Related
I ask because after installing stock MRA58R the contents of my N6 were still visible in Windows Explorer. So I reformatted userdata & cache, and then used the new NRT 2.0.7 to flash MRA58R again - wipe, no root, no recovery, no no-encrypt, just bog-standard install. The "Encrypting device" appeared for literally a few seconds, and now as it's sitting re-installing my apps from Google I can still see the contents of internal memory in Explorer. No USB debug, just a "Use USB for file transfer".
I have a multi-digit PIN on the phone, set up as part of the initialisation process.
I went through all this because my wife's phone was stolen last weekend and it was a wake-up call for me about my data security.
I'm sure I'm being particularly stupid. Can someone please educate me?
Thanks...
And maybe I'm answering my own question...
The contents are visible to me because I entered the device PIN?
Anyone without the PIN gets to see nothing?
And that includes any access via ADB/fastboot?
But is this any different from a non-encrypted device?
dahawthorne said:
Anyone without the PIN gets to see nothing?
Click to expand...
Click to collapse
It is a method to store data that is only readable with the key used for encryption.
Your pin is something different and is used for access permission of a device.
Thanks, but my understanding is that the device PIN is the encryption key. You can't set encryption without having a device PIN. What else could it possibly be using?
So I guess I still don't understand if having my device encrypted is any better than having a simple PIN-secured unencrypted device. If someone can see my data via bootloader mode or some other back door how secure is it?
If I look at an encrypted file I expect to see hieroglyphics. That's not what I'm seeing here. I see either nothing at all because the device isn't recognised by my PC, or I have full access to the data.
So what effect should I expect to see that is different/more secure than a simple PIN-protected device? What's the actual benefit of encryption?
dahawthorne said:
Thanks, but my understanding is that the device PIN is the encryption key. You can't set encryption without having a device PIN. What else could it possibly be using?
So I guess I still don't understand if having my device encrypted is any better than having a simple PIN-secured unencrypted device. If someone can see my data via bootloader mode or some other back door how secure is it?
If I look at an encrypted file I expect to see hieroglyphics. That's not what I'm seeing here. I see either nothing at all because the device isn't recognised by my PC, or I have full access to the data.
So what effect should I expect to see that is different/more secure than a simple PIN-protected device? What's the actual benefit of encryption?
Click to expand...
Click to collapse
Ill be honest. Your device is only as secure as the person that steals it. No amount of security has been 100% proven to prevent the data being attainable if they have access to the device its self. While I am not saying the average thieve will be bale to do it but, then all they care about is the device and end up wiping the device and reselling it without a care about the info inside it.
dahawthorne said:
Thanks, but my understanding is that the device PIN is the encryption key.
Click to expand...
Click to collapse
That wouldn't be a good encryption, you usually need at least 256 bits to encrypt a volume. The pin is only to unlock the encryption key that's stored on a separate partition. Also to unlock the phone.
If you stick a USB cable into a phone that's on, it switches to USB charging mode by default, so you need to unlock it to change it to MTP or Camera. If you want to connect as USB debugging, you first must allow the new computer's fingerprint to connect, so you need the pin to unlock the phone again.
If encryption is used correctly, then you must enter your pin to resume boot. But you can just set MTP as default connection in a custom ROM, build it as userdebug that doesn't require ADB fingerprint, and set pin for unlocking lock screen only
Thanks, people. It looks like encryption is pretty well pointless then if any Tom, **** or Harry can just install a new ROM or recovery and get access to the data... Burning my battery for nothing but a lot of security hot air...?
Speaking of which, I've just rebooted my phone and despite having checked the "Require passcode to start Android", which actually did work at least once (meaning I had to enter a PIN 3 times, for Android, SIM and device), this time there was no Android challenge, only SIM & device.
This security really isn't up to the job at all.
That is incorrect. With out knowing the key, as long as you select require pon at boot, the only thing they could do is reformat your phone and continue using it. No matter what, the key to your data is needed to access it.
dahawthorne said:
Thanks, people. It looks like encryption is pretty well pointless then if any Tom, **** or Harry can just install a new ROM or recovery and get access to the data... Burning my battery for nothing but a lot of security hot air...?
