Live data from Hacker News

Accidental Google Pixel Lock Screen Bypass

bugs.xdavidhu.me

271–280 of 475 posts

Re: Accidental Google Pixel Lock Screen Bypass

#271
post #185

Earlier quoted context omitted.

LEO already have access to locked phones via stuff like GrayKey. https://www.grayshift.com/graykey/

I am always skeptical of these "lawtech" companies that sell magic unlocking devices. Are we really to believe that there are unpatched security holes in all major devices (both Android and iOS) that allow this kind of backdoor access? I find it rather convenient that the "detailed support matrix" is only available for current customers only, seems to me like the actual amount of supported devices/operating systems w…

[deleted]

Re: Accidental Google Pixel Lock Screen Bypass

#272
post #264

Earlier quoted context omitted.

In the story above he says he wants to buy a pixel to the salesperson, but it is someone else that says they work at Google.

So basically, even sketchier.

No, I'm quite more likely to believe that a customer at T-Mobile is a googler than to believe that the salesman is.

Re: Accidental Google Pixel Lock Screen Bypass

#274

Earlier quoted context omitted.

Do you have an Apple Watch? My phone unlocks as long as I'm nearby, wearing the watch and have it unlocked.

But the Watch tells you it’s unlocking the phone.

And unlocking with the watch only works on Face ID iPhones to make it more convenient when you're wearing a mask.

Re: Accidental Google Pixel Lock Screen Bypass

#275
I don't know anything about Android or iOS coding but...

I'm actually very suprised it's coded the way it is, a stack of screens that are dismissed over the top of each other. I would expect one very specific boolean/flag bottleneck that says if the device is locked or unlocked. Then a list of actions that can be taken when locked (such as sim pins, emergency calls etc) and then unlocked (such as everything else). And that flag can only be flipped by unlocking the phone. This set of screens on top of the phone that can be dismissed is very surprising to me.

Does anyone know how the iOS lock screen works? Is it the same way?

Re: Accidental Google Pixel Lock Screen Bypass

#276

I went to buy a phone maybe two months ago. Before I had my current Google Pixel 6, I used a OnePlus 3T for six years, and even then I only stopped because I sat in a hot tub with it on. At the T-Mobile store, I announced to the salesman that I would be back to buy a Pixel 6 when they had it in stock, and a man pulled me aside and privately asked me why I wanted to buy a Pixel. He explained to me that he was actually…

Could it have been a sales technique? Perhaps to sell you an iPhone. Perhaps the iPhones they were trying to sell have a higher commission and margin than the Android phones.

Re: Accidental Google Pixel Lock Screen Bypass

#277

Every once in a blue moon when I pick up my locked iPhone (which auto-locks in just 30 seconds) and engage the home button just as the screen comes alive from the gyro sensing movement, it unlocks on its own. It just flashes the PIN dialog and slides right onto the home screen. I don't use Touch ID, and never stored my print with it even once to test the feature/hardware. It's been happening ever since iOS 11, with b…

Do you have an Apple Watch? My phone unlocks as long as I'm nearby, wearing the watch and have it unlocked.

No Apple watch, and it can happen without the phone being connected to anything Bluetooth/Wi-Fi.

Re: Accidental Google Pixel Lock Screen Bypass

#278

I went to buy a phone maybe two months ago. Before I had my current Google Pixel 6, I used a OnePlus 3T for six years, and even then I only stopped because I sat in a hot tub with it on. At the T-Mobile store, I announced to the salesman that I would be back to buy a Pixel 6 when they had it in stock, and a man pulled me aside and privately asked me why I wanted to buy a Pixel. He explained to me that he was actually…

Did this self-reported hardware engineer from Google tell you WHY his colleagues don't use a Pixel? You could have just as likely been listening to hot air from a random individual. Perhaps an Apple store employee with an axe to grind.

I'm not the OP but I know a couple of Google SRE's and an Android Auto HCI person and they use iPhones...

Re: Accidental Google Pixel Lock Screen Bypass

#279

Earlier quoted context omitted.

I am always skeptical of these "lawtech" companies that sell magic unlocking devices. Are we really to believe that there are unpatched security holes in all major devices (both Android and iOS) that allow this kind of backdoor access? I find it rather convenient that the "detailed support matrix" is only available for current customers only, seems to me like the actual amount of supported devices/operating systems w…

Confiscated phones often have been confiscated for months and are therefore on a relatively old patch level. If at any point old vulnerabilities come out these can be used. Keeping the phones on and connected to a charger in the evidence lockers doesn't seem like too much work.

> Keeping the phones on and connected to a charger in the evidence lockers doesn't seem like too much work.

There's no way that's a standard procedure.

Re: Accidental Google Pixel Lock Screen Bypass

#280

Every once in a blue moon when I pick up my locked iPhone (which auto-locks in just 30 seconds) and engage the home button just as the screen comes alive from the gyro sensing movement, it unlocks on its own. It just flashes the PIN dialog and slides right onto the home screen. I don't use Touch ID, and never stored my print with it even once to test the feature/hardware. It's been happening ever since iOS 11, with b…

Delete this comment and write a bug, you could get $100k

I reported it years ago but the report was ignored and closed, possibly because I could not provide a reliable/reproducible procedure for triggering it.
Post reply on HN