Security and encryption on Android auto - MTCB Android Head Units Q&A

I want to know if the phone contacts are stored in some place after finishing the Bluetooth synchronization and leaving the car.
Also, I want to know if there is some way to encrypt all the system and asking for a password before the booting process, or perhaps checking an usb token-key.
I suppose the GPS data, favorite places and other data are stored in the system.
Is there some way to encrypt all this information?
I'm checking several ROMS in xda for MTCB and no option

20 days and no messages.
Is this a rare topic?. Cars can be shared by other people, valets, washing business, mechanical workshop...

I would like a password/pin or pattern protection too

Related

"Permanent Save" hack?

I am just wishing and hoping that there's a way of using the "Permanent Save" option in Settings for data other than Contacts, Appointments, Tasks, and Connection Sharing, the four options normally given.
My reason for this is that I use encryption software which has the added purpose of deleting the Contacts, Appointments, Tasks, and Connection Sharing - everything on the PDA, in fact, but the permanent storage area! - if a snoop or thief enters the incorrect password a user-defined number of times. Therefore, I don't want these databases permanently stored *unencrypted* anywhere in my PDA. I would rather use the permanent storage for data I do not need to encrypt.
Thanks for any tips you can give me.
hmm... still nothing on using permanent save for something other than contacts and the usual suspects? Seems like it must be a registry-related dilemma, one that can be overcome.

[Q] Auto wipe after incorrect password?

It is possible to set my phone to automatically wipe all data from it if the password/swipe pattern is entered incorrectly a certain number of times?
I know that this can be enforced if you connect via Activesync to an Exchange server, but I don't do that. Does anybody know of an app or service that does do that?
PS: I'm not looking for something whereby you send a message over the Internet or by SMS to wipe it, more something that will do it automatically after a number of incorrect password attempts.
Cheers.
Hmmm. Seems like there is something like this after all...
http://forum.xda-developers.com/showthread.php?t=717469

Huge issue: Factory reset required to remove WLID from phone

You heard right - there is no way to remove the Windows Live ID assigned to your phone without a factory reset. Considering there is no way to back up app data and messages, this presents a huge issue for anyone who wants to or is required to change their ID.
I had a problem just before the Mango update; I wasn't able to use the windowsphone.com services and so removed my phone from the site, assuming that I would be able to add it again in order to fix the problem. However, there was no option to do so. I asked around and someone told me I should try removing my account from my phone and logging in once more, in order to re-assign my phone to my Live ID. Upon discovering that I wasn't able to, I contacted support and they confirmed, to my dismay, that I would be required to completely reset my phone to change my ID.
I've now lost all the data I had on my phone: all my SMS messages, all my game saves - anything that wasn't synced into the cloud - gone. All because I just wanted to remove my Windows Live account from the phone. Another user had their XBL gamertag hacked and lost everything on their phone, too.
Quite honestly, it's just ridiculous and never should happen in the first place. Unfortunately, many users won't notice the issue until they want to change their ID sometime in the future. At that point, they would lose everything. So, I've created a feature suggestion at the UserVoice support page.:
http://windowsphone.uservoice.com/forums/101801-feature-suggestions/suggestions/2283489-allow-for-change-removal-of-windows-live-id-withou
Please vote for it, if you can. It's vital that problems like these are found and eliminated before they affect the general public.

Factory reset doesn't necessarily wipe your personal info!

https://www.androidpit.com/why-a-factory-reset-doesn-t-wipe-all-your-data
The factory reset problem was uncovered by some Cambridge University researchers in the first major study of this taken-for-granted Android security feature. The factory reset, we’ve always been told, will delete all data, accounts, passwords and content from your Android device. The problem is, this is only partially true.
Why doesn't a factory reset work?
The researchers tested a range of second-hand Android devices running Android versions from Android 2.3 to Android 4.3 and found that in all cases they were able to recover account tokens – which are used to authenticate you once a password is entered the first time – from service providers such as Google, Facebook and WhatsApp. In a staggering 80 percent of cases, they were able to recover the master token.
The master token is essentially the key to the front door, the equivalent of installing a top-notch security system and then hiding the key under the doormat. Once a master token is recovered, the user’s credential file can be restored and all your data re-synced to the device: that means emails, cloud-stored photos, contacts and calendars.
Yeah this is old. Good info still. They suggested that we encrypt the device then do a factory reset. Or something like that
Sent from my SM-N930V using XDA-Developers mobile app
I sold my Note 5. I encrypted the phone with a strong password. I did a a factory reset. I then encrypted the phone again and then did another factory reset.
Sent from my SM-N930V using Tapatalk
Good info when we are all looking at giving up our phones.....

Remove / Disable Google and MI bloat apps

Hello everyone,
I'm used to the LineageOS on my previous phone and now I've upgraded recently to this phone but I feel my personal info too much available to Google and MI system apps and I don't want that, thats why I went to LineageOS on my previous phone but, like others custom firmwares, it have several bugs which limits the potential of the phone.
Even not using an google account I can feel my life is being spied because a few things happen:
- if someone calls me, a friend or whatever, and its not in my contacts list it asks me if its spam. For what? To send the info somewhere using the internet connection and warns others if its spam? If it reads my contacts for this it can read those for anything, like copy my whole contacts list which I'm not comfortable with and I'm not able to control. I'm afraid that later if i use the regular browser to access Gmail for instance, I'm afraid the OS is prepared to warn google that all the info that' I've shared so far belongs to that particular Google account and that phone IMEI is also used but that account. I'm crazy? Maybe, but all this is possible and I want to make it impossible.
- If i do not allow Google services from accessing my text messages APP (built-in app) i keep getting a warning from the system that something it will not go OK if I do not turn on that access from Google services. Why the hell should google services needs to access my texts? My first phone, 20 years ago, could send SMS without google, why the hell google needs to see my texts now?
The list continues but I'm not willing to loose the nice things this OS have too, but for me personal info is too valuable and I dont want to give away any information from my contacts list, SMS texts, the places I visit, my tastes and so on, all this is my personal life and no one needs to know about it, not even just for statistics. Some people on my contacts list doesn't use Android and dont want the personal phone number stored somewhere and connected to me somehow, not that Im a criminal or something like but all this combined together its like a personal "Facebook" for Google and MI to use, they know who are the persons who I connect with, who are near me at a certain period of the day, where I usually do shopping, well, all my life is being stored somewhere, and I want to end this.
Is there a way to keep the current OS and block every outgoing info coming from the phone? I've made some research and i come to this so far
- AFwall can be a solution, but how good it is?
- Removing google services is not an option using ADB, the OS will not work
- Disable google services is not working. The system keeps turning it on automatically
Please give me your feedbacks with your experiences about this security issue, I think several people feels the same way, and how did you managed a work around to this keeping the original OS.
PS: For now I didnt unlock the bootloader, but I will if the solution goes that way.
Thank you everyone
Tomalamix
Living in the age of Google, one cannot use phone & Internet without your info being collected for ad purposes or whatsoever.
Ad purposes i can live with that,. what I cant live with is my personal data being stored by a 3rd party company besides my cell operator
Ive been watching the Anti-Gapps group but it seems discontinued i guess, i think this is a task fitted for them

Categories

Resources