Problem ?Exploit? with mobile security
Severalt apps are blocked with mobile Security.
Apps can be accessed by hitting the "allow" button several times and after that hitting the "forgot pw" button. All blocked Apps can be accessed after that without any restriction.
This was discovered by my 11 Year old son within a Huawai P-Smart 2018 /Emui 8.0/ Android 8.0.
Update Status is new.
Greetings
Comments
-
Hello,
I am only an F-Secure user (their home solutions).
There are some examples of discussion about troubles with F-Secure SAFE for Android and its Parental control functionality; with another potential "bypass" steps.
For example:
- https://community.f-secure.com/t5/F-Secure-SAFE/Why-does-F-Secure-SAFE-go/ta-p/99546
- https://community.f-secure.com/t5/F-Secure-SAFE/F-Secure-Safe-can-be-uninstalled/m-p/110968
- https://community.f-secure.com/t5/F-Secure-SAFE/F-Secure-SAFE-processes/m-p/98138
- https://community.f-secure.com/t5/F-Secure-SAFE/Parental-Control-Huawei/m-p/88550
- https://community.f-secure.com/t5/F-Secure-SAFE/Bypassing-Time-Limits-by-closing/m-p/115623
- https://community.f-secure.com/t5/F-Secure-SAFE/Bypassing-a-time-limit-on/m-p/106891
- https://community.f-secure.com/t5/F-Secure-SAFE/F-safe-bypassed-with-Split/m-p/111513
So, your description with words about "Mobile Security". Is it F-Secure Mobile Security application?
if so - what is exact reason of "blocked apps"?
And where is "allow button and 'forgot pw' button". It is blockscreen by F-Secure Mobile Security application or it is blockpage under browser (as example)?
// later added:
Based on next Online Documentation:
your description is about "Application control" functionality. If so - it is possible to contact their direct Support Channels (chat, for example):
To provide steps and to receive an explanation, tips and feedback about it. Since flow:
Apps can be accessed by hitting the "allow" button several times and after that hitting the "forgot pw" button. All blocked Apps can be accessed after that without any restriction.
sounds as fully unexpected result.
Thanks!
-
Dear Ukko,
thanks for your reply.
Im aware of some problems regarding F-Secure and Huawai Phones. I adjusted the energy saving options so F-Secure will work in an accepable way.
The problem occurs in the mobile security software .
And where is "allow button and 'forgot pw' button". It is blockscreen by F-Secure Mobile Security application or it is blockpage under browser (as example)? Yes it is the blockscreen of mobile security, I just did not know how to describe it, cause i use the german version.
Is it F-Secure Mobile Security application?if so - what is exact reason of "blocked apps"? Its simply that there are apps on the phone which should not be used by my son.
What confuses me most, is that after unblock the phone by my son in the above mentioned way all blocked apps are usable and nor blocked anymore.
Greetings
-
Hello,
Thanks for feedback!
In fact, your description is pretty well. I just did not use F-Secure Mobile Security with Application control - so - it was not enough clear for me.
"F-Secure SAFE" (for Android platfom) also with related functionality. But it is not possible to "allow access" by normal user or to use password. Since functionality managed "remotely" via web portal (by administrator / main user). Thus, I decided to re-ask about your situation.
What confuses me most, is that after unblock the phone by my son in the above mentioned way all blocked apps are usable and nor blocked anymore.
Indeed, this is the most strangest point. And just because steps are known (and it is possible to repeat, at least, with your device) - good to contact Support (for example, chat):
to inform them about this trouble directly. OR maybe if trouble is known - to receive workaround / fix.
Thanks!
-
🚩 What Do You Think?
We’d love your thoughts on our fresh look! Quick survey, big impact!