Develop Bugs

[Q] about verizon roaming message

Quick question,
I have had my phone rooted for several months now. Ever since I rooted though, I always got the "Verizon wireless can not authenticate your phone" message when roaming. This has not been a big deal until now.
I have already spent a lot of time with sprint support on the phone and at the store, and they actually are just giving me a new phone, so the problem is solved.
MY actual question is, are people still having this issue happen when they root their newer phones? I ask because I would like to root my new phone, but not sure if I want to chance it messing up my roaming again.

Yea, it happens, but you don't need a new phone as the fix is really easy.
Call Sprint support and have them reset your profile on their server. They will put you on hold for a minute while they do that. Then they will have you remove your battery for one minute (the tech gal I had actually timed it and told me when to put the battery back in). Then you will be good to go.
Note-I don't know why this is, but it took me about 15 minutes talking to convince the tech support gal to do it, but once she did it roaming works fine again.
You can download the "Roam Control" app from the market, which allows you to force roaming to check if it works, paid app, but it is cheap. I just told the tech support girl that their was a spot in my house behind a metal shed that I get roaming when I checked it (important because she wasn't willing to do anything unless I was currently in a roaming area, and I didn't think it was prudent to tell here I was using Roam control).

Well, they gave me a new MSID witch did not fix the issue. After about another 45 minutes of trying things, she transfered me to account services and they said that they would just replace the phone.
I do not roam very often at all, so I said okay.
I saved my nandroid backups and everything for if I re-root. I just wasnt sure if this was an issue people were still getting with their new phones or not.

I could really use some advice from a technical standpoint please

Hi everyone. I recently got a T989 from Telus, to which I used an Ebay unlocked. Now first things first....I have never had my email account or any account hacked. My computers in my home are virus free, so I have eliminated them. Within a week of using my T989 with Mobilicity, my gmail account (which my phone knows the password to) was hacked and logged in by someone in the U.S (Gmail shows IP logins) and they spammed my entire contact list. Now I am trying to think of ways this could have happened, but I honestly think the phone may have a keylogger or something on it.
Here are the steps they had me carry out (and it did unlock the phone immediately).
Download and install necessary files
http://www.UnlockClient.com/SAMSUNG_USB_Driver.exe
http://www.UnlockClient.com/dotNetFx40_Full_setup.exe
Very simple procedure:
1. Enter your paypal email or start in demo mode
2. Type *#7284# and select USB - Modem
3. Type *#9090# and select [1] USB
4. Exit service menu and reboot the phone
5. Once phone rebooted connect the phone and computer
6. Wait until all drivers are installed
7. Click "Unlock" button
8. Enter 00000000
Here is the auction for this unlock I got. http://www.ebay.ca/itm/280852210909?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1497.l2649
Is there anything there that I should worry about? Or is there any possibility they have someone routed everything I do on my phone through them? I am seriously worried about my online banking information and such. Thank you very much in advance.

not sure if serious?
- taz b.

Why wouldn't I be serious? Isn't this a legitimate conclusion? I don't have a lot of posts but I have been lurking for years. I am serious however.

Unlocking phone is really a matter of entering a simple code in one step. All your steps there including entering your PayPal account, connecting USB?? and installing drivers are unneccesary and sketchy at best.
I've seen some reputable phone unlocking sites but definitely never seen something like that from eBay.
If I were you I would try a darkside full wipe and go back to whatever was at a safe state before.
Sent from my SAMSUNG-SGH-T989 using XDA

Oh I have wiped many times. The problem is that I don't think any of that wipe stuff will go back to factory settings in those *# menus or for the modem settings etc.
I know an unlock code is all that is needed, but I bought from a website that couldn't find the code. This one offered and instant unlock by a program (like the ones shops use) to unlock.
I am also not dumb, the paypal account doesn't require a password or anything it is just a way to identify your keys.

wy2sl0 said:
Oh I have wiped many times. The problem is that I don't think any of that wipe stuff will go back to factory settings in those *# menus or for the modem settings etc.
I know an unlock code is all that is needed, but I bought from a website that couldn't find the code. This one offered and instant unlock by a program (like the ones shops use) to unlock.
I am also not dumb, the paypal account doesn't require a password or anything it is just a way to identify your keys.
Click to expand...
Click to collapse
And did you test your phone with a different sim card? Everything is functional?
As far as I know, the legitimate way and the only way to unlock a phone is through the codes generated by the datebase. All the reputable sites that unlock phones that I know of, all use codes to unlock. When I had bought my telus g2sx the store unlocked it using the code.

