Pin/password security useless in android - Galaxy S II General

So it hit me the other day when i was copying files onto my phone with qtadb(stuck with mtp in cm9) that even if a pin on password is set on the phone i can copy/erase anything from the phone, worse if its rooted, if its connected to a computer. Doesn't this kind of defeat the purpose of the pin/password?
If it even possible to disable just the data +/- pins if the phone is locked with a pin/password, and re-enable them once its unlocked?

peachpuff said:
So it hit me the other day when i was copying files onto my phone with qtadb(stuck with mtp in cm9) that even if a pin on password is set on the phone i can copy/erase anything from the phone, worse if its rooted, if its connected to a computer. Doesn't this kind of defeat the purpose of the pin/password?
If it even possible to disable just the data +/- pins if the phone is locked with a pin/password, and re-enable them once its unlocked?
Click to expand...
Click to collapse
That's possibly do-able.
If you edited the sources you could probably disable adb on lockscreen... But if you close all the holes, and something goes wrong, you are stuffed
Remember recovery is always the best way "in" to the device It has root access anyway, and it's unprotected.

i am not an expert or anything.. but to my understanding.. if u dont enable usb debugging and u have lock screen.. u CANT directly modify the data in phone without opening the lock screen first.. i just tested it now.. even if i try to go to usb mass storage mode, im required to open the lock screen and press connect mass storage...
unless u go into download mode and adb but that also require usb debugging to be enable

pulser_g2 said:
Remember recovery is always the best way "in" to the device It has root access anyway, and it's unprotected.
Click to expand...
Click to collapse
Ya i guess if someone knowledgeable enough wants to get into your phone they'll just use recovery. Is protecting recovery possible?
warrez said:
i am not an expert or anything.. but to my understanding.. if u dont enable usb debugging and u have lock screen.. u CANT directly modify the data in phone without opening the lock screen first.. i just tested it now.. even if i try to go to usb mass storage mode, im required to open the lock screen and press connect mass storage...
unless u go into download mode and adb but that also require usb debugging to be enable
Click to expand...
Click to collapse
Quite right, disabling usb debugging won't allow you to adb into the phone. Tasker allows you to run commands if the display is off and unlocked, anyone know the command to enable/disable usb debugging?

i dont know about the tasker's command.. but if u have lock screen and disabled usb debugging.. it should be quite safe so its not useless

There is a reason you get this shiney warning dialog when enabling USB-Debugging.
Ever bothered to actually read it?

peachpuff said:
Ya i guess if someone knowledgeable enough wants to get into your phone they'll just use recovery. Is protecting recovery possible?
Click to expand...
Click to collapse
Encrypt the phone?
Think encrypted phone cannot be accessed through recovery

KeePassDroid.....
Best way is to use 3rd party applicayions - KeePassDroid is free and very good, you can set very secure passwords and it has a desktop application too
I use it to store usernames/pwds and by all accounts its pretty secure, it also supports different encryption types on the database

Security
If your phone is stolen better to use some app from market that you can control remotelly and ERASE COMPLETELY the phone...
Meanwhile, encryption could be enough.
And both together maybe is the best.

I noticed flashing roms (checkrom) that i would still have a lock screen but any way i connected the dots it would unlock.

eseregin said:
Encrypt the phone?
Think encrypted phone cannot be accessed through recovery
Click to expand...
Click to collapse
This is correct.
Using encryption with a proper password (not PIN/Pattern) you need to enter the password in recovery as well.
So even with adb root access in recovery, it's impossible to access the data without the password.
Kingybear said:
I noticed flashing roms (checkrom) that i would still have a lock screen but any way i connected the dots it would unlock.
Click to expand...
Click to collapse
That's because the flag in EFS for the pattern lock is still set, but no actual pattern is set in the system's data.
So, imstead of never letting you "in" anymore due to no correct pattern it just always unlocks.

