Develop Bugs

HUGE security flaw

Anyone else uneasy that no matter what if someone finds your phone they can hook up to pc and have access to your internal storage?? Is there no way to change this and have a charge only option under usb?

If someone has your phone plugged into their computer, you either:
1) Are with them
2) Had your phone stolen.
If you have your phone stolen, there's nothing stopping them from battery pulling, going into recovery, and getting all your data from there (granted you're rooted).

Still ide rather not anyone including nosey friends get the pics of my ding dong off my phone with out my permission...
All kidding aside you see my point right

It's very simple, set a passcode and MTP does not show any data until the phone is unlocked.

beast67x said:
Still ide rather not anyone including nosey friends get the pics of my ding dong off my phone with out my permission...
All kidding aside you see my point right
Click to expand...
Click to collapse
I typically prefer nekkids of my gf on my phone vs sausage but to each their own

This is why you should likely have the ability to remote-wipe your device (via Software), and why you need to ponder very carefully what data you keep on your phone. The easiest way to avoid your friends finding pictures you'd rather they don't see is not to keep those pictures on your phone in the first place.
There are encryption-based Lockboxes which function on the Galaxy Nexus, and it does actually support Full-Disk encryption (with many bugs and downsides), but in short, you need to assume that anything on your phone is accessible to anybody who cares enough to take it from you. Remember, security never buys you safety against others getting your data, it just gives you time to respond before they can get access.

Wow how foolish of me. I totally didnt realize and i googled this an apparently no.one else did.either thanks

sluflyer06 said:
I typically prefer nekkids of my gf on my phone vs sausage but to each their own
Click to expand...
Click to collapse
Hahaha its my own sausage i swear.
Seriously though the guy above is correct. Locked my phone, plugged in, and no data shows.until i swipe and enter pin

There are also apps you can download to lock certain apps you don't want opened. (Gallery for instance)
I agree though, the safest and best bet is to set a password on your phone and be done with it!

beast67x said:
Hahaha its my own sausage i swear.
Seriously though the guy above is correct. Locked my phone, plugged in, and no data shows.until i swipe and enter pin
Click to expand...
Click to collapse
A setting for my Exchange server for my company that i work for reminds me each time setup my phone that they can remote wipe my phone. As can i From our Web Access portal for email. Just another option.
Will

Mine doesn't work that way.
I have a pattern set on my galaxy nexus. If I connect it to my computer the "internal storage" doesn't show up until I unlock the phone.
However, if you lost your phone, there are numerous ways to get your data. This applies to most phones out there
Sent from my Galaxy Nexus using XDA App

move the pics you don't want people to see into a hidden folder then they wont show up in the gallery

I have "gotya" installed. Not only will send me the gps location of my ohone command but also take a pic of the peraon using the phone when.an incorrect pin is entered. Screw wiping my phone ill just go get it myself

Absolute Protection?

Hello guys I would like to ask if there is any way to "disable" recovery flashing and wipe as well as the download mode in my new Note II. The reason is that I have installed cerberus and i would like to stop the thief from flashing another rom and loose protection. If there is not any way to disable it please tell me a way that will be very difficult to do so. Thanks in advance.

Nope ... just like Apple ... even with passcode lock someone can still restore stock using DFU mode(Apple) and Download mode(Samsung)
The passcode locks are to prevent your data at best not the phone

If i format the recovery partition? Or destroy some recovery files?

dont try to be foolish..dont meddle without proof............why are you so sure that your phone will get stolen?

download mode is 2 steps after phone boots.
1st - power is initialized and the super base of the phone calls boot loader
2nd- boot loader loads the download mode.
so it's absolute base.
if you disable download mode, you won't be able to root/unroot/your company won't be able to give you any service etc.
don't be assured that your phone will be lost.
rather setup mobile tracker, which may still be deleted if the thief is super intelligent to factory reset it.
if you are very freaking insane about this, embed the app into system. which may still be deleted.

