Pin Tricks

Pin Trick #1

Navigate from Many Google Apps to Play Store

with Ensuing Malfeasance

Update: Patched in Android 5.0.1

See also

  • Unpin #2 - Unrestricted access from pinned session

  • Unpin #3 - Defeat app pinning, completely.

Stick me in a hospital waiting room for 3 hours with a phone and no connectivity, and guess what happens...

Step

Image

Discussion

Most "Google Play Services" apps affected, including Play Books, Newsstand, Play Music, others. "One Today" is tested here.

The common denominator is the standard Google "Help & Feedback" feature, by which entry to the Play store at wide is gained.

First, pin an app. Here we're pinning One Today.

Pinning confirmation dialog is shown.

"Screen pinned" shown for illustration.

Access the "Help & Feedback" feature via the left-side "slide-out panel". It is the bottom-most item, here.

You are now in the Help browser.

Note that links (to apps, etc) are properly restricted (i.e. do nothing) in the help documents.

Ignore the help content.

Open the Action Bar menu (upper right) and select "View in Google Play Store", which is first on the list.

PS: There are also potential weak links in the "Print..." feature, but that's for another day.

You are now in the Play Store, looking at the app itself.

Which is odd, because you're not supposed to be here. ;)

Note that the "Open" button works (in a sense), probably returning the user to the existing instance which, in any case, remains pinned.

And oh yes, the Uninstall button does indeed work.

Note that "Home" was pressed here to illustrate that we are actually still "pinned" - though what that means is now a bit foggy. ;)

App, uninstall thyself!

The app is, literally, uninstalled.

This is the resultant screen, which shows One Today in a state awaiting installation.

Note: Actually, "returning" from here to the "pinned" app did not show immediately promising results and is left to further research.

Anyways let's re-install the One Today app...

And here we are accepting policy and installing...

Note that even while we're installing the app (thinks it) remains pinned.

As long as you're careful not to use "Back", you can navigate all over the Play Store, uninstalling, installing, rating and all that jazz.

Importantly, the "Open" button for any app other than the pinned app will not work. Or hasn't yet.

Note that any use of the "Back" button will usually return to the pinned app.

0

1

2

3

4

5

6

7

8

9

10

11

12

Additional Notes

  1. I have not yet thoroughly investigated the effects of uninstalling the active Launcher whilst in a pinned session, as the last screen seems to be leading up to. Some intriguing initial results have been observed.

  2. This only affects those Google apps which use the (apparently fairly standard) "Help & Feedback" feature. Apparently that feature does not know about Pins. ;)

  3. About Play Store Content: One fascinating observation is to be had in the Play Music and Movies section: While preview and free content can be accessed, no subscription or purchased content for the device owner is shown. Free content can even be "purchased", but does not appear to be added to the device owner's library!

And coming soon...

#2 - Escape Pinned App Completely (in progress)

Just finishing up screen shots.