Having a work debate. First part is a simple question.

For those who have a smart phone, do you lock it of not? I am under the impression that just about everyone locks their phones these days, with the data that is on them. But I am surprised to find a couple people I know do not.

For those that do not lock their phone, if connecting to a very secured wireless network (EAP TLS) requires your phone to be locked, as digital certificates are downloaded to your phone, how much of an annoyance would this be, and would you elect to connect to a less secure network in order to avoid this?

12/15/2012 1:15:34 PM

i lock mine but only b/c corporate device policy app enforces it. i didn't lock my previous phone

12/15/2012 1:40:56 PM

Absolutely even though I'm not connected to our corporate email. I only use the 4 number pin though.

12/15/2012 1:44:28 PM

i do not lock mine

12/15/2012 1:46:56 PM

phone locked, easy to unlock.

12/15/2012 2:08:09 PM

Nope don't lock mine

12/15/2012 3:28:49 PM

No I currently do not lock my iPad or iPod Touch.

12/15/2012 4:04:04 PM

on my old device I locked it all the time because it had a fingerprint reader and I could map my swipe to my secure password.

my new phone doesn't have that and I'd prefer to not have to lock my phone, because my sensitive data is in applications that have their own secondary lock. with touchdown I believe I can do this, but because I encrypt the hard drive on my phone, I have to have an unlock code

in summary: I'd prefer the locks to be at the application layer, all communication I do on my phone is encrypted anyway, so I don't care about network security

12/15/2012 4:16:39 PM

nope

12/15/2012 5:27:50 PM

no.

12/15/2012 5:59:04 PM

yes, pattern lock

12/15/2012 6:33:31 PM

I use the Google pattern unlock, and I use a separate email app that has its own PIN lock for my corporate stuff. I refuse to set up native activesync for email because the corporate cert policy forces the use of a PIN to unlock the phone.

12/15/2012 7:15:00 PM

Quote :

"i lock mine but only b/c corporate device policy app enforces it. i didn't lock my previous phone"

which app?

12/15/2012 7:54:40 PM

^my guess would be exchange + activesync. surely no one uses sccm - mobile management

12/15/2012 8:31:21 PM

Yep, corporate enforced policies.

Even before that I always locked my phone.

12/15/2012 9:48:47 PM

Quote :

"yes, pattern lock"

My brother-in-law works in law enforcement, and he told me that last week one of his training officers told them about an easy trick to get into phones with pattern lock. Turns out most of the time you can just hold them to the light at an angle and see the smudge patterns used to unlock the phones. Then it's just a matter of figuring out which way the pattern goes and you can get in most every time. I don't know how true that is, but it sounds pretty believable to me.

12/15/2012 11:38:27 PM

Is that legal?

12/15/2012 11:53:57 PM

I know in this specific instance my Brother-in-law had the phone because it was confiscated during a planned raid of a murder suspect, so they had warrants and all that junk. I doubt it would be legal if you pulled it out of a guys car on a traffic stop or whatever.

12/16/2012 12:03:40 AM

locked and encrypted

12/16/2012 12:27:30 AM

^^^^It's deffo believable: http://news.cnet.com/8301-30685_3-57377224-264/reverse-smudge-engineering-foils-android-unlock-security/

PDF paper: http://static.usenix.org/event/woot10/tech/full_papers/Aviv.pdf

12/16/2012 3:47:51 AM

Quote :

" Turns out most of the time you can just hold them to the light at an angle and see the smudge patterns used to unlock the phones. Then it's just a matter of figuring out which way the pattern goes and you can get in most every time. I don't know how true that is, but it sounds pretty believable to me."

i, too, have seen news reports on this

12/16/2012 10:42:40 AM

Nope. Don't lock it. Annoying PITA

12/16/2012 4:14:55 PM

I dont have a master lock but i have an app locker that requires a pw for specific apps. i recommend this. people can only dial 911which isnt helpful if something happens to you(contacting next of kin)

12/16/2012 7:43:47 PM

Nah. I don't have it remember passwords for web sites or apps that concern secure data (mobile banking and the like) so that shouldn't be an issue. They could get into my email but if I lost the phone, I'd change the password as soon as I noticed and it doesn't have my work account.

Used to do the pin lock but it annoyed the crap out of me to have to unlock it every damn time the thing timed out.

12/17/2012 10:57:28 AM

i always keep my phone on me; even when i leave my desk temporarily. so based on always having it, i do not lock my phone. too much of a PITA.

