Develop Bugs

[TUT] Android Security

This thread is meant for all new Android Users, unsure about the security of their phone and their personal data in this operating system.
Please feel free to contribute all kinds of security related information (anti-virus, firewall, theft protection but also viruses, data harvester apps...).
The structure of this thread:
1. Common Sense / Permissions
2. Security Software
3. Dangerous Software
4. FAQ
1. Common Sense / Permissions
In contrast to what you might be used to from Windows Mobile, Android informs you about the permissions, an app requests, when installing it, either through the Android Market or through an .apk file.
It is important to read these permissions and be reasonably suspicious, when an app requests permissions, that seem inappropriate. But some common sense is also needed to understand that some apps need permissions, you cannot understand immediately.
Here is an example of the permissions, you have to accept before installing an app:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
What do these permissions mean?
I will not list all the permissions here, some are self explanatory and for everything else, you can read up on them here.
In general, you can trust Google with all their apps and permissions. Voice Control apps and Siri clones also in general require a lot of permissions, which makes sense, as they should be able to call your contacts, send emails and sms, etc. Install those apps only by developers you trust!
1.1 Permissions you can do nothing about
- Hardware controls, such as disable sleep mode etc.
mostly required by games, that want to keep the display on. Nothing to worry about.
- Write to your sd card
Apps that edit files (e.g. photo editors, office apps, ...), download files (Dropbox, Download all files, Wallpaper or ringtone downloaders, ...) and games, that require additional data to be played (e.g. Gameloft games or other graphics intensive games) need to be able to write files to your sd card, either after you created those files yourself or downloaded files.
- reading imei / phone state
many apps require this permission. while, technically, with a security app, you could disable this permission for the apps, it is not such a bad thing.
this permission is needed to identify the phone. commercial software might determine your valid purchase status through the imei.
the phone state also gives apps the possibility to react to incoming calls and go into standby for the duration of the call.
1.2 Permissions that invade your privacy
- access SMS inbox
necessary for Try 'n' Buy Apps (e.g. Gameloft Games), Apps with in-App purchases, and some apps, that require sim identification (whatsapp, Dailyme...)
For everything else, you should be suspicious.
- access contacts/ call logs
necessary for communication apps with contacts sync (twitter, facebook, skype, ...), also every app which has to do with ringtones (zedge, mp3 ringtone maker, ...) and online games, where you can invite friends to play with you (mostly card and board games and MMOs). Everything else might be a data harvester.
- your current location (network based or gps)
necessary for navigation apps, photography apps and communication apps that allow you to share your location.
Other apps, especially games, should not have this permission.
1.3 Permissions that might cost you money
- make outgoing phone calls
necessary for google apps, voice control apps and name lookup/caller id/phone book apps (for Germany dasTelefonbuch, dasOertliche and klicktel).
This permission should generally not be found in games and small info apps.
- send SMS
necessary for apps with sim activation (Try 'n' Buy Games, apps with in-app purchases, whatsapp, ... (see "access SMS inbox")).
For everything else, when in doubt, google the name of the permission or ask here, what it means and whether the app is trustworthy.
So, what can you do about these permissions?
There are basically 2 options:
1. Don't Install an app that seems suspicious for requesting too much information.
2. Install security software to block certain permissions.

2. Security Software
Here we gather general information and reviews on different security apps.
2.1 LBE Security
LBE Security is a very powerful Security Suite. It can be found here (XDA) and here (Market).
It requires root.
With this app you can regulate permissions given to all the apps you have installed. you can set Internet Access (separated by 3G and Wi-Fi), IMEI, SMS, contacts, location... for all your apps. Also, there is an app monitor, that gives you a notification icon for newly installed apps, so you can comfortably set its permissions. Also, it comes with a traffic monitor, that tells you, how much of your monthly plan has been used. Its statistics can also show you, which app used up what amount of traffic and how many calls and sms were caused by each app. Also, besided permanently forbidding or allowing something, you can set it to ask you each time, as you might want to allow an app to send an SMS once (for verification), but not anymore after that.
Forbidding all unnecessary permissions for apps (including Internet), this is the only software I currently use, as, when set up right, it effectively works as firewall, traffic monitor, virus protection and privacy protection.
2.2 ???
As mentioned above, I only use the one app, but feel free to post basic information and/or reviews of other apps, like kaspersky or avg or droidwall or whatever comes to mind and I will post them here.

3. Dangerous Software
In this portion of the thread, I will list all apps, that have been posted as data harvesters, viruses or generally harmful to your device.