Click to expand...
Click to collapse
I really don't get where this comes from?!? It's a very serious security measure, and it's really not its fault if people dynamite holes into the phone's security like using userdebug builds, and having custom recoveries.
The point is, you have to decide if you want a phone open for modding and to use to store sensitive data on it. There isn't a system that really can accommodate both.
But if you don't have any sensitive data on your phone then encrypting is really pointless.
Thanks again, guys.
@scryan - "select require pin at boot" - does this mean the "require PIN before starting Android"? This is what I mentioned I had but now I don't. An extra layer of security disappeared for no reason I can think of, and I see no option to switch it back on, since the only time it was offered to me was during the initial setup. I still have SIM lock and device lock, but more is better, no?
@istperson - I get the trade-off between security and flexibility. I would consider my photos, for example, to be secure data - even if I'm happy showing them to people I know, I don't want strangers poking around in them.
So bottom line - I still see no argument that says that encryption provides something that the PIN doesn't. How exactly is a PIN-protected encrypted phone more secure than a PIN-protected unencrypted phone?
Edit: I found the "require PIN on boot" option in one of the security tabs, and it appears to work. Back to 3 levels of security, but still in the dark about encryption benefits.
dahawthorne said:
So bottom line - I still see no argument that says that encryption provides something that the PIN doesn't. How exactly is a PIN-protected encrypted phone more secure than a PIN-protected unencrypted phone?
Click to expand...
Click to collapse
If they hit you on the head, take your phone, tear it apart, and remove the sdcard, it won't be readable because of the encryption. If it's unencrypted they can access every data.
But don't store naked selfies on you phone. or in the cloud, then you're safe.
Also the pin to boot doesn't go away by itself without tinkering. Go back to Settings/Security and switch on the Require pin to boot, or whatever it's called.
Basically encryption is how the data is stored on the device. Instead of the normal readable format, its scattered all around in a pattern that requires a key to calculate how to put it all back together.
When you computer goes to read a file, it pulls out a chunk of data, looks at what the right pattern is, then ignores the pieces it doesn't need.
When you phone is running you dont see any of this, because your phone is always in the middle decoding.
If I tried to access your data by circumventing the OS and its checks, all I would see was scrambled randomness.
Decent little wiki entry from arch linux
https://wiki.archlinux.org/index.php/Disk_encryption#How_the_encryption_works
Its more aimed at computers, but its the same thing...
"it won't be readable because of the encryption."
That I understand - thanks. I suppose I was just a bit uneasy because it seems a bit too simple to get in, but obviously tinkering with my own device is far simpler than tinkering with someone else's.
I'll put this one to bed now. I'm very grateful for everyone's patience in answering my questions.
Hi!
I've got a serious problem accessing my TF701T. My daughter had set a pattern lock to the tablet and... now she can't remember it.
The tablet is not rooted, not unlocked and I don't know if I had USB debugging enabled....
I tried several patterns in the hope of accessing the tablet by using my google account. But unfortunately it never shows this dialog option. After some wrong tries I have to wait 30 seconds to try again....
I also tried to set a new password via the Google Device Manager. The GDM locates the device and when I "lock" the tablet with a new password (e.g. 1234) it turns out. Back on it shows the (optional) text message but there's no textbox to enter the new password. Also the GDM says that the device is already locked and a new password is not necessary.
Does anyone can help me (without doing a factory reset)?
Thanks in advance,
Michael
Ohhh... yeahh!!! After 100+ tries I found the right 5-dot pattern!
It's a solution that satisfies my needs but it could be interesting to know a technical solution.
If I try to enable bluetooth or Wifi it refuses to switch on
it just tries for a few seconds before giving up
Edit:
[Resolved]
I ended up sending in my device to Hauwei to get repaired, since the device was less then 3 months old they ended up replacing the whole phone with a new one
This may be a dumb question but have you tried restarting / turning the phone on and off yet?