Related

SD-ROM: Screen locked with pattern and cannot unlock

I forgot the pattern of my lockscreen, tried too many times and cannot unlock with google account.
Unfortunately wifi, data and developer mode is turned off.
Was able to locate and extract gesture.key but how can I remove it from data.ext4?
SD-ROM is containing all my phone numbers, messeges etc.
Please help, thank you in advance.
experto1 said:
I forgot the pattern of my lockscreen, tried too many times and cannot unlock with google account.
Unfortunately wifi, data and developer mode is turned off.
Was able to locate and extract gesture.key but how can I remove it from data.ext4?
SD-ROM is containing all my phone numbers, messeges etc.
Please help, thank you in advance.
Click to expand...
Click to collapse
How have you found and extracted gesture.key?
To remove something from data.ext4 you could mount the file in Ubuntu/Linux which will grant you access to the files.
Code:
[CENTER]sudo mount -o loop data.ext4 ~/Desktop/data
then edit it and unmount it
umount data.ext4[/CENTER]
HypoTurtle said:
How have you found and extracted gesture.key?
To remove something from data.ext4 you could mount the file in Ubuntu/Linux which will grant you access to the files.
Code:
[CENTER]sudo mount -o loop data.ext4 ~/Desktop/data
then edit it and unmount it
umount data.ext4[/CENTER]
Click to expand...
Click to collapse
thanx a lot HypoTurtle! It worked for me but removing gesture.key did´nt remove the protection. I still have googlemail unlock screen.
Any idea?
experto1 said:
thanx a lot HypoTurtle! It worked for me but removing gesture.key did´nt remove the protection. I still have googlemail unlock screen.
Any idea?
Click to expand...
Click to collapse
Had a quick look and if you aren't given the option to reset it, after ~5 failed attempts you could try downloading lock screen bypass from the market to see if that works, I'll attach a copy of the apk if you cant get it.
Just tried it and its 5 failed attempts for me, then the offer to reset.
unfortunately this did not work for me. think it is locked at a different point.
I will give the sql method a try: http://forum.xda-developers.com/showthread.php?t=485988
Anyway I hit the thanks button
problem solved:
after trying sql method and restart it was showing missed calls, could enable data connection and unlock it with my googlemail account.
experto1 said:
problem solved:
after trying sql method and restart it was showing missed calls, could enable data connection and unlock it with my googlemail account.
Click to expand...
Click to collapse
I'm glad that you could solve it and unlock your phone, but I am curious, why it didn't let you unlock using Gmail without data.
Sometimes, I unlock the phone using gmail and pass EVEN with airplane mode on and no WiFi. Isn't it supposed to check with your already registered gmail account? thus no need for an internet connection?
Anywa, enjoy your phone.
experto1 said:
problem solved:
after trying sql method and restart it was showing missed calls, could enable data connection and unlock it with my googlemail account.
Click to expand...
Click to collapse
Glad you got round it, I didn't mention anything adb wise as I though you said debugging was turned of, at least you've learned something. And being able to edit the data.ext4 on a desktop has it's benefits.
Marvlesz said:
I'm glad that you could solve it and unlock your phone, but I am curious, why it didn't let you unlock using Gmail without data.
Sometimes, I unlock the phone using gmail and pass EVEN with airplane mode on and no WiFi. Isn't it supposed to check with your already registered gmail account? thus no need for an internet connection?
Anywa, enjoy your phone.
Click to expand...
Click to collapse
Yes Marvlesz, was also strange to me. Tried the same with my ICS Pad without any connection while I read somewhere that even wifi should not work only when the device is connected to USB!? Maybe it depends on the version? My phone was on ICS 4.0.3 (IceCreamTosti_v0.10_AOKP_M4) with Tyatung Kernel 2.6.32.
Now after all my installation got broke but I can access my stuff, finally save it and reinstall newer version while I have a good reason now to do that
HypoTurtle said:
Glad you got round it, I didn't mention anything adb wise as I though you said debugging was turned of, at least you've learned something. And being able to edit the data.ext4 on a desktop has it's benefits.
Click to expand...
Click to collapse
Yes HypoTurtle, debugging was off and I did´nt use adb. With your kind help I mounted data.ext4 and changed settings.db in linux.

[Q] Can Secure Boot/TPM be fully disabled on Surface Pro 1?

