you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 2 years ago (12 children)

Find My Device is completely useless until the device is unlocked. As long as it is rebooted and not unlocked, there is no way to detect its location. Since most phones (if not all), use an encrypted filesystem. With such, no service can't start if the device isn't initially unlocked after reboot, including Find my device.

This isn't only a issue with Google's implementation, it's the same with other implementations to.

  • source
  • hideshow 24 child comments
  • [–] 19 points 2 years ago (1 child)

    Since most phones (if not all), use an encrypted filesystem. With such, no service can't start if the device isn't initially unlocked after reboot, including Find my device.

    Android developers can specify that their apps need to run before the pin is entered, via direct boot mode. This is how alarms still work, even if your phone takes an upgrade overnight, and restarts automatically as part of that process.

    I can't say whether Google's Find My Device currently does this, but there is no technical reason it can't.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 18 points 2 years ago* (1 child)

    But it should still work in cases when you lost your phone and nobody else rebooted it, shut it down, or even wiped it, which is still a large portion of cases. I wouldn't call it "completely useless" in that case.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 2 years ago

    It's not completely useless, it's good for when you misplace it in a dumb place in the house or something like that. But all it needs to do in that case is too make a sound, which already works now.

  • source
  • parent
  • [–] 14 points 2 years ago (1 child)

    Pretty sure this isn't true. Afaik, you can exclude files from encryption on Android. This is also why you see your custom wallpaper before unlocking the phone.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 2 years ago (1 child)

    Feel free to try it by yourself. Nothing easier than that. Reboot your phone and try to find it via Find My Device or ring it, without to enter your password before. It will not work.

    BTW: it doesn't make sense to exclude security and privacy related things from encryption. Otherwise there would be an unusually high risk to compromise this sort of data.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 2 years ago (1 child)

    Interesting.
    For me the Google Find My Phone couldn't find the device (could only show the most recent location) and couldn't ring it, but the Samsung Find My Phone got the location, battery level and could ring it immediately.
    I'm guessing they added their implementation as an exception to the encryption, but not Google's implementation

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 2 years ago

    Are you saying it's specifically an issue after restarting ones phone? Just a few weeks ago I was walking my dog and my phone fell out my pocket. I hadn't used it so it was locked and I was able to ring it just fine with Find my Device online. Took me a little while to find the sound, but it located it no problem.

  • source
  • parent
  • [–] 2 points 2 years ago

    Yes that's how it works, the device needs to be connected to the net and be able to locate itself.

    Some phone makers (if not most these days, idk) don't allow you to even reboot or turn off the phone without unlocking it. So it would need to be placed in a Faraday cage, run out of battery or smashed to not be findable as long as the feature is active.

  • source
  • parent
  • [–] 2 points 2 years ago

    I didn't know any phones, Apple or Android or Google, allowed potential thieves to just turn the phone off without any passcode or password. That's terrible and this really is a huge weakness.

  • source
  • parent
  • [–] 1 point 2 years ago (1 child)

    Yes that's how it works, the device needs to be connected to the net and be able to locate itself.

    Some phone makers (if not most these days, idk) don't allow you to even reboot or turn off the phone without unlocking it. So it would need to be placed in a Faraday cage, run out of battery or smashed to not be findable as long as the feature is active.

  • source
  • parent
  • hideshow 2 child comments