Also sometimes installing a System Update via OTA can fix this problem. (You can redownload the current system software version that is on your phone and just update it on top of the existing system software without losing data).
benjamen50 said:
This may be a dumb question but have you tried restarting / turning the phone on and off yet?
Also sometimes installing a System Update via OTA can fix this problem. (You can redownload the current system software version that is on your phone and just update it on top of the existing system software without losing data).
Click to expand...
Click to collapse
I system factory reset was one of the first things I tried
I've tried reinstalling my devices firmware to no effect
hanro50 said:
I system factory reset was one of the first things I tried
I've tried reinstalling my devices firmware to no effect
Click to expand...
Click to collapse
I have exactly the same problem - "If I try to enable bluetooth or Wifi it refuses to switch on ". Only wifi and bluetooth. Any ideas what should help?
What fw version do you have this effect?
I am on B378 which I got OTA.
When I go to settings, bluetooth and i disable bluetooth there, the switch turns gray and I cannot enable it anymore. luckyly, enabeling BT still works when I do it from the drop down menu.
I have a worse bug with settings, more, mobile network
it worked after the update, but after sometimes enable/disable data roaming, the screen closed by itself and now it is not possible to enter this submenu anymore. when i tap on "mobile network" it briefly shows "no service" in the top left corner but the menu does not open. if I tap mobile network again, the whole settings menu will close.
any idea?
Yes, also B378 and OTA.
And in "About phone" > "Status" > "Bluetooth address" is Unavailable.
hanro50 said:
I system factory reset was one of the first things I tried
I've tried reinstalling my devices firmware to no effect
Click to expand...
Click to collapse
laser-x said:
What fw version do you have this effect?
I am on B378 which I got OTA.
When I go to settings, bluetooth and i disable bluetooth there, the switch turns gray and I cannot enable it anymore. luckyly, enabeling BT still works when I do it from the drop down menu.
I have a worse bug with settings, more, mobile network
it worked after the update, but after sometimes enable/disable data roaming, the screen closed by itself and now it is not possible to enter this submenu anymore. when i tap on "mobile network" it briefly shows "no service" in the top left corner but the menu does not open. if I tap mobile network again, the whole settings menu will close.
any idea?
Click to expand...
Click to collapse
I tried installing cm13, after even that failed to fix the problem, I noticed that the mac address I got when using cm13 was the one you normally get before wifi is initialized (I believe it's 00.20.00.00.00 or something)
From my experience from reading the posts on the cm13 port for my old htc one mini 2, these told me that the operating system wasn't seeing the wifi hardware in the phone...
So after relocking the bootloader and flashing the stock rom (still didn't fix anything) it seems that it may be a hardware failure...
How to fix huawai p9 wifi issue
How to fix huawai p9 wifi issue;Go to settings.Scroll down and tab on system.Tab on reset.Tab on network settings reset.
okadtech.com
Please check this out this will definitely help you.
OK, this is not strictly a OP3T problem but that's where it happened to me. I run Norton Mobile Security on my phone, which is encrypted. Just recently enabled Web Protection to see if that would help speed up the incredibly long time Norton takes to analyze links before it allows pages to load. When I set it up and enabled Norton Security Services in the Accessibility menu, there was a fine-print screen that said Norton would be taking over some of the lock screen functions. No big deal.
When I rebooted the phone, it went straight to Android, without asking for the encryption password. I booted into recovery, same thing. I tried disabling Norton Web Protection, still no password. Uninstalled Norton, still no password. The Security menu shows the phone is still encrypted, which I figured because the installation didn't take long enough to decrypt the phone, and because it doesn't work that way anyway.
I tried this first on an LG G2 running Lineage 16 , but didn't notice the lack of the password prompt until it was too late, and I had done the same thing to my daily driver OP3T.
After about two hours on a chat with Norton support, they escalated me up to senior support, and said I'd get a call back in a couple of days.