Just a question. I want to disable secure boot/TPM completely on my Surface Pro 128Gb. Can this be done?
When I disable them both in the UEFi-Bios, it seems it is still working.
I have some programmes from which i changed a few dll's, and when secure boot/TPM recognises them at startup, it boots my Surface in UEFI-Bios mode, with no way of getting Windows 8.1 started.
Anyone had any clues as how to overcome this problem?
Do you get any error messages? Do you know that those changes still result in a bootable system to begin with? Have you tried using a debug or testsigning mode in the booatloader? (If Secure Boot is enabled, you won't be able to set those options, so it's a decent test of that anyhow.)
Oh, and disabling the TPM is generally a bad idea. This is especially true if you have BitLocker enabled, since by default BL requires the TPM. You *should* just be getting a "Enter your BitLocker recovery key" prompt in that case, though.
I dont get any error messages, just my Surface reboots in UEFI-boot mode, where i can enable/disable TPM-secure boot. Whatever I do there, whatever I change there, after restarting I get back in the same UEFI-Bios screen. The only way to recover from this is by resetting my Windows system from my reccovery.
I have installed a program called Trados Studio. For this I have created a few DLL's of my own. When I replace the orginal DLL's with the ones created by me, this happens. I guess because my own created DLL's aren't trusted, while the original DLL's were trusted during installation of Trados Studio.
Well, depending on what DLLs those are, the system may check their signatures even with Secure Boot disabled, and refuse to boot because they're modified. Thus the suggestion to use kernel debug, or TestSigning (you might need to test-sign the modified DLLs for the latter option to work).
GoodDayToDie said:
Well, depending on what DLLs those are, the system may check their signatures even with Secure Boot disabled, and refuse to boot because they're modified. Thus the suggestion to use kernel debug, or TestSigning (you might need to test-sign the modified DLLs for the latter option to work).
Click to expand...
Click to collapse
CheopsChefren said:
?
Click to expand...
Click to collapse
Do you need a keyboard connected to get out of the UEFI-Bios screen, after doing a system recovery the reboot has left me at the American Megatrends Bios screen asking if I want to turn off the TPM. Any help would be appreciated.
EDIT: All is now OK after connecting a touch cover, a regular keyboard would not work but the touch cover and the Esc key did the trick

[Q] Phone is Device Manager but not My Computer...

Hi,
I ran over my phone. The screen does not work anymore. When I connect the phone to my computer, I get a notification saying that the device can perform faster. So the computer obviously sees the phone. I also see the phone in the device manager, but I do not see it in my computer. The only reason I want to access it, is to download some pictures that were stupidly saved on the device instead of the sd card. Any ideas how to access my pictures?!
Thanks,
G
p.s. My phone backs up pictures to my google+ account, but I am not sure if it does that to ALL pictures, or only to the ones that were on the sd card?! No way for me to check as of right now, what pictures did in fact got backed up.
Anyone?!
How on earth did you manage to run over your phone?
Did you have USB debugging enabled before the screen broke?
Did you have a lockscreen security other than swipe or none?
Sent From My Samsung Galaxy Note 3 N9005 Using Tapatalk
ShadowLea said:
How on earth did you manage to run over your phone?
Click to expand...
Click to collapse
It happened in the garage. I guess it must have fallen out earlier when I was unloading something?!
Did you have USB debugging enabled before the screen broke?
Click to expand...
Click to collapse
I believe so...
Did you have a lockscreen security other than swipe or none?
Click to expand...
Click to collapse
Just swipe...
Thanks for the reply...
G
If you did have USB debugging enabled, you can try copying the entire content through ADB.
Use 'adb pull /sdcard/ /sdcard/'. This will copy all internal files into your C:\SDcard directory. Be advised, this could take quite a while depending on how much data it is.
ShadowLea said:
If you did have USB debugging enabled, you can try copying the entire content through ADB.
Use 'adb pull /sdcard/ /sdcard/'. This will copy all internal files into your C:\SDcard directory. Be advised, this could take quite a while depending on how much data it is.
Click to expand...
Click to collapse
I didn't even know what ADB is, but I just googled it... I am going to have to do some reading to figure out how to use it, but at least it is a start! I will give it a try and keep you posted.
thanks you,
G
ShadowLea said:
If you did have USB debugging enabled, you can try copying the entire content through ADB.
Use 'adb pull /sdcard/ /sdcard/'. This will copy all internal files into your C:\SDcard directory. Be advised, this could take quite a while depending on how much data it is.
Click to expand...
Click to collapse
Hey,
I finally got a chance to try ADB. The problem is, I get "device unauthorized". I did a google search and pretty much every search result says the same, "... go into the settings and change...". As you know, I cannot do that since my screen is not working. I guess my only option is to get a new screen.
Thanks again,
G

