CM7: Phone stolen! - Does entering wrong password wipe the data? - Droid Incredible Q&A, Help & Troubleshooting

I think I read that after 5 or 10 incorrect password attempts, the data is wiped. Please tell me this is true.
Thank you!

I don't know about the data but you might be able to use this to find it. Downlaod the app to your phone from your computer.
https://market.android.com/details?id=com.lookout.labs.planb

Unless you had some kind of security system, I don't think so. When you get a new phone, you need to install Lookout or some kind of security system. The free version allows you to locate the phone, wipe, and backup data.

Have Verizon mark the ESN bad, the phone won't be able to be activated.

Iread somewhere that assuming you have not deactivated the phone yet, you can install lookout remotely from http://market.android.com and then wipe it.
If you are able to do this, please let us know if it worked...

Yea go to the market and look for the app from lookout called plan b. Its made just for cases like this.
DINC // CM7 RC2 // SLAYHER#9

Related

Verizon Forced Update ??

So verizon forces this update to my phone. Not sure what it was, but it didn't give me an option to cancel, or defer. Now when my phone tries to boot, I get the little android error screen with the triangle and exclamation point, and the phone will not boot. I have already booted into recovery, and wiped everything with no luck at all. Did a full wipe and restore, which had it up and running again, but this morning, same thing. Triangle and exclamation point error screen from where the update was unsuccessful. What do I need to do to block this update so I don't have to do a restore every few hours? Any help would be appreciated.
Thanks,
Anthony
Same crap happened to my wife's phone yesterday, she is running Skyraider and VZW keep trying to forced update and fux0r the rom, had to wiped cache/dalvik, reload the rom on top of it so she can retain her data, as soon as I loaded up the phone I turned off the wifi, 3G, and auto sync then immediately performed the following steps to stop that ****.
otacerts.zip (rename it .bak or whatever)
com.smithmicro.dm (freeze it with titanium backup)
http://forum.xda-developers.com/show...ing+OTA&page=2
I don't have the "donate" version of backup, so I can't freeze the stuff. If I unroot, I assume it will fix the problems.
Here's what I did after accepting the update:
I am rooted (stock rom) and accepted the OTA, after the install the phone will not boot completely it will fail with a white triangle, yellow exclamation point and blue android. To get the phone working again pull the battery, re-insert after a bit and boot into hboot, go to recovery and clear cache partition, this will put the phone back into service. I didn't wipe the davlik.
I got another forced OTA d/l yesterday and had to redo the above. I have renamed the otacerts.zip to .bak and I am anxiously waiting what happens the next time the OTA tries to d/l.
there are 2 otacerts.zip files:
etc/security
system/etc/security
which one needs to be renamed?
thanks.
Glock2005 said:
I don't have the "donate" version of backup, so I can't freeze the stuff. If I unroot, I assume it will fix the problems.
Click to expand...
Click to collapse
I used AntTek App Manager (free in the Market) to freeze it.
tincbtrar said:
You are kidding right? The one app that just about everyone should have (and support the developer so he can continue to provide support to us) and you resort to Warez?
Lame.
And to the OP - once you have secured the donate version of TiBu you can freeze the com.smithmicro.dm file like stated before.
Click to expand...
Click to collapse
I paid for mine and many other apps, and I have donated to devs who gave us root. As you said Titanium Backup is one of those must have apps that we all should buy, but don't be so arrogant to assume everybody has the extra cash to pay for the apps.
ben805 said:
I paid for mine and many other apps, and I have donated to devs who gave us root. As you said Titanium Backup is one of those must have apps that we all should buy, but don't be so arrogant to assume everybody has the extra cash to pay for the apps.
Click to expand...
Click to collapse
If you have paid $100~300 for a smartphone and pays $30 a month, I think you can pay $6. If you can't pay for one time deal, why would you have a smartphone that costs you $30+ a month? Promoting warez site is against the XDA rule and no respect to developers
Sent from my Incredible 2 using xda premium
ben805 said:
I paid for mine and many other apps, and I have donated to devs who gave us root. As you said Titanium Backup is one of those must have apps that we all should buy, but don't be so arrogant to assume everybody has the extra cash to pay for the apps.
Click to expand...
Click to collapse
Maybe I was a bit harsh - and I am sorry for calling you out.
Its just that I would find it hard to believe that the OP couldnt afford a 6 dollar app after paying a couple hundred bucks for the phone and about 70 to 100 a month for service.
Its like buying a luxury car but not being able to pay for the maintainence and upkeep.
anti leach
I proudly pay what little money I can to developers.
If I "Try" an app and plan to use it, then I pay for it.
I try to show some form of dignity to people that follow my lead..
An option would be to unroot and do what vomitrizen wants you to do.
If you can't afford to support the development community you should not be here.
And to crazyfireman, the same file is showing in two paths only because there second folder containing actual file.
