[Q] Android rev. strange permissions on files? - Desire HD Q&A, Help & Troubleshooting

Hi first off id like to say as its my first post how valuable this site has been since i bought my first device a few months back.
Now my worry is i was recently scammed thru a apk (nothing to do with here) but since then ive noticed one or two worrying things in the latest android Rev. firmware.
The auto roate app for instance has permissions to make calls send sms read email, it can modify personal information in calanders write browsers history and bookmarmks and write data to your contacts.
It also has permission to read email attachments edit sms/mms as well as sending/recieving.
Another worrying thing it can use authentication credentials of any of your email accounts.
All this from an app whos only feature is to rotate the screen? like i said ive been scammed before with apk files from elseware and would some peace of mind .
Great software on he whole tho congrats to the devs.

Find a solution by reading my signature

Related

enabling auto image download for html mail?

I've created a thread here in hopes that someone with the right know how can help out. the orginal thread can be found here....http://forum.xda-developers.com/showthread.php?t=345071
It as become a huge annoyace to continuesly click "download images" for my mail. I've been searching for a long time find a reg key some where that'll change this, but no look. in the ogirnal thread, there is mention that the samsung i8000 has the setting disabled by default. http://forum.xda-developers.com/showpost.php?p=4631247&postcount=29
can anyone lend a hand with this one?
I'm intrigued.. will take a gander.
l3it3r said:
I'm intrigued.. will take a gander.
Click to expand...
Click to collapse
200 points for this man!
This question was asked way back in June 07!
http://forum.xda-developers.com/showthread.php?t=311030
It does give an explanation in the thread as to why you might not want to automatically download messages... basically you could suddenly find you are swamped with even more junk mails..
johnk1973 said:
This question was asked way back in June 07!
http://forum.xda-developers.com/showthread.php?t=311030
It does give an explanation in the thread as to why you might not want to automatically download messages... basically you could suddenly find you are swamped with even more junk mails..
Click to expand...
Click to collapse
i am not even sure how to make sense of what was said in that thread. I dont see how allowing automatic download for html images in an email will increase spam to the mail account. at this point in the game, winmo is the only platform that doesnt allow html rendering by default. if this were true, then woulding everyone else who doesnt use a windows mobile device be flooded with spam?
Umm... pretty sure that my GMAIL account handles the SPAM ok.
I'm still going to look into this a bit more, but I have been super busy today.
As i understand what is said, spam senders send messages to accounts generated at random hoping some of them get to a proper account. The pictures that are in the email are encoded with email address it is sent to eg. [email protected] so that if you download that image the server knows that is a valid email address and is noted.. and spread for everyone else to send you a message...
johnk1973 said:
As i understand what is said, spam senders send messages to accounts generated at random hoping some of them get to a proper account. The pictures that are in the email are encoded with email address it is sent to eg. [email protected] so that if you download that image the server knows that is a valid email address and is noted.. and spread for everyone else to send you a message...
Click to expand...
Click to collapse
Yes... that's exactly correct....except it goes to a server not an email address... basically the concept is that it notifies the sender that the email is legit, and adds them to the list of good email addresses to sell
tocdco said:
Yes... that's exactly correct....except it goes to a server not an email address... basically the concept is that it notifies the sender that the email is legit, and adds them to the list of good email addresses to sell
Click to expand...
Click to collapse
like l3it3r said, my spam filter does a great job. can't tell you the last time i've seen spam come through my inbox. thats a none issue over here.
me either. It is a very rare occasion when I get spam in either my corporate or personal email.
if thats a problem we could atleast try to have an option to "trust this sender" or something to automatically download html pics from trusted sources
have added this thread to my subscriptions and will watch with interest
This is something that I have found annoying for a long time now that I can't just download the images in my emails by default. I really expected it to be an easy fix and that I would find an answer straight away along the lines of "...change this one line of the registry to '0' ... " so I was really surprised to see it was a much more complicated issue.
Anyway thanks in advance to anyone with the tech knowhow who is looking into this for us all
maybe its possible to make some script or something that presses automaticly "download pictures" when email opened... i have no idea how or if its possible but maybe someone can...
For Outlook on desktop computer this is possible on registry hack. On mobile outlook this registry key is not persist...?!
http://email.about.com/od/outlookexpressreading/qt/et_inline_off.htm
Maybe is possible on other location?
I'm looking for a solution to this as well. I would like the option to trust certain senders, at least. I can't believe Microsoft didn't trust us enough to give us an option for this. I would also like to have scrolling permanently enabled.
If you add the sender to your contacts, it will automatically download the images. This is the only way I have ever known to make this work, it would be great if someone figured it out, but until then this is the only work around I know.
i would like to have this function as well.. is great that my email mostly need image downloaded together.. when i got slow connection, i would like it to download all n internet picture together while it is idle. then once i got time i can faster read it all without further waiting for downloading.
thumbs up for this feature. at least have an option so that user can tweak themselves. no nid to argue about anything but juz let user make the choice accordingly.
DEFINITELY need to have this automatically download internet pictures AND turn on scrolling..... what's the point of having such a great screen and touch capabilities when the stupid email can't figure out how to show you pictures and let you scroll right?
HUGE oversight on Microsoft's part there - email should look as nice and classy as Opera does on my TP2!!!
UP !!!
I am still looking over this. Its really annoying and kills me. What a waste?

