GrapheneOS / os-issue-tracker

Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
https://grapheneos.org/
361 stars 21 forks source link

Scambling to apply throughout the OS #2113

Open ghost opened 1 year ago

ghost commented 1 year ago

So far PIN Scrambling only applies to the lock screen and not anywhere else where the PIN code might be needed, such as accessing certain areas of the security settings, or to access certain apps(when enabled). It might be worthwhile to implement scrambling everywhere because over-the-shoulder attacks can happen at any time.

ruvilonix commented 1 year ago

Would it even be possible to add scrambling to apps? KeepassDX uses the PIN, but I imagine the UI is coded in the app itself and isn't changeable by the OS.

ghost commented 1 year ago

Would it even be possible to add scrambling to apps? KeepassDX uses the PIN, but I imagine the UI is coded in the app itself and isn't changeable by the OS.

For most apps, I think it's possible from the keyboard. I don't know how feasible it is, but it may be possible.

robcle commented 1 year ago

A keyboard implementation would be a good way to do this. You should ask keyboard developers to implement something like this.

https://github.com/florisboard/florisboard/issues