4. FAQ
Here we collect the Questions and Answers worth mentioning.

Let me start of with a few questions on specific permissions:
1. Two out of the three Angry Birds versions on the market require "Positioning". I denied this through LBE and it works just fine, I don't see, what the app would need that for.
2. While I understand that the official Facebook app would need the permissions for contacts and Location, I wonder why it wants to read my SMS inbox and sent paid SMS. I also denied this through LBE. Doesn't seem to be necessary.
3. could someone send me the correct names for all the permissions?

This is interesting but it would get far more coverage in one of the general forums.
Sent from my R800i using Tapatalk

that is true. but the information here is meant for new android users, and there are very few around the general section, while i think, that many of the blackstone users just recently started working with android.

Chef_Tony said:
that is true. but the information here is meant for new android users, and there are very few around the general section, while i think, that many of the blackstone users just recently started working with android.
Click to expand...
Click to collapse
I think he means general Android sections of XDA, not just the Blackstone area .
Your tut applies to all Android, y'know?

yeah, I understand he was talking about the "general general section", but again, don't all noobs just look at their own device's sections? I mean, I don't even look into the general sections, only the devices I own and/or moderate. However, I believe there is something to it, so I moved it to "Android General" and back, leaving a permanent redirect, so this thread is found there as well which will hopefully draw some attention and also contributors here.
Btw. if there were several contributions that concern blackstone specific security, I'd be fine with that as well. Most important thing is that someone posts more content for me to add. I'm not exactly an expert on the topic, just wanted it covered because I believe it is important and has come up recently.

Chef_Tony said:
yeah, I understand he was talking about the "general general section", but again, don't all noobs just look at their own device's sections? I mean, I don't even look into the general sections, only the devices I own and/or moderate. However, I believe there is something to it, so I moved it to "Android General" and back, leaving a permanent redirect, so this thread is found there as well which will hopefully draw some attention and also contributors here.
Btw. if there were several contributions that concern blackstone specific security, I'd be fine with that as well. Most important thing is that someone posts more content for me to add. I'm not exactly an expert on the topic, just wanted it covered because I believe it is important and has come up recently.
Click to expand...
Click to collapse
Ah, yes I do get your point as well... But honestly, Blackstone Android is a very small subsection of Android - I just wanted your (honestly well-written) tutorial to reach a larger audience - that's all .

What about a piece on the NSA'S SEAndroid? I haven't really done much looking into it but there is a wiki page over on the selinux site. Although it's more protecting you personal data than anything else I think.
Sent from my R800i using Tapatalk

Great information I recently started doing some research on this subject matter and started a survey over at bit.ly/infolookup I am compiling security related tips that I can then point users too that have questions about their privacy and security.
I second LBE, I also use Droidwall firewall great app and Lookout along with Cerberus for tracking. Feel free to checkout the survey I will also link back to this resource once I have the completed blog posting on my findings.
Thank you.

Isn't this Malware? Why Norton no catch?

If not, how do I find where it's coming from? When I click it, it just brings up ads in my browser. Thanks
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Sent from my SGH-T989 using Tapatalk 2

juntjoo said:
If not, how do I find where it's coming from? When I click it, it just brings up ads in my browser. Thanks
Sent from my SGH-T989 using Tapatalk 2
Click to expand...
Click to collapse
Download the app AirPush Detector. It will tell you which app is causing those ads.
Sent from my SGH-T989D using xda premium

Also install airblocker app. It helps blocking push notif. Ads
Sent from my SAMSUNG-SGH-T989 using XDA

Another good one from the market is addons detector.
°··:··SGSII T989~ juggernaut v5.0~ streamline #29~cyan··:··°

Just another reason why I like XDA... It's a great place for answers.

just going off the thread title: because norton is ****e.

Most anti virus and malware apps don't work
Sent from my SAMSUNG-SGH-I727 using xda premium

Danial723 said:
Most anti virus and malware apps don't work
Sent from my SAMSUNG-SGH-I727 using xda premium
Click to expand...
Click to collapse
especially anything made by norton...

...

Wow alot if imbeciles in this thread lol
Sent from my SGH-T989 using XDA

Norton is one of the worst anti virus out there.. for mobile or desktop use.
Sent from my SGH-T989 using Tapatalk

Its sad we even have to worry about this stuff on Linux I thought the line was drawn around windows.

The way I found out was holding that ad down until it scrolled all the way through and it gave the app. Most likely it was from a golauncher app. So I deleted that app.
Sent from my SGH-T989 using xda

Thanks! I'll try that airbrush thing you guys mentioned. so Norton sucks uh? So i should just uninstall that?
Sent from my SGH-T989 using Tapatalk 2

juntjoo said:
Thanks! I'll try that airbrush thing you guys mentioned. so Norton sucks uh? So i should just uninstall that?
Sent from my SGH-T989 using Tapatalk 2
Click to expand...
Click to collapse
Yes uninstall ASAP. Don't let the media fool u Norton is garbage.