Something like a keylogger would be app level, not modem info or hardware level. Also, something transmitting every keystroke would use a LOT of data and battery.
First thing I would do, personally, is check my battery stats to see if any app was using a suspicious amount of battery.
In my opinion, it wouldn't make sense for a company who already got your money for an unlock service to install a key logger to spam your Gmail contacts.
Just my two cents. It would take a tremendous amount of technology to track everyone who used the service. Not to mention man hours in sifting through collected data.
Check the battery stats. Settings>About Phone>Battery Use.
Hope this helps in any way. Hacked accounts are always a bummer man.

Wierd, I used that site a week or two ago and nothing like that happened to me. Makes me worried now.
I didn't use ebay though, I did it directly from the site. You could always re-flash your phone to stock then update it, that would eliminate any possibility of odd software.

In step 1, did you run a program on your computer, on the phone or both?

anomy13 said:
Unlocking phone is really a matter of entering a simple code in one step. All your steps there including entering your PayPal account, connecting USB?? and installing drivers are unneccesary and sketchy at best.
I've seen some reputable phone unlocking sites but definitely never seen something like that from eBay.
If I were you I would try a darkside full wipe and go back to whatever was at a safe state before.
Sent from my SAMSUNG-SGH-T989 using XDA
Click to expand...
Click to collapse
If you want your phone as clean as possible then do this in recovery
go to mounts and storage format /data format /system format /cache format/emmc. Then flash the super wipe followed by the rom but remember doing it this way deletes everything from your phone.
Sent from my SGH-T989 using Tapatalk 2

probably had nothing to do with the unlock, but more likely you had soem one arp attack your wifi on an open hotspot and they just nabbed your password.
I fiddle with this in coffee shops all the time and i always leave with a list of facebook, youtube, gmail hotmail and other passwords.
I'm not a spammer, i just like to see how insecure things are and if any one is intelligent to use ssl... even though ssl can be stripped from a packet now lol

-Mr. X- said:
probably had nothing to do with the unlock, but more likely you had soem one arp attack your wifi on an open hotspot and they just nabbed your password.
I fiddle with this in coffee shops all the time and i always leave with a list of facebook, youtube, gmail hotmail and other passwords.
Click to expand...
Click to collapse
Isn't GMail SSL now?

Joe USer said:
Isn't GMail SSL now?
Click to expand...
Click to collapse
and ssl can be stripped from packets now. Intercept the packet and then use it to sign in. then profit.
an app to play with if you want to try it out for your self is faceniff for andorid.

-Mr. X- said:
probably had nothing to do with the unlock, but more likely you had soem one arp attack your wifi on an open hotspot and they just nabbed your password.
I fiddle with this in coffee shops all the time and i always leave with a list of facebook, youtube, gmail hotmail and other passwords.
I'm not a spammer, i just like to see how insecure things are and if any one is intelligent to use ssl... even though ssl can be stripped from a packet now lol
Click to expand...
Click to collapse
Any recommendations to protect yourself then?
sent from the darkside of the galaxy

Z-Man™ said:
Any recommendations to protect yourself then?
sent from the darkside of the galaxy
Click to expand...
Click to collapse
dont use open hotspots at coffee shops and stuff like that. look for the shady nerd in the corner, and i think there is an app that can detect if your wifi is being arp spoofed.
https://play.google.com/store/apps/details?id=com.gurkedev.wifiprotector&hl=en
i think there may be free ones too, i dont know. but that app will detect if your being attack by a man in the middle/arp spoofing

I don't use Wi-Fi hotspots since I have unlimited data on my phone. I really don't understand how this could've happened.

wy2sl0 said:
I don't use Wi-Fi hotspots since I have unlimited data on my phone. I really don't understand how this could've happened.
Click to expand...
Click to collapse
its not just your phone that is at risk for these attacks. anything you sign on with is if some one does the man in the middle attack, among other attacks.
Other reasons besides your phone unlocking are the root cause of your issue. It's unfortunate none the less but man in the middle password sniffing and fishing are the leading causes i see at work for your spamming hijacking. i work with this stuff daily.

wy2sl0 said:
I don't use Wi-Fi hotspots since I have unlimited data on my phone. I really don't understand how this could've happened.
Click to expand...
Click to collapse
Did you ever figured out if unlockclient.com had injected some malware in your device.
Has anyone on this site had problem with them or any developper had a chance to check what they are doing ?