[SOLVED] GMail app - always show pictures?

Is there any way to get the GMail app to always show pictures, without having to press the "Show pictures" button? It annoys the hell out of me - I ALWAYS want to see the pictures!!!
Anyone got an answer for me?
Yet another bump since I still don't have an answer.
I'm now running Pays Sense Froyo rom.
Sent from my HTC Desire using XDA App
anyone got any ideas?
I want this also....please.
no you cant, its there to protect you not just from malicious code but also from illegal images ......
An honest question - how does making me press a button protect me from malicious code?
And illegal images, well I've never received an email with illegal images in it, and I think I'm prepared to take that risk since I'm an adult!
I just want my pictures shown straight away!
If the same account was able to have pics shown by default on the iPhone surely some has a fix or script or workaround for this bad idea on a Droid?
Thanks Kevin
"Show Pictures" button issue - WTF?
I am using Android 2.2 on a Droid X and I M NOT able to see my HTML emails automatically? I have to hit a "Show Pictures" button EVERYTIME?? This is the dumbest thing I have heard.
I can turn this option on in my GMail account, so we can't I turn it on in the GMail app on my Android phone?
Security? That is a lame-ass excuse, like I said, I can turn it on in my web based GMail account and GMail automatically filters 99% of all SPAM messages automatically AND IF there is SPAM in my email box, it's usually something I know not to click on it (on the phone) and when I do log into my webmail I report it as SPAM. WTF?
I solved this problem by using the K-9 mail application.
It is in the market and you can download the latest version off the developers google dev web site.
It has the setting to always show pictures.
Good luck to all.
Kevin
This has been solved now.
This post from this thread provides a GMail update that is flashable through ROM Manager or recovery.
Works a treat!
Thank you so much. I also think it pretty freaking stupid and not insecure. Scripts should always be be disabled but I dont see how allowing/placing/resizing picture is dangerous at all. There are empty spaces, that when you click them it goes to a link. It was a picture with a link attached, but now its clueless link. Its more dangerous to allow contextual boxes then pics. Downloading anything illegal without criminal intent is not prosecutable. My 2 cents anywho.
Thanks..I have updated Gmail app..The problem is now resolved.

Security

Please can anyone expand on some of the security issues that are worrying me. I have been a pocket PC user up till now (HTC HD).
Every time I download an application I am informed that the application will may access one of the following:
1. SD card
2. The internet
3. The local network
As I keep many private things on my Desire I am worried that I am unknowingly "opening doors" for people to steal information.
What should I turn off or on to secure my Desire?
Are items downloaded from the Market secure?
Are items downloaded from other places secure?
Thanks
Sams
Don't worry about those security warnings, I just ignore them
samcory said:
As I keep many private things on my Desire I am worried that I am unknowingly "opening doors" for people to steal information.
Click to expand...
Click to collapse
Essentially, yes you are!
When you install an app, it requests certain permissions so it is in your interest to review that list and make sure that the permissions that the application is asking for reconcile with what the application is supposed to do.
For example, if I'm installing a video player, I don't expect that it should need access to my contacts, emails, or SMS messages, so if I installed one that asked for those permissions I would refuse it.
Are items downloaded from the Market secure?
Are items downloaded from other places secure?
Click to expand...
Click to collapse
Unlike the Apple AppStore, applications on the Market are not vetted so there is always the potential that someone could post up some malware - it is one of the few downsides of being an open platform.
Regards,
Dave
security
Virtually every other app seems to want acces to the internet, that does seem a bit dangerous!!
What we need is a nice site setup that vets the apps and makes a small charge for the service. I certainly would be happy to pay for such a service toavoid having my Exchange contacts and notes being used by some nasty stranger.
Sam
^ but then every other app needs internet access. Even if it was just to post a high score. More worrying is when an app wants access to contacts/SMS/ or wants read AND Write access to something.
I was unaware the apps were not vetted.