As stated, norton is garbage, aswell as most droid AV, norton sucks no matter the platform, for PC, avg is best (pro, not free, free sucks), for android if you need AV, Install McFee for root amazing app with to many features, and works awesome as system app, and settings can be written to /system instead of /data for best use,
At buddy sayin remove Golauncher, how would this help? Ive been monitoring all through that aswell as GoSMS, and a few other go apps, and have yet to see a version with Airpush support?
With that said, i WILL state it does have useless functions and bloated scripts, none of which really impact performance or even data usage, so i can see the developers point on leaving it in, probably for compatibility (some of those functions MIGHT be needed on other devices,
Please dont put down apps solely apps on a basis which you havent even researched, if you have questions/concerns, contact the dev directly.
@OP
Norton is crap and on windows more or less wastes resources to perform half-assed functions, that can be done using commandline, or even be done better with a free version of just about ANY antivirus, having built over 300pcs for my @home business over the course of the past few years i have NEVER included it as a preinstall, or even recommended it to my customers, on a side note, its made me easy money, from "fixing" PCs with it installed and and having issues with the firewall, or false positaves, or even viruses that leaked through, pretty much my main question when they come in is "what antivirus do you use" if they say norton my response is usually "ok, im pretty sures what the issue is, i should have it ready in a few hours, il call if theres any issues"
I have about 30 norton keys laying around from "upgrading" and selling propered licenses for new antiviruses (AVG Pro 2011 is my bestseller), that i will probably never see money back for, but oh well its a garbage product that doesnt belong on anything but maybe a CD..
No interest in the droid version as the PC version has wronged to many people and caused me some greif, easy fix for airpush is update your hosts file to a ad blacklist (complete should be around 8-900kb if more its probably bloated/entries duped, if smaller, incomplete, you can google lists and make your own)and if on ICS, simply update your proxy to enable host redirection viola, push notes gone
*although i so have an Awesome distro that includes a very trimmed down norton thats cabable of scanning outside the OS (running from BIOS) that does the job nicely, but its far from "official"...

i use ad detector from the market. it is free and it will run a scan and tell you which apps you have installed that will push ads to your notification bar.
As far as malware/anti-virus goes, nothing is as good as Malwarebytes Anti-malware. There needs to be an Android version of it.

doug36 said:
As stated, norton is garbage, aswell as most droid AV, norton sucks no matter the platform, for PC, avg is best (pro, not free, free sucks), for android if you need AV, Install McFee for root amazing app with to many features, and works awesome as system app, and settings can be written to /system instead of /data for best use,
At buddy sayin remove Golauncher, how would this help? Ive been monitoring all through that aswell as GoSMS, and a few other go apps, and have yet to see a version with Airpush support?
With that said, i WILL state it does have useless functions and bloated scripts, none of which really impact performance or even data usage, so i can see the developers point on leaving it in, probably for compatibility (some of those functions MIGHT be needed on other devices,
Please dont put down apps solely apps on a basis which you havent even researched, if you have questions/concerns, contact the dev directly.
@OP
Norton is crap and on windows more or less wastes resources to perform half-assed functions, that can be done using commandline, or even be done better with a free version of just about ANY antivirus, having built over 300pcs for my @home business over the course of the past few years i have NEVER included it as a preinstall, or even recommended it to my customers, on a side note, its made me easy money, from "fixing" PCs with it installed and and having issues with the firewall, or false positaves, or even viruses that leaked through, pretty much my main question when they come in is "what antivirus do you use" if they say norton my response is usually "ok, im pretty sures what the issue is, i should have it ready in a few hours, il call if theres any issues"
I have about 30 norton keys laying around from "upgrading" and selling propered licenses for new antiviruses (AVG Pro 2011 is my bestseller), that i will probably never see money back for, but oh well its a garbage product that doesnt belong on anything but maybe a CD..
No interest in the droid version as the PC version has wronged to many people and caused me some greif, easy fix for airpush is update your hosts file to a ad blacklist (complete should be around 8-900kb if more its probably bloated/entries duped, if smaller, incomplete, you can google lists and make your own)and if on ICS, simply update your proxy to enable host redirection viola, push notes gone
*although i so have an Awesome distro that includes a very trimmed down norton thats cabable of scanning outside the OS (running from BIOS) that does the job nicely, but its far from "official"...
Click to expand...
Click to collapse
for PC , Nod32 found at www.eset.com is the best

I found that for me what was causing that ad to pop up was the MP3 Downloader app. If you have an mp3 downloader app, the way i knew that was it, force close the mp3 downloader and you'll see that ad go away.

blackangst said:
Wow alot if imbeciles in this thread lol
Sent from my SGH-T989 using XDA
Click to expand...
Click to collapse
Because people use Norton?

