Problem ?Exploit? with mobile security

Aspirant

Problem ?Exploit? with mobile security

Severalt apps are blocked with mobile Security.

Apps can be accessed by hitting the "allow" button several times and after that hitting the "forgot pw" button. All blocked Apps can be accessed after that without any restriction.

This was discovered by my 11 Year old son within a Huawai P-Smart 2018 /Emui 8.0/ Android 8.0.

Update Status is new.

 

Greetings

4 REPLIES 4
Highlighted
Superuser

Re: Problem ?Exploit? with mobile security

Hello,

 

I am only an F-Secure user (their home solutions).

 

There are some examples of discussion about troubles with F-Secure SAFE for Android and its Parental control functionality; with another potential "bypass" steps.

For example:

So, your description with words about "Mobile Security". Is it F-Secure Mobile Security application?

if so - what is exact reason of "blocked apps"?

And where is "allow button and 'forgot pw' button". It is blockscreen by F-Secure Mobile Security application or it is blockpage under browser (as example)?

// later added:

Based on next Online Documentation:

https://help.f-secure.com/product.html#home/mobile-security/Android/en/task_FF97F3F5202E4917AFD7177B...

your description is about "Application control" functionality. If so - it is possible to contact their direct Support Channels (chat, for example):

To provide steps and to receive an explanation, tips and feedback about it. Since flow:

Apps can be accessed by hitting the "allow" button several times and after that hitting the "forgot pw" button. All blocked Apps can be accessed after that without any restriction.

sounds as fully unexpected result.

 

Thanks!

Aspirant

Re: Problem ?Exploit? with mobile security

Dear Ukko,

 

thanks for your reply.

Im aware of some problems regarding F-Secure and Huawai Phones. I adjusted the energy saving options so F-Secure will work in an accepable way.

The problem occurs in the mobile security software .

And where is "allow button and 'forgot pw' button". It is blockscreen by F-Secure Mobile Security application or it is blockpage under browser (as example)? Yes it is the blockscreen of mobile security, I just did not know how to describe it, cause i use the german version.

Is it F-Secure Mobile Security application?if so - what is exact reason of "blocked apps"? Its simply that there are apps on the phone which should not be used by my son.

What confuses me most, is that after unblock the phone by my son in the above mentioned way all blocked apps are usable and nor blocked anymore.

Greetings

 

 

Superuser

Re: Problem ?Exploit? with mobile security

Hello,

 

Thanks for feedback!

 

In fact, your description is pretty well. I just did not use F-Secure Mobile Security with Application control - so - it was not enough clear for me.

 

"F-Secure SAFE" (for Android platfom) also with related functionality. But it is not possible to "allow access" by normal user or to use password. Since functionality managed "remotely" via web portal (by administrator / main user). Thus, I decided to re-ask about your situation.

What confuses me most, is that after unblock the phone by my son in the above mentioned way all blocked apps are usable and nor blocked anymore.

Indeed, this is the most strangest point. And just because steps are known (and it is possible to repeat, at least, with your device) - good to contact Support (for example, chat):

to inform them about this trouble directly. OR maybe if trouble is known - to receive workaround / fix.

 

Thanks!

 

Aspirant

Re: Problem ?Exploit? with mobile security

Dear Ukko,

 

thanks a lot for your really valualble help.

I will try to get in touch with Support as quick as i can.

 

Greetings