Change either one and youwill be good.
Have a nice day...
tincbtrar said:
Maybe I was a bit harsh - and I am sorry for calling you out.
Its just that I would find it hard to believe that the OP couldnt afford a 6 dollar app after paying a couple hundred bucks for the phone and about 70 to 100 a month for service.
Its like buying a luxury car but not being able to pay for the maintainence and upkeep.
Click to expand...
Click to collapse
Don't apologize. Anyone posting or recommending warez here puts the community in jeopardy. It doesn't matter how many "other" apps one has paid for, that entitles you to NOTHING extra; one theft is still theft. Posting advice on how to commit piracy is a potential liability to the site itself. Mod notified.
Sent from my SCH-I500 using xda premium
cac2us said:
And to crazyfireman, the same file is showing in two paths only because there second folder containing actual file.
Change either one and youwill be good.
Have a nice day...
Click to expand...
Click to collapse
Thank you!
Sent from the computer in my pocket.
edster00 said:
To get the phone working again pull the battery, re-insert after a bit and boot into hboot, go to recovery and clear cache partition, this will put the phone back into service.
Click to expand...
Click to collapse
Having the same problem, but HBOOT is behaving strangely: it is not allowing me to use up or down arrows to go through the menu. It immediately asks "Do you want to start update?" and then allows me to select yes or no with volume up or down. It then prompts me to reboot, at which time I'm back to the same routine: Phone shuts off after about 20 seconds, ends up with exclamation point inside white triangle with green android guy.
Phone is not recognized by windows despite updating drivers so no luck with adb.
Any ideas?
You have a file in your SD card names PG32IMG.zip. so it sees it, and needs to "update"
Sent from my rooted MIUI Dinc2
I am having this same issue. From what I gather in reading this thread, I first need to clear my phone’s cache, then rename 1 file, and freeze another. I have a few questions about that I hope someone is willing to answer for me.
First, to the best of your knowledge are the steps I described above correct?
Second, before I clear my cache I want to verify that I’m doing it properly:
What I think I should do it boot in Revolutionary Clockwork Mod and then select “wipe cache partition”. Is that correct?
Lastly, I don’t have Titanium backup or AntTek App Manager installed on my phone. I can probably track down the apk on the net somewhere but how do I install it without being able to get past CWM? Can I just move the apk into the system/app directory?
Thanks in advance for anyone who can help shed some light on these questions for me.
vne147 said:
I am having this same issue. From what I gather in reading this thread, I first need to clear my phone’s cache, then rename 1 file, and freeze another. I have a few questions about that I hope someone is willing to answer for me.
First, to the best of your knowledge are the steps I described above correct?
Second, before I clear my cache I want to verify that I’m doing it properly:
What I think I should do it boot in Revolutionary Clockwork Mod and then select “wipe cache partition”. Is that correct?
Lastly, I don’t have Titanium backup or AntTek App Manager installed on my phone. I can probably track down the apk on the net somewhere but how do I install it without being able to get past CWM? Can I just move the apk into the system/app directory?
Thanks in advance for anyone who can help shed some light on these questions for me.
Click to expand...
Click to collapse
What same issue....the pbimg showing up? Delete it off of your sdcard.
And you can buy titanium backup on the market. Best 6 bucks you will ever spend if you plan on flashing roms.
Sent from my ADR6350 using xda premium
I'm having the same issue as the OP. He stated:
So Verizon forces this update to my phone. Not sure what it was, but it didn't give me an option to cancel, or defer. Now when my phone tries to boot, I get the little android error screen with the triangle and exclamation point, and the phone will not boot.
Click to expand...
Click to collapse
That's my problem. HBOOT and Clockwork Mod seem to be working fine for me.
Also, I have no problem paying $6 for the app but right now I cannot use my phone so I cannot install anything from the market. If I can track down the apk (which I have been unsuccessful at doing so far) I can move it onto my phone and into the system/app directory through the adb shell.
So, do you have any thoughts on my original questions? Thanks!
Last night it tried to push this update when I was sleeping, but I didn't have enough battery life for it to do it (thankfully). Anyways, I deferred the update for 5 days, and have frozen the file someone mentioned to freeze; however, I cannot find this otacerts.zip on my phone anywhere. Any ideas?
BoostinBen said:
Last night it tried to push this update when I was sleeping, but I didn't have enough battery life for it to do it (thankfully). Anyways, I deferred the update for 5 days, and have frozen the file someone mentioned to freeze; however, I cannot find this otacerts.zip on my phone anywhere. Any ideas?
Click to expand...
Click to collapse
Ben,
Do you have Titanium Backup or the AntTek App Manager?
vne147 said:
Ben,
Do you have Titanium Backup or the AntTek App Manager?
Click to expand...
Click to collapse
I have the premium version/donate copy of Titanium Backup, which I used to freeze that com. file, but I cannot find that .zip file anywhere.

