Develop Bugs

[Q] Air-watch, end of rooted phones?

Hello everyone,
Im an IT guy for the company i work for and my boss the exchange admin is looking at some software to secure android phones. (Rooted ones) He found this software called (air-watch). http://www.air-watch.com/platforms/android/index.html Can someone smarter them me take a look and see if this means the end for all of us with rooted phones in the company. Im not sure how rooting phones affects how they are seen from exchange but i love my Roms and wifi teather

sgtagem said:
Hello everyone,
Im an IT guy for the company i work for and my boss the exchange admin is looking at some software to secure android phones. (Rooted ones) He found this software called (air-watch). http://www.air-watch.com/platforms/android/index.html Can someone smarter them me take a look and see if this means the end for all of us with rooted phones in the company. Im not sure how rooting phones affects how they are seen from exchange but i love my Roms and wifi teather
Click to expand...
Click to collapse
Looking at how the software has functionality to push policies and restrict usage of apps I'd say it would definitely allow them to micromanage the phones. But then again, as an IT guy I'd guess you wouldn't be happy if one of your users decided they wanted to blow away whatever OS you installed on a PC and put Ubuntu on it.

Im just hoping that it will not prevent a phone that is rooted from connecting to exchange. I really love wireless teather lol

That would require a tremondous amount of intelligence on the part of the system. I think this is more for 'allow only people who work for me to access the site' and everyone else should be denied.

sgtagem said:
Im just hoping that it will not prevent a phone that is rooted from connecting to exchange. I really love wireless teather lol
Click to expand...
Click to collapse
Since this is in the Incredible forum I'm assuming you have an Incredible, in which case you dont need to be rooted to wireless tether...just FYI if your boss cracks down.
Google "HTC tether natively" and I'm sure it will pop

I read thru the site from the link.
Looks like through air-watch they'd have full admin access to device.
Question is whether the air-watch admin would 'blacklist' the superuser and/or tethering app(s).
Unlikely, imho, whether an astute IT person and/or admin of this system would allow a superuser app on devices that connect to company assets, but stranger things have happened.

Another thing i like is the root unistaller/ set cpu and custom roms. but thats another battle haha

Plus if you try to wipe the phone and install the new ROM, I am sure the Boss is going to have a few words with whoever did it.
Besides, it's not their phone, it's the company's phone. They can do what they want with it.

I work for a company in the top 20 of the fortune 500..we're looking at allowing employees to bring their own devices into our exchange servers but the catch is how to remote wipe them..they are looking at how to deal with rooted devices. I'm not privy to how they are working that out.

RXWatcher said:
I work for a company in the top 20 of the fortune 500..we're looking at allowing employees to bring their own devices into our exchange servers but the catch is how to remote wipe them..they are looking at how to deal with rooted devices. I'm not privy to how they are working that out.
Click to expand...
Click to collapse
Thats what we are trying to do. my boss is afraid of a rooted droid bringing in some virus/malware in and he would also like to force things like screen lock pin codes. I dont see how a rooted phone would bring that stuff in anymore then a stock one but forcing a security policy would stop someone from stealing data from it rooted or not i would think

The fact that it is rooted does not make it any more likely to get a virus then an unrooted phone. Almost all android phones have the ability to install apps from the SD card and that is where a virus won't come from, not the ROM you happen to be using.
However, the installation of this could put your phone in shackles. In addition to the possibility of restricting what you can install, such as games, it could kill your ability to connect to wifi hotspots that are unknown to your company, they could can wipe your phone at a moments notice and track your location without your knowledge.
That way if you call in sick, your boss can find out if you are really at the game or home in bed.
In any case, if this is a work phone then you don't have much choice but if this is your personal phone, I would try to stay clear of it.

Very nice answer. Im the one who has to implement it so i can always exclude myself from the devices that are being watched. The call in sick thing is an awsome yet crappy thing lol

sgtagem said:
Very nice answer. Im the one who has to implement it so i can always exclude myself from the devices that are being watched. The call in sick thing is an awsome yet crappy thing lol
Click to expand...
Click to collapse
Simple solution to "call in sick " concern : Turn Off The Phone.
Sent from my ADR6300 using XDA App

cam30era said:
Simple solution to "call in sick " concern : Turn Off The Phone.
Sent from my ADR6300 using XDA App
Click to expand...
Click to collapse
Or leave it at home and enjoy the game. Less suspicious if the phone is on and at home than off and lord knows where.
HTC Incredible

My employer is extremely security aware, and they are considering using an app named "Good." It partitions the Exchange data in an encrypted folder and allow that folder to be remotely wiped. Accessing the data is only available through the app, which is PIN protected.
This may be a better solution to your boss... and you.
This is what they have told me, I have not used it yet, and I am an amatuer at best when it comes to IM/IT. They were amazed and very concerned when they became aware that rooting and installing a custom ROM was easy enough that I could successfully do it...

