3 ms·

>I think most people just use face or pattern unlock these days though? Most average users, sure. I've seen a couple of family members using face unlock, and m

>I think most people just use face or pattern unlock these days though? Most average users, sure. I've seen a couple of family members using face unlock, and many random people and coworkers using patterns. Myself, I use a password.

nly 13y ago
Patterns are terrible. I've clocked a few friends patterns accidentally, let alone actually trying to shoulder surf. Far too visible.
- blueskin_ 13y ago
  Not to mention when dirty fingers leave pattern-showing streaks on the screen.
- darklajid 13y ago
  Ah, but it's a matter of what you're trying to protect against. I'm having a number of devices, from 'swipe to unlock' via 'pattern unlock' and full passphrases. My phone uses a lock pattern, because - swipe to unlock would unlock the phone in my pocket. Rare, but happened a number of times - my phone is the one device that consistently lies around the house and gets carried away by my 1.x year old son. Swipe to unlock was very easy to understand... So - pattern aren't secure, agreed. They are just a way to lock the keyboard against accidents and for that they work quite well..
  - e12e 13y ago
    This. Arguably, if you're not using full disk encryption, your adversary is someone that (at least) hasn't entered high school yet... ;-) I'd add that it also does add a bit of "intent" (in the same sense that (quite easily pickable) door locks do -- if your child/friend/coworker unlocks your phone with your pattern, that's clearly crossing a boundary - more so than just looking at your unlocked phone.
- oftenwrong 13y ago
  If you disable the "Make pattern visible" option, it makes it much harder to shoulder surf the pattern.
  - Fishkins 13y ago
    I don't understand why making the pattern invisible isn't the default. When it's visible, everyone within 20 feet of you can tell your unlock pattern. I wish you could also make failed patterns invisible, but AFAICT there's no option for that. Of course, as others said, if I were really worried I'd use a longer password and disk encryption.
drdaeman 13y ago
Since Samsung's TouchWiz (at least on S4 mini) don't allow to take shots with camera without unlocking the phone (standard AOSP has such feature), I guess many users settle with swipe-to-unlock.
- blueskin_ 13y ago
  I disabled that feature since it's essentially an easy battery DoS (and can be activated in a pocket).

nly 13y ago

Patterns are terrible. I've clocked a few friends patterns accidentally, let alone actually trying to shoulder surf. Far too visible.

blueskin_ 13y ago
Not to mention when dirty fingers leave pattern-showing streaks on the screen.
darklajid 13y ago
Ah, but it's a matter of what you're trying to protect against. I'm having a number of devices, from 'swipe to unlock' via 'pattern unlock' and full passphrases. My phone uses a lock pattern, because - swipe to unlock would unlock the phone in my pocket. Rare, but happened a number of times - my phone is the one device that consistently lies around the house and gets carried away by my 1.x year old son. Swipe to unlock was very easy to understand... So - pattern aren't secure, agreed. They are just a way to lock the keyboard against accidents and for that they work quite well..
- e12e 13y ago
  This. Arguably, if you're not using full disk encryption, your adversary is someone that (at least) hasn't entered high school yet... ;-) I'd add that it also does add a bit of "intent" (in the same sense that (quite easily pickable) door locks do -- if your child/friend/coworker unlocks your phone with your pattern, that's clearly crossing a boundary - more so than just looking at your unlocked phone.
oftenwrong 13y ago
If you disable the "Make pattern visible" option, it makes it much harder to shoulder surf the pattern.
- Fishkins 13y ago
  I don't understand why making the pattern invisible isn't the default. When it's visible, everyone within 20 feet of you can tell your unlock pattern. I wish you could also make failed patterns invisible, but AFAICT there's no option for that. Of course, as others said, if I were really worried I'd use a longer password and disk encryption.

drdaeman 13y ago

Since Samsung's TouchWiz (at least on S4 mini) don't allow to take shots with camera without unlocking the phone (standard AOSP has such feature), I guess many users settle with swipe-to-unlock.

blueskin_ 13y ago
I disabled that feature since it's essentially an easy battery DoS (and can be activated in a pocket).