[XAP] [Source] IDswitch

Just picked up a request from the DEV IDEA POOL
danchar4 said:
I have a very simple app request to target unlocked phones. Basically a one button switch between primary LiveID accounts based on sensboston's work: http://forum.xda-developers.com/showthread.php?t=1335240
1. Launch app
2. app asks for email address
3. user types in email address or selects email from list of last-used addresses
4. app asks "Are you sure?" with suitable warning
5. app writes selected email address to following regkeys:
Code:
[HKCU\Software\Microsoft\ActiveSync\Partners\{B2830118-7BC6-4A74-8C9A-3D8B9CEF88E0}]
"Email"[email protected]
"User"[email protected]
[HKCU\Software\Microsoft\IdentityCRL\Environment\Production]
"DefaultID"[email protected]
6. app automatically reboots phone
Simple enough, right?
Click to expand...
Click to collapse
Here it is!
Because I made no test on myself please give me feedback if the registry values get applied
ne0cr0n, unfortunately, "my" method has some important cons (you should list 'em) - after that change you'll be not able to upload pictures to SkyDrive, also some accounts like Twitter will be non-functional I've tried to find some workaround but without success...
sensboston said:
ne0cr0n, unfortunately, "my" method has some important cons (you should list 'em) - after that change you'll be not able to upload pictures to SkyDrive, also some accounts like Twitter will be non-functional I've tried to find some workaround but without success...
Click to expand...
Click to collapse
but you can revert it back, right?
The new LiveID could be associated to a different market zone, which you could use to buy some apps with your correct credit card infos, then revert back to your main LiveID, and regain all regular functionalities like auto uploads to skydrive, twitter integration, etc.
Am I right?
http://forum.xda-developers.com/showthread.php?p=25500576#post25500576
kevyn82 said:
Am I right?
Click to expand...
Click to collapse
I'm so sorry but I can't confirm - just never tested this way. I've researched that hack 'cause damn Verizon blocked and deleted my very-very old email ( @verizon.net) what I've used during 11 years, and also as my LiveID email.
Wow dude thanks for writing the app so quickly. What is the etiquette for sharing apps? Are you supposed to share source code too? I don't want to be rude by asking you for the source
I don't use twitter, but I was able to upload a photo to skydrive just fine after swapping LiveID's. Steps:
reset my phone with my own liveID
download bunch of apps from appstore
dev unlock/interop, etc
manually edit registry and change to my wife's LiveID (she has zunepass on her ID which is why I wanted to swap to hers)
reboot phone
take picture
upload to skydrive
login to skydrive app and see that picture is there on *my* skydrive account, not my wife's
So skydrive integration with picture hub/camera obviously stored my liveID and credentials somewhere other than the regkeys I edited. Most likely Twitter is the same way.
I presume the credential data is stored encrypted in some weird GUID key with no obvious pattern. Too bad there is no regmon/procmon tool like on Big windows, otherwise I could figure it out in a few seconds... Although somehow I doubt that you can use provxml to import export those keys to re-write encrypted credentials. That would be a pretty bad exploit.
So I ran IDSwitch and it gave me the error "no root access". Hmm. So I went into WP7 Root tools and switched on "trusted" for the app.
So a pre-requisite for running the app is to have WP7 root tools? I'm kinda new at this so perhaps that is an assumption of any app that is going to do interop/native stuff? In order to get it to work you have to set it to "trusted"?
Anyway the app let me type in the new liveID and rebooted the phone, but upon booting up, it appears that the old LiveID is still there in the 3 registry settings. I ran it a second time and the app remembered the address I typed in so thats cool. BUt again after rebooting, it failed to modify the registry entries.
Can you post up a debug version with some breakpoints or console spew? I could try to attach a debugger on my end (not sure I know how to do that, but I can try to figure it out)
sensboston said:
ne0cr0n, unfortunately, "my" method has some important cons (you should list 'em) - after that change you'll be not able to upload pictures to SkyDrive, also some accounts like Twitter will be non-functional I've tried to find some workaround but without success...
Click to expand...
Click to collapse
Thanks for the info. I will add a warning and how to use message when launching the app for the first time.
