DroidForums.net is the original Verizon Android Forum! Registered Users do not see these ads. Please Register - It's Free!
Page 1 of 4 123 ... LastLast
Results 1 to 10 of 31

Thread: SECURITY FLAW! Google Voice Actions usable on lock screen!

  1. Junior Droid
    barakaspeed's Avatar
    Member #
    28734
    Join Date
    Jan 2010
    Posts
    20
    Phone
    Droid
    #1

    Exclamation SECURITY FLAW! Google Voice Actions usable on lock screen!

    I just noticed today accidentally that you can press and hold the search button on the lock screen and perform anything Google Voice Actions is capable of. I am using a Droid 2 unrooted. This may affect the Droid X as well.

    This is a huge security flaw in Motorola's modified pattern/PIN lock screen. Hopefully this thread garnishes enough attention so that this can be patched soon!


    Steps to reproduce:

    1. Lock your screen
    2. Press and hold the search button "magnifying glass"
    3. Speak any voice action and the phone will respond. Note: you will not get any visual or audible cues that it is working, but it is!
    Last edited by barakaspeed; 10-13-2010 at 06:33 AM. Reason: Updated to designate the pattern/Pin lock screen.
  2.  
     
     
     
  3. Droid Ninja
    Darkseider's Avatar
    Member #
    46256
    Join Date
    Mar 2010
    Posts
    1,869
    Phone
    Motorola Droid
    #2
    If you whisper sweet nothings to it will it light the LED red as if its' blushing?
    OG Droid w/ Pete's GPA16 w/ stock Kernel using auto OC script. (retired)

    LG G2X w/ rooted 2.3.3 leak.

    It's OK for your Droid to be different. Just be supportive and reassuring and it will do just fine. It's when you or other people point at it or mock it for being different is when its' feelings get hurt. Just show it unconditional love regardless of its' differences and it will in turn reciprocate that love and loyalty.
  4. Master Droid
    Canadroid's Avatar
    Member #
    120276
    Join Date
    Sep 2010
    Posts
    276
    Phone
    Moto D2
    #3
    Quote Originally Posted by Darkseider View Post
    If you whisper sweet nothings to it will it light the LED red as if its' blushing?
    Only if they're really dirty sweet nothings.

    Interesting, will try this in a little bit. Is it possible this was intended? The lock screen is not a true security layer without additional settings activated anyways, right? I have not set up a passcode or 'tic-tac-toe' style unlocker yet.

  5. Droid
    Numbskill's Avatar
    Member #
    126367
    Join Date
    Oct 2010
    Location
    REDLANDS CALIFORNIA
    Posts
    61
    Phone
    D2G
    #4
    its true. If you unlock the screen after you try it, the "speak now" screen will be open.

    I don't know if i care, honestly.
  6. Senior Droid
    plutonium0587's Avatar
    Member #
    114639
    Join Date
    Sep 2010
    Posts
    113
    Phone
    Droid 2
    #5
    Quote Originally Posted by Numbskill View Post
    its true. If you unlock the screen after you try it, the "speak now" screen will be open.

    I don't know if i care, honestly.
    This may actually be a useful feature when driving or something.
  7. Senior Droid
    Cyberpolice's Avatar
    Member #
    91886
    Join Date
    Jul 2010
    Posts
    132
    Phone
    Droid X
    #6
    Today, we install application that we grant access to our personal contact and other stuff in the phone. I am not sure if this is a concern to me.

    Sent from my DROIDX using Tapatalk
  8. Junior Droid
    barakaspeed's Avatar
    Member #
    28734
    Join Date
    Jan 2010
    Posts
    20
    Phone
    Droid
    #7
    Quote Originally Posted by plutonium0587 View Post
    Quote Originally Posted by Numbskill View Post
    its true. If you unlock the screen after you try it, the "speak now" screen will be open.

    I don't know if i care, honestly.
    This may actually be a useful feature when driving or something.
    I hope this 'feature' is actually a bug and gets squashed. I feel a lock screen is just that, a locking mechanism designed to prevent unauthorized access to any level of functionality of the phone that has the potential to incur charges and/or fraud.
  9. Droid Ninja
    Redflea's Avatar
    Member #
    5967
    Join Date
    Nov 2009
    Posts
    1,954
    Liked
    8 times
    Phone
    Motorola Droid 2
    #8
    Clarify what you mean by "lock screen."

    Do you mean the slide to unlock lock screen that always appears?

    Or do you mean this works when the D2 has been locked using a pattern or PIN lock set up in settings>Location and Security.

    If the former, this is a non-issue, as the standard lock screen has no security whatsoever.

    If you mean the pattern/PIN lock screen, then this is a real security flaw.
  10. Junior Droid
    barakaspeed's Avatar
    Member #
    28734
    Join Date
    Jan 2010
    Posts
    20
    Phone
    Droid
    #9
    Quote Originally Posted by Redflea View Post
    Clarify what you mean by "lock screen."

    Do you mean the slide to unlock lock screen that always appears?

    Or do you mean this works when the D2 has been locked using a pattern or PIN lock set up in settings>Location and Security.

    If the former, this is a non-issue, as the standard lock screen has no security whatsoever.

    If you mean the pattern/PIN lock screen, then this is a real security flaw.
    Happens in both scenarios. This is why I'm posting so the word can get out.
  11. Senior Droid
    dast's Avatar
    Member #
    113608
    Join Date
    Sep 2010
    Posts
    132
    Phone
    Droid 2
    #10
    When we say Google Voice Actions, are we referring to the stock "Voice Commands" app that comes with the D2?
Page 1 of 4 123 ... LastLast

Links

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Similar Threads

  1. Replies: 47
    Last Post: 08-25-2010, 09:43 PM
  2. Google Improves “Voice Actions” on Android
    By fandroid1 in forum Android General Discussions
    Replies: 1
    Last Post: 08-15-2010, 09:55 PM
  3. google voice-actions not installing
    By goodBEan in forum LithiumMod
    Replies: 7
    Last Post: 08-13-2010, 09:42 AM
  4. Google Voice Actions - Alarm Clock
    By ddarvish in forum Bugless
    Replies: 4
    Last Post: 08-12-2010, 10:26 PM
  5. Replies: 1
    Last Post: 01-11-2010, 07:52 PM

Search tags for this page

android google voice screen lock
,

android voice lock

,
get past pattern lock android
,
how to get past a pattern lock
,

how to get past android pattern lock

,
how to get past pattern lock
,
how to get past pattern lock on android
,

voice lock android

,
voice lock open securety
,
voice locker for android
Click on a term to search our site for related topics.

Tags for this Thread

Find us on Google+