Develop Bugs

grack warns Google and Sprint about EVO security hole

Grack is reporting that holes in Sense have made it ridiculously easy for any app to escalate itself to root. He notes in the post that "both Google and Sprint have been very proactive in plugging this hole." He also notes that, while he will be releasing his rooter tomorrow, he won't be explaining it for a week. This makes me wonder if there's an OTA in the works that will close at least his vulnerability in the meantime.

theillustratedlife said:
Grack is reporting that holes in Sense have made it ridiculously easy for any app to escalate itself to root. He notes in the post that "both Google and Sprint have been very proactive in plugging this hole." He also notes that, while he will be releasing his rooter tomorrow, he won't be explaining it for a week. This makes me wonder if there's an OTA in the works that will close at least his vulnerability in the meantime.
Click to expand...
Click to collapse
wow, this sounds like a serious security flaw. i'd prefer not to see a worm or malicious 3rd party app gaining root access through poorly coded HTC sense apps.
dont think it will remove NAND protection of /system in normal android mode.
it will provide an alternate way to achieving root access in normal android mode besides loading Flipz ROM.
wonder if removing all sense related software will remove this exploit?
guess we'll be able to start testing tomorrow...

joeykrim said:
wow, this sounds serious.
wonder if removing all sense related software will remove this exploit?
guess we'll be able to start testing tomorrow...
Click to expand...
Click to collapse
That's a good point, I guess AOSP 2.1 doesn't have this problem since he says its due to Sprint's additions.

Has HTC / Sprint ever been fast at rolling out an update?
I wouldn't worry, maybe an OTA months down the road, but I wouldn't count on anything within weeks...

The last Sprint phone I had was a RAZR, so I'm a bad source as to their history of timeliness; however, I wouldn't be surprised if they had a different strategy for pushing out a critical security patch than they would for a new system build.
They don't have to rewrite thousands of files against a new trunk build, bounce it between vendors, run extensive Android compatibility suites, etc. It's quite possible they have a few relatively simple changes to make to close grack's hole.

i bet they will patch it when they patch the tethering so that you have to pay for it. some time in july

there will be an update tomorrow. dont know the change log.......

so is it better to root or not to?

lawl
10 char

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Wow, you had to dig up this thread over a year old just to post "lawl". I'm proud

Usually I hate resurrected threads, but this one deserves a second look.
At this point should we continue to wait for 2.3 root, or build a time machine to prevent the update from being rolled out?

Actually, yeah, this is definitely something worth looking at.
If the exploit still exists, it might be able to get root for people on the OG Evo 2.3.
Anyone look (like teamwin) look into this yet?

github said:
Wow, you had to dig up this thread over a year old just to post "lawl". I'm proud
Click to expand...
Click to collapse
Lmao I just hit the last page button
Sent from my PC36100 using XDA Premium App

Nick N said:
Usually I hate resurrected threads, but this one deserves a second look.
At this point should we continue to wait for 2.3 root, or build a time machine to prevent the update from being rolled out?
Click to expand...
Click to collapse
MultiDev said:
Actually, yeah, this is definitely something worth looking at.
If the exploit still exists, it might be able to get root for people on the OG Evo 2.3.
Anyone look (like teamwin) look into this yet?
Click to expand...
Click to collapse
Nope, sorry, this was right after the phone was released and long been fixed. All those with the original stock 2.3 are still SOL for now.

[Q] Galaxy s3 rom to our hox?

Can someone port galaxy s3 rom to our hox?
I would love to have to my hox the tricks like s-voice, smart stay, watch a movie while sending a sms, call when you put the phone to the ear, screen capture gesture, shake to refresh etc.
It is possible?
Or if you can't the entire rom it is possible only the apk's? touchwiz 5 too pls
Sorry for my bad english

This is what you make me thinking...
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Edit: Also, the S3 sucks.

Fightspit said:
This is what you make me thinking...
Edit: Also, the S3 sucks.
Click to expand...
Click to collapse

I think you had to wait for the S3 instead of buying a HOX

i know it suck's but the trick's are cool, i like very much the hox, i am htc fan, but i like the s3 trick's too!