Advanced phone protections - Questions about securing your data...

With all the talk of police being able to access your phone, I looked in to the options.
I found I could use the following options....
1) unlock password.
bypassed by: if the police dont have your PIN or unlock pattern, Google can be required to provide your email ID/PW to enable unlock
2) encrypted phone
bypassed by: I am unsure how this can be bypassed. If encryption is turned on, I know it breaks CWM, but is there any way to get by it w/o knowing the PIN? Is there any reset besides a wipe of the phone, which would clear any P.I.I. on the phone, wouldn't it?
3) recovery
bypassed by: if you cant get in to the phone, and choose instead to boot into recovery, you can get access to the phones data, but how much access? If you encrypted your data, will this bypass anything? Will the data still be encrypted.
What I would love to see possible, is a PIN for recovery that is a stand alone item with no way to reset it. I know this mean you would have to ODIN if you every forgot it, but if you are more concerned about protecting your data, than data loss, this would be a non-issue, as long as your data is protected
So, is the recovery lock even needed? does encrypting your data and your SD card get the protection needed to prevent access to your phone by authorities, even with Google's help?
I would love to see some security and developers views on this, and on how "safe" you can make your phone if you go all out.
No ideas anyone?
If not.. any ideas where I can go look for answers?
DCRocks said:
No ideas anyone?
If not.. any ideas where I can go look for answers?
Click to expand...
Click to collapse
what would kind of be an example of what your trying to hide from the cops? there is an app or a couple apps that can literally hide your data, and unless they knew the back door functionality of the apps, they would be able to access much data. i use a couple of them.
DCRocks said:
No ideas anyone?
If not.. any ideas where I can go look for answers?
Click to expand...
Click to collapse
k0nane?
Sent from my MIUI V4 Epic 4G via Tapatalk 2 beta 5
LORDFIRE00 said:
what would kind of be an example of what your trying to hide from the cops?
Click to expand...
Click to collapse
It was less about hiding specific data, and more about locking down your phone in general, as in what was possible.
I was interested in how well it could be done, what would need to be put in place, and how secure it really was.