Recover Data From Phone - Screen is smashed up, but phone is working

Hi everyone
It's been a year and as per usual I've smashed the screen on my Nexus 6P.
Have arranged for a repair via the manufacturer, who have advised me they will factory restore the phone when repairing, thereby wiping all data.
I need to recover the data (namely pictures and video), not backed up to Google Drive etc etc, phone is locked via pin/ fingerprint, and won't show up on my PC as removable storage.
Is there anything else I can try?
Many thanks in advance for your help, and apologies if there is a pre-existing thread already on XDA.
Foi0029 said:
Hi everyone
It's been a year and as per usual I've smashed the screen on my Nexus 6P.
Have arranged for a repair via the manufacturer, who have advised me they will factory restore the phone when repairing, thereby wiping all data.
I need to recover the data (namely pictures and video), not backed up to Google Drive etc etc, phone is locked via pin/ fingerprint, and won't show up on my PC as removable storage.
Is there anything else I can try?
Many thanks in advance for your help, and apologies if there is a pre-existing thread already on XDA.
Click to expand...
Click to collapse
I am unsure if USB-Debugging is enabled.
Okay, if the phone is on and you can use the fingerprint scanner to unlock it, plug it into the PC. Use ADB to see if the device is recognized. Use the command 'adb devices'.
If that works, just use ADB to pull your files.
So say you wanted to pull your pictures that you took from the phone and save them to your Pictures folder on PC, the code would be;
adb pull /storage/emulated/0/DCIM c:/Users/(YourUsernameHere)/Pictures
You can save it to any location on the PC you'd like, just change the path above.
If you just want to save everything you could use;
adb pull /storage/emulated/0 c:/(PathYouWantTheFilesSavedTo)
I'll look around and see if there's anything to be done without ADB enabled, or a way to get it enabled.
I'd say if it's not enabled and you can verify touch still works, if you can find someone with another 6P, you could unlock yours via fingerprint and then use the other one to find your way to developer settings to enable it on yours. If touch doesn't work, I'm honestly not sure if there's a way to get it turned on. I'll look around or if anyone else has any ideas then we might be able to get you set up.
Use this to set up ADB properly on PC if you haven't already;
https://forum.xda-developers.com/nexus-6p/general/guides-how-to-guides-beginners-t3206928/page576
RoyJ said:
Okay, if the phone is on and you can use the fingerprint scanner to unlock it, plug it into the PC. Use ADB to see if the device is recognized. Use the command 'adb devices'.
If that works, just use ADB to pull your files.
So say you wanted to pull your pictures that you took from the phone and save them to your Pictures folder on PC, the code would be;
adb pull /storage/emulated/0/DCIM c:/Users/(YourUsernameHere)/Pictures
You can save it to any location on the PC you'd like, just change the path above.
If you just want to save everything you could use;
adb pull /storage/emulated/0 c:/(PathYouWantTheFilesSavedTo)
I'll look around and see if there's anything to be done without ADB enabled, or a way to get it enabled.
I'd say if it's not enabled and you can verify touch still works, if you can find someone with another 6P, you could unlock yours via fingerprint and then use the other one to find your way to developer settings to enable it on yours. If touch doesn't work, I'm honestly not sure if there's a way to get it turned on. I'll look around or if anyone else has any ideas then we might be able to get you set up.
Use this to set up ADB properly on PC if you haven't already;
https://forum.xda-developers.com/nexus-6p/general/guides-how-to-guides-beginners-t3206928/page576
Click to expand...
Click to collapse
Thank you so much for your input. I'll try the above and hopefully it works.
Foi0029 said:
Thank you so much for your input. I'll try the above and hopefully it works.
Click to expand...
Click to collapse
If the phone has been turned off, this will not work.
You will need to enter the PIN.
If your device have a custom recovery installed aka TWRP you can pull your data from there, just power on your device pressing power button + volume up button, connect it to your PC and you'll see your data like a pen drive (MTP actually)
Enviado desde mi Nexus 6P mediante Tapatalk
DorianX said:
If your device have a custom recovery installed aka TWRP you can pull your data from there, just power on your device pressing power button + volume up button, connect it to your PC and you'll see your data like a pen drive (MTP actually)
Enviado desde mi Nexus 6P mediante Tapatalk
Click to expand...
Click to collapse
Not unless he can enter his password. Try it out yourself.
Every time I enter to recovery mode never ask me for a password...
DorianX said:
Every time I enter to recovery mode never ask me for a password...
Click to expand...
Click to collapse
Then your device is not encrypted or you don't have a lock screen set up.
There is no way to extract your data from a smashed screen phone, maybe you can go to some repair shop and ask the staff to replace the screen without factory reset.

pattern-locked p9-lite, how to recover at least the photos?