This needs to be asked in the general forum.

the video thing can be done with stickit btw

TouchWiz on my HTC?!? Never! I just came from a Galaxy S2 and TW always sucked...
And that gif animation just made my day

i know but now looks great, anyway for "stick it" and share if you know other apps like this!

That .gif is superb. Funny as eff

this poster is an idiot if he wants touchwiz on the htc!! IT SUCKS

TW instead of Sense?NOOOOO WAAAAY dude.

mox123 said:
this poster is an idiot if he wants touchwiz on the htc!! IT SUCKS
Click to expand...
Click to collapse
no need for that. would i say you are an idiot if you wanted Sense on a sammy phone? no i would not cause it is all about respect. so what if the OP wants TW on HTC..it is his right to ask since we are a community. if it is a stupid request just ignore it..or report that it is a pointless thread and see what the mods would do with it my friend..

Wtf? He was not speaking about TW instead Sense.. he was speaking about software tweaks like S-Voice etc. I would like to watch videos on background too. I want this new things implement to Rom with Sense.. why is it bad idea?

dragosh12 said:
Can someone port galaxy s3 rom to our hox?
I would love to have to my hox the tricks like s-voice, smart stay, watch a movie while sending a sms, call when you put the phone to the ear, screen capture gesture, shake to refresh etc.
It is possible?
Or if you can't the entire rom it is possible only the apk's? touchwiz 5 too pls
Sorry for my bad english
Click to expand...
Click to collapse
Samsung wouldn't be happy about this, the same way google isn't happy to have google apps around in some non google devices (or roms like CM)
Porting apks proabably wouldnt work because you should need the whole TW framework for that.
If you really wanted these features on your phone you should probably get a S3 and try for a few days.
IMHO, they are more gimmicks than anything useful (like face unlock - cool but meh...)

9/10 of those tricks won't be used on a daily.. How many iPhone users you know use Siri without showing off? and on a daily base? How many people actually use their front facing camera on a daily? or even want to use the crappy VGA camera..
i don't even use half of HTC Sense features.. besides friendstream just to post to all my social networks and the camera burst feature..

Why did you need to create 2 same threads 1 minute apart...
http://forum.xda-developers.com/showthread.php?t=1659042

How is stick it working for you? Any glitches? I saw one of ther reviews on the market saying that there's distortions at some point.
lawrence750 said:
the video thing can be done with stickit btw
Click to expand...
Click to collapse

gwuhua1984 said:
How is stick it working for you? Any glitches? I saw one of ther reviews on the market saying that there's distortions at some point.
Click to expand...
Click to collapse
Works great for me.
Sent from my HTC One X using xda premium

don't get stick it its bad i mean you cant even put it o corners all the way use super video its free but it doesn't support streaming

[Q] upgradeability ,text sharpness and screen burn in?

hi,
as someone who wants to finally board the android train, and is particulary impressed by the note's concept, i was waiting for thw GN2 to be avilablele, but i have a few questions:
1. i intend to use my next device for approximately 2-3 years. i've read here about concerns regarding the GN2's "outdated" hardware. normally it wouldn't bother me, but it's my understanding that the A15 is a huge leap forward, and in light of HTC's announcement about updating only to 2012 devices, i wonder if the A15's could become the new standard and when key lime pie (or the next one) comes, it would be too demanding in samsung's eyes and it won't be officially supported. in addition, some devs. dropping development for exynous based phones combined with the fact that afaik, CM doesn't support the s-pen's features (which are a main part of why i chose this device) may leave it behind for me. is it reasonale to expect at least 2 years of support by samsung?
2. has anyone used the handwriting recognition to solve math problems (i.e. infinitisimal calculus)? does it work well?
3. how much time can i keep the screen on wih a still background before i risk screen burn in?
4. does the screen appear not so sharp while viewing text, due to the somewhat low pixel density?
5. i've read here a comment about the note 3 supposedly released on march 2013. is that a popular\ reasonable opinion?
thanks a lot for the patience reading this post, and in advance for your much needed help!!

