That's right, the concept for this is based off the fact that you
shouldn't be able to create a system operation as an app.

The device admin API doesn't allow you to implement a lock screen, but
does allow you to change the password

http://developer.android.com/reference/android/app/admin/DevicePolicyManager.html#resetPassword(java.lang.String,%20int)

It's sort of strange the cited app doesn't require any permissions,
meaning it basically exploits some hole..

Kris


On Sun, Feb 24, 2013 at 10:00 PM, galapogos <[email protected]> wrote:
> Thanks for the reply.
>
> So there's no existing API that allows an app to pass a security
> credential(PIN/passphrase/etc) to the security framework for user
> authentication/screen unlock purposes?
>
> Is there a reason why there isn't a way for an app to pass a security
> credential to the framework? The only I can think of are for security
> reasons (risks of malware taking over the authentication process and
> performing a DoS attack by locking the phone with incorrect credentials for
> example), but I've come across apps that apparently are able to change the
> actual user credential (e.g. Moving Target -
> https://play.google.com/store/apps/details?id=org.inh.android.movingtarget),
> which seems to me to be a greater security risk.
>
>
> On Saturday, February 23, 2013 12:01:30 AM UTC+8, Kristopher Micinski wrote:
>>
>> It is not possible to do this at the app level, unfortunately.
>>
>> Kris
>>
>> On Fri, Feb 22, 2013 at 12:59 AM, galapogos <[email protected]> wrote:
>> > Hi,
>> >
>> > Is it possible to create a lockscreen replacement at the application
>> > level
>> > that replaces the device's security lock, whether it be PIN, passphrase,
>> > pattern or face unlock, or potentially a new method? I know it's
>> > possible in
>> > the framework level, and have done it before, but I'm just wondering if
>> > it's
>> > possible to do it at the application level.
>> >
>> > So far the few lockscreen replacements that I've tried only implement a
>> > slide gesture unlock lockscreen UI, and falls back to the device's
>> > security
>> > lock after that.
>> >
>> > Any help would be appreciated, thanks!
>> >
>> > --
>> > --
>> > You received this message because you are subscribed to the Google
>> > Groups "Android Developers" group.
>> > To post to this group, send email to [email protected]
>> > To unsubscribe from this group, send email to
>> > [email protected]
>> > For more options, visit this group at
>> > http://groups.google.com/group/android-developers?hl=en
>> > ---
>> > You received this message because you are subscribed to the Google
>> > Groups
>> > "Android Developers" group.
>> > To unsubscribe from this group and stop receiving emails from it, send
>> > an
>> > email to [email protected].
>> > For more options, visit https://groups.google.com/groups/opt_out.
>> >
>> >
>
> --
> --
> You received this message because you are subscribed to the Google
> Groups "Android Developers" group.
> To post to this group, send email to [email protected]
> To unsubscribe from this group, send email to
> [email protected]
> For more options, visit this group at
> http://groups.google.com/group/android-developers?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "Android Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/groups/opt_out.
>
>

-- 
-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Android Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to