:/
UtkarshGupta said:
download mode is 2 steps after phone boots.
1st - power is initialized and the super base of the phone calls boot loader
2nd- boot loader loads the download mode.
so it's absolute base.
if you disable download mode, you won't be able to root/unroot/your company won't be able to give you any service etc.
don't be assured that your phone will be lost.
rather setup mobile tracker, which may still be deleted if the thief is super intelligent to factory reset it.
if you are very freaking insane about this, embed the app into system. which may still be deleted.
Click to expand...
Click to collapse
I am almost sure that my phone will be stolen cause i am 16 years old and 2 of my friends' phones got stolen as well as my bike You will say "Why did you bought suck an expensive phone?". The answer is that i cannot live without high technology, as soon as there is a new exciting thing in the market i wanna buy it. Anyway, I hope that I will be lucky and if my phone get stolen, the thief will not be expert. I have cerberus, the hidden version.:good:

If that is the case you should get pink phones and insurance. Yeah it may suck having a pink phone and getting made fun of but less likely to be desirable. And then of course insurance to mitigate cost of replacements.
Sent from my GT-N7100

If you are American buy a gun and have it with you. If someone comes to rob you, just shoot the bastard.
Anyway. You can setup Cerberus to take photos with the front cam also.
Abd just do not sgow off with phone in hand in bad neighbourhoods
Sent from my GT-N7100 using xda premium

Go for "where's my droid" application
Inviato dal mio GT-N7100 con Tapatalk 2

In security settings, you can crypt your device and your external SD card, if your phone is stolen, no one can steal your data.
You have also a SamsungDive account to track and make your device ring, you need wifi or 3g activated in order for this function to work.
I agree that a password protected recovery is a very good idea.

Too bad that this thread doesn't generate more interest. All these "security" apps(find my droid/cerberus etc..) are basically useless as everybody who steals phones will wipe them right away. Having a password recovery and download mode would be the ultimate protection and could even discourage theft from attempting to steal.

Some security apps are stored in /system and survive a wipe (but not an ODIN flash).
Why no more interest in "absolute protection" :
- thieves won't give you back your phone even if it is unuseable, and they can still sell it for parts
- mess up, forget the password => brick
- whatever your local repair shop can do to restore your phone, bad guys can do it too
If you are so sure your phone will get stolen, get insurance.

Password protected CWM and TWRP

If your device gets stolen or lost it sure would be nice to have recovery password protected to stop a quick factory reset or rom flash.
Has anyone seen this done?
This could help preserve security software for as long as possible to assist in locating the phone
Having the Power Off/Reboot password protected could also buy some time if the back cover was glued on
I'm using cerberus but it didnt survive a dirty flash from jediX7.2 -----jediX8. This was with cerberus_disguised-ICS.zip rooted running in admin mode.
But none of this software will work if they pop the sim or batt out. Hence the glued on cover. But the power off/reboot would need to be password protected.
I can buy a new back cover for $10 after I break it to take it off. A lot more for a new phone.
Reason I bring this up, just yesterday my bud sat on a couch in a mall. Phone fell out there. Realized it 2min later and called his number but it was off already

I doubt it's possible to prevent thieves from using Odin anyway. There is a way to encrypt the phone to make one unable to enter recovery, at least it was on my sgs, but it still won't prevent the phone from being recognized on Odin.
Sent from my GT-N7100 using Tapatalk 2

In regards to your mates mobile if a factory reset was not done maybe he could try to install 'plan b' by lookout mobile security from the app store to locate his phone.
Sent from my GT-N7105 using xda premium

I've tried plan b on a note 2, S3 ,s2x and galaxy tab7. All installed remotely but none sent an email to me.(even with texting "locate") Thank you for the suggestion but not much faith in that one at this point. ( although we did send that app to his phone)

Never really thought of that... With all the security features that could be enabled on the OS it seems pretty easy to just access recovery mode and format. I figured it would've been figured out by now and a solution would've been available. would be nice to have an option to set a Security pin on the recovery and download mode. And that the only way to disable the security pin incase one forgets would be to add a secondary option to unlock.
Sent from the Rabbit Hole

One could still force the phone into download mode with a jig. No way to be 100 percent safe I'm afraid.
Sent from my GT-N7100 using Tapatalk 2

Not looking for 100% security. But something better than what is. When you lose the phone it is too easy to shut it off/ factory reset ect.
So I guess what I'm asking is more to the Devs...how hard would it be to password protect the off/recovey option switch in a custom rom? I'm sure the twrp/cwm guys could build a secure version.

