1. DroidForums.net is currently undergoing a major software upgrade. If you are experiencing any problems logging in please: Contact Us

Possible Security Problem

Discussion in 'Bugless' started by gonrada, Aug 13, 2010.

  1. gonrada
    Offline

    gonrada New Member

    Joined:
    Apr 8, 2010
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Florida, USA
    Not really sure if this is a Bugless Problem or a 2.2 problem so please forgive me.

    But I am running V0.4 and I have found a couple of security problems with the current Rom.

    Where would the best place for me to bring these up to pete?
    I looked at his Website but didn't see a place to contact him, and I don't use twitter.
    Would I PM be the next best thing?

    Currently running the v3 Bugless Evolution Rom
  2. Rsswga
    Offline

    Rsswga New Member

    Joined:
    May 12, 2010
    Messages:
    707
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    bowdon, georgia
    what are they
  3. gonrada
    Offline

    gonrada New Member

    Joined:
    Apr 8, 2010
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Florida, USA
    Nothing major.
    The SD card auto mounts. (This may be from the EVO theme)
    But even when the phone is locked it will still auto mount the SD card letting who ever has it have access to the card.

    When locked the phone will show the handcent pop up when a new text is received and let anyone reply to it.
  4. unclebrudy
    Offline

    unclebrudy New Member

    Joined:
    Dec 4, 2009
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    0
    Do you have the media player doubleTwist installed? It defaults to auto-mount when installed, you have to change it otherwise in the apps' settings.

    Just a thought.
  5. gonrada
    Offline

    gonrada New Member

    Joined:
    Apr 8, 2010
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Florida, USA
    Wow, I feel silly now.
    Yeah I installed it the same night I upgraded my phone.

    Well done unclebrudy.
  6. unclebrudy
    Offline

    unclebrudy New Member

    Joined:
    Dec 4, 2009
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    0
    No prob friend. Just glad that was the culprit. For 3 days I could not figure that exact same issue out and it drove me insane until I checked doubleTwist.

    You have a valid concern with Handscent though. I've never used it but if its as you say it is while the phone is locked then that's a problem...
  7. ZeroBarrier
    Offline

    ZeroBarrier New Member

    Joined:
    Apr 23, 2010
    Messages:
    991
    Likes Received:
    0
    Trophy Points:
    0
    Hancent > Settings > Notification Settings > Popup Settings > Window Mode > Without Quick Reply

    Fixed.
  8. gonrada
    Offline

    gonrada New Member

    Joined:
    Apr 8, 2010
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Florida, USA
    Yeah I know how to turn off the popup for handcent.
    While that may be a valid work around it doesn't address the underlying issue though.
  9. NeverEndingXsin
    Offline

    NeverEndingXsin New Member

    Joined:
    Jan 16, 2010
    Messages:
    721
    Likes Received:
    0
    Trophy Points:
    0
    which is what?

    and +1 to the solution
  10. lee__D
    Offline

    lee__D New Member

    Joined:
    May 21, 2010
    Messages:
    246
    Likes Received:
    0
    Trophy Points:
    0
    i would think his issue is that it popups at all when the phone is locked.
  11. ilikemoneygreen
    Offline

    ilikemoneygreen New Member

    Joined:
    Apr 7, 2010
    Messages:
    2,579
    Likes Received:
    14
    Trophy Points:
    0
    Location:
    AZ, Superstition MTNs!
    Well yes but none of this has to do with pete.... That issue is on any rom.... I can flash to stock right now and have the same issue...
  12. NeverEndingXsin
    Offline

    NeverEndingXsin New Member

    Joined:
    Jan 16, 2010
    Messages:
    721
    Likes Received:
    0
    Trophy Points:
    0
    its an issue with Froyo in general right now
  13. ilikemoneygreen
    Offline

    ilikemoneygreen New Member

    Joined:
    Apr 7, 2010
    Messages:
    2,579
    Likes Received:
    14
    Trophy Points:
    0
    Location:
    AZ, Superstition MTNs!
    i like it going in front of security lock.... so much easier than unlocking whole devise just for a text. ( but i text a lot i guess...)
  14. lee__D
    Offline

    lee__D New Member

    Joined:
    May 21, 2010
    Messages:
    246
    Likes Received:
    0
    Trophy Points:
    0
    i wasn't implying that it was, just trying to put it in clearer words.
  15. ZeroBarrier
    Offline

    ZeroBarrier New Member

    Joined:
    Apr 23, 2010
    Messages:
    991
    Likes Received:
    0
    Trophy Points:
    0
    First, if you look at my instructions again, you'll notice that they are not instructions on how to turn the popups off, but to remove the quick reply thus forcing you to unlock your phone to reply to any text message (as per your OP).

    Secondly, there is no security issue with this. This is an app that you decided to install, then permitting it to do these actions by way of your chosen settings.

    Handcent has to be the single most customizable messaging replacement app on Android, and it's quite amazing how some people just don't fiddle around with the settings to customize it just the way they want. So do yourself a favor and start playing with the settings; chances are you are complaining for no valid reason because you didn't use the right settings.
  16. BuglessFan
    Offline

    BuglessFan New Member

    Joined:
    Jul 12, 2010
    Messages:
    427
    Likes Received:
    0
    Trophy Points:
    0
    Neither of these are security issues, they are chosen user settings. You can choose to not have your phone ever lock.

    The SD card one really has me scratching my head, as there is no security on the SD card mounted or not. If someone has your phone all they have to do is pop it out and it's simple FAT32, readable by anyone. How would not having it mount increase any security at all?