• General

  • Bug and or big security issue discovered

Steps go like this..

When I am on other profile with WiFi enabled,
then I scroll down quick settings and disable WiFi.
While WiFi popup is still there with WiFi toggle and WiFi disabled i hold power button and end session.
Upon returning to main user profile, screen is locked but WiFi popup/toggle is there on the screen and you can enable WiFi from there, from lock screen on main profile...
Is it only me or can you test please.

    I was able to reproduce this on mine P6a.
    I can confirm that the WiFi toggle is not available on the lock screen so it can be a bug, I guess. Just not sure if this can be considered as a "big security issue".

      Oggyo if someone could get hands on your phone after your fast and sloppy attempt of a shutdown It could be a risk. And my phone is pixel 7

          Resurr quick tiles are available from lock screen normally by swiping down. You can edit the quick tiles to add or remove tiles .

              Resurr
              I still can't understand your example classified as a risk or a big security issue

                Skyway yes but normally you can't turn on WiFi from quick settings before unlock

                    I think the concern is that if some attacker is able to activate WiFi without us expecting this, he has a new attack vector we are not prepared for. This can be used to gain more information of the device or worst case to use a zero day exploit and get full access. It's hypothetical, but still a bug and potentially dangerous. Remember that less than a year ago there was an exploit to bypass the lock screen on Pixel devices with a simple SIM card trick.

                    I was not able to reproduce this bug here on a Pixel Tablet.

                    Resurr unless the phone is rebooted then its not in before first unlock state. Simply switching between profiles does not put phone in before first unlock state.

                      OK I think I see what your talking about . I can't reproduce it on my p6p though.
                      Disregard my other posts .