The phone is fully working and connected on the Internet with the google account and everything, but who set the pattern to unlock the screen also forgot it
Apparently Google remove the option to set a temporary password using the Android Device Manager to unlock the device and the USB debugging is disable on the phone (so I guess no abd).... any ideas on how to recover the photos stored on the internal memory?
First of all, we need to know if it is yours. There are thiefs that steal phones and try to access personal data for their pleasure.
Hisuite for photos.
Johnny TDN said:
First of all, we need to know if it is yours. There are thiefs that steal phones and try to access personal data for their pleasure.
Click to expand...
Click to collapse
I'm actually trying to help the owner of the phone, no thief involved here
Since the google account is setup and the device has also internet connection, I was thinking about installing an app remotely from the play store website... but which one? I need one that installs, spawns a service and automatically exposes the content of the internal storage without touching it (wifi, ftp, ...). Any ideas?
I remember that recovery factor reset didn't remove the internal storage (in my case)
Johnny TDN said:
I remember that recovery factor reset didn't remove the internal storage (in my case)
Click to expand...
Click to collapse
The official Huawei customer support answered saying that for android >5.1.1 the procedure is to take a backup and disconnect the account before firing the "Wipe Data Factory Reset" from the recovery, if not all the user's data will be lost.
mrfree2ita said:
The official Huawei customer support answered saying that for android >5.1.1 the procedure is to take a backup and disconnect the account before firing the "Wipe Data Factory Reset" from the recovery, if not all the user's data will be lost.
Click to expand...
Click to collapse
Then the last method is this :
If you still have the warranty, make sure it has the same IMEI as the one written on the warranty (you can check what imei you have by removing the sim tray and look at the IMEI written on it), then go to HUAWEI and tell them that you forgotten your password and you need your files. They will ask you for the warranty and some security questions.(maybe, idk)
If you don't have warranty, then sorry, you are screwed.
mrfree2ita said:
The phone is fully working and connected on the Internet with the google account and everything, but who set the pattern to unlock the screen also forgot it
Apparently Google remove the option to set a temporary password using the Android Device Manager to unlock the device and the USB debugging is disable on the phone (so I guess no abd).... any ideas on how to recover the photos stored on the internal memory?
Click to expand...
Click to collapse
Does the device have a stock or custom recovery installed? In the case of a custom one, you don't need to enable USB debugging in the actual system; you can just boot into the recovery and go to town with ADB.
In the case of a stock ROM, try installing fastboot and ADB drivers, and booting into fastboot mode. I can't remember the exact key combination, but once you're booted into fastboot and connected to your PC via USB you should be able to flash TWRP or CWM without enabling debugging, I think. Guides to do this can be googled. Make sure to use the right .img for your phone though, or you'll brick it.
Once that's done and you're able to boot into a custom recovery, do so, connect to your PC via USB, fire up ADB, and use one of the following commands:
su
adb shell
cd /data/data/com.android.providers.settings/databases
sqlite3 settings.db
update system set value=0 where name='lock_pattern_autolock';
update system set value=0 where name='lockscreen.lockedoutpermanently';
.quit
or
su
adb shell rm /data/system/gesture.key
The first of these will nullify the order in which the pattern or PIN is supposed to be inserted, meaning you can do whatever and unlock the phone. The second removes the PIN or pattern entirely.
Let me know how this went, and if you need any help, feel free to reply here or PM me. I'll get back at you as soon as I can.
mrfree2ita said:
The phone is fully working and connected on the Internet with the google account and everything, but who set the pattern to unlock the screen also forgot it
Apparently Google remove the option to set a temporary password using the Android Device Manager to unlock the device and the USB debugging is disable on the phone (so I guess no abd).... any ideas on how to recover the photos stored on the internal memory?
Click to expand...
Click to collapse
Easy..But I won't help you cause I don't know if it's your phone or not sorry

Categories

Resources