12/17/2012 12:06:04 PM

I don't lock my smartphone. only use it for personal stuff. Since I have it on me at all times, I don't want any work related crap on there.

I do lock my iPad (corporate requirement enforced by software) as I do use it for work even though it's personally owned.

12/17/2012 12:42:39 PM

I have my locked and you really should too, no matter what is on it. I find that a locked phone is a lot more likely to be turned in if you lose it.

12/17/2012 1:58:00 PM

One thing I did learn in Crim Pro this semester is that in theory you don't have a reasonable expectation of privacy during a search if your phone is unlocked, so if you were ever subject to a warrantless search and challenged it on violation of 4th grounds, you could only argue for suppression if it was locked, and obviously if it wasn't the reason they searched you to begin with.

12/17/2012 2:07:05 PM

i do not lock my iPhone. knock on wood, i always keep it one me so it's very rarely out of my sight.

that being said, if i travel out of town or go on vacation i tend to lock it.

12/17/2012 2:25:36 PM

Have naked pictures of gf on mine and the corporate policy thing.

12/19/2012 12:16:11 AM

I do. I don't want to just hand out all my contacts and a few accounts I game on. If anything, I lock it to keep my friend's contact numbers safe. I don't have anything on my phone that could hurt me.

12/19/2012 12:57:45 AM

Quote :

"^my guess would be exchange + activesync. surely no one uses sccm - mobile management"

does really nobody have policies enforced by mobile device management?

12/19/2012 8:11:21 PM

never have before...but this thread made me do a pattern lock

now here's hoping i don't forget it between tonight and tomorrow

12/19/2012 8:22:58 PM

got that finger print scanner where you swipe your finger across the screen to unlock it

12/19/2012 9:21:37 PM

Quote :

"DOES REALLY NOBODY"

12/19/2012 9:29:49 PM

Locked for work w/numeric lock and enforced with company app on phone.

Theres nothing making you lock and/or encrypt a phone due to a cert being installed. I should know as we have that type of wifi at work and I know plenty of unlocked phones that are connected to it.

That said, I know tons of ppl that dont lock their phones.

12/19/2012 10:12:06 PM

Quote :

"My brother-in-law works in law enforcement, and he told me that last week one of his training officers told them about an easy trick to get into phones with pattern lock. Turns out most of the time you can just hold them to the light at an angle and see the smudge patterns used to unlock the phones. Then it's just a matter of figuring out which way the pattern goes and you can get in most every time. I don't know how true that is, but it sounds pretty believable to me."

Except my screen doesn't leave smudges unless my fingers are greasy from eating a hamburger or something... trust me you couldn't reverse engineer my pattern based on smudges. I also have CM10 so it's a 5x5 grid, good luck.

[Edited on December 19, 2012 at 10:29 PM. Reason : .]

12/19/2012 10:28:08 PM

i do not lock mine

12/19/2012 10:29:40 PM

Don't like mine, would lock if had to, can use Find my iPhone to lock remotely.

12/19/2012 10:30:06 PM

I don't lock mine, but only because I don't want the Cary Police Department to erase it should they ever get their hands on it

12/27/2012 9:41:51 AM

12/27/2012 10:58:31 AM

Jesus who doesn't lock their phone?

Anyone with a g/f or wife should lock their phone.

Anyone with nude photos of themselves or others should lock their phones out of respect.

Anyone with logged in bank accounts, email, etc should lock their phone.

Why the hell wouldn't you lock your phone?

12/27/2012 7:19:12 PM

^ not everyone is paranoid and mistrusting of the people around them.

12/27/2012 7:36:41 PM

^or intelligent

12/27/2012 8:10:48 PM

I do now, with Windows 8 and kid's corner. It'd kinda invalidate the process if they could just lock the phone and unlock it and get to whatever apps they want.

Otherwise I have it set to require a password if it's been locked for 30 minutes.

12/28/2012 3:11:37 PM

I sure do. I don't trust anybody.

12/28/2012 4:02:58 PM

remote wipes ftw.

1/1/2013 3:09:00 PM

^^^^^^ photos locked behind an app, nothing secret in email or anywhere that wife can't see, nothing confidential in any linked accounts, plus ability to remote lock and wipe

I don't lock mine, not worth the annoyance

1/1/2013 4:03:20 PM

lock your phone so if the cops get to it, they cant easity harass your friends and family

1/1/2013 5:24:20 PM

set em up

1/1/2013 5:54:21 PM