remote wipe & custom recovery

So I have always wondered what happens when you remote wipe a phone from like Android Device Manager and if you have a custom recovery like TWRP. I tried the wipe on my M8 and it for sure worked, but since TWRP was installed it left all the data ion the SD Card. Is there anyway to force TWRP to do a full factory reset by default rather than just removing apps etc?
If not I may just have to install the stock recovery, if I can find it for my Bell M8.
jebise101 said:
So I have always wondered what happens when you remote wipe a phone from like Android Device Manager and if you have a custom recovery like TWRP. I tried the wipe on my M8 and it for sure worked, but since TWRP was installed it left all the data ion the SD Card. Is there anyway to force TWRP to do a full factory reset by default rather than just removing apps etc?
If not I may just have to install the stock recovery, if I can find it for my Bell M8.
Click to expand...
Click to collapse
From TWRP, (Advanced) wipe and select sdcard.
Niorun said:
From TWRP, (Advanced) wipe and select sdcard.
Click to expand...
Click to collapse
that won't wok if the phone is not in my hands.
make a back up and try it out and let us know ! lol
already did, wiped from device manager and it wiped the phone but left the SD card intact. This is a major oversight for custom recovery because same applies on my N7. Send a remote wipe to the phone, your actually just giving your data away because now they can access your SD card since you wiped it remotely but it didn't wipe the SD card.
Wonder if encrypting the SD Card and then wiping will resolve this? The data should be useless after remote wiping and will need the advanced wipe from TWRP to bring the SD card back to life.
I use an app called Cerberus that can remotely wipe the SD card. It also has a bunch of other features for remotely controlling phones.
Been a happy user for several years. Never needed the remote wipe, but I have used the location and other features.
GinoAMelone said:
I use an app called Cerberus that can remotely wipe the SD card. It also has a bunch of other features for remotely controlling phones.
Been a happy user for several years. Never needed the remote wipe, but I have used the location and other features.
Click to expand...
Click to collapse
Thanx for your suggestion, that apps looks promising. Been looking for something like this after a buddy's phone was stolen. A self destruct wiould be great after x number of unlock attempts-not sure if it has this or not, but will definitely check it out.
jayinc11 said:
Thanx for your suggestion, that apps looks promising. Been looking for something like this after a buddy's phone was stolen. A self destruct wiould be great after x number of unlock attempts-not sure if it has this or not, but will definitely check it out.
Click to expand...
Click to collapse
It doesn't have a wipe on failures, but it does take a picture and email you after X failures.
It can also be setup to notify you if a different SIM is inserted.
I also like that is can be controlled via a client app, the web or texts from any phone (with a password).
I like that it has an update.zip installer that survives factory resets. Few thieves will know/think to flash a new ROM.
Edit: Geez, I sound like a shill. Just a very happy user. I think I found it on XDA originally.
GinoAMelone said:
It doesn't have a wipe on failures, but it does take a picture and email you after X failures.
It can also be setup to notify you if a different SIM is inserted.
I also like that is can be controlled via a client app, the web or texts from any phone (with a password).
I like that it has an update.zip installer that survives factory resets. Few thieves will know/think to flash a new ROM.
Edit: Geez, I sound like a shill. Just a very happy user. I think I found it on XDA originally.
Click to expand...
Click to collapse
Nah you don't really - I perfectly get it. The stress I have seen on my buddy is immense, so I appreciate you emphasizing on this app. The thief wants $800 else... They have already changed gmail password, facebook, yada yada. If there's an app we can send to the phone and destroy it now that would be awesome. Any who major lesson learned. Thanx again.
jayinc11 said:
If there's an app we can send to the phone and destroy it now that would be awesome. Any who major lesson learned. Thanx again.
Click to expand...
Click to collapse
I know I've seen an app that you can push that will locate the phone. Lemme look. Some thoughts for your friend...
Android Device Manager might work.
Maybe Lookout: https://play.google.com/store/apps/details?id=com.lookout
This one looks very promising: https://play.google.com/store/apps/details?id=com.androidlost
This article seems to go over a bunch of options: http://phandroid.com/2014/02/11/find-lost-stolen-android-phone/
More good stuff: http://trendblog.net/how-to-track-your-lost-android-phone-without-tracking-app/
Best of luck.

How does security and encryption defeat someone just booting into recovery?

