# CyanogenMod (In)Secure Folder Lock ! \*\*\*\*\*\*\*\* This is an older post (written around \~2015) and ported from my old blog. Please excuse if there are any mistakes or inaccuracies. If you find any issues, please head over to the home page > contact me. Thanks. \*\*\*\*\*\*\*\* Hey Guys,\ As others in the Hacker’s community,I’m also a lover of OpenSource and also our dear friend Android :-) . From a couple of days, I’ve started getting interested into Android Dev stuff and thats where I heard the name CyanogenMod Roms.. CM 12, Oh Yeah one of the best roms I’ve ever seen.
I was really fascinated by the powerful features of CyanogenMod and starting falling in love with it.\ Being exposed to the hackers community, I prefer my surroundings to be secure and I see everything in a security prespective. There I saw an awesome feature called folder lock. I’ve googled about that and saw that it was one of the loved features of CM.\ Here are some of the snapshots of how folder lock looks like in CM\ ![Snapshot of how folder lock looks like](http://i0.wp.com/redgadgets.com/wp-content/uploads/2015/01/folder-lock3.png)
![Snapshot of how folder lock looks like](http://i1.wp.com/redgadgets.com/wp-content/uploads/2015/01/folder-lock11.png) So The main question arises is “ Is this really secure enough ? I mean does this really protect ?” Well, I found a simple bypass for this. You can simply open the PlayStore application and search for the application you want to open and on the right side you can see an option called “Open”. Just click on that and your done! Even though the application is secured by folder lock, the application opens! Hilarious & Simple isn’t it?!\ I don’t think I need to explain the technical reasons behind this.. Want to learn more?\ Shoot a mail at pbssubhash \[at] gmail.com Mitigation ? :- Just encrypt even the play store app & Switch off USB Debugging too :P At the first sight I found this and want to share it with all my folks in the InfoSec community so that they could secure themselves. Didn’t report anyone. Yet anyone can submit this bug to the CM dev’s because they’ve done really great job. Will be blogging anymore bugs I encounter/discover :-)\ Looks like someone else has identified this\ \ \ Would like to give appropriate credits to them :-) and would like to thank Anand for letting me know about this.!\ Bye for now! --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://blog.p1k4chu.com/security-research/web-and-mobile-app-sec/cyanogenmod-in-secure-folder-lock.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.