Two years of support will definitely happen. The old Note 1 is still getting updates, and recently includes the multi-tasking sidebar.
I've used the handwriting with equation inputs. It does not solve calculus for you. You just get to input it.
Not sure about burn in. But on HDAMOLED screens. I've heard upwards of 2 years on moderate usage.
The PPI thing is personal preference. I came from iPhone 4, and while the Note 2 PPI is lower. It does make up with its monster display.
Note 3 rumours need to be taken with a pinch of salt. I don't see it happening. Although anything can happen. There are credible reports of Apple releasing i5S as soon as feb or march.

I can only comment on text sharpness. And in my opinion it is perfectly fine. Words still look great when zoomed in etc. All the round letters look round abd not jagged
Sent from my GT-N7100 using xda premium

AjunNg said:
Two years of support will definitely happen. The old Note 1 is still getting updates, and recently includes the multi-tasking sidebar.
Click to expand...
Click to collapse
that's very reassuring. does "support" usually mean implimentation of certain features or the full ver. of android?
AjunNg said:
I've used the handwriting with equation inputs. It does not solve calculus for you. You just get to input it.
Click to expand...
Click to collapse
i read about the partnership with wolfram alpha, since i check many of my results on their site and given the note's ability to recognize handwriting, i thought it would save me a lot of time. is it not possible or did you not try it on wolfram alpha?

a-a said:
that's very reassuring. does "support" usually mean implimentation of certain features or the full ver. of android?
i read about the partnership with wolfram alpha, since i check many of my results on their site and given the note's ability to recognize handwriting, i thought it would save me a lot of time. is it not possible or did you not try it on wolfram alpha?
Click to expand...
Click to collapse
full version of android. seems like my old galaxy s2 will still receive full jelly bean even though it is 1 1/2 years old. Samsung is actually quite good with updates compared to other oems (except google and apple of course)
I used s note with wolfram alpha a little. It does work flawlessly for what I tried. Didn't try it excessively though.

lolmensch said:
I used s note with wolfram alpha a little. It does work flawlessly for what I tried. Didn't try it excessively though.
Click to expand...
Click to collapse
thanks for the rapid responses!
since it's pretty much why i need the s pen, can anyone with n7100 try to write some short random integral/ derivative with Exponentiation with the s-pen to see if wolfram can use it? it would erase every shred of doubt i have, and assert this phone as the chosen one..

a-a said:
thanks for the rapid responses!
since it's pretty much why i need the s pen, can anyone with n7100 try to write some short random integral/ derivative with Exponentiation with the s-pen to see if wolfram can use it? it would erase every shred of doubt i have, and assert this phone as the chosen one..
Click to expand...
Click to collapse
Seems to work just fine.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

thanks! the recognition works really well.. where can i see the solution?

a-a said:
thanks! the recognition works really well.. where can i see the solution?
Click to expand...
Click to collapse
The search button (the one with the questionmark) takes you to the solution at wolfram alpha.

[Q] 50 mpx port

So, there is this superzoom feature, wich let's you take 50 mpx shots with an 13 mpx shooter. It would be nice to see the feature ported to other devices
with 13mpx camera (just like my G2).
What do you think, is there any chance?
Here are some samples:
http://www.androidauthority.com/oppo-find-7-50mp-camera-samples-359680/
Sent from my LG-D802 using xda app

If it was that easy, an APK would already be available..
I guess it's not just a pure SW thing but there is a HW requirement for it to work.

andriman said:
If it was that easy, an APK would already be available..
I guess it's not just a pure SW thing but there is a HW requirement for it to work.
Click to expand...
Click to collapse
Well, i'm not sure... There is a lot of sw thing that createdd by OEMs and pretty useful... Multiwindow, bubble-like chathead (and now there is linkbubble, callbubble, etc...)
But this must be some deeply integrated s**t, because the Find7 has some kind of RAW support. Android doesn't have any raw API (jet)...
So who knows? Maybe the apk and some xposed magic together could suprise us (i'm not a feveloper, just wondering)
Sent from my LG-D802 using xda app-developers app

Dewsy said:
Well, i'm not sure... There is a lot of sw thing that createdd by OEMs and pretty useful... Multiwindow, bubble-like chathead (and now there is linkbubble, callbubble, etc...)
But this must be some deeply integrated s**t, because the Find7 has some kind of RAW support. Android doesn't have any raw API (jet)...
So who knows? Maybe the apk and some xposed magic together could suprise us (i'm not a feveloper, just wondering)
Sent from my LG-D802 using xda app-developers app
Click to expand...
Click to collapse
Android 4.4 does have raw support, albeit not officially, as documented on many articles regarding the 4.4 code commits. But I do agree, there must be a bit more going on under the surface since it is shipping with Android 4.3 based ColorOS which doesn't have RAW support. The source code for ColorOS is hosted on github, it appears, so it should be as simple as compiling. I am honestly torn between getting the Find7 and the Sony Xperia Z2. I'm using a Moto G until I can decide/they are released stateside.

