Database Develop

Can I get rid of the password lock on my Kaiser / Tilt?

When I set up my exchange 07 account on my tilt it forced me to set a password lock on my phone. Honestly I don't have many security concerns with my mobile, and would like to bypass it because it's annoying. Is there a workaround for the password lock?

Set your lock to only prompt you after 24 hours of inactivity.
On the flip side, with WM6.5, the lock screen is much more useful.

lordxiagan said:
When I set up my exchange 07 account on my tilt it forced me to set a password lock on my phone. Honestly I don't have many security concerns with my mobile, and would like to bypass it because it's annoying. Is there a workaround for the password lock?
Click to expand...
Click to collapse
Search....
http://forum.xda-developers.com/showthread.php?t=317107

lordxiagan said:
When I set up my exchange 07 account on my tilt it forced me to set a password lock on my phone. Honestly I don't have many security concerns with my mobile, and would like to bypass it because it's annoying. Is there a workaround for the password lock?
Click to expand...
Click to collapse
Is this your employers Exchange server? If so, they might have concerns about security (or they wouldn't be enforcing that policy).
The short answer is no, you can't bypass that password lock. Not if it's set on the Exchange server to enforce it. That's the only things that's made ActiveSync acceptable to corporations. End users always think any security is annoying. That's why it has to not be an option.

TomH123 said:
The short answer is no, you can't bypass that password lock..
Click to expand...
Click to collapse
erm.....didnt ADB100 just post a link showing how u can bypass the exchange security policy?

XtreMe_G said:
erm.....didnt ADB100 just post a link showing how u can bypass the exchange security policy?
Click to expand...
Click to collapse
I did, but it can be a bit chicken-and-egg if your IT dept has decided to enforce the policy each time your device connects. I hate this big brother approach and little things like this can quite easily put people off using their devices to their full potential.
Andy

ADB100 said:
I did, but it can be a bit chicken-and-egg if your IT dept has decided to enforce the policy each time your device connects. I hate this big brother approach and little things like this can quite easily put people off using their devices to their full potential.
Andy
Click to expand...
Click to collapse
"big brother approch"? Have you even read 1984? A company wants to secure their property and it's considered big brother?
You're connecting to their Exchange server, downloading their content and they know you won't take security seriously unless you're forced to. I suppose you think server passwords and firewalls are "Big Brother" tactics as well? The potential of the device can be negated pretty quickly with no security in place.

zanyee
zanyee stayunlock will do what you need, simple and easy.

TomH123 said:
"big brother approch"? Have you even read 1984? A company wants to secure their property and it's considered big brother?
You're connecting to their Exchange server, downloading their content and they know you won't take security seriously unless you're forced to. I suppose you think server passwords and firewalls are "Big Brother" tactics as well? The potential of the device can be negated pretty quickly with no security in place.
Click to expand...
Click to collapse
Yes, if it was their phone. It isn't, its mine. They want me to be contactable via email all the time so they provide a push email service (both BlackBerry and Exchange Activesync) which we can use. This allows purely emails to be sent and received, however they enforce a security policy on the devices that connect. With BBC (which I currently use until I get ActiveSync'd) they enforce a 10-minute complex password phone lock policy that can't be disabled - have you tried to use TomTom Navigator in a car with a 10-minute lock? It's impossible - this is my main gripe
I fully understand the need for security but having stupid timers (10-minutes?) is just annoying and makes you not want to use the device.
Andy

ADB100 said:
have you tried to use TomTom Navigator in a car with a 10-minute lock? It's impossible - this is my main gripe
I fully understand the need for security but having stupid timers (10-minutes?) is just annoying and makes you not want to use the device.
Andy
Click to expand...
Click to collapse
Valid issue...have you tried talking to you it Dept. about maybe changing it to maybe a hour or so ?

FROYO and Exchange security not really there yet

Hello,
i am running Froyo on my nexus one.
When configuring a new Exchange support, i get:
""SETUP COULD NOT FINISH.
This server requires security features your phone does not support""
Touchdown is working fine and reports the following securities features:
Allow simple password
Password/PIN required
Failed attempts 10
Min length 5
Min Complex 3
Timeout 1800 sec.
Password recovery
So the question are:
1) Which of this securities is not yet implemented natively in froyo?
2) Will it make it in the final froyo release?
If any of you has some inputs, it would be nice to share.
Thanks in advance!
Best
dico

Sorry I cannot help with your problem other than to say that I have exactly the same issue. I am really shocked that Google have not got this fully working. We are hardly talking about a new protocol here!
Whilst I have Touchdown and have done since moving to Android last year, this single problem has stopped my company giving everyone Android phones. Come on Google, get it sorted!

