search

xmikos / SnooperStopper

Android device ecryption password manager and failed unlock attempts monitor
GNU General Public License v3.0
48 stars 7 forks source link

[Feature request] Add fingerprint shutdown #14

Open utack opened 8 years ago

utack commented 8 years ago

It would be really cool to have too many attempts on the fingerprint sensor count like wrong pin attempts and make it shut down. Maybe at some point you find time for it? Thanks

xmikos commented 8 years ago

I don't have phone with fingerprint scanner, so I can't test this. But fingerprint readers are generally not safe (you can spoof someones fingerprints relatively easily). You should use PIN or password instead if you really want security.

nuntius35 commented 5 years ago

I also don't have a phone with a fingerprint reader, but there might be a bug hidden here. From reading the code, I believe that the counter of wrong passwords is not reset, if you login with a fingerprint. Assume that your setting is that the device shuts down after 3 wrong passwords. I think the follwing happens:

  1. Enter a wrong password two times.
  2. Unlock with fingerprint.
  3. Lock phone.
  4. Enter wrong password once.
  5. Phone shuts down?

Maybe @utack can test this.