Prevent access to pull down menu when locked

scrupulous

Hmm, so there is no way to stop this? It makes me very uncomfortable. Lots of personal info can be viewed from there (which networks I'm connected to, Bluetooth devices, etc.) Certainly that's a privacy concern.

Even non-privacy respecting OS's don't allow this.

unlockedBootloader

scrupulous agreed, this should be a thing, just like in iOS

Damiansd

Agreed. I don't like that the button to change profiles is exposed and functions.

raccoondad

Damiansd I don't like that the button to change profiles is exposed and functions.

Locking them would void the purpose of user accounts, no?

Damiansd

raccoondad
Once logged in I want to see that button. But would prefer that if someone else has my locked phone, they dont have ability to attempt to login to my other profiles, or know that they even exist.

raccoondad

Damiansd I mean, sure, but I don't think GOS will implement such a hyperspeific use case that sort of undermines the point of profiles. To be secondary access.

Damiansd

raccoondad agree.

unlockedBootloader

Blocking the control center would be great. A way to do this would be an opt-in switch. Sucks that's not the case

nandohyphen1

I think its an issue too. Especially with notifications. Here's the problem:
So my phone is locked. I have it to display notifications on the lock screen. I saw a notification that I didn't want so I swiped it away - even though the phone was locked it let me! I don't like that someone could technically clear all my notifications by swiping them away. And yes, being able to view the quick settings when locked is concerning - even though you can't interact with them. Just sharing my thoughts on it. :)

NetRunner88

nandohyphen1
Why you do not disable the notification on lock screen ?

nandohyphen1

NetRunner88 because I like to be able to see my notifications. :)

secrec

treequell do not disturb

That one definitely should require unlock since it alters a critical function -- notifications and incoming calls.

nandohyphen1

secrec I agree. I just tried it with some emails. I was able to move them to trash without unlocking my phone.

nandohyphen1

Here's another reason preventing access to the pull down menu would be useful. So my phone dinged notifying a different profile sent a notification. My phone is locked and this appears on the lock screen. I tap the notification to open it, and it switches to my other profile without me even needing to unlock the phone! That's kinda scary, since someone could get into my other profile just by clicking a notification. Not complaining, just stating that I think this is a bit of a security problem.

Probably9857

nandohyphen1

Can you reproduce this? Can anyone else? If true, this would be a huge security issue. And you should absolutely "complain" (or rather make sure it gets attention).

nandohyphen1

Probably9857 I'll see if I can get one of my profiles to send a notification. Then I'll click on it again while my phone is locked and see what it does.

nandohyphen1

Probably9857 I tried it again and yes, I can switch to a different profile by clicking the notification when my phone is locked.

Probably9857

nandohyphen1

Just to be clear, you mean the profile is now unlocked, without ever entering an unlock credential?

If so, could you possibly record that process from another device and post a link to the video?

And start a new thread if/when you do.

nandohyphen1

Probably9857 Just to be clear, you mean the profile is now unlocked, without ever entering an unlock credential?

Yes.

could you possibly record that process from another device and post a link to the video?

How can I post a video? Would a Proton Drive link work?

nandohyphen1

@Probably9857 I started a new thread and linked a video.

https://discuss.grapheneos.org/d/25285-able-to-switch-profiles-without-unlocking-phone