Possibility of Changing Pin Code Font Size

DollyRags

Would be nice if there was a setting to resize the numbers on the pin code input screen so they're smaller.

This could be combined with the randomized layout to make shoulder surfing more difficult, and it would significantly increase the resolution that would be required to obtain your PIN from a video recording.
The font sizes/rotation of every individual digit could even be randomized slightly within a range, since there are cases where that may be beneficial.

Idk if this is an idea which has been considered before but I thought I'd put it out there for consideration as it doesn’t seem like it would have a particularly complex implementation.

nullrunde

Absolutely necessary.
The numbers are way too big.

DeletedUser232

https://github.com/GrapheneOS/os-issue-tracker/issues/4541

DeletedUser232

How about adopting a new UI design for the PIN input? Resizing the buttons and numbers are a good idea but maybe GrapheneOS could add an option to change 0₁ to roman numbers or alphabet. Or even something like an old telephone dialer design.

Indy

I would support an option for the size of the input screen, but please don't remove what's already there. My vision is 20/200 and I need the larger numbers.
.

redwheelbarrow

This has always puzzled me, and without any further information to consider on the contrary readily available, I would also love to see this fleshed out more. My only reservation is that - usually - when something looks so obviously in need of a fix, there is a reason for it. I just didn't know that I didn't know something key before making a snap judgement.

Anyways, this would be amazing! On a similar note: I have also always wondered why MFA didn't give you the OPTION to add more than, say, a separate PIN to complement a fingerprint, etc. Is it just me, or is there a really good reason why the OPTION to add, say, a requirement to submit: something you have, something you know, and something you are with EVERY login attempt has never been an option? If I'm mistaken and this does/has existed, I welcome any corrections for accuracy - always!

Edit: For the avoidance of doubt, my statement on MFA is purely for the sake of unbridled curiousity (I'm Canadian; don't mind my spelling!), and I hold no illusions that this "feature" would be necessary for the overwhelming majority of peoples' use cases - it's clearly overkill.

GrouchyGrape

redwheelbarrow if using the fingerprint + pin option, this technically satisfies your request. Something you know (pin), something you are (fingerprint) and something you have (the phone itself). Remember that under normal circumstances and if done correctly, someone needs physical access to even begin to obtain any data from your device. That's "costly" in most situations. Unless a zero day exploit is used (very few targets are worth a zero day), the phone itself is part of your MFA toolbox.

de0u

redwheelbarrow I have also always wondered why MFA didn't give you the OPTION to add more than, say, a separate PIN to complement a fingerprint, etc. Is it just me, or is there a really good reason why the OPTION to add, say, a requirement to submit: something you have, something you know, and something you are with EVERY login attempt has never been an option?

This is really complicated code to write. And to test. And it's really really bad if there is a bug in it. Honestly if this code had lots of feature churn arguably people should be nervous.

redwheelbarrow

@GrouchyGrape I wanted to formally apologize for my ridiculous response to your reply. I am new here and that was no way to make a respectful first impression. I hope we can begin anew with no hard feelings. I am a single parent with an autistic toddler, and sometimes I need to remind myself to breathe on the hard days.

@de0u Thank you so much for the reply. This confirms my suspicions, but I had no direct knowledge so I swallowed my pride and asked "the stupid question" :)

Take care all, happy to have joined the community!

GrouchyGrape

redwheelbarrow no problem at all. I agree with everything you said, I was just pointing out something that often people forget, that your device itself can, in many circumstances, satisfy MFA requirements.

Regardless, welcome to the forum! I'm always happy to see new members and help each other on our privacy/security journeys!

redwheelbarrow

GrouchyGrape That was stand up of you to show understanding and I have a lot of respect for that. I'm looking forward to learning and growing with yourself and others!

Thank You.