Re: [android-developers] Security lock replacement

That's right, the concept for this is based off the fact that you
shouldn't be able to create a system operation as an app.

The device admin API doesn't allow you to implement a lock screen, but
does allow you to change the password

http://developer.android.com/reference/android/app/admin/DevicePolicyManager.html#resetPassword(java.lang.String,%20int)

It's sort of strange the cited app doesn't require any permissions,
meaning it basically exploits some hole..

Kris


On Sun, Feb 24, 2013 at 10:00 PM, galapogos <goister@gmail.com> wrote:
> Thanks for the reply.
>
> So there's no existing API that allows an app to pass a security
> credential(PIN/passphrase/etc) to the security framework for user
> authentication/screen unlock purposes?
>
> Is there a reason why there isn't a way for an app to pass a security
> credential to the framework? The only I can think of are for security
> reasons (risks of malware taking over the authentication process and
> performing a DoS attack by locking the phone with incorrect credentials for
> example), but I've come across apps that apparently are able to change the
> actual user credential (e.g. Moving Target -
> https://play.google.com/store/apps/details?id=org.inh.android.movingtarget),
> which seems to me to be a greater security risk.
>
>
> On Saturday, February 23, 2013 12:01:30 AM UTC+8, Kristopher Micinski wrote:
>>
>> It is not possible to do this at the app level, unfortunately.
>>
>> Kris
>>
>> On Fri, Feb 22, 2013 at 12:59 AM, galapogos <goi...@gmail.com> wrote:
>> > Hi,
>> >
>> > Is it possible to create a lockscreen replacement at the application
>> > level
>> > that replaces the device's security lock, whether it be PIN, passphrase,
>> > pattern or face unlock, or potentially a new method? I know it's
>> > possible in
>> > the framework level, and have done it before, but I'm just wondering if
>> > it's
>> > possible to do it at the application level.
>> >
>> > So far the few lockscreen replacements that I've tried only implement a
>> > slide gesture unlock lockscreen UI, and falls back to the device's
>> > security
>> > lock after that.
>> >
>> > Any help would be appreciated, thanks!
>> >
>> > --
>> > --
>> > You received this message because you are subscribed to the Google
>> > Groups "Android Developers" group.
>> > To post to this group, send email to android-d...@googlegroups.com
>> > To unsubscribe from this group, send email to
>> > android-developers+unsubscribe@googlegroups.com
>> > For more options, visit this group at
>> > http://groups.google.com/group/android-developers?hl=en
>> > ---
>> > You received this message because you are subscribed to the Google
>> > Groups
>> > "Android Developers" group.
>> > To unsubscribe from this group and stop receiving emails from it, send
>> > an
>> > email to android-developers+unsubscribe@googlegroups.com.
>> > For more options, visit https://groups.google.com/groups/opt_out.
>> >
>> >
>
> --
> --
> You received this message because you are subscribed to the Google
> Groups "Android Developers" group.
> To post to this group, send email to android-developers@googlegroups.com
> To unsubscribe from this group, send email to
> android-developers+unsubscribe@googlegroups.com
> For more options, visit this group at
> http://groups.google.com/group/android-developers?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "Android Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to android-developers+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>

--
--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
---
You received this message because you are subscribed to the Google Groups "Android Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to android-developers+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.