Potential Security Issue with S-Memo and JB

I was poking around my GS3 today (ATT version but running the Sprint Official JB release LJ7) and I found something pretty shocking. I was poking around the S-memo databases when I opened a table using SQLIte editior. When I opened the table I was shocked to see my Google account username and password in clear plain text. Now, I did have the option to sync to Google drive and the app did prompt for my google username and password so obviously it stores it somewhere. I was just shocked to see it stored in plain text and not encrypted.
I know someone who checked his ATT GS3 running ICS and he did not have these entries in his DB which makes me think it's a JB thing.
To check you need to be rooted and have SQLite editor installed.
Steps to check
1. Set up S-Memo to sync with your Google account
2. Use SQLite editor and navigate to /data/data/com.sec.android.provider.smemo/databases
3. Open the Pen_memo.db file and select the CommonSettings table. Look to see if your Google account info is stored in plain text.
This could potentially be a serious issue. If people running JB on their GS3 can check this that would be awesome. Someone already checked the latest ICS build for the ATT variant but if others on ICS or with a different variant can check that would be great. I will get to check my GF's I-9300 running JB tomorrow when I see her.
Also I'm not sure how app permissions work on android, meaning if one app could access the data/database of another app(without root, because obviously with root another app can, in this case SQLite opened the file). Since the DB is in the /data partition and the permissions are r/w by default I'm thinking it wouldn't be difficult for a malicious non root app to access this database and query it for the information unless there is something built into android that wont allow that.
I have attached a SS of what my table looked like. Obviously I blacked out my PW and also the Google auth ID
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Actually, while /data is available for you to browse, that is because you have root. It's RW but only within the packages that each app is sandboxed. If you disable root you will not be able to view that database.
It is possible for the same developer to access the /data files of another one of their apps if they use the same namespace.
So, while this is indeed a risk, it would not be trivial for another app to gain access without asking for root or cracking root itself.

ViViDboarder said:
Actually, while /data is available for you to browse, that is because you have root. It's RW but only within the packages that each app is sandboxed. If you disable root you will not be able to view that database.
It is possible for the same developer to access the /data files of another one of their apps if they use the same namespace.
So, while this is indeed a risk, it would not be trivial for another app to gain access without asking for root or cracking root itself.
Click to expand...
Click to collapse
Ahh OK. Yeah I wasn't sure if another app would be able or not. Ive never not been rooted so I wasnt 100% sure about that. So I guess this issue would just concern root users. I still think though the data should have been encrypted before the record was inserted. It did kinda freak me out to open that table and see my google password staring at me.

I don't use S-Memo much but thanks for the heads up.

ViViDboarder said:
Actually, while /data is available for you to browse, that is because you have root. It's RW but only within the packages that each app is sandboxed. If you disable root you will not be able to view that database.
It is possible for the same developer to access the /data files of another one of their apps if they use the same namespace.
So, while this is indeed a risk, it would not be trivial for another app to gain access without asking for root or cracking root itself.
Click to expand...
Click to collapse
There are on Play and on the net "free apps" which needs root access to work. Once you grant access to any of them those can get your info and sent it to anyplace.
Sent from my O=O

csmasn said:
There are on Play and on the net "free apps" which needs root access to work. Once you grant access to any of them those can get your info and sent it to anyplace.
Sent from my O=O
Click to expand...
Click to collapse
Agreed but that is why you should be checking carefully what root apps are doing. Also not just willy-nilly granting Superuser permissions. Half of XDA would be at risk cause they see the SuperUser popup and most of the time just press grant not ever thinking 'What does that mean?' yes they want to test an app, but FFS check what it wants to do. That is the screen that pops up (another one people ignore - yes I am guilty of it my self sometimes thinking nothing has changed between one version to the next) just as you are installing the app. If it is wanting to do things in areas you don't want it to be then don't install it and confront the developer about it.
In this case you can't really confront Samsung devs about this, but the thing is we know what it is for, and secondly your not installing it comes pre-installed. But you get my point. I doubt that the Samsung devs have malicious intensions, where as other developers that your are granting SuperUser permissions to...who knows?

Yikes! Good news, this is not as bad as it seems. The data is not accessible without root.
Once an app has root, it is all over. You have to trust the app to use it wisely (trust me a lot of root apps are unsafe). With this kind of issue, it is probably safer to notify the OEM before publishing, allowing them time to fix it. This is exactly why I am not one to run root apps without a review of them myself.
I took the liberty to forward this on to those that can get it fixed. Nice find.

This should probably use a token-based authentication system, rather than the ACTUAL google account username and password...
Still not brilliant for security, but at least it's not your ACTUAL password in plaintext...