In case if you are a developer intrested in this, from here you can download the Find7 frimware (wich contains somewhere the RAW support and the 50mpx feature. Good luck, and may the force be with you
http://www.oppoforums.com/threads/oppo-find-7-x9007-fhd-firmware-x9007_12_a-03_140318.10426/
Sent from my LG-D802 using xda app-developers app

Looks like the image processor makes the magic with the 50mpx... so it's a hw thing after all....
Sent from my LG-D802 using xda app-developers app

It would be nice to see the software improves before porting, such as 50mpx raw then bring it down to a comfortable size like 2-3 mb, also not only 50mpx with the 13mb, but also the lower resolution mb too, so we can get best pics at a smaller size that way too.

I don't know how they do it, the 50MP pic's have much more details rather then up-scaled 13MP pic.
I did some testing from some review sampes
Look :
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

They are not scaled, they are taking multiple pictures and combining them. This can be seen in one of the YouTube videos where the shots are shown to take several seconds to get per shot. I'd link but YouTube is blocked on this router. Should be easy to find as it came up on my first page of results when searching "oppo find seven" and includes an unboxing. It wasn't there the last time I looked so you folks that haven't looked recently you my want to take a peek as it includes a look at several of these pictures and clearly shows the (IMO) amazing detail these shots produce. I had thought this would be a bit of gimmick for the bullet point wars but this is actually an impressive piece of work.

Yes, it's combined from 4 shots. Actually, the decice shoots 10 picture, then chooses the 4 best of them, and then combines the 4 13mpx picture into one bigass poc. The only problem (for porting this) that all of these steps are made by a dedicated image processor, wich is a chip build in. So you have two options:
A - simulate the entire IP
B - Don't port the 50 mpx fearure
Sent from my LG-D802

This tech is by Almalence and has existed for awhile now, more information about it here
This tech is also possible on a Galaxy nexus, no reason why it cant be ported.
However, getting the source code and getting it to work on another device is difficult.
Who would have the time and knowhow to do so? (*super ultrapixel wink wink)

any news on a port?

triavq said:
any news on a port?
Click to expand...
Click to collapse
Nothin'. I just started this tread, but without a developer...
Sent from my LG-D802 using xda app-developers app

OnePlus One can do the same (50 MPx photo)

I also read somewhere that the 1+ one is equipped with Oppo's ColorOD in chinese version. So propably it will work with CM11s vice versa

Dewsy said:
Nothin'. I just started this tread, but without a developer...
Sent from my LG-D802 using xda app-developers app
Click to expand...
Click to collapse
Maybe try posting in the general Android application section?

triavq said:
Maybe try posting in the general Android application section?
Click to expand...
Click to collapse
Good idea, i've posted it:
http://forum.xda-developers.com/showthread.php?p=52154614
Please consider this topic as closed

Dewsy said:
Good idea, i've posted it:
http://forum.xda-developers.com/showthread.php?p=52154614
Please consider this topic as closed
Click to expand...
Click to collapse
How to zoom in in the stock camera ?

mmmanuuu said:
How to zoom in in the stock camera ?
Click to expand...
Click to collapse
Stock phone cameras doesn't have zoom (unless you have an S4 zoom or a Galaxy K Zoom)

Dewsy said:
Stock phone cameras doesn't have zoom (unless you have an S4 zoom or a Galaxy K Zoom)
Click to expand...
Click to collapse
I had it in my old note 2. You can zoom in with the help of volume up button. Almost all phones got it

Sprint V50 Android 10 update just landed

Didn't expect to see it this soon after the beta reports, which were not numerous.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

i got it too, very smooth

Got it, but having a problem with no data,. Great

Got it today. Noticed that I can no longer record in anything above 1080p on the camera though, and the new camera UI (specifically switching between the 3 cameras) is worse.
Edit: I am dumb lol. It defaulted to AI cam mode. That is why everything was different. Well, even in regular photo mode, the 3 camera switching is still worse (one button that cycles through them all, instead of being able to tap the one you want out of all 3 like before).