Glad my employer hasn't learned how to do remote wipes on Droid phones since it would be end of many of us that hate iPhones. 75% of our staff use Droid phones and 50% of us have our phone rooted.

JohnKuczek said:
My employer is extremely security aware, and they are considering using an app named "Good." It partitions the Exchange data in an encrypted folder and allow that folder to be remotely wiped. Accessing the data is only available through the app, which is PIN protected.
This may be a better solution to your boss... and you.
This is what they have told me, I have not used it yet, and I am an amatuer at best when it comes to IM/IT. They were amazed and very concerned when they became aware that rooting and installing a custom ROM was easy enough that I could successfully do it...
Click to expand...
Click to collapse
That sounds like a perfect solution. where can i find that app? is there a website or something

sgtagem said:
That sounds like a perfect solution. where can i find that app? is there a website or something
Click to expand...
Click to collapse
It is in the Market. The full name is "Good for Enterprise" and the dev is listed as "Good Technology"

Policy for personal phones
Our company finally decided to allow personal phones to be connected to exchange. The phone just has to be compatible with accepting exchange policy, and we had to sign a company form stating that we are ok with them wiping our data if the situation arose.

JohnKuczek said:
It is in the Market. The full name is "Good for Enterprise" and the dev is listed as "Good Technology"
Click to expand...
Click to collapse
that software looks alot better then the air-watch. seems alot more direct rather then locking down the whole phone lock the exchange info. Im gonna pitch that to my boss. I bet its alot cheeper too

Opinions about Pandora?

http://tinyurl.com/3k2ma36
Swyped from my sexy EVO.

jacoballen22 said:
http://tinyurl.com/3k2ma36
Swyped from my sexy EVO.
Click to expand...
Click to collapse
I did not click on your link, however, the Pandora app is pretty good. I no longer use it because I favor the TuneIn radio app, but for what Pandora does, it does quite well. Give it a try if you haven't already.

That doesn't surprise me at all. I've heard a ton of weird rumors about Pandora. Pandora also has an excessive amount of permissions, in my opinion. Shady stuff.
Sent from my PC36100 using XDA App

Very shady, I guess that's why they're in a law suit now. Stupid companies selling our personal data for money. I think android apps are notorious for this. MOST OF THEM
~ d3rk

Folks, it's not the app.
It's the ad networks that are used by the app.
I emailed back and forth with the CTO of DI Radio (DI.fm, SKY.fm) and it basically came down to that while DI Radio wasn't looking at my cell tower location, carrier name, and ESN, the ad network was to track me, but he said they wouldn't change their ads just because of that.
However, after this fiasco with Pandora... Maybe they will.

I should have been more specific about the link being from engadget. However thought it was an interesting story I would share. Makes me feel invaded. I don't want to feel paranoid.
Swyped from my sexy EVO.

You really should never feel safe over the air and on the internet. Even encrypted stuff is just a hacker away from being cracked. You do everything you do online, like paying bills, at a big risk. You are just lucky that most hackers don't want the $5 most people have in their bank accounts.

I really don't see an issue here. It's way overblown. It's the price you pay for an ad-supported app, and I think it's a small price.
So they want to know if I'm male or female? Yeah, I don't need to see Tampax ads.
They want to know my birthday? OK. I give that out at Chilli's to get a free order of nachos on my birthday. And I don't need to see Depends ads for another 40-50 years or so (I hope).
Location? Well, OK, I can see that this makes people a little uneasy, but if they want to send me a coupon when they see I'm near a strip club, I'm probably grateful to receive it.
I'm not saying people shouldn't think about these things. But I don't see how anyone could steal my identity with this information.

bkrodgers said:
I really don't see an issue here. It's way overblown. It's the price you pay for an ad-supported app, and I think it's a small price.
So they want to know if I'm male or female? Yeah, I don't need to see Tampax ads.
They want to know my birthday? OK. I give that out at Chilli's to get a free order of nachos on my birthday. And I don't need to see Depends ads for another 40-50 years or so (I hope).
Location? Well, OK, I can see that this makes people a little uneasy, but if they want to send me a coupon when they see I'm near a strip club, I'm probably grateful to receive it.
I'm not saying people shouldn't think about these things. But I don't see how anyone could steal my identity with this information.
Click to expand...
Click to collapse
Big issue, I know I need viagra but I don't need these bastards reminding me when I open every ad supported app lol jkjk.
~ d3rk