Jarmezrocks said:
Agreed but that is why you should be checking carefully what root apps are doing. Also not just willy-nilly granting Superuser permissions. Half of XDA would be at risk cause they see the SuperUser popup and most of the time just press grant not ever thinking 'What does that mean?' yes they want to test an app, but FFS check what it wants to do. That is the screen that pops up (another one people ignore - yes I am guilty of it my self sometimes thinking nothing has changed between one version to the next) just as you are installing the app. If it is wanting to do things in areas you don't want it to be then don't install it and confront the developer about it.
In this case you can't really confront Samsung devs about this, but the thing is we know what it is for, and secondly your not installing it comes pre-installed. But you get my point. I doubt that the Samsung devs have malicious intensions, where as other developers that your are granting SuperUser permissions to...who knows?
Click to expand...
Click to collapse
Agreed with you.
But about Google's Devs, because it's a Google's flaw. Encryption is old enough, so they can implement it.
Sent from my O=O

graffixnyc said:
I was just shocked to see it stored in plain text and not encrypted.
Click to expand...
Click to collapse
Suppose they were to encrypt it, where would they store the decryption key?

If somebody knowledgeable stole your GS3, and mounted it in Linux using adbfs, would make a bad situation worse, if they got your Google account login. Passwords in plaintext are bad in any case, I still don't trust either Android or iOS for really sensitive apps like banking.

Great job, samsung.
Why the heck you needed those creds anyway? Use tokens.

Checked mine (4.1.1 International version though), and these are the entries in my CommonSettings table...
IS_BOOT_COMPLETED
IS_MEDIA_MOUNTED
SAVED_PAPER
tutorial_view_state
_pref_list_type_before_tag
serialization_hashcode
serialization_canvas_mode
serialization_tag_mode
...nothing about my Google ID.

So I'm on cm10 tmous and don't use smemo... but I can confirm this issue is the same for com.android.email in databases in the email provider.db is a HostAuth.. and when I open that up sure as sh!t there is ALL my email accounts and listed PW in plain text... not secured... really jacked up its not just an s-memo issue..

da-pharoah said:
So I'm on cm10 tmous and don't use smemo... but I can confirm this issue is the same for com.android.email in databases in the email provider.db is a HostAuth.. and when I open that up sure as sh!t there is ALL my email accounts and listed PW in plain text... not secured... really jacked up its not just an s-memo issue..
Click to expand...
Click to collapse
I just pulled that up on mine too! Wtf!
Generating random authentication keys

Has anything been done about this or basically can anyone with any clue about phones easily get your goggle password if they nick your phone?

cybergaf said:
Has anything been done about this or basically can anyone with any clue about phones easily get your goggle password if they nick your phone?
Click to expand...
Click to collapse
Yea just uninstall s-memo. You really don't need it that bad. And if so use other notepad apps that have voice to text capability or use the aosp keyboard. Anything but s-memo
.:Sent from the Hellfire Galaxy of S & 3:.

da-pharoah said:
Yea just uninstall s-memo. You really don't need it that bad. And if so use other notepad apps that have voice to text capability or use the aosp keyboard. Anything but s-memo
.:Sent from the Hellfire Galaxy of S & 3:.
Click to expand...
Click to collapse
Ummm thought you said above you didn't use s-memo so it's not just an s-memo problem or am I reading it incorrectly?
I've also just checked s-memo and can only see an option for syncing to Samsung account not Google?

App named 10550 in Wireless data usage?

Hi good people.
I have an app in my wifi data usage list by the name of 10550. I've contacted Samsung and they have now idea what it is. How can I find out?
I have attached a screenshot of it.
I have a Anroid 10 with UI 2.1 Exynos version of Note10+.

LaMpiR said:
Hi good people.
I have an app in my wifi data usage list by the name of 10550. I've contacted Samsung and they have now idea what it is. How can I find out?
I have attached a screenshot of it.
I have a Anroid 10 with UI 2.1 Exynos version of Note10+.
Click to expand...
Click to collapse
Upload online* to Virus Total:
https://www.virustotal.com/gui/
Scan the whole thing with Malwarebytes and Trojanscanner.
If your using a package blocker like PD MDM you can disable it there to test and see if it's even needed.
*use the app APK Export to copy the apk for upload.

blackhawk said:
Upload online* to Virus Total:
https://www.virustotal.com/gui/
Scan the whole thing with Malwarebytes and Trojanscanner.
If your using a package blocker like PD MDM you can disable it there to test and see if it's even needed.
*use the app APK Export to copy the apk for upload.
Click to expand...
Click to collapse
Thank you for the quick reply. I have download apk export but cannot find the app 10550, it's not listed.
I have scanned the phone with Kaspersky internet security and nothing. I have downloaded Malwarebytes and scanned and nothing.
I have never used PD MDM. Installed and will try, but the app 10550 is not there. It is only shown in wireless data usage list.
Any more advices?