Forgive me as I'm still new but is the CWM stored on the same chip as the ROM like on a PC?
Sent from the Rabbit Hole

[Q] I was stolen.. need information

Hi guys, not a good day, i really need information.
My phone was stolen yesterday, I had some serious private information on my phone, and im concerned.
Can the thief find a way to use my phone again? It has password to access it, so in theory, he wont use it. But if he find someone that can do something, is there a way?
My phone has cerberus, but aparently the guy turned the device off... or.. the sim card...
well im worried mainly because there was info open in my microsd card

Your phone is safe because he will or already factory reset to prevent tracking and removed the sim. You sd card is definitely in danger though.
Sent from my SAMSUNG-SGH-I317 using XDA Premium 4 mobile app

Android The Greek said:
Your phone is safe because he will or already factory reset to prevent tracking and removed the sim. You sd card is definitely in danger though.
Sent from my SAMSUNG-SGH-I317 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
how the hell will he do it without accessing the phone?
thanks

You do not need a phone to open a micro sd card. Just an adapter
Sent from my SAMSUNG-SGH-I317 using XDA Premium 4 mobile app

Android The Greek said:
You do not need a phone to open a micro sd card. Just an adapter
Sent from my SAMSUNG-SGH-I317 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
the factory reset i meant

That does not touch the micro sd
Sent from my SAMSUNG-SGH-I317 using XDA Premium 4 mobile app

you can do that/ factory reset by go to setting and tick factory reset. seriously most every phone has factory reset symbian,brew,android,unown chinese phone. it wipes data and restore the system as if it were new phone
---------- Post added at 08:45 PM ---------- Previous post was at 08:44 PM ----------
and you can go to recovery mode to wipe data and cache. or even install custom rom. in samsung by pressing vol up+power+menu in the same time

edgarzin said:
Hi guys, not a good day, i really need information.
My phone was stolen yesterday, I had some serious private information on my phone, and im concerned.
Can the thief find a way to use my phone again? It has password to access it, so in theory, he wont use it. But if he find someone that can do something, is there a way?
My phone has cerberus, but aparently the guy turned the device off... or.. the sim card...
well im worried mainly because there was info open in my microsd card
Click to expand...
Click to collapse
Your data is almost certainly compromised. As for your phone, make sure you report it stolen. Hopefully you live in one of the countries which respect the IMEI blacklist so the phone will be deactivated.

Android The Greek said:
Your phone is safe because he will or already factory reset to prevent tracking and removed the sim.
Click to expand...
Click to collapse
So you assume a thief or someone that finds a lost Android phone is also an enthusiast and aware of tracking mechanisms and ways to avoid them? I wouldn't make that assumption and would almost guarantee anyone who finds a lost/stolen phone that doesn't plan to return it is going to go through what's on it. Hopefully what's on OP's phone isn't too compromising.
FloatingFatMan said:
Your data is almost certainly compromised.
Click to expand...
Click to collapse
^^^^^
This.
Everyone should at a minimum register their Samsung phones with "Find my Mobile" as part of setting them up. If it's out of your possession, even before you decide it's really missing, you can lock it remotely which would prevent it from being hard reset as well as protect your personal information. It also displays a message on the locked home screen which can include a reward and allows the phone to dial out to one number you designate so the person who found it can call you. You can always unlock it if it's returned or do a complete wipe if it's not. Obviously it has to be on a mobile network (not necessarily yours) or Wi-Fi to continue to access it and it has to be charged.

Any data on the sd card will definitely be compromised. What's on the phone is hard to say. If they went into the stock recovery and did a hard reset then it's been wiped. This is the more likely scenario. If they know Android well they can flash a custom recovery and keep the internal data intact while resetting the phone but it's unlikely that a regular thief is going to do that. Most likely they'll just do a normal reset and either sell it or use it.
If you had rooted and installed Cerberus as a system app you'd still have some security under this scenario. It persists over hard resets so you'd still have some control over the device once it gets reconnected to the Internet. They'd have to flash a new firmware or specially delete cerberus from the system directory to get rid of it.
Sent from my GT-N7100

dr.m0x said:
If they know Android well...
Click to expand...
Click to collapse
What percentage of thieves do you think fall in to that category? I'd guess it's not the majority. We on XDA are kind of jaded when it comes to our views on technology in general. I'd bet less than 10% of my friends and acquaintances have the knowledge to hard reset an iOS or Android device unless told to do so by support staff.
In the U.S., a TV network did an expose on TSA (government airport security) workers stealing iPads from security check points. Even after is was on the national news how they used Apple's mobile tracking s/w to find the stolen iPads TSA workers continued to steal them and get caught exactly the same way. An XDA'r that steals phones has skills and knowledge that I'd bet the masses don't come anywhere close to.