Maybe because the foryo we got is not final? Ever thought of a unfinisched product that you use, is not finisched?

jaapschaap said:
Maybe because the foryo we got is not final? Ever thought of a unfinisched product that you use, is not finisched?
Click to expand...
Click to collapse
I think the point is that proper exchange support should really have been there from day one.
You just don't build a serious, high end smart phone with out proper integration to corporate mail (read exchange ).
Unless you're Google apparently.

badomen said:
I think the point is that proper exchange support should really have been there from day one.
You just don't build a serious, high end smart phone with out proper integration to corporate mail (read exchange ).
Unless you're Google apparently.
Click to expand...
Click to collapse
Well, I work and live in the corporate world and use my phone as such a device. I guess I sort of agree with you there about the exchange support, I can't really legitimize why they didn't incorporate this almost-brainless sync method.
Does the security policy of your works exchange server require to have a screen lock pin, specifically mobile device security policies? I noticed, after wiping from Froyo(with screen lock pin prior to EX acct) to CM and then back to Froyo(no screen lock when configuring), that I received an error that setup could not finish, I assume this is because without having a screen lock policy set up on the phone the exchange server will not authenticate to my device. Check that out. Also, this is not a finalized product.

Mine works fine...and I manage the Exchange system here...no problems.
My biggest issue is that Google has provided half-ass support for Exchange, and this version is no different.
You can't even move an item to another folder from the inbox with the stock Froyo.
The Desire Rom has the functionality and ability, best interface and options compared to the stock Android.
The stock Rom sucks honestly...if it weren't for Desire...I would still have my iPhone, even they figured out, licensed and got working properly the Exchange support 18 months ago. Windows mobile devices have had this for 3-4yrs.

My first post! May as well make it contributory.
It is interested to note that one may need a PIN lock set up first *before* adding an exchange account that requires one... I know I haven't been able to get our 2.2 Nexus One's to connect to our corporate Exchange Server for my girlfriend and I.
Let me go change to a PIN lock and see what happens when I try to add the exchange account...

Yep, no go still. "Unable to open connection to server."
They really need to add a Verbose button to these error messages.

still not working
Hello,
I tried setting up a PIN code before starting up the email application.
Does someone knows where to find the email app log file to see what is not good?
Thanks in advance!
best
CJ

To be honest, I tried using touchdown (which as great as it is, still lacks a lot of features), then tried using the Froyo Email/Calendar apps... Nothing has ever worked smoothly with Exchange + Android. I ended up migrating my email server (luckly it is only a personal email server) to Google Apps, and I have never been so happy with the performance and stability.
It is a tough cookie to swallow, but gmail is much better then Exchange on Android...

[Q] Can I use 2 different email clients ?

Hi,
Just wondering, I want to bypass the exchange policy (annoying pin lock), so thinking of using those modified AOSP email.apks.
However I would like to retain use of the original email client provided by Samsung.
Anyway to say setup and sync with the modified email.apks but then use Samsung's read/compose ? Do they share same database?
Ideally of course would be a modified Samsung email.apk.
Cheers
fy

fylim said:
Hi,
Just wondering, I want to bypass the exchange policy (annoying pin lock), so thinking of using those modified AOSP email.apks.
However I would like to retain use of the original email client provided by Samsung.
Anyway to say setup and sync with the modified email.apks but then use Samsung's read/compose ? Do they share same database?
fy
Click to expand...
Click to collapse
My initial response was: no. But thinking about it, there is a chance this actually might work. AFAIK, the way that the modified email apks work is that the creation of a "security device admin" is surpessed when defining an exchange account (don't know the exact name in english, but it's a device wide pin lock because you have to enter it every time you wake your phone from sleep). But apart from that a modified email apk creates accounts & databases exactly the same way as the original. One question remains open, and that is that an original email app might check for a policy also every time the account is actually used.
Also, a problem with the modified email apks is that they want to replace the existing email system app. If there is a way to keep the exisiting email app in place, and install a modified second one to just create the exchange accounts, this might work. I have been installing system apps manually through Root Explorer before, surpressing replacements, i will try tonight with email apps

Thanks. For your feedback. It is not exactly clear how the modified apks work. I would think that it would be easier to 'inform' that the policy is applied but does nothing to trigger the pin lock setting.
In this case it may work. Also head that Autostarts can disable this device administrator on some phones but sadly the 1.6.1 version on mine doesn't. It says do not have sufficient permission although already given rooted permission.
Appreciate if you could let me know how did your tests go.
Cheers

