this post was submitted on 27 Aug 2023
235 points (97.6% liked)

Android

27901 readers
356 users here now

DROID DOES

Welcome to the droidymcdroidface-iest, Lemmyest (Lemmiest), test, bestest, phoniest, pluckiest, snarkiest, and spiciest Android community on Lemmy (Do not respond)! Here you can participate in amazing discussions and events relating to all things Android.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules


1. All posts must be relevant to Android devices/operating system.


2. Posts cannot be illegal or NSFW material.


3. No spam, self promotion, or upvote farming. Sources engaging in these behavior will be added to the Blacklist.


4. Non-whitelisted bots will be banned.


5. Engage respectfully: Harassment, flamebaiting, bad faith engagement, or agenda posting will result in your posts being removed. Excessive violations will result in temporary or permanent ban, depending on severity.


6. Memes are not allowed to be posts, but are allowed in the comments.


7. Posts from clickbait sources are heavily discouraged. Please de-clickbait titles if it needs to be submitted.


8. Submission statements of any length composed of your own thoughts inside the post text field are mandatory for any microblog posts, and are optional but recommended for article/image/video posts.


Community Resources:


We are Android girls*,

In our Lemmy.world.

The back is plastic,

It's fantastic.

*Well, not just girls: people of all gender identities are welcomed here.


Our Partner Communities:

!android@lemmy.ml


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] laskobar@feddit.de 10 points 1 year ago (12 children)

Find My Device is completely useless until the device is unlocked. As long as it is rebooted and not unlocked, there is no way to detect its location. Since most phones (if not all), use an encrypted filesystem. With such, no service can't start if the device isn't initially unlocked after reboot, including Find my device.

This isn't only a issue with Google's implementation, it's the same with other implementations to.

[–] skymtf@pricefield.org 28 points 1 year ago

As far as I'm aware find my on iPhone can work even when the phone is off, this is because the phone kinda acts like an airtags where enough information can be exchanged securely.

[–] JoeyJoeJoeJr@lemmy.ml 19 points 1 year ago (1 children)

Since most phones (if not all), use an encrypted filesystem. With such, no service can't start if the device isn't initially unlocked after reboot, including Find my device.

Android developers can specify that their apps need to run before the pin is entered, via direct boot mode. This is how alarms still work, even if your phone takes an upgrade overnight, and restarts automatically as part of that process.

I can't say whether Google's Find My Device currently does this, but there is no technical reason it can't.

[–] Lojcs@lemm.ee 2 points 1 year ago

even if your phone takes an upgrade overnight

As far as I remember updates don't reboot to bfu, but I get what you're saying

[–] FrameXX@discuss.tchncs.de 19 points 1 year ago* (last edited 1 year ago) (1 children)

But it should still work in cases when you lost your phone and nobody else rebooted it, shut it down, or even wiped it, which is still a large portion of cases. I wouldn't call it "completely useless" in that case.

[–] lemmyvore@feddit.nl 7 points 1 year ago

It's not completely useless, it's good for when you misplace it in a dumb place in the house or something like that. But all it needs to do in that case is too make a sound, which already works now.

[–] beatbrot@feddit.de 15 points 1 year ago (1 children)

Pretty sure this isn't true. Afaik, you can exclude files from encryption on Android. This is also why you see your custom wallpaper before unlocking the phone.

[–] laskobar@feddit.de 4 points 1 year ago (1 children)

Feel free to try it by yourself. Nothing easier than that. Reboot your phone and try to find it via Find My Device or ring it, without to enter your password before. It will not work.

BTW: it doesn't make sense to exclude security and privacy related things from encryption. Otherwise there would be an unusually high risk to compromise this sort of data.

[–] IcerOut@kbin.social 9 points 1 year ago (1 children)

Interesting.
For me the Google Find My Phone couldn't find the device (could only show the most recent location) and couldn't ring it, but the Samsung Find My Phone got the location, battery level and could ring it immediately.
I'm guessing they added their implementation as an exception to the encryption, but not Google's implementation

[–] quicksand@lemmy.world 3 points 1 year ago

Good to know. I've been using the Google one and not Samsung because having two of the same app seemed redundant. Guess I'll set up the Samsung one, thanks

[–] dlpkl@lemmy.world 6 points 1 year ago (1 children)

Not sure how it works on other Android OSs but on Samsung's OneUI the phone won't shut down or turn off wireless connections without a pincode.

[–] Chriskmee@lemm.ee 3 points 1 year ago

Pretty sure the hard shutdown still works without any code though

[–] BitPirate@feddit.de 6 points 1 year ago

If Android activates bluetooth after booting, it could - in theory - be tracked with the new Find My Device network.

[–] wolfshadowheart@kbin.social 5 points 1 year ago

Are you saying it's specifically an issue after restarting ones phone? Just a few weeks ago I was walking my dog and my phone fell out my pocket. I hadn't used it so it was locked and I was able to ring it just fine with Find my Device online. Took me a little while to find the sound, but it located it no problem.

[–] regalia@literature.cafe 5 points 1 year ago* (last edited 1 year ago)

That's not how that works. There's special access to some apps that get unencrypted right at boot. That's how your phone can reboot in middle of the night and your alarm will still go off despite you doing the initial unlock. Find my device also has that ability.

See the "ACTION_LOCKED_BOOT_COMPLETED" permission for how it works.

[–] avidamoeba@lemmy.ca 4 points 1 year ago

This is only true for the very first unlock after booting.

[–] WhoRoger@lemmy.world 2 points 1 year ago

Yes that's how it works, the device needs to be connected to the net and be able to locate itself.

Some phone makers (if not most these days, idk) don't allow you to even reboot or turn off the phone without unlocking it. So it would need to be placed in a Faraday cage, run out of battery or smashed to not be findable as long as the feature is active.

[–] WhoRoger@lemmy.world 2 points 1 year ago (1 children)

Yes that's how it works, the device needs to be connected to the net and be able to locate itself.

Some phone makers (if not most these days, idk) don't allow you to even reboot or turn off the phone without unlocking it. So it would need to be placed in a Faraday cage, run out of battery or smashed to not be findable as long as the feature is active.

[–] sik0fewl@kbin.social 2 points 1 year ago

Or take out the battery when we're allowed to do that again.

[–] radix@lemm.ee 2 points 1 year ago

I didn't know any phones, Apple or Android or Google, allowed potential thieves to just turn the phone off without any passcode or password. That's terrible and this really is a huge weakness.