accessibility service disables full disk encryption - MeMO Pad 7 Q&A, Help & Troubleshooting

ASUS MeMO Pad 7 (ME176C) K013 12.10.1.36-20151230
Accessibility services automatically disables full disk encryption. My Zenfone 2 ZE551ML does not have this problem. But the android bug was never fixed?
https://code.google.com/p/android/issues/detail?id=79309
https://lastpass.com/support.php?cmd=showfaq&id=8936

Related

Android 4.4.3 coming soon to a Nexus 5 or Nexus 7

Android 4.4.3 KitKat may well be just days away from making an appearance on the Nexus 5 and Nexus 7.
Source
here is the list of Android 4.4.3 fixes:
1. The fixes to camera include mm-qcamera-daemon crash and camera focus in regular and HDR modes.
2. Power Manager wakelock fix.
3. Multiple Bluetooth fixes and FCC compliance fix.
4. Fix for the random reboot and the reportedly elusive 'app shortcuts' from the launcher after update.
5. Wi-Fi auto connect problem and USB debugging security fix.
6. A fix to address the issues faced by users who are stuck in the activation screen.
7. Data connection dropout problem fix.
8. Missed call LED problem fix and subtitle fix.
9. Data usage graph and Internet telephony fix.
10. There are several undefined fixes to MMS, Email/Exchange, Calendar, Contacts, DSP, IPv6, VPN and the others.
Hi,
Already posted: First Android 4.4.3 Details...
mods should close

[Q] Enable Encryption in EMUI 3?

Hi all,
I recently bought a P7 as my new smartphone. However, there is one thing missing. In the EMUI settings device encryption is not accesible, however this is a standard Android feature. I need this feature enabled because of enterprise policies otherwise I can't connect to our Exchange. Contact & agenda synchronization is necessary for me as my smartphone is a working device.
I tried updating to EMUI 3, but it's still not part of the ROM. It's a bit ridiculous Huawei isn't enabling this option within EMUI or doesn't even put encryption enabled by default.
Is their a workaround to enable this feature?
Thanks in advance.
Cerveza said:
Hi all,
I recently bought a P7 as my new smartphone. However, there is one thing missing. In the EMUI settings device encryption is not accesible, however this is a standard Android feature. I need this feature enabled because of enterprise policies otherwise I can't connect to our Exchange. Contact & agenda synchronization is necessary for me as my smartphone is a working device.
I tried updating to EMUI 3, but it's still not part of the ROM. It's a bit ridiculous Huawei isn't enabling this option within EMUI or doesn't even put encryption enabled by default.
Is their a workaround to enable this feature?
Thanks in advance.
Click to expand...
Click to collapse
I didn't find in setting but using the app "activity launcher" you can reach the hidden menu.
Open activity launcher>all activity>setting> encrypt phone
I don't know if encryption will work
Thank you for this interesting post usb2. I am able to open the Encrypt Phone activity and I can do all the prerequisites. When I start the encryption the phone gets "stuck" on a white screen with the green Android dude.
It's actually the same as the encryption screen on stock android, except without text and loading bar. Only the guy on a white background.
First I thought he was just busy encrypting but after 3 hours it was still like this. I just rebooted my phone and he is still working. Still not encrypted tho.
This is sad, I will need another ROM for this phone.

