Device protection? - Galaxy Note5 Q&A, Help & Troubleshooting

Hey guys, i lost my phone the other day and thank god no one stole it, i freaked out on how easy it can be to bypass the lockscreen by just entering recovery or bootloader..
I have rooted my phone (no custom recovery yet) but i want to add more protection, is there a way to protect the device from entering recovery or bootloader or any of that kind in case if it got stolen and prevent it from a complete wipe? are there any security modules on xposed?

Encryption?
Sent from my SM-N920T using Tapatalk

I dont want just encryption on data.. I mean look down the hardware keys from force reset, put pass on recovery mode and the bootloader something like that to prevent the wipe..

Not possible. Once you're in recovery it's the base operating system of the phone.
Sent from my SAMSUNG-SM-N920A using Tapatalk

You won't be able to prevent the wipe. But, you can prevent someone from setting up their account after a wipe. It's the Google device protection feature. As long as you have a secure lock screen and are signed in with a Google account, it will be very difficult for most to bypass the log in screen after a wipe.
Sent from my SM-N920T using Tapatalk

Related

Phone Encryption FYI

4.4 KitKat still has the same bug as previous releases as far as encrypting the phone goes. I had to attempt the process 4 times before the phone would actually encrypt. The first 3 times the Green Android popped up, but the phone didn't reboot to the "Encrypting Phone..." progress screen, it just went back to the lock screen. 4th time was a charm, so keep trying if it doesn't work for you.
Ronaldo Forenucci said:
4.4 KitKat still has the same bug as previous releases as far as encrypting the phone goes. I had to attempt the process 4 times before the phone would actually encrypt. The first 3 times the Green Android popped up, but the phone didn't reboot to the "Encrypting Phone..." progress screen, it just went back to the lock screen. 4th time was a charm, so keep trying if it doesn't work for you.
Click to expand...
Click to collapse
You using a custom recovery or stock?
Mine encrypted on the first try ...
Encrypting naturally makes the phone a tad bit slow though no? And to decrypt you have to do factory reset
Sent from my Nexus 5 using xda app-developers app
secondclaw said:
Mine encrypted on the first try ...
Click to expand...
Click to collapse
Stock recovery?
Sent from my Nexus 5 using Tapatalk
uh60james said:
Stock recovery?
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
Yes, rooted only, but no other changes.
I've never had a problem encrypting with any recovery (CWM, TWRP, or stock), probably because it never boots to recovery while encrypting. It's probably a ROM issue.
Hey guys,
did you notice any significant performance impact after encrypting your N5?
How does an (stock) update work on encrypted N5? Do I have to wipe the phone prior to any update?
Just so you guys know there is a bug with kitkat encryption that will wipe your entire phone. Make backups of all the data you're keeping on your phone if you're going to encrypt. There's been a few users that have reported loosing everything due to encryption wiping out their phones. Just a friendly warning to whoever wants to encrypt.
Encryption does not slow down the performance. Only boots up slightly slower. Once you go through the password or pin, everything is decrypted until you lock your phone again.
I remember once you encrypt though...can't decrypt or need to reinstall stock.
Sent from my SM-T320 using xda app-developers app
my n5 was very picky about which cable and charger I was using before it would start the encryption process, with a N7 and a asus T100, it was hard to figure out which charger goes with which device.
Haven't noticed any particular slowdown since encrypting, except at boot.
The only thing I hated was not being able to use pattern unlock, using a PIN sucks. I worked around that by making a twrp backup right before the encryption process, change the security to PIN so encryption will work, then once it's done, boot into TWRP (which makes you enter the PIN to read inside the encrypted container), then restore the backup without wiping. So now I have a good length pin at bootup or entering twrp, pattern unlock for daily use. Maybe trading a little bit of security for convenience, but entering a 10+ character pin multiple times per day just isn't very usable.
I think it's the battery. The os shows another percentage than the recovery calculates. After some additional minutes of charging i hadn't that problem anymore. Thats just my opinion
I know that it is not possible to decrypt the data and that a factory reset is necessary to remove encryption.
I am just wondering if I can still update my system if I encrypt my phone?
What exactly is encrypted? Only /data?
Sent from my Nexus 5 using xda app-developers app
Encryption does not affect the OTA update or any kind of updates that push out offically. Phone itself decrypts once you go through personal lock screen. Since you can only update during unlocked stage, you won't have problem updating. It does encrypt everything except the media files such as videos, music's and etc. Correct me if I'm wrong though...
Sent from my SM-T320 using xda app-developers app
How long do you use the encryption now?
Do OTA updates still work?
Does adb work from TWRP recovery?
Sent from my Nexus 5 using XDA Free mobile app
FuMMoD said:
Just so you guys know there is a bug with kitkat encryption that will wipe your entire phone. Make backups of all the data you're keeping on your phone if you're going to encrypt. There's been a few users that have reported loosing everything due to encryption wiping out their phones. Just a friendly warning to whoever wants to encrypt.
Click to expand...
Click to collapse
Wish I had seen this!
[email protected] POS wiped EVERYTHING on my phone when I tried to encrypt.....EVERYTHING.
Was on latest TWRP, KangaKat and ElementalX
FAck U GOOGLE!
Globespy said:
Wish I had seen this!
[email protected] POS wiped EVERYTHING on my phone when I tried to encrypt.....EVERYTHING.
Was on latest TWRP, KangaKat and ElementalX
FAck U GOOGLE!
Click to expand...
Click to collapse
Ye when your phone running custom recovery, rom and kernel doesn't behave as intended, it's obviously Google's fault...
Seriously, if you change anything software related, you lose the right to blame the manufacturer.
I've heard of random passwords being generated so the user has to factory reset. Is this true????
# 47386

