a problem why did Samsung release a statement on it and deploy a fix for the ATT SGSII? It was for pattern lock ot PIN lock. Just because you do not use the phone like that does ot mean it is working as it should. Have you tried it on any other Samsung phones? I have stated that I tried it on two other Samsung phone running 2.3.6 and you are still arguing...
Stop trying to prove a point that cannot be proven. It is a bug, it is not designed to work that way and if you never ever want to intentionally lock your phone BEFORE the lock timer elapses then great! No problem for you!
From Android Central:
http://www.androidcentral.com/major-security-flaw-found-atts-upcoming-samsung-galaxy-s-ii-device
Please, Android central simple reposted the same thing from other blogs. They all do the same reposting each other without thinking. So, that's not really any proof.
This has been discussed throughly in the SGS2 forum.
The fact remains, most of us think power button not as lock button but you do. That's the only difference. And the current implementation benifits both sides. That's the point.
I understand what you are saying perfectly. I do use a PIN I have the lock timer set to ten miuntes for the reasons you stated. Normally I do not want to enter my PIN code every time...that said, there are times when I do want to hit the power button to shut the screen off or lock the phone BEFORE the 10 minutes will elapse. An example would be at home when I set my phone down so that if my kids grab it they cannot hit the power button and I come back to a screen that has my icons rearranged or missing etc. Or at a meeting in a conference room when I leave my phone sitting in the room or bag for a break etc, I usually do lock the phone just in case some one picks up my phone or worse steals it. They just need to touch the screen every nine minutes and they will have access to all of my stuff.
I get your points and do understand. My point was just because many do not use the power or lock button to intentionally lock the screen, does not mean the ATT Gnote is funtioning as designed or at least other Samsung phones with 2.3.6 and touchwiz.
So OP, it this what you were speaking of or did we miss your point entirely?
I use power button to turn off screen almost exclusively. Rarely I ever let screen timeout to turn the screen off for me. I'd be really pissed and call BUG if power button immediately lock the phone. My lock time out is set to 30 minutes so that I don't need to enter PIN in normal situations but have a piece of mind if I left my phone somewhere, it will be locked after 30 minutes.
In the old Windows Mobile days, you can hit power button the turn off the screen but you also can press and hold End Call button to lock the phone. Two separate buttons for two separate functions.
That is how my other two Sammy are as well as my captivate, og atrix, attic 2 were.
You could always set you screen timeout to 15 seconds.
Sent from my SAMSUNG-SGH-I717 using XDA App
planoman said:
You could always set you screen timeout to 15 seconds.
Click to expand...
Click to collapse
Then I will not use a PIN lock at all. 15 seconds means I have to use PIN all the time.
foxbat121 said:
Then I will not use a PIN lock at all. 15 seconds means I have to use PIN all the time.
Click to expand...
Click to collapse
Only if you press the power button. If the screen times out at 15 seconds, the pin lock timer kicks in which for you is 30 minutes. Your lock screen works regularly unless you press the power button to turn off and "lock" the screen.
Sent from my SAMSUNG-SGH-I717 using XDA App
planoman said:
Only if you press the power button. If the screen times out at 15 seconds, the pin lock timer kicks in which for you is 30 minutes. Your lock screen works regularly unless you press the power button to turn off and "lock" the screen.
Sent from my SAMSUNG-SGH-I717 using XDA App
Click to expand...
Click to collapse
You are right. I mis-read. I'm already on 15-sec screen time out. It is still too long for me when I'm done using the phone and need to put into my pocket.
Then add a small app to your home screen which will give you 1-touch phone lock. https://market.android.com/details?id=com.droidmania.lockscreenwidget&feature=search_result
There are many others - some appear to lock and shut the screen down, some just lock.
I'm pretty sure this isn't a bug, I think they just changed the way the phone is designed to lock. My captivate always locked when you pushed the button right away, I like the way it works in my Note a lot better as I will push the button by accident or habit and realize I didn't finish what I was doing. My timeout is only like 15 seconds though.
camaroz28 said:
I'm pretty sure this isn't a bug, I think they just changed the way the phone is designed to lock. My captivate always locked when you pushed the button right away, I like the way it works in my Note a lot better as I will push the button by accident or habit and realize I didn't finish what I was doing. My timeout is only like 15 seconds though.
Click to expand...
Click to collapse
The new time out features are introduced in GingerBread. So, I'm sure the Captivate with the new GB udpate will have the similar feature now.
They may have changed it, but as you said it is not the way other Samsung phones have been. Not a big deal for me, but I wanted folks who have like a 30 minute timer on the lockscreen to know their phone is not locked when they use the power button to turn off the screen like it would have been with other Samsung phones.
Sent from my SAMSUNG-SGH-I717 using XDA App
I was used to using No Lock on my previous Android 2.3 phone:
https://play.google.com/store/apps/details?id=org.jraf.android.nolock
Always worked flawlessly.
On my SGS III however there is an annoying side effect.
I tried it with a Pattern Lock and also a PIN lock.
With one of these active, and then telling No Lock to disable the lock, I can succesfully turn the screen back on without going through the lock. Great for car or desk use.
However as soon as I then select something from the Notifications pulldown, the Pattern or PIN lock suddenly pops up! It is like it was already running in the background, and then became activated or something.
I tried various alternative apps, such as Impel (with a script), No Lock Screen (with Only when charging), Auto Unlock Trial Edition... but all exhibited the same problem. Some would even change the Home button into a 'Show The Lock Screen" button... even worse!
I wonder if this is specific for Samsung, or SGS III, or ICS.
So, has anybody got a clue... or a fix?
I think it's an ICS thing... I've been using Delayed Lock for over a year and IIRC when ICS came out, this problem was present, however it was fixed by the dev. The other thing is that for DL to work on ICS using an unlock pattern, it needs to go in the system/apps but didn't need to on GB.
Sent from my CM9 TouchPad
Thanks, I'll give Delayed Lock a try.
In the mean time, still open for other suggestions and/or deeper insights into this matter!
You can just disable the lock screen in the security menu, no? I used the rooted image and Odin to root my phone but I thought the image was all stock and I have the option to have no lock.
There doesn't seem to be a pattern to this but is anyone else experiencing delay/lag when swiping to unlock? After waking the phone, I'll swipe but the animation won't go into affect and it'll pause for 2-3 secs before unlocking.
mediumraresteak said:
There doesn't seem to be a pattern to this but is anyone else experiencing delay/lag when swiping to unlock? After waking the phone, I'll swipe but the animation won't go into affect and it'll pause for 2-3 secs before unlocking.
Click to expand...
Click to collapse
Yes I've noticed it but like you said it's very random I think it's just a bug you have to remember this is a new phone without any updates yet so there's bound to be a few bugs even with Verizon's strict going over
I was able to fix mine
I have an LG G3 from Verizon, rooted.
I found a setting under Security, Notification Access and found that my lock screen has access to read my notifications. I unchecked the box and it's been performing better.
Hope this helps.