[APP] SyncSMS - Synchronize text messages between tablet and phone

SyncSMS lets you sync your text messages between your Android phone and tablet. SyncSMS lets you sync your text messages between your Android 2.1+ phone and 3G or WiFi-only Android 2.1+ tablet. This app lets you receive text messages on your tablet which have been received by or sent from your phone. Also, this app lets you compose text messages on your tablet which will be copied to your phone and sent out by your phone. You will need to sign up for a free Dropbox account, if you don't already have one, in order to temporarily store the messages between syncs.
Please rate and comment on the app in the Android Market and click Submit to Portal in the upper right of this post to vote this thread to XDA front page, thanks!
*******IMPORTANT LINKS*******
Download: https://market.android.com/details?id=com.d0lph1nk1ng.syncsms
Change Log: http://dl.dropbox.com/u/2774459/changelog.txt
DEV & USER SUGGESTIONS:
===== Ready for next release =====
- None
===== Under Dev =====
- Fix API 11 error when clicking item in action bar overflow menu
- Make C2DM respect wifi-only, DNS interval, and background sync off
- Sync on power
===== Backlog =====
# Bugs
- Auto resync
- ' Help > Setup > Push (Beta)
Push notifications are only for Received messages by the phone and Composed messages by the tablet. I will not be able to support copying Sent messages from your Phone to your Tablet withing doing polling. Please star the Android defect at the link below to add your support behind this enhancement to fix the issue. Thanks!
http://code.google.com/p/android/issues/detail?id=2261
Thanks,
d0lph1nk1ng

Doesn't work at all for me. I sign in to my existing Dropbox and get the error in the screenshot.

*post deleted*

d0lph1nK1ng said:
Could you please post the Logcat?
Click to expand...
Click to collapse
How do we know you are not capturing our DropBox credentials? This looks suspicious.

nevermind about the logcat, the issue is that I need a production API key from Dropbox. i agree on your suspicion, so i have posted the app's source code to instill confidence. please know that this app is not distributable or modifiable though. thanks!

d0lph1nK1ng said:
nevermind about the logcat, the issue is that I need a production API key from Dropbox. i agree on your suspicion, so i have posted the app's source code to instill confidence. please know that this app is not distributable or modifiable though. thanks!
Click to expand...
Click to collapse
Deleted...................

keith, honestly i am an innocent dev. have i broken a rule somewhere?

d0lph1nK1ng said:
keith, honestly i am an innocent dev. have i broken a rule somewhere?
Click to expand...
Click to collapse
Prove that your app is safe to install and immediately asks for Dropbox credentials and fails.

i have posted source code to my app which clearly shows that i use the dropbox api which requires username and password for the first login, then returns an access token per user which is the only thing that is saved to the local databases see LoginTask.java and Utils.java.
the 403 error stands for unauthenticated user. this is due to my app's dropbox api token being only validated for my email address. the app will work as described after i replace my api token with a production api token.
i do not deserve to be banned at all

d0lph1nK1ng said:
i have posted source code to my app which clearly shows that i use the dropbox api which requires username and password for the first login, then returns an access token per user which is the only thing that is saved to the local databases see LoginTask.java and Utils.java.
the 403 error stands for unauthenticated user. this is due to my app's dropbox api token being only validated for my email address. the app will work as described after i replace my api token with a production api token.
i do not deserve to be banned at all
Click to expand...
Click to collapse
Maybe not but you cannot release an app that does not demonstrate that you are not phishing username/password info which your initial release does not prove.

you know, honest mistakes do /actually/ happen in the world. plus, it's not my fault that Dropbox chooses not to allow OAuth for android apps. i never /wanted/ to have to have a user enter username/password in the context of my app for exactly this reason

d0lph1nK1ng said:
you know, honest mistakes do /actually/ happen in the world. plus, it's not my fault that Dropbox chooses not to allow OAuth for android apps. i never /wanted/ to have to have a user enter username/password in the context of my app for exactly this reason
Click to expand...
Click to collapse
Yes they do and when you have a secure way to access the app, please let us know. Until then, I am not touching it and recommend that no one else touches it either.