Regardless of device encryption and fingerprint scanners and the like, couldn't someone just get your phone, boot into recovery, and factory reset it? Wouldn't that undo any security you had on device?
Yes but the actual files have been encrypted. So while they can start the device fresh and use file recovery tools to "get" the old files, they are useless.
And they would be useless to everyone after that, even you? I guess that would be pretty good. So you encrypt to protect your user data, and you fingerprint lock to make sure nobody can ever decrypt, even if they factory reset thru recovery, which will get past your fingerprint scanner but not previous encryption. That right?
Actually since lollipop you must log out of your Google account before a reset. If you just factory reset you well still have access to the device to track it out wipe your account from it.
I could be wrong here, but if you have stock recovery, a factory wipe can only be started in the phone's settings menu. If you have twrp installed, a wipe can be started with out being in the phone, but you need a password to start it.
If you do wipe the phone, it is still useless as you need the persons gmail username and password to complete the setup, so the phone is useless to all other users bar the user of the phone.
I think you can factory reset from stock recovery.
So I don't get it. I thought user data was encrypted from phone, i.e., the internal storage. If I factory reset, I don't need a Google account to start the phone up. So then couldn't I access the internal storage data with a file explorer?
You have to authorize the phone to sync with your computer so you can not get on that way either. If you do not authorize you can not push adb or anything else.
As km8j said, yes, you can factory reset the phone, but you won't be able to recover any of the encrypted data. That's why before you get rid of an old phone you should encrypt (if it wasn't) and wipe it.
jackdubl said:
I think you can factory reset from stock recovery.
So I don't get it. I thought user data was encrypted from phone, i.e., the internal storage. If I factory reset, I don't need a Google account to start the phone up. So then couldn't I access the internal storage data with a file explorer?
Click to expand...
Click to collapse
Thats not quite right. If you factory reset your phone, you do need a google account to complete the initial setup wizard. The only exception is if the user releases it from his or her's google account so it can be sold on.
But yes to complete the instillation it will ask for a google account that has been authorised and wont continue until it gets it. This happens automaticly the first time you sign in to play store.
Also factory reset will fully wipe the phone, brand new out of the box. It also wipes the users data, so if you were able to get on the phone, there would be no data to access. I really do like the way google have thought about it. Also I never keep anything on the phone that I would consider critical.
A lot of inaccurate information here. You have been able to skip that Google account setup on all android phones for the past few years. Also in basically any file system, when joy delete a file, even formatting, the content is not deleted. So while the information is not there at face value when you wipe the phone it can easily be recovered without encryption.
Sent from my Nexus 5X using Tapatalk
Yeah, that keeps confusing me. I have activated so many phones without inputting a Google account. It says "skip" right there on the screen!
Didn't Google introduce the security features with the Nexus 6 and 5.0? It locks the phone to your google account even after a factory reset but requires compatible hardware.
I haven't seen it mentioned with this year's devices but when setting up a pin on the 5x I believe it asked if I wanted to enable that feature.
Sent from my Nexus 5X using Tapatalk
jackdubl said:
Regardless of device encryption and fingerprint scanners and the like, couldn't someone just get your phone, boot into recovery, and factory reset it? Wouldn't that undo any security you had on device?
Click to expand...
Click to collapse
No. If your data is encrypted, no one can access it without your decryption key. As for access to the device, if you had set up a Google account on the device, and had a lockscreen password/pin/pattern/etc., then no one else can use the device other than you unless you remove your Google account and lockscreen password before you factory reset. This was a new feature introduced with devices that sold with 5.0+
Panzerapple said:
Actually since lollipop you must log out of your Google account before a reset. If you just factory reset you well still have access to the device to track it out wipe your account from it.
Click to expand...
Click to collapse
Yes!
Stephen said:
I could be wrong here, but if you have stock recovery, a factory wipe can only be started in the phone's settings menu.
Click to expand...
Click to collapse
With the stock recovery, you can reset either from within Android or from within the stock recovery.
jackdubl said:
So I don't get it. I thought user data was encrypted from phone, i.e., the internal storage. If I factory reset, I don't need a Google account to start the phone up. So then couldn't I access the internal storage data with a file explorer?
Click to expand...
Click to collapse
Prior to devices shipped with 5.0+, this was true. No longer.
km8j said:
A lot of inaccurate information here. You have been able to skip that Google account setup on all android phones for the past few years. Also in basically any file system, when joy delete a file, even formatting, the content is not deleted. So while the information is not there at face value when you wipe the phone it can easily be recovered without encryption
Click to expand...
Click to collapse
Yes, you can skip Google account setup. However, IF you do set up a Google account and a lockscreen password, THEN you cannot skip the Google account setup on that device after a factory reset (if you hadn't already removed the account prior to the reset).
bblzd said:
Didn't Google introduce the security features with the Nexus 6 and 5.0? It locks the phone to your google account even after a factory reset but requires compatible hardware.
I haven't seen it mentioned with this year's devices but when setting up a pin on the 5x I believe it asked if I wanted to enable that feature.
Click to expand...
Click to collapse
+1.