danchar4 said:
Wow dude thanks for writing the app so quickly. What is the etiquette for sharing apps? Are you supposed to share source code too? I don't want to be rude by asking you for the source
Click to expand...
Click to collapse
I will do that, but the code is kind of ugly xD
danchar4 said:
Can you post up a debug version with some breakpoints or console spew? I could try to attach a debugger on my end (not sure I know how to do that, but I can try to figure it out)
Click to expand...
Click to collapse
I uploaded the source. Should make things much easier
I tried it on Samsung Focus Mango updated with WP7 Root Tools. Even though it reboots but it does not change the primary id. After reboot when I open the app again, it shows the primary id as the old id and not the id to which I wanted to switch.
Found the bug. I used the content from to current ID textbox not the new ID textbox -.-
I guess nobody tested it or I am getting a different result. Here is what happens :
1. ID A which is primary ID in my Account with No CC.
2. I switch from ID A to ID B. ID B does not have a CC.
3. When I access Marketplace, The region used is according to ID B.
4. Next I Move to buy an App and it asks me to signin with ID A instead of ID B.
5. For free apps, I can easily download it without going to login page ever which is pretty obvious.
Today Evening I will try out to buy app by signing with ID A when it sends me to login page of ID B by first sigining out and then signing again.
Few things I noticed :
1. Facebook, Twitter, Skydrive all was working.
2. It takes a while for the OS to realize the ID is new and hence may take around a minute or more to change marketplace.
3. I downloaded a free app with the swtched id and used it without any issues.
4. I even updated a free App which was bought using the primary ID with the new ID.
5. Email ID A stopped working. It did not show any email nor it gave an error of wrong password which is pretty odd.
My Thoughts :
1. This will be useful for parents who have kids carrying a Windows Phone who do not want to give them credit card access but using this they might buy apps for kids.
2. I still need to test but this will work for IDs which are in same region. For example I have a US id to which if I want to add a CC, the country is fixed and hence I cannot use an Indian CC with it.
wpxbox said:
1. Facebook, Twitter, Skydrive all was working.
Click to expand...
Click to collapse
Try to share pictures from camera to SkyDrive...
wpxbox said:
2. It takes a while for the OS to realize the ID is new and hence may take around a minute or more to change marketplace.
Click to expand...
Click to collapse
Try to reboot after LiveID change.
Just tried it out and it worked. The file was uploaded to Skydrive account of the primary Live id.
Wait... What "primary Live id" and what are you tried? New one or the old one? Have you tried:
- change LiveID to new one
- reboot handsets
- go to pictures hub and share picture to the SkyDrive ?
When I said Primary Live Id I mean the ID with which the phone was configured.
1.Phone configured with ID A
2. Change to ID B using the app, Reboot
3. Upload to Skydrive and it was stored in ID A Skydrive Account.
He-he, it's exactly what I mean by "not working". For example if you change first (original) LiveID email to the new one (as I had to do), you'll be not able to upload pictures to SkyDrive, and can't login to the Twitter account. So please do not confuse people.
sensboston said:
He-he, it's exactly what I mean by "not working". For example if you change first (original) LiveID email to the new one (as I had to do), you'll be not able to upload pictures to SkyDrive, and can't login to the Twitter account. So please do not confuse people.
Click to expand...
Click to collapse
Oh Ok I understand now what you said by breaking. The new ID cannot be used for Skydrive or Facebook or Twitter etc in short, anything connected with old Live id.
Basically its not a true switcher and can only be used to buy apps with the new account connected with CC
Hi all
The whole idea of this app is JUST to let you assign an account that will give u the ability to buy apps from marketplace using CC, if your original ID have problem with adding CC information. So it is not to change you ID permanently. You can read my thread if u want. Anyway thanks op for making the app.
I can confirm this works. Just bought an app using a different account and it works. Editing a video on this so will be up in couple of hours.
As promised, Here the link to the video we made http://youtu.be/2H7dr7ZzJZs

