Description: The user can bypass the sim pin to access contacts, messaging and the dialer by using the camera and reset. If the user swipes to the camera on the lockscreen, taps home on the phone, resets the phone in settings, skips the sim pin prompt, taps back, connects to a WiFi connection, they can bypass all sim pin prompts by tapping the "X" button. Repro Steps: 1) Updated Buri Build ID: 20131003004003 2) Enable a sim pin. 3) Hold down the "Power Button" on the phone and tap "Restart". 4) On the lockscreen, swipe to the camera app. 5) Tap the "Home Button" on the phone to exit the camera app. 6) Tap the "Settings" icon. 7) Scroll down and tap on "Device information". 8) Tap on "More information". 9) Scroll down, tap on "Reset" and then tap "OK" when the warning message is prompted. 10) When the language page appears, tap the "Next" button. 11) Tap "OK" on the keyboard overlay page. 12) On the "Enter Pin code" page, tap "Skip". 13) Tap the "Back" button on the "Date and Time" page. 14) Tap on a WiFi connection and join it by entering in the correct password. 15) After the phone connects to the WiFi, keep tapping the "Next" button until reaching the "Start your phone tour!". 16) Tap "Skip" to reach the homescreen. 17) Tap on either the "Phone, Messaging or Contacts" icon. 18) When on the "Enter SIM PIN" page, tap the "X" button on the upper left corner of the screen. Actual: The user can bypass the sim pin and get into the contacts, messaging and the dialer on the phone. Expected: The user cannot bypass the sim pin. Environmental Variables Device: Buri v 1.1.0 Mozilla RIL Build ID: 20131003004003 Gecko: http://hg.mozilla.org/releases/mozilla-aurora/rev/7dfe4a775531 Gaia: 9e21b6bea92fdafcb6787120a8cde0eb25a50495 Platform Version: 26.0a2 RIL Version: 01.02.00.019.056 Notes: Repro frequency: 100% See attached: video clip
Here is the video on Youtube: http://youtu.be/i9ppKJkKdq4
Firefox OS is not being worked on
Status: NEW → RESOLVED
Last Resolved: 5 months ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.