[Q] Is our information really secure from theft?

If you are like me, you should have all your favorite apps, documents, pictures etc. stored right on your phone that basically gives a full picture of who you are as an individual. You also have been pretty satisfied with the pattern, pin number, password or face unlock or all of these together as a security you have in place to prevent unauthorized access. But here is something that happened by accident that led me down this thought process. While trying to yank out the phone from my pocket while driving (which when you are getting a phone call especially becomes the most impossible task), I noticed that the phone "Power Down", "Restart", "Airplane Mode" pop up was on. This is on top of my regular swipe to unlock with pin number lock screen. This made me curious and noticed that the back button will work to close this pop up and also the power button works to reactivate this pop up. I hope everyone is with me till here. What surprised me was that the phone will actually turn off or restart from this point without the need for an unlock code. This means anyone with rooting and backup knowledge can steal my phone, restart my phone into recovery and wipe it to make the phone their own or just create a backup (CWM) and through that access my personal information. I know that photos and documents stored on the external card is open unless encrypted. But I hoped the internal data would be secure.
What do you guys think about this? Is there any app that would prevent access to the phone while locked via hard keys? What do you do to keep your information safe?

TL;DR version
If phone is stolen and person has knowledge of android they can factory reset your phone, even if you have a password setup. If they enter recovery they can wipe data and factory reset your phone and now it is usable for them.
My theory if you have your phone rooted I wish there was a way to lock the recovery with a password. Unfortunately ODIN will always be available able to get back to stock. Cerberus is a great app to have full control of phone if stolen FYI

DesperateScorpion151 said:
What do you guys think about this? Is there any app that would prevent access to the phone while locked via hard keys? What do you do to keep your information safe?
Click to expand...
Click to collapse
As soon as I realize it is missing I would activate the wipe feature in this software.
https://play.google.com/store/apps/details?id=com.lookout&hl=en
If I have your phone in my possession I guarantee I can hack it regardless of any security measure you make take, so the best solution is to be able to wipe it remotely.

technically even a remote wipe is not enough if the thief is knowledgeable. I accidentally wiped flashing in Odin with nand erase checkd and recovered everything that was on it using this
http://forum.xda-developers.com/showthread.php?t=1994705 so your never completely safe

Exactly my point like everyone else confirms it here. We have advanced so much to a point that even a 9 year old (not that 9 is too young to know computer basics) who is familiar with basics on rooting after reading through forums after forums can get away with stealing a smart phone now a days. At this point the only way I could think of protecting my data (first priority) and then track my phone is if the tracker is incorporated into the boot loader or recovery itself on top of what ever software you have installed in the OS. So if the thief tries to unlock my phone after a restart, the installed software should take care of the rest but If he/she is smart enough to go via boot loader or recovery then the incorporated tracker can do its thing. Anything of that sort exists?

Did you forget you could just pull the battery to get into recovery?

Why do you need to pull the battery?

Aerowinder said:
Why do you need to pull the battery?
Click to expand...
Click to collapse
You don't, but its easier than going through all of the steps OP posted.

I really doubt my data is worth anything. Pictures of my cats aren't exactly hot commodities and I don't store anything on my phone that I wouldn't publicly reveal, anyway.
I wouldn't be worried about my worthless information, just annoyed I was dumb enough to let it get stolen. Yeah, I know that basically anyone with half a brain can wipe a phone and re-sell it - it always amazes me when people think that thieves aren't smart enough to do that.
I'm cynical. Saves a lot of worry since I just expect the worst, I guess.