Can you password-protect recovery mode?

I have an anti-theft app whose importance that I put above all others. The problem is I can't root because I don't want to trip Knox. But without root, I can't hide the app in root to survive a reset/factory reset. And so all the anti-theft precautions I put on my phone means nothing if just anyone can just go into recovery and delete everything...
Can you lock recovery, or root without tripping knox?
Chocolina said:
I have an anti-theft app whose importance that I put above all others. The problem is I can't root because I don't want to trip Knox. But without root, I can't hide the app in root to survive a reset/factory reset. And so all the anti-theft precautions I put on my phone means nothing if just anyone can just go into recovery and delete everything...
Can you lock recovery, or root without tripping knox?
Click to expand...
Click to collapse
Yes. Encrypt your phone. Other than that, no.
ingenious247 said:
Yes. Encrypt your phone. Other than that, no.
Click to expand...
Click to collapse
TY!
Can't even an encrypted phone be wiped? What if you forget the password?
andrewNY said:
Can't even an encrypted phone be wiped? What if you forget the password?
Click to expand...
Click to collapse
Yes, the ENTIRE phone can be wiped, but he's talking about someone wiping a security app and then getting at his information inside the phone.
Wiping the phone entirely was not his concern.
ingenious247 said:
Yes, the ENTIRE phone can be wiped, but he's talking about someone wiping a security app and then getting at his information inside the phone.
Wiping the phone entirely was not his concern.
Click to expand...
Click to collapse
Wiping the entire phone isn't my concern, its the prevention to wipe it.
Since I cannot root the phone without tripping knox, then above-all else, I want to lock any potential theif to have no access to recovery, no access to Developer tools, but more importantly debugging, and no access to Factory reset under backup and restore. If I could root without tripping knox, all or most my problems would be solved.
When I had an HTC One M7 and had it stolen, I got lucky because I had no password on access to my device's functions, but the Anti-theft program of my choice, Cerberus was installed into root and was designed to survive all factory wipes and stay hidden as a system process. I managed to recover my phone 2-days after. The reason I prefer Cerberus over other other anti-theft apps because Cerberus has some extensive features and parameters on it's behavior. Example: you could send a command to start GPS tracking by SMS, and if by chance they remove or use their own SIM, you could set parameters to start GPS tracking or do a specific function when it detected no SIM or an unauthorized SIM.
Idealy what I want is a lock on Recovery, Factory Reset, and USB Debugging. The idea is to lock all the reset and modding options while still inviting the thief to continue using and charging the device in the regular OS so they feel comfortable keeping the device charged and always connected. If I just set a system-wide password, then all functions are locked with a password. If the thief knows they can't use or play with the device, they won't try to connect the phone, instead they'll just turn the phone off, won't charge it, or just boot into recovery and delete everything.
Cerberus can lock USB Debugging, the Power Button, and the Notification tray, but it won't/can't lock Factory Reset, but can survive any reset if rooted.
A system-wide password can protect from a Factory Reset in the OS menu, but doesn't protect in recovery, and locks the user out preventing them to trigger any "Start GPS tracking" triggers I might place.
Encryption, if it does lock Recovery, can lock recovery, and work with Cerberus to lock USB Debugging, but requires a system-password and would prevent any parameters set from being triggered.
Right now the best alternative I have is a system password with Cerberus which blocks the phone from being shut off, but would only be good for a day unless the theif decides to keep a stolen, locked phone charged. And I sometimes keep my phone in airplane mode to save energy, but if it gets stolen in airplane mode, it can't ever be taken out, and so GPS tracking couldn't be activated by Data or SMS. So really not being able to root without tripping knox is preventing me from reaching an exact configuration I'd be happy with.
There's a beta app called PingPong that uses a vulnerability to achieve root without tripping KNOX which I used to great success. You may be able to root, install the app (and then un-root if you wanted to). That's what I'd recommend.
http://www.xda-developers.com/pingpong-tool-roots-your-galaxy-s6-without-tripping-knox/