So, I turn to this group. There's only one way I can explain this behavior: it appears Norton Mobile Security might be modifying the bootloader to preload the encryption password and bypass the prompt. This effectively disables decryption, since anyone can now boot my phone into recovery and ADB pull whatever they want.
The phone is fully functional, but also wide open. Short of copying everything off the phone, resetting and starting from scratch, does anyone have a suggestion? I do have TWRP backups that include the bootloader, but I don't want to overwrite the bootloader if that risks breaking the encryption entirely and locking me out of my phone.
In the meantime, be careful with Norton Mobile Security!
If memory serves me right (ha!), disabling the boot password is supposed to happen when you enable any accessibility settings...
That makes sense. The warning looked like standard Android boilerplate. Is there a way to re-enable the password prompt?
mobilityguy said:
That makes sense. The warning looked like standard Android boilerplate. Is there a way to re-enable the password prompt?
Click to expand...
Click to collapse
Yes, disable whatever accessibility setting you enabled. It's got nothing specifically to do with Norton....
Didgeridoohan said:
Yes, disable whatever accessibility setting you enabled. It's got nothing specifically to do with Norton....
Click to expand...
Click to collapse
I disabled everything I could find related to accessibility - the Norton services and the Android accessibility shortcut. What am I missing?
Also, the problem affects the recovery partition boot, which has also stopped asking for the encryption password but decrypts the phone must fine. Doesn't seem like changes to the Android options would change that.
You might have to reenable the boot password in the security settings as well.
Didgeridoohan said:
You might have to reenable the boot password in the security settings as well.
Click to expand...
Click to collapse
Yes! That did it. Opening the PIN option on the security screen brought up a prompt asking if I wanted to have the PIN prompt on boot. It now asks for passwords on both system and recovery. Thank you for the last piece of the puzzle.
Hi everyone,
so my issue is simple, yet I don't know what to actually do.
After a recent update via Google Play of some applications (i think that's the main problem), my draw pattern (a correct one) is not recognized by the phone anymore. Whatever I do, my Lock Screen doesn't recognize my correct pattern and lock itself from 10 seconds to 5 minutes depending on how many times I've tried to open it. Even my fingerprint is not recognized (altough as far as I remember, it never is when my phone boots for the 1st time, as pattern must be validated first).
My phone becomes unusable, as it can't unlock. The only 2 options I have are "Emergency call" or "Forgotten password". The latter option just says I have to Wipe Data Format which is not an option for me, as I have important things on my phone.
What solution could I apply, so I can unlock my phone WITHOUT having to delete my data :/
Important to note:
- It's not a problem from screen protector (I've removed it..)
- Generally I was using the option for invisible draw pattern, thus no one sees what I draw as extra protection (maybe it could be part of the problem now after some updates of random apps).. but obviously is working
- My SIM code is still accepted and it's fine, so not everything was Reset for whatever reason, as it's not 0000..
- My phone is updated to the absolute latest version available via OTA and nothing else was added or done
- I didn't use 3rd party Lock Screen other than the one included with the Xiaomi 11T Pro from the system
- I was using Bitdefender (which was not updated when the problem occured), which has the option to randomize pin for applications only (not pattern)
- I've also made the battery drop and the phone to turn-off and left it like that for 2 days to see if it will somehow reset/remember my pattern, but nothing..
I read so many guides online from Google and all seem are promoting some sketchy software which I dont want to risk with unless it's 100%.
Model: Xiaomi 11T Pro 5G 256GB 8GB RAM with Miui 14 (European version)
Thank you Xiaomi friends!
Weird that updates on the playstore have created this problem.
Not much to do, security issue.
NOSS8 said:
Weird that updates on the playstore have created this problem.
Not much to do, security issue.
Click to expand...
Click to collapse
Well, I see no other reason for this to happen. Doubt someone hacked me, altough at that time I was using Public wifi in a hotel. It can't be Bitdefender as well I think to scramble my pattern and I've remotely removed it. I've read that maybe if in my pocket the wrong pattern was entered by accident many times, that it will reset, but it makes no sense to me. I'm using latest versions of MIUI and standard apps (not using any unknown ones), everything is from Play Store, as I really can't imagine what issue could be, but for sure I would like to enter without deleting my data :/
Never seen or had this problem and it may be Bitdefender that caused this problem.
