"Reverse smudge engineering" foils Android unlock security

Discussion in 'Android News' started by Malvado, Feb 15, 2012.

  1. Malvado
    Offline

    Malvado DF News Team/Mod Premium Member

    Joined:
    Nov 7, 2009
    Messages:
    1,991
    Likes Received:
    15
    Trophy Points:
    103
    Ratings:
    +15
    20120214_Smudged_Nexus_S_001.jpg

    Eat a lot of greasy hand food? Then consider avoiding one of the ways Google offers to unlock an Android device.

    Google's mobile operating system lets people unlock devices by swiping a particular pattern across a three-by-three grid of dots. But Android evangelist Tim Bray raised a concern about "reverse smudge engineering" to figure out the unlock pattern.

    Bray recommends people stop swiping altogether and concludes that the numeric code option is the best for him: "The PIN has the huge advantage that it uses a nice big fat numeric keypad, and I can type it in really, really fast; I could do it right in front of you five times in a row and you'd have no clue, I bet."

    SOURCE: ongoing by Tim Bray · Safe Unlocking
     
  2. idk5
    Offline

    idk5 Member

    Joined:
    Jun 22, 2010
    Messages:
    172
    Likes Received:
    4
    Trophy Points:
    18
    Location:
    Driggs, ID
    Ratings:
    +4
    My friend noticed this when I had my OG DROID so now everytime I use my phone I wipe the screen off on my shirt

    Sent from my DROID BIONIC using DroidForums
     
    • Like Like x 1
  3. Malvado
    Offline

    Malvado DF News Team/Mod Premium Member

    Joined:
    Nov 7, 2009
    Messages:
    1,991
    Likes Received:
    15
    Trophy Points:
    103
    Ratings:
    +15
    I'm always wiping my screen and I also don't use any pattern or pin LOL.

    Sent from my DROID3 using DroidForums
     
  4. g_what
    Offline

    g_what Member

    Joined:
    Dec 27, 2009
    Messages:
    203
    Likes Received:
    5
    Trophy Points:
    18
    Ratings:
    +5
    This has been mentioned since Android first became popular. I remember seeing similar articles shortly after purchasing my OG Droid in '09. I don't think this should be a major issue because many people, as mentioned above, will wipe off their screen after swiping or playing with their device. If you are genuinely worried about the security of your device, you probably have a PIN instead of a swipe pattern anyways. And you also probably have a remote locator and wipe application.

    I personally use a screen protector that is finger print resistant. It's not so much for the security concern as it is for the benefit of not worrying about a smudgey screen. The FPR screen protector works impressively well. The company that makes them is called Unipixel. If you are curious, the info page for the FPR screen protectors is here, and they have a small selection for sale on Amazon here. If you have a supported device I highly recommend that you give it a try.
     
  5. ConqSoft
    Offline

    ConqSoft Active Member

    Joined:
    Nov 16, 2009
    Messages:
    1,056
    Likes Received:
    12
    Trophy Points:
    38
    Location:
    Raleigh, NC
    Ratings:
    +12
    All my patterns overlap also, which helps some. But I'm always wiping the screen anyway.
     
  6. akhenax
    Offline

    akhenax Senior Member

    Joined:
    Jul 13, 2010
    Messages:
    1,175
    Likes Received:
    129
    Trophy Points:
    63
    Location:
    NY
    Ratings:
    +130
    This thread is both hilarious and obvious at the same time.

    1st: Why is this guy's GNex so disgusting?
    2nd: Don't clean your screen with Crisco.
    :D
     
  7. NeoPhoenixTE
    Offline

    NeoPhoenixTE Member

    Joined:
    Dec 20, 2010
    Messages:
    256
    Likes Received:
    24
    Trophy Points:
    18
    Location:
    Fort Collins, CO
    Ratings:
    +24
    The same approach can be used for a pinpad. Heck, smudge engineering was used back in the 80s on door keypads. Dust for prints, and you have a 1 in 16 chance of getting it right.

    Why this is news is the real story. ;P
     
  8. JeffDenver
    Offline

    JeffDenver Member

    Joined:
    Apr 29, 2010
    Messages:
    924
    Likes Received:
    4
    Trophy Points:
    18
    Ratings:
    +4
    Yeah, this is old news.

    And an easy way around it is just not to lock your phone. Then there are no smudge marks to give away your password.
     
  9. Malvado
    Offline

    Malvado DF News Team/Mod Premium Member

    Joined:
    Nov 7, 2009
    Messages:
    1,991
    Likes Received:
    15
    Trophy Points:
    103
    Ratings:
    +15
    It may be old news, I'm just sharing it with the community. I don't specify news articles for specific members LOL. And the "dirty" Nexus pic was done intentionally for the article I believe.

    Sent from my DROID3 using DroidForums
     
  10. Quicksilver7714
    Offline

    Quicksilver7714 DF Super Moderator Rescue Squad Premium Member

    Joined:
    Jul 2, 2010
    Messages:
    2,436
    Likes Received:
    60
    Trophy Points:
    113
    Ratings:
    +60
    I always have clean hands when I use my phone. I use, the pattern unlock but I am constantly wiping the screen to clean any smudges off.

    Sent from my Galaxy Nexus using Tapatalk
     
  11. JeffDenver
    Offline

    JeffDenver Member

    Joined:
    Apr 29, 2010
    Messages:
    924
    Likes Received:
    4
    Trophy Points:
    18
    Ratings:
    +4
    Ditto. I dont do it for security reasons, I do it because I am anal about having a perfectly clean screen, heh heh

    I have friends who never wipe (their phones I mean), and I dont know how they do it. That would annoy the crap out of me.
     
  12. Malvado
    Offline

    Malvado DF News Team/Mod Premium Member

    Joined:
    Nov 7, 2009
    Messages:
    1,991
    Likes Received:
    15
    Trophy Points:
    103
    Ratings:
    +15
    I couldn't help but laugh at "I have friends who never wipe" LMAO!

    Sent from my DROID3 using DroidForums
     
  13. tjk629
    Online

    tjk629 Silver Member

    Joined:
    Jan 5, 2010
    Messages:
    3,035
    Likes Received:
    65
    Trophy Points:
    113
    Ratings:
    +65
    Saw this on my OG, but not my Bionic.

    Sent from my DROID BIONIC using DroidForums
     
  14. rubiksc00p
    Offline

    rubiksc00p Senior Member

    Joined:
    Sep 14, 2011
    Messages:
    1,380
    Likes Received:
    29
    Trophy Points:
    48
    Location:
    Somewhere on this amazing ball of creation!
    Ratings:
    +29
    Ahh! I do this all the time! I usually do it with the pins on iPod touches mostly. So.... you can do it with pins, so really just clean your screen or smudge it everywhere! ;)

    Sent from the best phone on Verizon!
     
  15. Bob Dammit
    Offline

    Bob Dammit DF Super Moderator

    Joined:
    Dec 11, 2009
    Messages:
    1,709
    Likes Received:
    17
    Trophy Points:
    68
    Location:
    N 42° 05.183 W 079° 10.914
    Ratings:
    +17
    Not to nitpick, but a 4 digit pin is a 1 in 24 odds (4! or 4*3*2*1). As far as being news, look at everything the common user overlooks on a daily basis. Case in point, look through the support boards for threads of people who didn't make a backup...


    Sent from my Galaxy Nexus using DroidForums
     
Search tags for this page
android unlock bookmarks
,
how to crack a bionic android cell phone pattern code
,
how to crack numeric smudge
,
how to hack pattern lock from smudges
,
how to unlock bookmarks on droid x
,

unlock bookmarks android

,
unlock engineer code for droid x 2