They get into your email where it may be more info to compromise.
Sent from my SGH-T999 using xda app-developers app

I would be less worried about the minute possibility of a phone thief targeting your personal information than I would be about your personal data being mined from your phone by numerous applications.
Bottom line is, if you use Google or Facebook, you personal information is already in the hands of giant corporations who will never be held accountable for the theft of your personal info.
Take Facebook for example - within the app, the only time it should ever ping your location is if you are using FB chat and have the location setting enabled. However, even when you disable location within FB chat, every single time you open Facebook it uses your GPS to get your location. Every time.
In addition, although you are unable to see it in action because there is no notification icon for it, I would bet a million bucks it's also pulling your network location if your GPS is off.
Facebook is constantly working in the background - even if you never opened it.
Google? I won't even begin to try and explain the amount of data they are collecting from you. As is T-Mobile, Sprint, Verizon, ATT, etc. every single second that your phone is on with data enabled.
Should we be concerned with some random thief who knows the ins and outs of Android pulling your data? Sure, we should think about it. But the reality is, if you own a smart phone your information is already out there in the hands of companies who will use it to any end they can in order to turn a profit. Period.

ButWhile I see the pros and cons of different parts involved in using social networks and so forth, one thing we can (at least for now) be certain of is that they won't use your credit card information etc. to make illegal purchases and so forth. I know of a person who routinely used the credit card app to check balance, pay bill etc. and next thing he was getting phone calls to see if the purchases made at a casino in Spain are OK?! This is without ever losing the phone!!. So, it could be worse in the case of phone loss. Sure, personal data, pictures and even email to some extent is not as bothersome to me as identity theft. Thank to some anti-fraud features of the banks etc. one can deny and simply not be associated with that activity (of course in legitamate cases). My friend ended up getting another card with different number and they closed the online banking account. He had to re-register all over with another id. So, it can be a big hassle. I heard of cases where people had to hire lawyers and run around courts to prove their innocence due to identity theft. Of course if you keep a picture of your driving licence on the phone, you are really asking for it so... (trust me, one girl was doing this because she didn't want to carry her purse/wallet on night outs)
Having said that, I am always worried if the roms we download here in XDA have trojans or backdoors built into kernels and system files... I know that it is like doubting even the good devs but how do we know for sure? Unless you are really an in-depth expert and figure out all the details such as processes and ports that are open and so forth, how do you really know? The phone's data icons keep pinging back and forth every now and then and at times I wonder what's being sent and what is it receiving... just sync'ing contacts...or...??
Call me paranoid but, after what happened to my friend, and similar stories, I am a bit skeptical about the security and integrity of the ROMs in the first place... Now, mostly I download and try different roms and settle on one that suits my preferences. I use the phone for calls as well as to make general tasks easier in many aspects except financial transactions. In short, I don't trust my smart phones.
For those of you wondering what Google is tracking, (not by any means the only place to look) login to your gmail account and look around different settings. You'll see web history, phone data to name a few..

[sm-t705] build.prop question (spoofing)

Ok so my network (Three uk) disabled my unlimited wifi teathering some time ago which rendered the tablet i used at work useless.
So i went out and found myself a new big screen phone, the sm-t705, a little unwieldy as a phone but hay it works.
Only here comes the snag, when i put the sim card into the device the internet would not work, an error page tells me to put the sim card into a phone to get net, three tech support told me that my phone is a tablet and cant make phone calls .....i was using it to call them lol
Anyway, to the point, i recently read that a rooted device (i am rooted) can pretend to be another device by changing the build.prop there are tons of guilds on how to change it, though from the view point of making google play see it as a different device to install unsupported applications, seems straight forward (if a little risky) but here are my questions,
1) what sections do i need to change so the phone reports as a normal phone?
2) what phone should i spoof as? (im thinking i should spoof as a phone as close to my specs in terms of processor etc as possible to avoid installing a version of an app that may have different cpu requirements or may burn out my phones gpu)
3) anyone done this? any tips if you have?
Thanks in advance,all advice greatfully recieved.