Encryption level - P20 Pro

Hey guys,
Does anyone know what's the encryption level supported by p20 pro and how do i check it?
My organization has disabled any mobile device to connect which does not support 256 bit encryption, this level of encryption is only on iphone's & knox enabled Samsung phones.
Hence wanted to know the encryption level supported by p20 pro.
Thanks in advance.
No one guys?
I've chased Huawei again for an answer, only been waiting since May and constantly chasing each month, so not sure when they will reply
Sent from my Huawei P20 Pro using XDA Labs
I've finally had an update from Huawei
In response to your question, please be informed that the Huawei P20 Pro device it is not encrypted. However, all the information you are saving on the "file safe" it is encrypted. This means that the information is private and it can be accessed only by you. This option it is secured and it can be accessed only with your fingerprint.
Click to expand...
Click to collapse
So by default the device is not encrypted
walkerx said:
I've finally had an update from Huawei
So by default the device is not encrypted
Click to expand...
Click to collapse
That's f*ing ridiculous!! It's 2018!!
krs360 said:
That's f*ing ridiculous!! It's 2018!!
Click to expand...
Click to collapse
another reason to not buy the next huawei device
walkerx said:
another reason to not buy the next huawei device
Click to expand...
Click to collapse
Really bizarre why full encryption is unavailable on the Pro. If there's no way to enable it, then ya, I might avoid Huawei for my next phone as well.
Me too, this is gonna be my last Huawei
Guys, are you sure this is correct? If you read the EMUI 8.0 Security Technology White Paper on consumer-img.huawei.com/content/dam/huawei-cbg-site/en/mkt/legal/privacy-policy/EMUI%208.0%20Security%20Technology%20White%20Paper.pdf it seems to indicate that the entire phone is encrypted using HW key (HUK):
"To ensure data security, user data is encrypted using a hardware-based hardware unique key
(HUK) and user lock screen passcode. Data files of different apps are stored in the directories
of the corresponding apps, so that the files of one app cannot be accessed by other apps. The
data erasure function is provided for permanently erasing data during device recycling or
factory default restoration to prevent illegitimate data restoration."
and then:
"The AES256 hardware encryption/decryption used by the secure storage function is
compatible with the GlobalPlatform TEE standard. The secure storage keys are derived by the
HUK and not sent outside of the TrustZone. Data encrypted using the keys cannot be
decrypted outside of the TrustZone"
soniva said:
Guys, are you sure this is correct? If you read the EMUI 8.0 Security Technology White Paper on consumer-img.huawei.com/content/dam/huawei-cbg-site/en/mkt/legal/privacy-policy/EMUI%208.0%20Security%20Technology%20White%20Paper.pdf it seems to indicate that the entire phone is encrypted using HW key (HUK):
"To ensure data security, user data is encrypted using a hardware-based hardware unique key
(HUK) and user lock screen passcode. Data files of different apps are stored in the directories
of the corresponding apps, so that the files of one app cannot be accessed by other apps. The
data erasure function is provided for permanently erasing data during device recycling or
factory default restoration to prevent illegitimate data restoration."
and then:
"The AES256 hardware encryption/decryption used by the secure storage function is
compatible with the GlobalPlatform TEE standard. The secure storage keys are derived by the
HUK and not sent outside of the TrustZone. Data encrypted using the keys cannot be
decrypted outside of the TrustZone"
Click to expand...
Click to collapse
Got the info from Huawei stating there is no default encryption on the device
walkerx said:
Got the info from Huawei stating there is no default encryption on the device
Click to expand...
Click to collapse
Yes, I saw that earlier in the thread. But as others are saying - "it's crazy not to support this"
Just wondering if I should trust Huaweis official white paper on security and privacy or a person in customer support. I would expect them to provide the same answer. Assuming I'm reading the white paper correctly, encryption is on by default for the entire phone, with some additional safety-level for personal files (i.e. docs and images).
We have similar policies for our company-services utilized on phones and I am allowed to download, read and send e-mails on my P20 Pro just as on phones I've used earlier (with explicit encryption). Which is also the reason for following up on this issue. Either my phone is ok, the policy is not working as intended or my phone is reporting the wrong answer when queried from the server "are you encrypted". The last one would be the most critical I guess.
Also note the last comment on this thread: forums.androidcentral.com/huawei-mate-10-mate-10-pro/865831-does-pro-have-full-device-encryption-like-most-phones-now-9-did-not.html
To put it bluntly, I wouldn't trust any Chinese device when it comes to encryption. I'm not surprised that the P20 Pro is unencrypted. I used to have a OnePlus 3 that was encrypted (according to OnePlus, anyway...), yet when I factory reset it through the bootloader and gave to a family member, half my apps and SMS messages were still on the phone. when they signed in with their own Google account.
If you want data security, I think Samsung and the Knox platform is about as good as you're going to get. Apple won't give governments advice on how to decrypt iPhones, but I'm pretty sure it's possible with the right third party equipment.
This is the answer I got from Huawei customer support:
Our devices are encrypted from the factory when they are made, a user can then also add passwords, fingerprints and facial recognition to allow access to the device but as a standard in the Android system the main security function is a password and this is required after a restart of the device even if you have other unlock functions.
The encryption from the factory is an encryption on the internal storage unit.
Click to expand...
Click to collapse
So based on this, and the white paper mentioned previously, the devices are encrypted.
soniva said:
This is the answer I got from Huawei customer support:
So based on this, and the white paper mentioned previously, the devices are encrypted.
Click to expand...
Click to collapse
I've replied to my email from Huawei advising to confirm as we are getting different answers from support staff (my updates are coming from the UK Technical Support Team)
Update: Further from my post earlier, I've now had more information back from Huawei who have confirmed there is encryption by default, so have asked them to ensure all staff know as I seem to be getting incorrect information (especially from one member of staff)

Equivalent of System Profiles in Android 11?

I have just got a Pixel 4XL. I let it run through various updates yesterday as I was setting it up and its now on shiny Android 11.
My previous phone was a Samsung S6 running my own build of LineageOS 15.1 (Android 8.1). There is a really handy feature in this - System Profiles. I had the Car Profile set to trigger on connection to the cars Bluetooth and to enable the Wi-Fi HotSpot. The default profile disabled the HotSpot and triggered on disconnection to the cars Bluetooth. I can't seem to find the equivalent of this in any of the settings. The nearest I can find is the 'Driving Mode' option in Connection Preferences. I can get it to trigger this profile on connection to the cars Bluetooth, however the only 'Behaviour' I can set is 'Do Not Disturb' or 'Open Android Auto'.
In Android 8.1 (LineageOS 15.1) there is a 'System Profiles' option in System settings where I can can figure the profiles. Is there an equivalent in Android 11?
Andy
I honestly dont think there is, as I haven't come across anything like that. I think your best bet would be to use Tasker to trigger those events.

Auto-starting apps & Android PIN/Pattern

Hello,
I'm running LineageOS18.1 (Android 11) on my Pixel 5, which I use as a dedicated "app device" and not as a phone.
The issue I'm facing is that I cannot set a PIN without losing the ability for apps to auto-start on first boot. I basically have to choose between my app auto-starting and having literally 0 security, or having security and being unable to auto-start my app. These security "features" with no off-switch are really a pain...
Are there any workarounds like third party launchers or lock screens that block user access to the phone without preventing apps from starting/running behind the lock screen? I'm not looking for high security, just a basic mechanism for keeping honest people honest.
I tried to disable encryption by formatting my data partition, but it seems like there is some mechanism that re-enables it on first boot, and I'm really not familiar with editing build configs and customizing ROMs. I also read that even with encryption disabled, this issue would persist.
I have root access on the phone via Magisk.
Thanks!
Anyone knows?

Categories

Resources