dr.m0x said:
Any data on the sd card will definitely be compromised. What's on the phone is hard to say. If they went into the stock recovery and did a hard reset then it's been wiped. This is the more likely scenario. If they know Android well they can flash a custom recovery and keep the internal data intact while resetting the phone but it's unlikely that a regular thief is going to do that. Most likely they'll just do a normal reset and either sell it or use it.
If you had rooted and installed Cerberus as a system app you'd still have some security under this scenario. It persists over hard resets so you'd still have some control over the device once it gets reconnected to the Internet. They'd have to flash a new firmware or specially delete cerberus from the system directory to get rid of it.
Sent from my GT-N7100
Click to expand...
Click to collapse
You are saying that if my device was rooted cerberus would still installed, even after system wipe?

edgarzin said:
You are saying that if my device was rooted cerberus would still installed, even after system wipe?
Click to expand...
Click to collapse
Yes it would, provided it is installed to /system/app.
Sent from my GT-N7100

My friend is a police officer and he said that thieves have found a way to change IMEI. Im trying to track my phone by IMEI.. what are the chances these MF change the IMEI??

dr.m0x said:
Yes it would, provided it is installed to /system/app.
Sent from my GT-N7100
Click to expand...
Click to collapse
I must read XDA more !

edgarzin said:
I must read XDA more !
Click to expand...
Click to collapse
Avast Mobile Security is a free alternative.
Sent from my GT-N7100 using Tapatalk 4

edgarzin said:
Hi guys, not a good day, i really need information.
My phone was stolen yesterday, I had some serious private information on my phone, and im concerned.
Can the thief find a way to use my phone again? It has password to access it, so in theory, he wont use it. But if he find someone that can do something, is there a way?
My phone has cerberus, but aparently the guy turned the device off... or.. the sim card...
well im worried mainly because there was info open in my microsd card
Click to expand...
Click to collapse
If you have sensitive info on your phone and or sd card theres an option under settings/security to encrypt your device and external sd. The encryption will survive a no wipe flash which means it remains safe. If the scum theif wants to use your device he would have to do full wipe which would erase your sensitive data which means no access. This goes for your sd card aswell. You should also let your provider know your phones been stolen and let them block imei rendering the phone useless until with some slight luck you may get it back.
GT N7105 with XDA Premium......that is all......

amerkiller1995 said:
Avast Mobile Security is a free alternative.
Sent from my GT-N7100 using Tapatalk 4
Click to expand...
Click to collapse
Avast Anti-Theft just got an update. Now it has two versions Premium and Free
Premium version has some mind blowing features

[email protected] said:
Avast Anti-Theft just got an update. Now it has two versions Premium and Free
Premium version has some mind blowing features
Click to expand...
Click to collapse
Good thing is that the Premium features are new, all the free features remain free. :laugh:

Since the device is off use SMS commands instead of cerberusapp.com. That way if the sim is changed or when the thief starts up the phone you will be notified and/or will be able to wipe the internal and external storages.
Sent from my GT-N7105 using XDA Premium 4 mobile app

permanent pin locked screen

I need some technical help as I have a really weird problem with my zenfone 2. A couple of weeks ago I bought some skype credit and made a phone call. For some ungodly reason right after this call there was a pin screen in place, with no warning or messages. I tried to put in several pin numbers as I thought it was a sim lock but nothing could get past the lock. I tried putting in 5 wrong codes in the hope to see a "forget password" button but nothing. I tried resetting the lock via google device manager and it says that it can't since a screenlock is present and will not reset the pin. I have even tried to get into recovery mode so that I can do a factory reset but at this stage I get an "error" here so this avenue is also blocked. I have even attached the phone via usb to the computer but the computer sees and empty hard disk. I have even tried to use adb to take a look inside, but this did not work either as the device is not seen. I have also tried rebooting in safe mode but the screen lock behaviour is just the same. . At the moment the wifi is also off so now google device manager can not locate the phone So at the moment I am out of ideas. I am now inclined to believe that my phone has been hijacked by some sort of new yet super sophisticated lockware/malware.
I have already accepted that all our family photos including the ones from our recent holiday are permanently gone for good with no chance in hell of recovering them.
Does anyone have any ideas to get around this annoying problem?
So what are my options? Is there any software that I can use to break this beasts back? Do you have any suggestions?

http://forum.xda-developers.com/showthread.php?t=3316831
Try this it might work
Sent from my ASUS_Z00AD using Tapatalk

Thanks ... where is the original article as how to use this ...

niannella said:
Thanks ... where is the original article as how to use this ...
Click to expand...
Click to collapse
Just flash it in recovery
Sent from my ASUS_Z00AD using Tapatalk