Replicant

Fil Lupin wrote:

Hello,
it seems y default, the theme icons are accessible everytime, even while the phone is locked.
It seems to me this is contradictory to the security since it allows everyone to access to:
- Wi-Fi
- Bluetooth
- Do not disturb
- operator network
- airplane mode
- auto-rotate
- location on/off
- edit tiles
- flashlight
- cast
- hotspot
- invert colors
- thèmes
- Automatique
- AudioFX (Speaker)

It seems to me the behaviour by default of Replicant should be to forbid the access when in locked mode.

I do not understand where I can change the options accessible in locked mode?

I'm curious, what threat model are you assuming? It's not obvious to me that enabling airplane mode is dangerous to give an adversary who has physical access to the phone (they could just drop the phone into a Faraday bag and get the same effect), and it might actually be important for a user in a dangerous situation to quickly enable airplane mode without spending the time to type a password.

Disabling airplane mode, though, sounds like something that could be dangerous for an adversary to have access to, since it might allow the adversary to learn something about what traffic your phone sends during normal operation.

Indeed, it is more Disabling airplane mode which bothers me, and bluetooth or wifi if I decided to shut them off.

edit: to clarify what I fear, these connections can decrease the battery level and opening some door on the phone.

Hi
now that my phone has been stolen, I come back with another though, with current configuration, the stealer can :
- disable airplane and answer a phone call (luckily, I though to unactivate preview of sms, perhaps should it be put as a default value?)
- enable airplane and forbid localization by the police. This can however be done easily by opening the phone and put out battery so this is probably not really an issue.

Regards