maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N9 / N950 (https://talk.maemo.org/forumdisplay.php?f=51)
-   -   Disable aegis permanently? (https://talk.maemo.org/showthread.php?t=79643)

nieldk 2018-03-06 09:13

Re: Disable aegis permanently?
 
Quote:

Originally Posted by juiceme (Post 1542075)
Pity.
Just like @peterleinchen I have been waiting for that some time :)

Hmm yes. As I recall, the code is stored in CAL area, so it’s interesting how that deb file writes to that in open mode.
Perhaps knowing this could allow to disable the big warning screen in open mode also, without having to back-2-back flash.

A start I guess, would be use strace to try and track what’s going on.

coderus 2018-03-06 12:09

Re: Disable aegis permanently?
 
well, imo patched devicelock implementing file storage or so, code was not disclosed because it's not secure.

juiceme 2018-03-06 12:23

Re: Disable aegis permanently?
 
Quote:

Originally Posted by coderus (Post 1542081)
well, imo patched devicelock implementing file storage or so, code was not disclosed because it's not secure.

Exactly this is the sentiment I don't want to see; "code was not disclosed because it's not secure"

Now how does it help security to keep the vulnerabilities hidden?

nieldk 2018-03-06 13:24

Re: Disable aegis permanently?
 
Quote:

Originally Posted by coderus (Post 1542081)
well, imo patched devicelock implementing file storage or so, code was not disclosed because it's not secure.

Which is why we need not only a “working” solution, but the code to review what’s happening .

Do you know more than what you are telling ;) ?

hedayat 2018-03-06 13:46

Re: Disable aegis permanently?
 
IIRC, it is not secure and it stores the pass in a file. It just prevents a normal users access. It replaces the original functionality rather than enabling it.

nieldk 2018-03-06 13:59

Re: Disable aegis permanently?
 
Quote:

Originally Posted by hedayat (Post 1542085)
IIRC, it is not secure and it stores the pass in a file. It just prevents a normal users access. It replaces the original functionality rather than enabling it.

Then a warning should be issued to users using this solution!


All times are GMT. The time now is 12:59.

vBulletin® Version 3.8.8