APK Exports shows all systems apks, make sure show systems apps is toggled on it.
F it otherwise delete it. Although it be better to ID in case it's malware and more is hidden in the system.

it might refer to apps you removed at some point. what would be the meaning of the word underneath it?

raul6 said:
it might refer to apps you removed at some point. what would be the meaning of the word underneath it?
Click to expand...
Click to collapse
If so... a bad uninstall ie trashware.
SD Maid could probably snuff that reminant even if not rooted.

raul6 said:
it might refer to apps you removed at some point. what would be the meaning of the word underneath it?
Click to expand...
Click to collapse
Bixby Vision says the word (when translated into English) is "Restricted"

scottusa2008 said:
Bixby Vision says the word (when translated into English) is "Restricted"
Click to expand...
Click to collapse
thanks. that's then for the app that has restricted mobile data access. Removed apps come under removed apps heading. hunt is on
@LaMpiR if you click on that entry does it show additional info?

Google "apk 10550"
Urge to kill rising... Los Digit the Pirate says; "tis malware off the port side!"

blackhawk said:
APK Exports shows all systems apks, make sure show systems apps is toggled on it.
F it otherwise delete it. Although it be better to ID in case it's malware and more is hidden in the system.
Click to expand...
Click to collapse
I have activated the function (Advanced mode) and still nothing.
raul6 said:
it might refer to apps you removed at some point. what would be the meaning of the word underneath it?
Click to expand...
Click to collapse
Restricted
blackhawk said:
If so... a bad uninstall ie trashware.
SD Maid could probably snuff that reminant even if not rooted.
Click to expand...
Click to collapse
Will try it now. Thank you.
raul6 said:
thanks. that's then for the app that has restricted mobile data access. Removed apps come under removed apps heading. hunt is on
@LaMpiR if you click on that entry does it show additional info?
Click to expand...
Click to collapse
It shows the data usage from the app.
Total: 0 B
Front: 0B
Background: 0B
Then I have two options with allowing the background data(that is off) and the allowing the Data usage bei Data saving option(don't have that anyway.
I have googled apk 10550 and the only APP I had was from Payback, but the App is updated to 20.08.10630 version. It is a small coupon app.
Mine has transferred since 16.05. - 13.06. 5,81GB and after it's saying that it's restricted.

SD Maid can't touch that... if it's an uninstallable app.
APK Exports, hit the inverted triangle of bars in the right hand corner. Punch to show system apps.
It better be there. Copy the package and Scan it.

Hi. I have somehow missed your answer.
Anything else what I could try? I have no idea anymore
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Did Apk Extractor copy it?
Try safe mode, it still running?
If it's listed on PD MDM; package blocker you can kill it or if not try a manual disable by entering the full app name, not just 10550.
Go in using ADB and tract it down.
Call your carrier tech support.
I can't find it doing a Google search which is disquieting.
It's not on my 10+
Nuke option...
If the load is old, backup and do a hard reset.
Make sure this bugger isn't in the backup data.
After reset check to see if present; it may be legitimate apk or added adware on the original OS load.
If still clean restore data and apps, check for it again.
Keep checking... once bitten, twice shy. It maybe on one of your 3rd party apps. Have any chat apps loaded?
Always look through your downloads especially after a go around on a naughty or misbehaving site for rogue downloads, delete any asap.
Use Gmail and never download unknown anything!!!
Avoid side loading apks unless you trust the site and scan them first with online Virus Total.
Check that all your apps don't have permission to install unknown apps!!!
Androids are generally hard to infect unless you do something stupid. I've ran dinosaur Androids for years with no infections that costed a reload*.
*Malwarebytes did catch 2 trojan preloaders a little less then a year ago though... in downloads.
Also downloaded an infected jpeg that cost me all of my pics in downloads and damaged other files in the download folder in the last year.
Delete, delete, delete... I got lucky it died there..

I cannot find the app with APK Extractor.
I cannot find the app running, only it is shown in Wireless data usage, so running in safe mode would help if I could run it for a month.
PD MDM is not showing any app with 10550 name.
blackhawk said:
Did Apk Extractor copy it?
Try safe mode, it still running?
If it's listed on PD MDM; package blocker you can kill it or if not try a manual disable by entering the full app name, not just 10550.
Go in using ADB and tract it down.
Call your carrier tech support.
I can't find it doing a Google search which is disquieting.
It's not on my 10+
Nuke option...
If the load is old, backup and do a hard reset.
Make sure this bugger isn't in the backup data.
After reset check to see if present; it may be legitimate apk or added adware on the original OS load.
If still clean restore data and apps, check for it again.
Keep checking... once bitten, twice shy. It maybe on one of your 3rd party apps. Have any chat apps loaded?
Always look through your downloads especially after a go around on a naughty or misbehaving site for rogue downloads, delete any asap.
Use Gmail and never download unknown anything!!!
Avoid side loading apks unless you trust the site and scan them first with online Virus Total.
Check that all your apps don't have permission to install unknown apps!!!
Androids are generally hard to infect unless you do something stupid. I've ran dinosaur Androids for years with no infections that costed a reload*.
*Malwarebytes did catch 2 trojan preloaders a little less then a year ago though... in downloads.
Also downloaded an infected jpeg that cost me all of my pics in downloads and damaged other files in the download folder in the last year.
Delete, delete, delete... I got lucky it died there..
Click to expand...
Click to collapse

