1031540 - Camera is Accessible Through Locked Mode

Status: RESOLVED WONTFIX

(Firefox OS Graveyard :: FindMyDevice, defect)

Description

[Kate Glazko]

Why is this a problem?

A creeper can take questionable pictures and put them on your phone to get you in trouble. Yes, you can remotely wipe your phone now, but in the future, your pictures could be pushed to a cloud service!

STR:

Lock phone via FMD website.
Access lockscreen camera.
Take a picture, smile!

Expected: Should not be able to access camera in lost mode.
Actual: Say cheese!

Comment 1

[Erin Lancaster [:elan]]

Actually, we need clarity on STR, first.

Comment 2

[Jared Hirsch [:jhirsch] (he/him) (Needinfo please)]

(In reply to kglazko from comment #0)
> Yes, you can remotely wipe your phone now, but in the
> future, your pictures could be pushed to a cloud service!

I really do not think this kind of speculative possible future edge case qualifies for b2g-blocker.

Do we have a user story which states that the camera has to be totally disabled if the phone is locked?

Paging vishy for product feedback.

Comment 3

[Kate Glazko]

1.) Lock your phone from FMD website. Enter passcode, personal message, etc. etc.
2.) You can use the camera from the locked screen with the message.


To clarify, I am not sure whether or not this is an intended behavior. On a side note, the camera icon clashes with the lock screen message.

Comment 4

[Kate Glazko]

Also to be clear, I did not suggest or nom this as a blocker. I file bugs on a daily basis, and not every single bug I file is a blocker. They can be back-logged, resolved, etc.

Comment 5

[Jared Hirsch [:jhirsch] (he/him) (Needinfo please)]

No worries kate! Just doing a sanity check on the nominated blockers.

Per Vishy in IRC, this isn't going to block 2.0, I'm asking around to see who can unset the flag.

Comment 6

[Jared Hirsch [:jhirsch] (he/him) (Needinfo please)]

vishy can you confirm in this bug, so that bajaj can mark as non-blocker?

Comment 7

[vkrishnamoorthy]

this bug does not block the core functionality of finding the device and performing remote operation.
Moving this to backlog and revisit it for 2.1

Comment 8

[Joshua Mitchell (Inactive)]

comment 2 seems to satisfy the steps wanted request

"1.) Lock your phone from FMD website. Enter passcode, personal message, etc. etc.
2.) You can use the camera from the locked screen with the message."

Comment 9

[BMO Automation]

Firefox OS is not being worked on