Nexus 6p huge security flaws

[Qais Arsala]

My 10 and 12 year old figured out in 5 minutes how to bypass fingerprint security and get into my device. I called Google 855 customer service number and the rep didn't take it seriously and told me that he will put it in his notes.

https://youtu.be/KjIOjTNnK0I

 

[Almeuit]

And how did she do this? I haven't ever seen a way.

 

[chezm]

Yes, how was this done? Bold statement with nothing to go on...video of it?

{Nexus 6P}

 

[Qais Arsala]

I locked the kids with fingerprint and a 4 digit code and they still bypassed. I'm still waiting for Google to reach out to me. Maybe the kids can be recognized.

 

[Mikey D_PhD]

So, how did they do it? Did they guess your PIN? We can't diagnose the issue unless you tell us how they did it.

 

[Qais Arsala]

I just took a video from kindle and trying to upload to YouTube or some other way to share the link. Any advice in upload from Kindle???

 

[Qais Arsala]

https://youtu.be/KjIOjTNnK0I

 

[Lepa79]

Oh my god man. Your 12 year old had his finger on the back the 2nd try and most likely used his registered finger print to unlock the phone before the 2nd try. Why the BS dude?

 

[Qais Arsala]

Ok. I'll post another one. I am not in the business or have the energy to BS online. Stay tuned

 

[PookiePrancer]

Just tried what they did; it's impossible to unlock. Your son seems to have unlocked it with his finger.

Posted via the Android Central App

 

[PookiePrancer]

Does you have trusted voice turned on?

Posted via the Android Central App

 

[TonySmithPhoto]

I don't see both your kids figuring it out. I see your eldest with his finger on the fingerprint scanner.

I would suggest you re run the experiment, but with the phone flat on the table, don't let them touch the back of it, and see if it can be replicated. If not, then I think they've pulled a fast one on you. Your eldest may well have gotten hold of it while it was unlocked and added his fingerprint to to the system. Another thing to try, is to wipe the fingerprint logs, and re train the device to you only. Then let them try it again.

I'd be very surprised if it worked again.

 

[Qais Arsala]

New video with hands free

https://youtu.be/A6vur_RbE7I

 

[PookiePrancer]

Yeah, something funky is going on here. I can't replicate what they're doing.

Posted via the Android Central App

 

[PookiePrancer]

New video with hands free

https://youtu.be/A6vur_RbE7I

Would you mind posting EXACTLY what they're doing? I see:

Wake phone with power button.
Say "Ok, Google"
Say "What's up?"
Press home button.

Those steps aren't working for me.

Posted via the Android Central App

 

[zxphenomenalxz]

What setting do you have it at for automatically lock after sleep ? You can easily set it up to 30 minutes and it won't require you to put your password in until that 30 minutes is up.

Posted via the Android Central App

 

[Qais Arsala]

So I just checked and the sleep setting is 2 minutes. The first time they actually did is after phone was idle for 15 minutes getting charged

 

[SupermanJon707]

I still don't believe it...I've done it all on this thread and it if the fingerprint isn't there...it doesn't work

Posted via Pokémon/Note7 Central App

 

[Qais Arsala]

It's perfectly fine to be skeptical. It's a natural reaction, but I do know there must be some type of flaw or vulnerability. I have absolutely nothing to gain nor any kind of agenda. I bought this phone because of the incredible security it has, but when a 10 year old can get in there and bypass the fingerprint, it concerns me.

 

[TonySmithPhoto]

Hardly hands free Qais.

Also, in between the first video and the last video, did you re set the fingerprints stored on the device? Another thing to check, is it set with any trusted locations? What about trusted voices?

I'd still suggest that you reset the fingerprints, then try again. When trouble shooting, it's always best to take one step at a time, and change single items at a time. If you have done all that (which I don't see you saying you have changed the settings) and it's still working, perhaps take it back to the retailer you bought it from, and show them. It may be a one off, it may well be a massive issue that you've discovered, but it needs fully tested and investigated before claiming it as a massive security flaw.

Change the trusted fingerprints and try it again, curious to see how that goes.

Good luck.