Regarding your old tablet, have you tried Foxfi?
Foxfi doesn't need a tethering plan or root and can create a hotspot using either Bluetooth or wifi.
It works great for me.
Barnacle wifi also used to be good on older devices, but seems to have issues with newer ones.
I used it to create a hotspot on a device that didn't even support it.
All you need is Foxfi on the phone and pdanet on the tablet for the 2 to connect via Bluetooth. Foxfi provides the instructions and links to pdanet to get it up and running in minutes.
For your new tablet if the sim is detecting it is a tablet and three are blocking it from mobile data then I don't think a spoof using the build.prop will fool it as it uses the imei as far as I know.
You may be better off with an xposed module to spoof the device, even then I think your success will be limited.
It's a bit crap of three to do this. I use O2 and have no issues using my phone sim in any tablet.
Does the tablet not even make a mobile data connection?
Have you checked the apn settings are correct?
Sent from my SM-T280 using XDA-Developers mobile app

I used pdanet for a while, but would prefer to just use one device, the old tablet was sold to pay for the t705 (will part pay, damn this thing was pricy)
Does the imei reveal the device model?

mrgreaper said:
I used pdanet for a while, but would prefer to just use one device, the old tablet was sold to pay for the t705 (will part pay, damn this thing was pricy)
Does the imei reveal the device model?
Click to expand...
Click to collapse
It's used to identify the device, so they will know it's a tablet.
There is an xposed module called device faker, but like I say I think success will be limited as I think the sim will identify the imei from the hardware.
It's seems three don't want you using your tablet for data, do they have an explanation for this?
Maybe all you need is an updated sim card.
I have a three sim card that I can use for data, but if I want I can also make calls with it if I put credit on it.
Sent from my SM-T280 using XDA-Developers mobile app

This explains the issue better then I can,
http://www.pcadvisor.co.uk/opinion/...y-monthly-account-from-use-with-ipad-3368856/
As for why, the lady at the three shop told me the data to a tablet is different to the data to a phone as it's not the same operating system......I did my best to not laugh and asked to speak to a higher up, they told me that as it is a tablet and not a phone I would be breaching my contract if I used my simcard in it.....
The actual reason, someone who uses a tablet is more likly to use data and therefore they can get more money out of them via tablet plans with limited data... To sum up, greed.
My temporary solution is to use a bt simcard which gives me access to the world's most unstable bt WiFi network (which disconnects every 30 mins or so) I was hoping the build.prop would be the magic solution doh

I am not familiar with samsung builds, but i had this problem on my motorola phones, (tether locked and forbidden)
Ok, in motorola we have 2 prop files:
build.prop
And
cda.prop
In the cda.prop , i found a line
ro.tether.denied=true
try find this line on your device
If the line does not exists, try force to exist
Sent from my XT320 using xda premium
---------- Post added at 12:26 AM ---------- Previous post was at 12:22 AM ----------
And your carrier will nevermore be able to remotely set your device again forcing by a init.d script or putting this command in /system/bin/debuggerd:
setprop persist.radio.adb_log_on 0
Sent from my XT320 using xda premium

Dethfull said:
I am not familiar with samsung builds, but i had this problem on my motorola phones, (tether locked and forbidden)
Ok, in motorola we have 2 prop files:
build.prop
And
cda.prop
In the cda.prop , i found a line
ro.tether.denied=true
try find this line on your device
If the line does not exists, try force to exist
Sent from my XT320 using xda premium
---------- Post added at 12:26 AM ---------- Previous post was at 12:22 AM ----------
And your carrier will nevermore be able to remotely set your device again forcing by a init.d script or putting this command in /system/bin/debuggerd:
setprop persist.radio.adb_log_on 0
Sent from my XT320 using xda premium
Click to expand...
Click to collapse
Tethering isn't really the issue, it's that three block my simply from data access when I put it in my sm-t705 so I was hoping to make 3 think my sm-t705 was infact a Xperia z3 for example

mrgreaper said:
Tethering isn't really the issue, it's that three block my simply from data access when I put it in my sm-t705 so I was hoping to make 3 think my sm-t705 was infact a Xperia z3 for example
Click to expand...
Click to collapse
I'll ask again, do you or do you not get a mobile data connection? [emoji53]

ashyx said:
I'll ask again, do you or do you not get a mobile data connection? [emoji53]
Click to expand...
Click to collapse
Yes and no
Any page you try to access goes straight to a page three has to say that your sim card won't work in this device and to put it back in a phone, so while technically you have data you can't use it, no apps can use it either

mrgreaper said:
Yes and no
Any page you try to access goes straight to a page three has to say that your sim card won't work in this device and to put it back in a phone, so while technically you have data you can't use it, no apps can use it either
Click to expand...
Click to collapse
So you actually do get a mobile data connection it's just any data sent is blocked.
Have you tried using a vpn, this can circumvent most carrier restrictions.
DotVPN is free and very good, available on play.
There is also TouchVPN, but DotVPN is better as its truly anonymous.
I use these to circumvent Sky's stupid restrictions.
Worth a go.

