rebooting defeats the screen lock timeout

[James Hunt]

If you enable pin unlock, then repeatedly enter the incorrect pin, eventually you'll get a message stating that the phone cannot be unlocked for 5 minutes. However, this restriction can be trivially bypassed by simply rebooting the phone (which takes less than 5 minutes :-)

krillin, r117.

[Michał Sawicz (saviq)]

I think this was discussed and ACKed by security, the time needed to reboot is enough to prevent any real bruteforcing of the password.

[Michael Terry (mterry)]

This is relatively easy to fix -- need to just save the time we should allow login again in a field.

[Jamie Strandboge (jdstrand)]

While I think the time to reboot is 'enough', it is clearly a bug and mterry's suggestion makes sense to me.

[Launchpad Janitor (janitor)]

This bug was fixed in the package unity8 - 8.11+15.10.20150907-0ubuntu1

---------------
unity8 (8.11+15.10.20150907-0ubuntu1) wily; urgency=medium

  [ Michal Sawicz ]
  * Resync wily with vivid

  [ Albert Astals Cid ]
  * Accomodate header height when using a card carousel with non
    overlayed header (LP: #1489309)
  * Fix restart unity8 from inside the phone more than two times (LP:
    #1487946)

  [ Gary.Wzl ]
  * Move textarea up automatically when inputmethod popup. (LP:
    #1485947)

  [ Lukáš Tinkl ]
  * Introduce a GlobalShortcut QML component for handling global
    keyboard shortcuts

  [ Michael Terry ]
  * Fix the fact that a user that is locked out from their account for
    five minutes after entering too many wrong passwords can simply
    reboot to try again. (LP: #1383086)
  * Fix the fact that a user that is locked out from their account for
    five minutes after entering too many wrong passwords can simply
    reboot to try again. (LP: #1383086)

  [ Michael Zanetti ]
  * Implement progressive autoscrolling in desktop spread
  * add an animation transition when invoking the spread by hitting the
    right edge

 -- CI Train Bot <email address hidden> Mon, 07 Sep 2015 14:05:37 +0000