Heads Up! Warning Letter: WiFi Tether app

Hey folks!
I just got a warning letter from Sprint. They're threatening to disable service for tethering. I did a bit of searching on the forums and have seen similar threads, but thought I'd contribute so others wouldn't get flagged like I did.
I'm using CM9 Beta 1 (older version), with FL24 modem, and using WiFi Tether app to tether. Data usage for September so far has been 4.66 GB. Specific usage for data (from tethering) primarily involves web browsing, Youtube videos, Hulu, and playing Guild Wars 2 x3/week for less than 3 hour sessions each.
I'm not sure what all they can or cannot track, so I will try a newer CM9 or CM10 and use wired tethering instead to see if that helps. If I get terminated, oh well. After surcharges and tax, I'm paying 160 for two lines. The other phone on the line is a basic flip phone, of all things. I use tethering since it's more ideal than the campus wifi here.
If push comes to shove and I get terminated, I'll check out T-Mobile since their signal is strong-ish in this area. Not sure what factor/s caused the flag letter, but just posting the info so you could perhaps avoid it!
Good luck folks! :highfive:

They will be able to tell that you are tethering, it doesn't matter what ROM you are using or how you are tethering.
All of the information is in the packets that are being sent on the network. Everything from what browser you are using, operating system, which version of flash/java you have installed, etc...
Sent from my SPH-D710 using XDA Premium 4 mobile app

Mattix724 said:
They will be able to tell that you are tethering, it doesn't matter what ROM you are using or how you are tethering.
All of the information is in the packets that are being sent on the network. Everything from what browser you are using, operating system, which version of flash/java you have installed, etc...
Sent from my SPH-D710 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Thanks for the info. From all the searching I've done across several different forums, this seems to be a consistent but very RANDOM problem (the letter). I wonder if they just do random checks on random people?? I saw a guy get a flag letter for using 100+GB, but I'm below 5GB. Is anyone else getting this letter?

Mattix724 said:
They will be able to tell that you are tethering, it doesn't matter what ROM you are using or how you are tethering.
All of the information is in the packets that are being sent on the network. Everything from what browser you are using, operating system, which version of flash/java you have installed, etc...
Sent from my SPH-D710 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
The real question is what they are looking at. Truth is we probably won't know and things change.
Just looking at user agent strings in post and get requests will result in false positives when a user has their android browser using a Windows Chrome user agent string. Its not terribly intensive to spot check traffic on port 80 to see whats going on but probably not the most efficient or fool proof way. Especially when the heavier users of the network are not just casually using a web browser.
Desktop Youtube and Hulu are likely to raise flags. Even the most passive of monitoring will catch these 2. When a tower experiences any amount of unusual congestion someone is likely to take a look at why and see something usual triggers won't notify on. More active solutions are likely to notice an account without tethering connecting to a known game server IP on a known port. Not so much a problem with say hosted FPS servers more of a problem with MMO's.
If they know exactly what they want to look for its very easy to put an automated solution in place. They don't always know what a user is doing on the network and spot checks during unusual congestion will turn things up. All from network administration point of view less of an accurate carrier view though.

Hey guys an update on what I did.
I just got back and found an OK deal. I'm not sure what you guys were paying for Sprint, but I was paying (after taxes and surcharges) 160/mo. for two lines, unlimited data + 2k non cell-to-cell mins and unlimited everything else. I ended up going T-Mobile and it's looking like the bill will be around 130/mo for 3, not 2 lines. One will have unlimited data, the other two are basic flip phones. Everything else is unlimited.
After bugging the living crap out of the representative and asking repeatedly throughout the sales process, it seems like they have a more flexible, less technical data plan. If this is not true, I'll necro this thread sometime to let everyone know.
Although the 130/mo for 3 lines looks good on paper, I did have to put down (after taxes) $430 for the three phones (GS-4, x2 basic flip phones) - not a pretty amount. After bugging them about how much it cost, they at least gave me a zagg screen protector and some crappy.. body armor? body guard? phone case. Not bad.
I mentioned my usage with tethering in the original post. Should things go sour the same way it did with Sprint, I'll update this thread and let everyone know what happened in detail. Supposedly the rep at the store was an avid user for tethering as well, though he only hinted it, telling me there's little for me to worry from his 'personal' experience.
On another note, I did have an incident with Sprint in the past. My phone was evidently set on automatic connection and Sprint literally kicked my phone off the plan for something they called 'excessive roaming'. They claimed they sent me a warning letter beforehand.. and I'm sure they did. My desk is a mess. The guy over at T-Mobile told me roaming was truly unlimited, but I won't take my chances just in case.
Data speed differences in the Denver Metropolitan area are significant. Speed Test shows around 1.5mbps DL Sprint WiMax, 8.16mbps DL T-Mobile "LTE" (Someone told me T-Mobile LTE isn't 'real' LTE. Not sure on this). 10 tests each were done and averaged. 5 tests indoors, 5 tests outdoors.
Thanks for the responses/input - it helped me make my decision. This forum has always been nothing short of awesome. :good:

Aggressive ads 12/17/17 xda

Hi. I have been a casual per user of your forums for years and having recently obtained a new phone I was looking for some information tonight.
I encountered several misleading and aggressive pop ups even though I have pop ups blocked. I had to shut down the web page and when I went back I got another but different popup.
These are lowbrow ads and I always thought of xda-developers as a bit classier so maybe they slipped in and you would like to know about them.
They are redirecting to malicious sites and making fallacious claims about browsing habits in an attempt to scare/threaten into downloading and installing apps.
I kinda lol'd but I imagine some will fall for these and also I assume that you car about your rep.
If you want screens let me know.
Thanks

bp7 said:
Hi. I have been a casual per user of your forums for years and having recently obtained a new phone I was looking for some information tonight.
I encountered several misleading and aggressive pop ups even though I have pop ups blocked. I had to shut down the web page and when I went back I got another but different popup.
These are lowbrow ads and I always thought of xda-developers as a bit classier so maybe they slipped in and you would like to know about them.
They are redirecting to malicious sites and making fallacious claims about browsing habits in an attempt to scare/threaten into downloading and installing apps.
I kinda lol'd but I imagine some will fall for these and also I assume that you car about your rep.
If you want screens let me know.
Thanks
Click to expand...
Click to collapse
https://forum.xda-developers.com/showthread.php?t=1696660
Sent from my Pixel using Tapatalk

carrier data block

Does anyone know away around Verizon seeing how much data you use before they slow you down or if your tethering .I have unlimited but it's gets throttled looking for away around that .

1981greg said:
Does anyone know away around Verizon seeing how much data you use before they slow you down or if your tethering .I have unlimited but it's gets throttled looking for away around that .
Click to expand...
Click to collapse
You can use the Verizon app to see how much data your using. As far as finding a way around them monitoring your data usage, that, I don't know. Probably illegal anyway

Badger50 said:
You can use the Verizon app to see how much data your using. As far as finding a way around them monitoring your data usage, that, I don't know. Probably illegal anyway
Click to expand...
Click to collapse
Thanks for the reply I didn't think of it being illegal really but makes sense trying to delete post but don't see an option

Badger50 said:
You can use the Verizon app to see how much data your using. As far as finding a way around them monitoring your data usage, that, I don't know. Probably illegal anyway
Click to expand...
Click to collapse
Not sure how it's illegal as it's an unlimited data plan. As far as carriers monitoring usage to effectively kill an unlimited plan they profited from by advertising it is probably actually "illegal" or misleading advertising. I really think these carriers should be pressured to change the wording of their "unlimited" plans through the CFPB or whatever they are calling themselves these days. Unlikely nthis will happen due to the current political atmosphere.

cedargreen said:
Not sure how it's illegal as it's an unlimited data plan. As far as carriers monitoring usage to effectively kill an unlimited plan they profited from by advertising it is probably actually "illegal" or misleading advertising. I really think these carriers should be pressured to change the wording of their "unlimited" plans through the CFPB or whatever they are calling themselves these days. Unlikely nthis will happen due to the current political atmosphere.
Click to expand...
Click to collapse
how is it misleading? it is in their TOS when you sign up for whatever plan. I know that if I use over 50GB on tmobile i can be throttled, i still can use data even if it is slower, so therefore it is still unlimited. Their plans are't titled UNLIMITED HIGH SPEED DATA. These unlimited plans are Not like the some of the old school plans that just cut you off, or end up charging you extra for data you go over.