Looking to buy a N6 that's Google Account Locked

I would like to purchase a Nexus 6 (US Version) and I've seen a few for sale that claim to be google email account locked.
The reason usually given the "owner" forgot their password and can't reset it.
I was thinking a factory image restore would clear everything and un lock the phone.
Not sure if this would work, if someone could confirm either way, I would appreciate it.
Is there a way to bypass the google account lock?
Thank you!
There is no bypass method known..do not buy it.
danarama said:
There is no bypass method known..do not buy it.
Click to expand...
Click to collapse
Is there anywhere that I can learn how this account lock works?
I am legitimately trying to get a nexus 6 cheap then use it as my personal phone, not intending on hacking into someones, I could care less if all data on the phone is lost.
I was thinking if I wiped the system and data partitions it would undo the software lock. Or is this Google Account Lock more than just software rooted?
xNotta said:
Is there anywhere that I can learn how this account lock works?
I am legitimately trying to get a nexus 6 cheap then use it as my personal phone, not intending on hacking into someones, I could care less if all data on the phone is lost.
I was thinking if I wiped the system and data partitions it would undo the software lock. Or is this Google Account Lock more than just software rooted?
Click to expand...
Click to collapse
The information has not been released into the public domain. We don't know how it works. It's most likely stored on one of the many partitions that we don't have access to, but we don't know that. All we know is that we haven't found a fix. Flashing system images doesn't help.
danarama said:
The information has not been released into the public domain. We don't know how it works. It's most likely stored on one of the many partitions that we don't have access to, but we don't know that. All we know is that we haven't found a fix. Flashing system images doesn't help.
Click to expand...
Click to collapse
That's exactly the info I was looking for. Thank you for saving me a few $!
Guess I'll put that twords a Nexus 5.
https://www.youtube.com/watch?v=5ySekEg-I8g That guy claims to be able to do it.... for a fee.
Why'd Google have to go all iCloud lock on us?
xNotta said:
https://www.youtube.com/watch?v=5ySekEg-I8g That guy claims to be able to do it.... for a fee.
Click to expand...
Click to collapse
It's your risk. One random guy here reckons he managed to get it bypassed at a mobile phone repair shop, but he couldn't give us any information towards how that was achieved. We take it with a pinch of salt.
It's Just anti theft which imo is a great feature to have
Sent from my Nexus 6 using Tapatalk
It's meant as a security feature to deter phone theft, whoever said they were able to work around it was lying, the only way to get past that screen is to input the correct password of the google account, factory reset and flashing google images do not get rid of the lock. If the person that had it before removed his/her account before wiping the device than that screen would not show. Now if the person truly forgot their google account pass, they could easily reset their password if they are really the original owners of the phone provided they have another email/number for google to send the verification info, my opinion is the seller either found or stole the phone and is looking to make a buck on someone unsuspecting, because they cant use it themselves.
bigjack216 said:
It's Just anti theft which imo is a great feature to have
Sent from my Nexus 6 using Tapatalk
Click to expand...
Click to collapse
It is, but what it should do when you're factory resetting, is remind you to remove your google account first if you are selling it.
---------- Post added at 07:20 PM ---------- Previous post was at 07:16 PM ----------
djkinetic said:
It's meant as a security feature to deter phone theft, whoever said they were able to work around it was lying, the only way to get past that screen is to input the correct password of the google account, factory reset and flashing google images do not get rid of the lock. If the person that had it before removed his/her account before wiping the device than that screen would not show. Now if the person truly forgot their google account pass, they could easily reset their password if they are really the original owners of the phone provided they have another email/number for google to send the verification info, my opinion is the seller either found or stole the phone and is looking to make a buck on someone unsuspecting, because they cant use it themselves.