They do not allow OAuth access forwarding from their webpage per their guidelines. For Android (non mobile-web apps), they say to do so as follows.
From Dropbox dev page:
"Authentication For mobile devices
Mobile authentication is done using a call named token that's in the Mobile API specification section. Token takes a user's username and password and returns a working access token/secret pair to your application that you can use from then on. It's a relatively simple process, but with one caveat: you cannot store the user's password in your application. You can store a username for usability purposes or in case re-authentication is needed. However, there is no reason you should store their password."
Now, I have more than explained myself extremely detailed and clearly, so please go elsewhere with your false proclamations and ignorance.

keitht said:
Maybe not but you cannot release an app that does not demonstrate that you are not phishing username/password info which your initial release does not prove.
Click to expand...
Click to collapse
You expect people to willingly enter their username and password for Dropbox in your app that returns an error of forbidden?

jeez lets just see how this app pans out. Its a good idea and I know that the op has put out other good ideas out before.
Ill keep an eye on this thread. Thanks

instead of crying about it couldnt you just make another dropbox account for this
don't use the same password you do for everything else
problem solved. case closed. stealing your passwords or not, be smart and just make another dropbox account.
btw, i get my xoom soon so ill def. be looking into this app. sounds interesting

It seems to me that posting the source is all he needs to do here, if someone wants to challenge him based on what it contains, that's a different story.
There are tons of legit apps that use Gmail and facebook credentials. Just hooking into 3rd parties doesn't automatically make one a crook.
If you are going to smear someone, at least make the effort to show some evidence, jeez.

Santoro said:
It seems to me that posting the source is all he needs to do here, if someone wants to challenge him based on what it contains, that's a different story.
There are tons of legit apps that use Gmail and facebook credentials. Just hooking into 3rd parties doesn't automatically make one a crook.
If you are going to smear someone, at least make the effort to show some evidence, jeez.
Click to expand...
Click to collapse
You are right and I am sorry for being a prick. But be careful with apps like these especially if they fail on step 1, sign into an account that fails immediately (dropbox). After thinking about this further, I should not have posted what I did and I apologize. It is not my responsibility for others security.

OP, thanks very much for your effort with this, I NEED SMS on my Xoom!!

Possible suggestion.. Maybe making a widget to turn on the syncing? That way when I am using the Xoom, just flip the widget on for both phone and xoom, set phone aside.. This way the time frame for syncing can be quicker, and when I am done on my xoom, turn the widget off, and it wont sync anymore (for the sake of battery usage).

[Q] Verizon Motorola Droid Turbo help

I know nothing about any of this so bare with me guys/gals please. Just need help once and ill remove my account. If any of you feel like im wasting your time then please tell me and ill remove my post. Thankyou and i hope someone will give me an idea of whats going on.
Friends ex girlfriend is remotely accessing his phone from her computer, she can lock him out and write text out of format on the lock screen. She has deleted everything on his phone 8 times in the past hour. The Verizon recovery app has been disabled, we went into the Verizon store and changed EVERYTHING, number, passwords, made sure if she ever called in wanting info she couldn't get it. There is no way she figured out any of the passwords, she doesn't have access to any of his accounts, gmails facebook etc... i thought for sure she was using the recovery app but that's impossible cause no account has been created to access to his phone. Idk guys like i said im not an expert one thing that has me most skeptical she can write whatever she wants, whatever color, on his phone on any spot on the screen. Its completely out of set text formations on the lock screen looks like doodles i guess. Just curious if you guys have have ever heard of anything like this happening before. Thanks and i apologize if this shouldn't be here just on a desperate attempt to figure this out. Verizon is completely stumped they have no idea how she does it, even the main tech guy at the store (idk his credentials) cant figure it out.

From what I've seen so far, Android Device Manager (part of Google's setup) can do remote wipes. as can Motorola ID. I imagine both of these may "automatically setup" when you re-activate the phone. Beyond that, you'd need an app to perform such changes, I'd think.
Also, if he's on a joint-account with his exGF, and if she has access to the account, VZ may be doing this without the store-people knowing it?

schwinn8 said:
From what I've seen so far, Android Device Manager (part of Google's setup) can do remote wipes. as can Motorola ID. I imagine both of these may "automatically setup" when you re-activate the phone. Beyond that, you'd need an app to perform such changes, I'd think.
Also, if he's on a joint-account with his exGF, and if she has access to the account, VZ may be doing this without the store-people knowing it?
Click to expand...
Click to collapse
If it's Android Device Manager, maybe it would be sufficient to just change the Google login password?

Yeah, he changed his Google password right?

schwinn8 said:
From what I've seen so far, Android Device Manager (part of Google's setup) can do remote wipes. as can Motorola ID. I imagine both of these may "automatically setup" when you re-activate the phone. Beyond that, you'd need an app to perform such changes, I'd think.
Also, if he's on a joint-account with his exGF, and if she has access to the account, VZ may be doing this without the store-people knowing it?
Click to expand...
Click to collapse
He was on a joint account but upon breakin up with her he took her phone, cancelled it, removed her from the account changed his passwords to facebook and google and everything else. Just for the guy to call in and request info he has to answer 5+ extra security questions before hes allowed any info. But ill check out the ADV maybe thats it. Thankyou