Feature #3145

panic message to lock all open databases

Added by hans almost 4 years ago. Updated almost 4 years ago.

Status:NewStart date:03/27/2014
Priority:NormalDue date:
Assignee:-% Done:


Target version:0.2


omnirom has a very clever feature that is a solid defense against forensics: if the lock screen is enabled and someone connects to USB with adb, the phone automatically powers off. Then if you have Full disk encryption, your device is fully locked and encrypted.

I could see this tying into cacheword for an even quicker response: when cacheword gets this same signal, it could lock all open databases. That would be a much sneakier defense since the forensics device would still be able to get the phone data, but all the sensitive data would be encrypted and locked. So it would not arise suspicion since it would look no different, versus the phone shutting down.

This could also be implemented outside of being tied into the lock screen if it was some kind of generic broadcast message. It seems that the worst abuse that could happen would be DoS launched by a local app.


#1 Updated by abeluck almost 4 years ago

  • Target version set to 0.2

This is interesting. Can we get that signal in vanilla AOSP? Have any links to implementation details?

#2 Updated by hans almost 4 years ago

ping pulser in freenode/#omnirom, he's the author and he told me about it. Tell him I sent you, I'm sure he'd happily discuss the details

#5 Updated by abeluck almost 4 years ago

another idea: check for processes running as the shell user.

#6 Updated by hans almost 4 years ago

If you just want to lock cacheword, rebooting is not necessary. I think the simplest version of this would be a big improvement. Just detect any kind of USB event when the lock screen is enabled, then lock cacheword then.

Also available in: Atom PDF