[Samsung Epic 4G Touch] Capp5050:
Hey folks,

A lot of people are using this phone with Go Launcher and Go Locker (including myself). I discovered something rather disturbing security vulnerability today and wanted to share it with you. I will also share an easy remedy (which some of you may already be using). So, if you are using both of these products AND ever make use of security PIN/Pattern locks, read on:

- If you are like me, and use Go Locker with a PIN/Pattern lock, at some point you may have disabled the native/baked-in OS security locker in Menu-->Settings-->Location and Security-->Change Screen Lock, because (at one point), if you didn't, you'd sometimes have two consecutive pattern locks to deal with every time you unlocked your phone.

- There's a vulnerability in using ONLY Go Locker's PIN/Pattern lock in that when you initially re-boot your phone, as soon as the first user-interactive screen appears, one can swipe it, and get into your phone. So if someone found your phone, all they'd need to do is re-boot, or power down/up and they're in.

- I presume this is attributable to the fact that the 'user-interactive' areas of the phone load before the Go Launcher/Go Locker combination loads (true whether Odexed or Deodexed).

Here's the solution:

- Setup your lockscreen pattern or PIN using the method as if you were NOT using Go Locker (i.e., as from stock using Menu--> Settings--> etc.)

- Setup your lockscreen pattern or PIN

AGAIN

in Go Locker (Menu-->Preferences--> Visual Settings--> GO Locker --> Security Lock). I would recommend using THE SAME PIN or Pattern for both.

Here's how things will work now:

- Whenever you reboot your phone, the NATIVE screen Pattern/PIN lock will appear first, before you can access ANY interactive screens inside the phone. This takes care of the vulnerability. Enter that Pattern/PIN.

- Next, you’ll see your Go Locker ‘swipe’ screen, and after swiping, will have to enter your Go Locker Pattern/PIN**. But, this will be the ONLY time you’ll have to do a ‘double-entry’. From this point forward, whenever the phone locks, you’ll be using the Go Locker Pattern/PIN only. The ‘double-lock’ will ONLY occur when you hot reboot, or cycle the power again

- From this point forward, and as long as the phone is powered on, the Go Locker settings will prevail. So you will only have your 'swipe screen' and one Pattern/PIN to deal with now.

- If you are set up as described above, then disabling the Pattern/PIN lock in Go Launcher, will effectively disable it globally. The other Pattern/PIN lock is still technically 'set', but it will only appear if you re-boot or cycle power. AND EVEN THEN, it will only appear on bootup.

-- What this means, is that if you want to maintain SOME security, you can leave the 'base' Pattern/PIN lock active, and disable the Go Locker Pattern/PIN lock.​

(unrelated side note, it’s unfortunate that Go Locker doesn’t use the ‘Timeout’ function that the stock locking app uses)

* Go Launcher / Locker takes a few seconds to load, so on your initial boot, if you enter your base Pattern/PIN before it does, you'll only have the initial lock to deal with, but Go Locker will handle the lockscreen and lock once it loads from that point forward.

I hope this helps.