Yes It's amazing, even if a very similar to Samsung . Today I got the update​
---------- Post added at 05:47 AM ---------- Previous post was at 05:45 AM ----------
CCL X10 said:
Got it today. Noticed that I can no longer record in anything above 1080p on the camera though, and the new camera UI (specifically switching between the 3 cameras) is worse.
Edit: I am dumb lol. It defaulted to AI cam mode. That is why everything was different. Well, even in regular photo mode, the 3 camera switching is still worse (one button that cycles through them all, instead of being able to tap the one you want out of all 3 like before).
Click to expand...
Click to collapse
You can press and hold the button and move left or right is much better than touching the trees. :RE

CCL X10 said:
... Well, even in regular photo mode, the 3 camera switching is still worse (one button that cycles through them all, instead of being able to tap the one you want out of all 3 like before).
Click to expand...
Click to collapse
Yeah not a fan of that, because I have to cycle through them to be sure what it is currently set to.

It comes down to opinion!
So far so good. I'm enjoying the Android 10 update! I think think opinions on the new camera overpay are gonna be widespread (I personally like it), but can totally understand where others wouldn't. I have a question I thought I'd throw out there cuz I have not seen any info about it. is the Sprint variant Lg v50 dual screen recognizable after the update? That the one thing I was hoping for in the update so if anybody knows, id love to know, thank you

Been having issues with the alarm app. Seems like when the alarm goes off I see no notification and the screen remains on the home screen instead of showing the alarm screen to snooze.

CCL X10 said:
Got it today. Noticed that I can no longer record in anything above 1080p on the camera though, and the new camera UI (specifically switching between the 3 cameras) is worse.
Edit: I am dumb lol. It defaulted to AI cam mode. That is why everything was different. Well, even in regular photo mode, the 3 camera switching is still worse (one button that cycles through them all, instead of being able to tap the one you want out of all 3 like before).
Click to expand...
Click to collapse
I hate this camera. Takes 2 clicks to start a video recording. Super crappy. I tried installing an old apk of our old camera app and it failed. Anyone know how to uninstall the old carmera apk? Thanks.

Agree. Old camera was truly amazing and the best camera app on the world. New one is similar to Apple camera which is inversed version of amazing. I can't understand why all Android manufacturers copy Apple. If I would buy iPhone I will buy genuine iPhone from China. I bought v50 because I preferred Android experience from LG. If all Android manufacturers will keep copy Apple more and more I don't see any reason to buy poor copy of iPhone instead of proper genuine iPhone. Fakes should be at least half cheaper otherwise there is no worth loose money on that products. I believe if Apple will announce smartphone without wifi all chinese manufacturers will release asap their smartphones with blocked wifi in soc. It's externally silly unfortunately truly enough.

hey does anyoine know how i can sideload this update? i have the leaked version, which isnt stable. i need to update but not sure how

mendel770 said:
hey does anyoine know how i can sideload this update? i have the leaked version, which isnt stable. i need to update but not sure how
Click to expand...
Click to collapse
Downgrade using my guide first and then ota update

antintin said:
Downgrade using my guide first and then ota update
Click to expand...
Click to collapse
Any chance you can post the OTA file?

New camera app is really terrible. Any solution or workaround how to revert old camera app?

Hi, my sprint lg v50 was lagging and decided to restart it to refresh it but it's now stuck on 5g logo screen yesterday. I just found out this morning that there is a March ota update and not sure if it was trying to download as I was restarting my phone. I believe maybe the OTA update soft bricked my phone to where it's stuck on logo screen. I am able to access recovery mode, but see no wipe cache partition. So now I'm hoping I can "re-update" the previous security patch to get my phone running again without losing data. I checked my SD card, but it hasn't saved my recent work which is crucial.