Vpn? He will have to use vpn? Forever?, i believe your carrier is denying access due to fake id. . .return to yor real roots, or you will get troubles,
Example , is imposible, strictly forbidden change IMEI number of mobiles,
So i may able to SHOW a fake IMEI for really nonsense apps that NEVER interest my IMEI. THAN THE CARRIER.
The carrier, will recognize my real IMEI EVER.
If i change the code inside the IMEI,
They will suspend the services.
So. . .
Sent from my XT687 using xda premium

Dethfull said:
Vpn? He will have to use vpn? Forever?, i believe your carrier is denying access due to fake id. . .return to yor real roots, or you will get troubles,
Example , is imposible, strictly forbidden change IMEI number of mobiles,
So i may able to SHOW a fake IMEI for really nonsense apps that NEVER interest my IMEI. THAN THE CARRIER.
The carrier, will recognize my real IMEI EVER.
If i change the code inside the IMEI,
They will suspend the services.
So. . .
Sent from my XT687 using xda premium
Click to expand...
Click to collapse
They already have suspended his services and no he doesn't need to use a vpn forever, he can always update his plan.
What's wrong with a vpn anyway? I use one all the time and he only needs to use it for mobile data not wifi.
We're looking for solutions here to unreasonable restrictions not statements to the obvious.

Sadly what I use most of my data for is Netflix, I work as night security. A vpn would be bad.
To chap further up, nothing is spoofed at the minute, three detect the sm-t705 when I have thier sim in it and block data access, put the sim in my phone and the block is lifted, I'm looking for a way to make three think my sm-t705 is saying Xperia z3 and leave my data along

Your IMEI correspond to your device model number.
If You change or reformat your IMEI partition with a new number and device model number and id, the carrier will blacklist and suspend your device, simcard.
Is imposible to fake IMEI to carrier provider
I am able to spoof IMEI to all that i judge nonsense apos, minus the carrier...
Sent from my XT320 using xda premium

G3 locked out help

Edit: when the device has no internet the email used to unlock the phone is useless. The phone should keep the email and pass locally. So don't forget you pin or let anyone enter the wrong thing. I had to factory reset it however it still retained root. Strange? I wasn't able to obtain any data so far. I may try to dig deeper with a recovery program but right now I no longer need use of the device (my son has a new toy, lol).
This is my phone. Before anyone says it's not trust me it is and I can prove it via old cell bills. And that Google still has it attached to the account.
I need back into it for a few very important photos relating to an accident a few months ago.
This model was on the us cellular network. It is not an active phone. (No data). Here is my problem, not being able to connect to data or wifi networks I am locked out because my son played with the 4 digit pin. The phone now asks for my email and password. Of which I know but the phone will not accept it. Thinking that I might have updated my password since I was on the G3 last I have tried all passwords that I know I have used and still nothing. This phone is also rooted. With stock jellybean.
Any help would be appreciated.

combatarms said:
This is my phone. Before anyone says it's not trust me it is and I can prove it via old cell bills. And that Google still has it attached to the account.
I need back into it for a few very important photos relating to an accident a few months ago.
This model was on the us cellular network. It is not an active phone. (No data). Here is my problem, not being able to connect to data or wifi networks I am locked out because my son played with the 4 digit pin. The phone now asks for my email and password. Of which I know but the phone will not accept it. Thinking that I might have updated my password since I was on the G3 last I have tried all passwords that I know I have used and still nothing. This phone is also rooted. With stock jellybean.
Any help would be appreciated.
Click to expand...
Click to collapse
You could go back to stock using KDZ. It will reset everything

dcop7 said:
You could go back to stock using KDZ. It will reset everything
Click to expand...
Click to collapse
I'm trying to avoid data loss. As I need the few images off the phone. After I get them off I really don't care what happens to the device.
march 16 per google was the last active date. From then till now it's only been a paperweight because I thought google backed up my images which isn't the case.
Does google keep passwords in a viewable manner in case I forgot one I used?
Edit: google doesn't save passes for viewing unless in your browser saved password section, however I wonder how it knows of a duplicate pass when changing the current one.