[feature request] add option to choose if pully shortcuts start apps before lockscreen
asked 2014-10-28 19:37:10 +0200
with 1.1.0.39 i have one of the lockscreen pully shurtcuts configured to start the flashlight app. and a lockcode is set.
with 1.1.0.38/39 the shortcuts are accessible while the phone is locked. That's not a problem in first place, but when i started the flashlight app while the phone was locked, the app started before the lockcode was entered. Yes i couldn't see the ui of the flashlight app because it was covered by the screen to enter lockcode, but the led was turned on.
So what ever app is launched via lockscreen shortcuts is started before the phone is unlocked. I don't think that is how it should be. Every app operating without user interaction and set up as a shortcut can be started while the phone is locked.
Depending on the app this can be a security/privacy issue. (in my case anyone can empty my battery, because flashlight can be turned on but not off without lockcode)
edit: like said by g7, i don't suggest to disable those shortcuts again while phone is locked. my suggestion is to keep the shortcuts enabled and start the apps after the lockcode was verified
edit2:
the problem is NOT the flashlight app, like i said the problem is to start the apps at all. I just noticed that behavior it with the flashlight app. It could be ANY app, doing ANYTHING, for example:
- Stop/Restart AlienDalvik - anyone can close all android apps
- Any (socialnetwork/navigation) app using location - spoiling your location to the apps/api publisher(google, fb, nsa, ...)
- Restart phone -> you're not reachable anymore
- just be creative....
If that behavior is intended, please warn users to not put critical apps in shortcuts!
Edit3 Dec. 20th: (+title edited) same behavior with 1.1.1.27
Suggestion: Add an option to settingsmenu, to choose what behavior is preferred. In some cases it can be usefull, like starting shazam/soundhound listening automatically.
Edit4: Feb. 19: same behavior with 1.1.2.15
before disabling the feature, please think of any other possible security/privacy issues. Accidental launch of flashlight emptying the battery is very unlikely to happen. Other two ways to circumvent this is:
- Add an (optional) feature in
flashlight app to disable LED turning
ON on app launch.
- Similar to N900, vibrate the phone &
show a warning red (front) LED
notification, when flashlight is
turned on while phone is locked
User ( 2014-10-29 11:56:04 +0200 )editPlease explain how this is a security or privacy issue. All that happens is the chosen app gets launched in the background while you're still entering the unlock code, so by the time you're done entering the code, you don't need to wait for the app to launch anymore. No one can access any data because, you know, the device is still locked. If you decide to put an app that automatically transmits all your personal data to the nearest Bluetooth devices on launch in your pulley menu, that's your choice. Having your battery drained because you accidentally selected the Flashlight app in the pulley menu but then didn't enter the unlock code for whatever reason is neither a security nor a privacy issue, and it's also literally never going to happen. You can't reasonably argue that someone would do this as a joke while you weren't looking either, because that would mean you'd be blind, considering the flashlight is brighter than the sun.
nthn ( 2014-10-29 12:37:18 +0200 )edit