Ask / Submit
15

[feature request] add option to choose if pully shortcuts start apps before lockscreen

asked 2014-10-28 19:37:10 +0200

nightmare gravatar image

updated 2015-02-19 20:48:48 +0200

with 1.1.0.39 i have one of the lockscreen pully shurtcuts configured to start the flashlight app. and a lockcode is set.

with 1.1.0.38/39 the shortcuts are accessible while the phone is locked. That's not a problem in first place, but when i started the flashlight app while the phone was locked, the app started before the lockcode was entered. Yes i couldn't see the ui of the flashlight app because it was covered by the screen to enter lockcode, but the led was turned on.

So what ever app is launched via lockscreen shortcuts is started before the phone is unlocked. I don't think that is how it should be. Every app operating without user interaction and set up as a shortcut can be started while the phone is locked.

Depending on the app this can be a security/privacy issue. (in my case anyone can empty my battery, because flashlight can be turned on but not off without lockcode)

edit: like said by g7, i don't suggest to disable those shortcuts again while phone is locked. my suggestion is to keep the shortcuts enabled and start the apps after the lockcode was verified

edit2:

the problem is NOT the flashlight app, like i said the problem is to start the apps at all. I just noticed that behavior it with the flashlight app. It could be ANY app, doing ANYTHING, for example:

  • Stop/Restart AlienDalvik - anyone can close all android apps
  • Any (socialnetwork/navigation) app using location - spoiling your location to the apps/api publisher(google, fb, nsa, ...)
  • Restart phone -> you're not reachable anymore
  • just be creative....

If that behavior is intended, please warn users to not put critical apps in shortcuts!

Edit3 Dec. 20th: (+title edited) same behavior with 1.1.1.27

Suggestion: Add an option to settingsmenu, to choose what behavior is preferred. In some cases it can be usefull, like starting shazam/soundhound listening automatically.

Edit4: Feb. 19: same behavior with 1.1.2.15

edit retag flag offensive close delete

Comments

2

before disabling the feature, please think of any other possible security/privacy issues. Accidental launch of flashlight emptying the battery is very unlikely to happen. Other two ways to circumvent this is:

  • Add an (optional) feature in flashlight app to disable LED turning ON on app launch.
  • Similar to N900, vibrate the phone & show a warning red (front) LED notification, when flashlight is turned on while phone is locked
User ( 2014-10-29 11:56:04 +0200 )edit
3

Please explain how this is a security or privacy issue. All that happens is the chosen app gets launched in the background while you're still entering the unlock code, so by the time you're done entering the code, you don't need to wait for the app to launch anymore. No one can access any data because, you know, the device is still locked. If you decide to put an app that automatically transmits all your personal data to the nearest Bluetooth devices on launch in your pulley menu, that's your choice. Having your battery drained because you accidentally selected the Flashlight app in the pulley menu but then didn't enter the unlock code for whatever reason is neither a security nor a privacy issue, and it's also literally never going to happen. You can't reasonably argue that someone would do this as a joke while you weren't looking either, because that would mean you'd be blind, considering the flashlight is brighter than the sun.

nthn ( 2014-10-29 12:37:18 +0200 )edit

5 Answers

Sort by » oldest newest most voted
12

answered 2014-10-29 10:39:16 +0200

stezz gravatar image

The lockcode prevents user to access the apps but the apps start in the background anyway. Lockcode is not intended to prevent apps from starting but just to get access to those apps.

If apps automatically trigger HW devices on/off at start then the lockcode wouldn't know. Whether that is a feature or a bug is probably debatable but I don't see a huge problem in this.

I would suggest to downgrade this as Feature Request if reporter is fine with it.

i.e. Apps should not start before lockcode is entered correctly

edit flag offensive delete publish link more

Comments

Please don't downgrade this feature! I use this very often. I always launch the flashlight without accessing the pulley menu or even the screen. I just double press the power button to ON the flashlight. I use an insmat flip case and power-menu app.

User ( 2014-10-29 11:35:57 +0200 )edit
2

I suggested to downgrade the _report_ from BUG to feature request ;)

stezz ( 2014-10-29 14:09:55 +0200 )edit
1

it's ok to change it to feature request. If it isn't implemented, please warn the user

nightmare ( 2014-10-29 18:20:40 +0200 )edit
1

answered 2014-10-28 20:02:06 +0200

juiceme gravatar image

I agree this can be a possible security hazard, however it is more like a feature than a bug. There are many cases where you want to start an action even as the device is locked, for example the ability to set the device into silent mode without unlocking. The reason for this behaviour is that the lockscreen does not really "lock" the device, it only locks the device UI.

It just requires care in implementing the applications/functionality that is used while device is locked.

edit flag offensive delete publish link more

Comments

2

Even on earlier releases it was possible to go into silent mode when the device is locked, but the other three shortcuts were disabled. That's not the case anymore with Uitukka (just noticed this morning).

And while this may be useful, it should launch the selected shortcut only when (and if) the user unlocks the phone.

g7 ( 2014-10-28 20:29:15 +0200 )edit
1

answered 2014-10-29 10:07:57 +0200

stezz gravatar image

Thanks for the report. We'll check this internally and see if reproducible (and eventually even fix it :) )

edit flag offensive delete publish link more

Comments

1

the reason I put the flashlight as a pulley menu shortcut is to have quick and simple access to the torch application. In order to switch it off, I need to unlock the phone which I found it not so practical.

pmelas ( 2014-10-29 15:08:33 +0200 )edit
1

Practicality and security are usually mutually exclusive.

stezz ( 2014-10-29 15:11:25 +0200 )edit

The question could be why the flash light is on when the app starts... I mean, it could be off and when I press on a button it goes on.

NuklearFart ( 2014-10-30 00:45:55 +0200 )edit

In case of flashlight, I find this is a feature. I'd opt for a way to turn flashlight off via pulley menu, though.

the_mgt ( 2015-01-23 10:20:28 +0200 )edit
0

answered 2014-10-29 10:11:37 +0200

stezz gravatar image

Quickly tested this with the stock Jolla apps (Camera, Settings, Phone) and with a couple of Store apps (Lighthouse, IRC) but I could not reproduce. Does this happen for you only with Flashlight (which I have not tested) or also with other apps ?

edit flag offensive delete publish link more

Comments

It happens only with Flashlight, it works that way. Open it -> flash is on. Doesn't that lock key entering just "hide" that opening animation..

hnbv ( 2014-10-29 10:18:24 +0200 )edit

It only happens when flashlight was not yet started, after a phone reboot for example.

It seems the behaviour of flashlight app is: If this is the first call of this app, turn on LED. On all other calls of the app, the last state of the LED is respected.

So this "problem" of having the LED turned on when used via pulley menu only happens after a fresh reboot. While I can see that people are worried about battery drain or possible other issues with other apps, I want my flashlight turned on instantly.

"OMG, look Scully, is that an alien hiding in the bushes?" "Wait, I need to unlock my torch!" Not cool ;)

the_mgt ( 2015-01-23 10:24:06 +0200 )edit
0

answered 2014-12-19 23:30:49 +0200

Nokius gravatar image

In 1.1.1.26 / 1.1.1.27 It happens will all application in the pulley-menu

I discovered it with the camera Application which is running than in background.

If the device is locked and you select Camera but than you don't unlock the Phone the application will be launched in the background. If you later unlock you see the Camera cover or you will get into the Camera application.

This was not happening before <=U8

edit flag offensive delete publish link more
Login/Signup to Answer

Question tools

Follow
1 follower

Stats

Asked: 2014-10-28 19:37:10 +0200

Seen: 765 times

Last updated: Feb 19 '15