No solution without deleting your data.
NOSS8 said:
Never seen or had this problem and it may be Bitdefender that caused this problem.
No solution without deleting your data.
Click to expand...
Click to collapse
I was thinking the same, but remembered that LockScreen for Bitdefender was disabled way before that. It was not working for the official Xiaomi LockScreen to scramble anything (especially pattern) as I choose which apps to lock and it was not working on it. It does it only for applications which I've selected and with pin numbers :/ Also I've remotely removed the app support via their Center which means that even if that was the problem (for some unknown reason turned ON lets say), it should not be valid now. Also it was not updated via the last moment I had it working , so for sure it's not this the problem unless someone hacked Bitdefender via my profile, which should be valid also for my 2nd Xiaomi phone, but there I have no problem and it seems very unrealistic scenario for me :/ Also if it was true, they can't change my pattern or pin via website. Problem is somewhere else, as I remember, most were some Google and Xiaomi apps that got updated which I even usually don't use like Auto. I really look for some way to unlock it or somehow make my phone "remember" the correct invisible pattern :/ of course to delete everything would be most easy but that should be last last resort for me :/
Try here to see if the password or account is still the same and works.
NOSS8 said:
Try here to see if the password or account is still the same and works.
Click to expand...
Click to collapse
I didn't register Xiaomi Account when I took my phone, neither it has such, I don't have Xiaomi Cloud or account, I just have Google account in order to use Google Play :/
Is your bootloader unlocked? If yes, try boot a twrp a12/a13 for 11t pro, see if you can retrieve your data using that.
If you're not unlocked, wipe/format data is your only option. Either from recovery or your google account
x3r0.13urn said:
Is your bootloader unlocked? If yes, try boot a twrp a12/a13 for 11t pro, see if you can retrieve your data using that.
If you're not unlocked, wipe/format data is your only option. Either from recovery or your google account
Click to expand...
Click to collapse
As far as I know it's not unlocked/rooted or anything as it's brand new phone I bought in November. So in such case, whatever I do or read from sketchy apps/websites/videos, I should not trust and it's 100% impossible to unlock it or recover my data in any way? In general I can open the notification to turn Wifi on/off, etc, but I can't view messages for example, so just very basic things
Hackera93 said:
I didn't register Xiaomi Account when I took my phone, neither it has such, I don't have Xiaomi Cloud or account, I just have Google account in order to use Google Play :/
Click to expand...
Click to collapse
Interest to have a Xiaomi account:
Ability to locate the phone and erase data in case of theft or loss.
Cloud Backup:
Sms, Calls, Mms, apps, password, bluetooth, etc..
NOSS8 said:
Interest to have a Xiaomi account:
Ability to locate the phone and erase data in case of theft or loss.
Cloud Backup:
Sms, Calls, Mms, apps, password, bluetooth, etc..
Click to expand...
Click to collapse
I am privacy concerned about Xiaomi in general, so that's why I try to minimize services used by it. I have the ability to locate and erase data with BitDefender and Google as well, but that's not an issue at the moment. I can do it, but won't do me any favor. Also Xiaomi Cloud is the last place probably someone would want his private information stored from the hundreds available free alternatives, also is limited to just 2 GB as far as I remember by before, which indeed is useful for SMS, but nothing else. I dont see a reason to use it , neither why would my phone do unnatural things. I worry that this issue will repeat, so yes, backup is always worth to have, but I couldn't imagine I will need it so soon and that it will be for such unlogical reason which none of us seem to know what's the problem which really frustrates me and makes me rethink in general the use of Xiaomi, as such random events happening should be a red flag
Hackera93 said:
Hi everyone,
so my issue is simple, yet I don't know what to actually do.