1981greg said:
Thanks for the reply I didn't think of it being illegal really but makes sense trying to delete post but don't see an option
Click to expand...
Click to collapse
It's not illegal but does violate the TOS agreement from the carrier. At the same time hiding a tethered connection is futile. It's simply impossible to hide as carriers have at least half a dozen different ways of detecting it.

Strephon Alkhalikoi said:
It's not illegal but does violate the TOS agreement from the carrier. At the same time hiding a tethered connection is futile. It's simply impossible to hide as carriers have at least half a dozen different ways of detecting it.
Click to expand...
Click to collapse
Ok thanks I realize now bad idea does anyone know how I can delete this post

https://labs.xda-developers.com/store/app/be.mygod.vpnhotspot
You will also need to connected a vpn that has decent speeds.
PrivateInternetAccess works pretty good and it is like $30 per year with a coupon, search slickdeals.net or some other similar site for code. Plus PIA you can change the packet size if verizon is looking for that.

1981greg said:
Ok thanks I realize now bad idea does anyone know how I can delete this post
Click to expand...
Click to collapse
Relax, you are not going to jail. You asked a question, and did nothing.

1981greg said:
Ok thanks I realize now bad idea does anyone know how I can delete this post
Click to expand...
Click to collapse
You can't delete a post. You can edit it to something like "delete" if you want but once you're quoted then it's on your permanent record. A mod can delete it too. But as you've been told you did nothing wrong. Don't sweat it.
Sent from my Pixel 2 using XDA-Developers Legacy app

bobby janow said:
You can't delete a post. You can edit it to something like "delete" if you want but once you're quoted then it's on your permanent record. A mod can delete it too. But as you've been told you did nothing wrong. Don't sweat it.
Click to expand...
Click to collapse
Thanks guys just didn't want look like a dumbass lol probably too late thanks for the info

fiffan86 said:
how is it misleading? it is in their TOS when you sign up for whatever plan. I know that if I use over 50GB on tmobile i can be throttled, i still can use data even if it is slower, so therefore it is still unlimited. Their plans are't titled UNLIMITED HIGH SPEED DATA. These unlimited plans are Not like the some of the old school plans that just cut you off, or end up charging you extra for data you go over.
Click to expand...
Click to collapse
So I go to an all you can eat buffet for lunch. I eat 2 plates of cream of somyungui. Then I would like another. I go back to find out that after 2 plates I must now wait till dinner to have another. Also I have to wait until everyone else ate. When I can finally have another plate I find there is hardly any left and it takes a long time to get what I had during lunch.
This is not unlimited. Carriers are spinning the meaning of the word. We saw this before the prior net neutrality laws were passed several years ago. Unlimited to start, then so slow you think the website is down, or it just times out all together.
I do agree with others that the carriers will know if you are tethering or not regardless. The real question is if you root and unlock native tethering, will they force a "tethering fee" assuming you didn't have such fee when you signed your contract.

Don't make analogies. They're never 100% equivalent to what you're trying to compare it to.
Throttling ≠ data cut off. It sucks but it's still unlimited data.
Sent from my Pixel 2 XL using Tapatalk

@EeZeEpEe: The guy is trolling, and the facts you have provided he will ignore as they don't fit his narrative. The main reason I haven't replied to him is because he is being intellectually dishonest. He knows full well that the carriers aren't abusing the definition of unlimited like they did in 2010.

Strephon Alkhalikoi said:
@EeZeEpEe: The guy is trolling, and the facts you have provided he will ignore as they don't fit his narrative. The main reason I haven't replied to him is because he is being intellectually dishonest. He knows full well that the carriers aren't abusing the definition of unlimited like they did in 2010.
Click to expand...
Click to collapse
They're not?
https://www.eff.org/deeplinks/2018/...could-go-unpunished-because-fcc-repealed-open
https://motherboard.vice.com/en_us/...less-carriers-over-youtube-netflix-throttling
I don't see above where anyone provided facts to back up their argument. Since u mad, (The main reason I haven't replied to him is because he is being intellectually dishonest), here is clear evidence of abuse. I would also argue that this is the worst case of throttling ever and the next closest is the AT&T/FaceTime fiasco. All under the guise of various tiers of 'unlimited' data. Check out the wehe app. It helped with studies on this exact topic, including Senate oversight committee sending questions to the major carriers.

@cedargreen: Mad? That would mean I had feelings on the topic. The reality is I just call it as I see it. Your first post in this thread is nothing but a strawman argument, thus you are being intellectually dishonest. Now, you clearly must be bored if you have to respond to a post that as of this writing is four months old. I don't go out of my way to feed trolls, so we're done here.