New Hangouts 2.0.012

Finally Hangouts with SMS! Been waiting for this ever since "Babel" and its here!
For the download link, head on over to androidspin.com OR click the download link below!
https://www.copy.com/s/vRBrzPCxDE9i/Hangouts.apk
sheltrack said:
Finally Hangouts with SMS! Been waiting for this ever since "Babel" and its here!
For the download link, head on over to androidspin.com OR click the download link below!
Click to expand...
Click to collapse
Awesome, working perfectly! Been waiting a long time for this
Thanks, working well!
Sent from my SGH-T999 using Tapatalk
I'm sorry to post a full newbie post here regarding this but I'm trying to settle some debate and confusion online about Hangouts 2.0
Basically has google "done it right" this time and copied iMessage? (No, I'm not an Apple fanboy)
The advantage of iMessage is that it defaults to data when possible, fallsback to SMS when it has to.
It's also completely seamless, this is handled for you - no need to manually change from data to SMS mode or anything.
2 more points:
iMessage allows you to SMS a "new" phone number for someone you've never encountered before, iMessage detects the phone number is "iMessage-able" and simply sends via data, no kind of handshake / friendship needs to be setup
and finally
There's no "online" status required of iMessage, you need not "log in" or always be set to online, it's an SMS app natively but you can communicate with people over data without them knowing you're necessarily "online"
The advantages as follows.
Cheapest possible was of conversing with friends (assuming your SMS plan is NOT unlimited, I'm in a country where it's pricey)
Privacy / "aloofness" - the lack of an online / offline requirement allows you to ignore a message and respond at your leisure, be it 5 minutes, 5 hours or 5 days. If someone however sees a green O next to your name with Hangouts, the social pressure / obligation to reply is there, you can't just relax if that makes sense (I guess this is an introvert feature)
Sorry for the long post but I'm hearing conflicting reports online that google STILL screwed it up - but that's from people who have obtained the Hangouts 2.0 APK file and do NOT have 4.4 KitKat, rumour has it that's required for the full backend SMS "engine" update to work like iMessage?
Thanks all, really appreciate your time.
EDIT: This also covers what I'm trying to clarify.
http://ausdroid.net/2013/11/01/down...mpaign=download-hangouts-with-sms-integration
The best person to answer those questions would be yourself...since it seems you have experience with iMessage whearas we just got the app.
wizzbang3 said:
I'm sorry to post a full newbie post here regarding this but I'm trying to settle some debate and confusion online about Hangouts 2.0
Basically has google "done it right" this time and copied iMessage? (No, I'm not an Apple fanboy)
The advantage of iMessage is that it defaults to data when possible, fallsback to SMS when it has to.
It's also completely seamless, this is handled for you - no need to manually change from data to SMS mode or anything.
2 more points:
iMessage allows you to SMS a "new" phone number for someone you've never encountered before, iMessage detects the phone number is "iMessage-able" and simply sends via data, no kind of handshake / friendship needs to be setup
and finally
There's no "online" status required of iMessage, you need not "log in" or always be set to online, it's an SMS app natively but you can communicate with people over data without them knowing you're necessarily "online"
The advantages as follows.
Cheapest possible was of conversing with friends (assuming your SMS plan is NOT unlimited, I'm in a country where it's pricey)
Privacy / "aloofness" - the lack of an online / offline requirement allows you to ignore a message and respond at your leisure, be it 5 minutes, 5 hours or 5 days. If someone however sees a green O next to your name with Hangouts, the social pressure / obligation to reply is there, you can't just relax if that makes sense (I guess this is an introvert feature)
Sorry for the long post but I'm hearing conflicting reports online that google STILL screwed it up - but that's from people who have obtained the Hangouts 2.0 APK file and do NOT have 4.4 KitKat, rumour has it that's required for the full backend SMS "engine" update to work like iMessage?
Thanks all, really appreciate your time.
EDIT: This also covers what I'm trying to clarify.
http://ausdroid.net/2013/11/01/down...mpaign=download-hangouts-with-sms-integration
Click to expand...
Click to collapse
Well first off, hangouts is still technically part google talk which was an online messaging service, so the online status will still be incorporated in the app unless they take the code out and re-do the app.
And iMessage probably had its advantages in the past when messaging plans weren't unlimited but doesn't have any advantages really unless you want to know who has an iPhone and who doesn't. And since I don't have kitkat I wouldn't know if it enhances hangouts or not!
Don't think google screwed up. They did exactly what they wanted to do.
Got 2.0.018 apk?
Sent from my SGH-T999 using xda app-developers app
Thanks bud! Works great over here
I installed the Hangouts 2.0 apk the other day on my Verizon S3 running 4.1.2 and it's working perfect except I am missing one person's contact picture. He has a picture in my contacts app. Anyone else run into this?
Is anyone group chatting with iPhone users? The main screen shows all participants, but in the chat thread all messages are showing one avatar / name.
Sent from my SGH-T999 using XDA Premium HD app
Thanks dudes!!
Sent from my SGH-T999 using xda app-developers app
Finally!!!!
Sent from my SGH-T999 using xda app-developers app
Works great. Thanks bunch :good:
Awesome, I need to d/l this when I get a chance.

Categories

Resources