How much data is it using?
Try Data Couter Widget>apps
See what this shows and if you can access mystery apk from there.
This is a useful tool. Thanks for reminding me

I looked for that "10550" app, but could not find it anywhere, could it be some carrier thing? Your carrier, I mean, I have a carrier branded 975F, and nothing

Any more advices on this topic? The app is still there...
All security scans show nothing and I cannot click on the app. I will either root the phone to find out or I don't know what to do. Which rooted app could show me the required info? I really don't want to root my phone.

Bump

winol said:
I looked for that "10550" app, but could not find it anywhere, could it be some carrier thing? Your carrier, I mean, I have a carrier branded 975F, and nothing
Click to expand...
Click to collapse
It's the UID number, the unique number your Android designates apks by. Sometimes Karma will show the actual and sometimes the UID.
When Karma shows the UID number it's always a system apk... if that helps.
What is UID on Android?
What is UID on Android? Is it ID of a particular user or of a particular application?
stackoverflow.com
You'll need to figure it out by trial and error. I've seen the UIDs listed for a Sony phone but not Samsung. Some correspond as the same, others not. The biggest connector at idle by far is Google Play Services... gather data no doubt.

Google and Facebook infiltrated the Internet.

Deleted.

Yeah it's so funny can't handle the laugh h a h a h a
PageXray by FouAnalytics
pagexray.fouanalytics.com
Interesting how many connections XDA makes, very legit.

I don't see nothing wrong that Google and Facebook is login options. Two of biggest companies what people use these days.

Two of the biggest companies in terms of stealing personal data and seeling it.
Two massive companies that track and spy on your every move.
Not going to lie, you have to be somewhat stupid to use their services, which makes alot of people stupid considering that you are correct, alot of people use it.
LineageOS is focused on privacy, im pretty sure the main reason for majority of xda visitors is to download lineageos for their phone after not finding it on the official site.
A website like XDA that offers privacy operating system should not have ANY contact/interaction with google or facebook, simple as that period.

That's your opinion..

Privacydroid said:
..As many others i use LineageOS for privacy, to avoid the standard OS from Google that is constantly 24/7 github which is owned by microsoft, this is just wrong.
Click to expand...
Click to collapse
The source code for LineageOS is available on GitHub.
https://github.com/LineageOS
Many Devs use GitHub to build Roms, maybe the Rom you are using right now.

I agree. I never use G and F logins. No G services on my phone, either. Won't stop everything but gets rid of a lot of the tracking.
May I offer a suggestion? I agree with you, the present-day internet has been dominated by big tech and their surveillance. But you will get further by not calling most people who have no idea of the bs going on behind their back, stupid. I don't think XDA is going to change its website for the small number of privacy focused users. Be thankful we can express our opinion and learn about this stuff. Just block G and F, ad and tracking sites on your router or pihole. You might wish to consider giving xda a donation.
Just my .02

Privacydroid said:
Two of the biggest companies in terms of stealing personal data and seeling it.
Two massive companies that track and spy on your every move.
Not going to lie, you have to be somewhat stupid to use their services, which makes alot of people stupid considering that you are correct, alot of people use it.
LineageOS is focused on privacy, im pretty sure the main reason for majority of xda visitors is to download lineageos for their phone after not finding it on the official site.
A website like XDA that offers privacy operating system should not have ANY contact/interaction with google or facebook, simple as that period.
Click to expand...
Click to collapse
Deleted by author...

ardwivedi16 said:
If you have problems with these things then don't use them. For you it's a privacy issue but for many others it's a convience.
Click to expand...
Click to collapse
A bit of convience to give up all of your privacy, makes me question how braindead people have gone, this will have consequences.

I can't live without Google. Google is best

Dayuser said:
I can't live without Google. Google is best
Click to expand...
Click to collapse
Obviously now you are trying to provocate a reaction, google isn't "best" and it isn't even "good" infact what they do has the scale of a massive criminal conglomerate. If you can't live without google you should question yourself.
Live without google is easy and it's better as you don't give your private data away.
But hey i don't even know why i'm replying to the guy who's first response was
Must be a 12yo, time to let this thread die as there is nothing useful being commented other than nonsense.