Simple root that won't trip Knox?

Hi, there!
I heard there is a method for the S8+ where you can root your phone without tripping Knox. It isn't the best root method and it has its limitations, but it would do just fine for my needs.
Is there such method for the S9+?
Thanks!
Anyone?
CapBlackShot said:
Anyone?
Click to expand...
Click to collapse
No
*Detection* said:
No
Click to expand...
Click to collapse
And no developers are planning to create one, that we know of? I only need root to make Cerberus a system app. In case the smartphone is stolen and gets hard reset, the app will still be there, hidden. But without root it seems impossible.
CapBlackShot said:
And no developers are planning to create one, that we know of? I only need root to make Cerberus a system app. In case the smartphone is stolen and gets hard reset, the app will still be there, hidden. But without root it seems impossible.
Click to expand...
Click to collapse
KNOX is an e-fuse, once tripped that's it forever, no reversing, nothing devs can do
FRP lock is your hard reset security, unless they know your Google login they cannot access the device anyway
And if they have the knowledge to flash certain firmwares and bypass the lock, your system root app wouldn't be of any use either anyway, so....
*Detection* said:
KNOX is an e-fuse, once tripped that's it forever, no reversing, nothing devs can do
FRP lock is your hard reset security, unless they know your Google login they cannot access the device anyway
And if they have the knowledge to flash certain firmwares and bypass the lock, your system root app wouldn't be of any use either anyway, so....
Click to expand...
Click to collapse
That's very interesting. Can't believe I never heard of this before.
Will the device actually get wiped and then ask for my Google account or will it ask for my Google account before getting wiped? If the first option I mentioned is true, then Cerberus will be gone and I still won't be able to locate my cellphone in case it gets stolen, I'm assuming.
CapBlackShot said:
That's very interesting. Can't believe I never heard of this before.
Will the device actually get wiped and then ask for my Google account or will it ask for my Google account before getting wiped? If the first option I mentioned is true, then Cerberus will be gone and I still won't be able to locate my cellphone in case it gets stolen, I'm assuming.
Click to expand...
Click to collapse
It will get wiped first, it asks for the Google account because it was wiped from recovery and not from inside of Android, meaning anyone could have done it
It will not allow anyone past the Google account request, similar to when iPhones are locked to iCloud, you can wipe it as many times as you like but it will always request the Google account
For example, I steal your phone with Cerberus installed, I cannot access your phone so the most likely thing I`ll try is factory reset from recovery, this will wipe the phone and request your Google account login to access it again, which I do not have
Next thing I would try (If I knew about it) was flash stock firmware over the top, which will wipe again this time removing your Cerberus app, but again it will not prevent the Google login request
Final thing I would try would be FRP bypass to get past your Google account login, and if they manage that they have access to your phone, but it is wiped and Cerberus is gone
End of the day, no mod/app will survive the phone being flashed as the system partition is replaced with stock again, and the wipe will reset the data partition where user apps and data are
Best thing to do is enable the Google security settings for find my phone, lock and erase, and enable it to send GPS of last location when the battery is getting low, that way you can track it online until it is turned off/wiped

Categories

Resources