Click to expand...
Click to collapse
No way to tell the back story of the phone. This anti-theft measure came in without warning, so people who updated and then wiped it without knowing they needed to remove the account first, could easily have sold it and it not been tested by the buyer for this as they didn't know. There could easily be a legitimate story behind it.
That said, no one should buy these devices anyway, for their own sake and the fact that they *may* be stolen.
Also, as unlikely as we believe it to be that someone managed to get it bypassed at a mobile phone repair store, doesn't mean it isn't true. Just because we don't know a way around it, doesn't mean someone else can't - though that is besides the point
xNotta said:
That's exactly the info I was looking for. Thank you for saving me a few $!
Guess I'll put that twords a Nexus 5.
https://www.youtube.com/watch?v=5ySekEg-I8g That guy claims to be able to do it.... for a fee.
Why'd Google have to go all iCloud lock on us?
Click to expand...
Click to collapse
it was a bug in 5.1, where you would enter radom digits.. buts its been long fixed, and only worked if the person set a password.
you should be able to bypass this by flashing back to stock and using the no-encrypt kernel from Wugfresh's toolkit.
The google account lock is just because encryption is active and someone did a factory reset on it while it was encrypted.
Source:
I did this to my own once when flashing ROMs and could not get pass the password screen, flashing the no-encrypt fixed it
I haven't heard of this....I have a N6 on the way which means I'll be wiping and selling my LG G2 (running 5.1.1 Paranoid). Is this a new thing with lollipop that I need to remove my account first, or is it device based?
If so, Settings > Accounts > Google > Delete your account or services? Is that all I need to do before wiping?
plasticarmyman said:
you should be able to bypass this by flashing back to stock and using the no-encrypt kernel from Wugfresh's toolkit.
The google account lock is just because encryption is active and someone did a factory reset on it while it was encrypted.
Source:
I did this to my own once when flashing ROMs and could not get pass the password screen, flashing the no-encrypt fixed it
Click to expand...
Click to collapse
if your bootloader is locked, and you have stock recovery, you cant flash a stock factory image. and you cant flash a custom kernel with the stock recovery. so, you couldnt of done this in your wettest fantasy. but, if you have twrp, you could. but then again, if you have twrp recovery, you can fix the issue regardless.
simms22 said:
if your bootloader is locked, and you have stock recovery, you cant flash a stock factory image. and you cant flash a custom kernel with the stock recovery. so, you couldnt of done this in your wettest fantasy. but, if you have twrp, you could. but then again, if you have twrp recovery, you can fix the issue regardless.
Click to expand...
Click to collapse
if you can get into fastboot you can fix most of those things.
TWRP would be for the kernel, but you can unlock the BL and flash a recovery all from fastboot which is not secured by the account lock
plasticarmyman said:
if you can get into fastboot you can fix most of those things.
TWRP would be for the kernel, but you can unlock the BL and flash a recovery all from fastboot which is not secured by the account lock
Click to expand...
Click to collapse
You can't unlock the bootloader unless you set "enable OEM unlock" in Settings, which you can't get to if it is google account locked.
danarama said:
You can't unlock the bootloader unless you set "enable OEM unlock" in Settings, which you can't get to if it is google account locked.
Click to expand...
Click to collapse
oh snap! i totally forgot about that part....
okay nevermind my blathering idiocy
plasticarmyman said:
oh snap! i totally forgot about that part....
okay nevermind my blathering idiocy
Click to expand...
Click to collapse
No worries
danarama said:
No worries
Click to expand...
Click to collapse
it's been about a year since i've had to check that box
plasticarmyman said:
oh snap! i totally forgot about that part....
okay nevermind my blathering idiocy
Click to expand...
Click to collapse
yup. but if you have twrp, fastboot formatting userdata and cache should fix it. if you havd stock recovery, then youre screwed.
More than positive this Nexus is stolen.
Stay away from it. If it's locked, it's probably been reported and it's IMEI blacklisted. So even IF you could get it unlocked somehow. You will still be boned.
As for cheap Nexus 6? They are on sale for $350 on Amazon.