After a recent update via Google Play of some applications (i think that's the main problem), my draw pattern (a correct one) is not recognized by the phone anymore. Whatever I do, my Lock Screen doesn't recognize my correct pattern and lock itself from 10 seconds to 5 minutes depending on how many times I've tried to open it. Even my fingerprint is not recognized (altough as far as I remember, it never is when my phone boots for the 1st time, as pattern must be validated first).
My phone becomes unusable, as it can't unlock. The only 2 options I have are "Emergency call" or "Forgotten password". The latter option just says I have to Wipe Data Format which is not an option for me, as I have important things on my phone.
What solution could I apply, so I can unlock my phone WITHOUT having to delete my data :/
Important to note:
- It's not a problem from screen protector (I've removed it..)
- Generally I was using the option for invisible draw pattern, thus no one sees what I draw as extra protection (maybe it could be part of the problem now after some updates of random apps).. but obviously is working
- My SIM code is still accepted and it's fine, so not everything was Reset for whatever reason, as it's not 0000..
- My phone is updated to the absolute latest version available via OTA and nothing else was added or done
- I didn't use 3rd party Lock Screen other than the one included with the Xiaomi 11T Pro from the system
- I was using Bitdefender (which was not updated when the problem occured), which has the option to randomize pin for applications only (not pattern)
- I've also made the battery drop and the phone to turn-off and left it like that for 2 days to see if it will somehow reset/remember my pattern, but nothing..
I read so many guides online from Google and all seem are promoting some sketchy software which I dont want to risk with unless it's 100%.
Model: Xiaomi 11T Pro 5G 256GB 8GB RAM with Miui 14 (European version)
Thank you Xiaomi friends!
Click to expand...
Click to collapse
Weird!! It even happened to me today, all of sudden my daily unlock pattern isn't working. Even I need the data in it
prithvi9679 said:
Weird!! It even happened to me today, all of sudden my daily unlock pattern isn't working. Even I need the data in it
Click to expand...
Click to collapse
Hey, also on 11T Pro? And after update?? Do you remember last things that happened before it "forgot" the pattern? And was it also the invisible type of it? Tell more details, maybe we can get some common points and maybe some solution could be found hopefully :/
Yes on Xiaomi 11T Pro, received miui 14 a week ago. It just randomly happened yesterday as my fingerprint is not detected it asked me to draw the pattern. When I drew it doesn't allow me into phone even though the pattern is correct. For me the pattern is VISIBLE.
did you activate usb debugging? and at least once connected with your pc?
then you can get your files with XIAOMIADBFASTBOOTTOOLS.jar
that's the only option you have left before deleting everything on your phone.
ricos1995 said:
did you activate usb debugging? and at least once connected with your pc?
then you can get your files with XIAOMIADBFASTBOOTTOOLS.jar
that's the only option you have left before deleting everything on your phone.
Click to expand...
Click to collapse
Indeed, it is necessary to have activated the USB debugging and to have already used this program so that the authorization is granted.
Anyway, nothing about this program will remove security or be able to recover data.
NOSS8 said:
Indeed, it is necessary to have activated the USB debugging and to have already used this program so that the authorization is granted.
Anyway, nothing about this program will remove security or be able to recover data.
Click to expand...
Click to collapse
yes it can "recover data" but not reset or change the passcode
ricos1995 said:
yes it can "recover data" but not reset or change the passcode
Click to expand...
Click to collapse
Nope, there is no such option and even if it existed, this data is encrypted.
NOSS8 said:
Nope, there is no such option and even if it existed, this data is encrypted.
Click to expand...
Click to collapse
forgot it was encrypted
Guys, do you think it's worth to wait for some "miracle" to happen? It seems it's some bug that happens to other people too and hopefully Xiaomi takes action. Maybe if I can get update in background, might get fixed without the need to Wipe data?
PS: I did use before USB Debugging, but from the Settings. I dont know how to turn it remotely from the computer. I also have installed ADB, but I'm not sure how to debug it as it doesn't detect my phone now :/ The XIAOMIADBFASTBOOTTOOLS.jar I havent used.