Forgotten password....how to reset

Running Pure Nexus which may not matter. Wife got mad and figured out my pattern lock to be nosey in my phone. She then decided to change to a password lock. I am now locked out. How can I reset my password without wiping my data? Android device manager knows it's locked so I can't use it to set a lock code. Saw a method using pc and adb to clear the password and reboot but not near my pc. Any way to use Twrp?
You SERIOUSLY can't get your wife to tell you the unlock code she put on it??? The only idea I have to get around it would to be dirty flash your current ROM over top of itself. This will retain your data and maybe/probably? take off the unlock code. On a side note, going forward I think you guys really need to work on trust and boundaries...
Hi,
Sorry to hear that happened to you. I have faced this issue before when I accidentally choose the pattern lock and forgot what it was. Could you tell me what ROM and android version you are running. The kernel also matters because if it has encryption enabled by default, the TWRP recovery would also need the same pattern/PIN for you to get in there to flash it. I guess my only other solution would be to use the Nexus Toolkit and try dirty flashing if you're running a custom ROM or checking the 'no wipe data' when flashing the official Google image.
Have a great new year!
Love,
Syed
I decided to just wipe and flash a new ROM. Took the opportunity to update to Pure Nexus Nougat. I'm still setting online accounts back up which is part of what I wanted to avoid. I really dislike not being automatically logged in to pay my bills!
knightjs1 said:
I decided to just wipe and flash a new ROM. Took the opportunity to update to Pure Nexus Nougat. I'm still setting online accounts back up which is part of what I wanted to avoid. I really dislike not being automatically logged in to pay my bills!
Click to expand...
Click to collapse
Wow paying your bills on a device with root and an unlocked bootloader. You surely are brave.
As for your issue well to be honest you have bigger issues then your device.
Thread closed

[Q] self destruction with fingerprint?

Hi, is there a way to use the fingerprint for security?
For example, if I use a special finger the device will be locked or erase all data.
Rooted device with TWRP recovery, any Tipps?
anonymuser said:
Hi, is there a way to use the fingerprint for security?
For example, if I use a special finger the device will be locked or erase all data.
Rooted device with TWRP recovery, any Tipps?
Click to expand...
Click to collapse
There might be a gesture app out there that allows you to do it. I don't think any of the custom ROMs here have that particular effect with the fingerprint scanner. Like the idea though.
Sent from my XT1806 using Tapatalk

Categories

Resources