Privacydroid said:
Live without google is easy
Click to expand...
Click to collapse
It is not easy live without google if you want easiest way to backup everything important.

Source: https://pagexray.fouanalytics.com/q/forum.xda-developers.com?f=
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
XDA seems to have ALOT of connections.
Since this site is mainly focused on mobile operatingsystem with a priority on privacy OS'es, how come that the site itself appears to be in support of tracking/profiling?
Is the money?
What's the history of this forum? At which point was the decision taken to support google and facebook login?

Privacydroid said:
...Since this site is mainly focused on mobile operatingsystem with a priority on privacy OS'es, ...
Click to expand...
Click to collapse
How did you come to that conclusion, it is not stated anywhere on the site, that I've seen.
Privacydroid said:
What's the history of this forum?
Click to expand...
Click to collapse
Privacydroid said:
At which point was the decision taken to support google and facebook login?
Click to expand...
Click to collapse
Google sign-in was added at least since SEP 17, 2013
Authenticate Your XDA Account with Google
www.xda-developers.com
Facebook and Github Added ~26 March 2021
https://web.archive.org/web/20210326194333/https://forum.xda-developers.com/login/
Twitter added ~08 Oct 2021
https://web.archive.org/web/20210408155309/https://forum.xda-developers.com/login/
You didn't look that hard did you, it took me like 5 mins to find this.
Edited:
Authenticate Your XDA Account with Google
BY
SVETIUS
PUBLISHED SEP 17, 2013

-How did you come to that conclusion, it is not stated anywhere on the site, that I've seen.
Just from looking around, was my impression.
Google is tracking this forum since 10 years, that's disturbing., yeah i didn't look you're correct.
What's the matter all sites have the fancy google and facebook logins anyway, it's not just xda, it's likey the infilitrated the whole internet.

Privacydroid said:
View attachment 5713077
I downloaded LineageOS for my phone from XDA because the official site lineageos.org does not support my phone model.
As many others i use LineageOS for privacy, to avoid the standard OS from Google that is constantly 24/7 tracking my location aswell as basically anything i do on my phone, even facebook was preinstalled and could not be deleted, this is madness, in my opinion companies such as google and facebook are criminal conserind the amount of data/knownledge they collect and share/sell about every single one of us. I do not use a single google services and yet google trys to stalk/track me on websites as this one. Chances are, if a website has a google/facebook login option, that means the site also has google/facebook tracking cookies/ beacons or similar technologies present on that website.
Now is it not ironic considering i came here to download a "privacy" os and even here google and facebook are present...?
I strongly advise against allowing google and facebook to spy on xda's website, no matter how much money is involved, it's simply innapropriate.
If you take a look at the websites statistics, i doubt that many people use google/facebook to login on xda, however some people surely do use these options.
Obviously these people are pretty dumb, considering by logging into XDA with google or facebook you grant google/facebook access to spy on every single thing you do on the XDA website.
Stop feeding criminal companies that have nothing good in their interest with your data, because data = money and money = influence.
You dont want google/facebook to have any influence, they already have enough of that and see what happened with the internet, with censorship, with depression of young people.
Questions is, why does XDA have a login option for google and facebook and github which is owned by microsoft, this is just wrong.
Click to expand...
Click to collapse
Hate to be the barer of bad news, but no matter where you go on the internet you will be tracked. Google, Facebook, etc aren't the only ones that track/profile you. Yeah, Google is harvesting my data, but at least they provide useful services such as Google Drive, YouTube, Docs, etc. Don't want to be tracked? You'll have to pull the ethernet cable or SIM card out.

Privacydroid said:
-How did you come to that conclusion, it is not stated anywhere on the site, that I've seen.
Just from looking around, was my impression.
Google is tracking this forum since 10 years, that's disturbing., yeah i didn't look you're correct.
What's the matter all sites have the fancy google and facebook logins anyway, it's not just xda, it's like the infilitrated the whole internet.
Click to expand...
Click to collapse
The beginning is your internet service provider. They know you best! Then comes everything else.
If you have a land line they know your complete address which Google doesn't know.
The ISP is your primary DNS provider too, they can view all your internet activity in certain cases.
You didn't know that?

Datastream33 said:
Hate to be the barer of bad news, but no matter where you go on the internet you will be tracked. Google, Facebook, etc aren't the only ones that track/profile you. Yeah, Google is harvesting my data, but at least they provide useful services such as Google Drive, YouTube, Docs, etc. Don't want to be tracked? You'll have to pull the ethernet cable or SIM card out.
Click to expand...
Click to collapse
I'm aware of that.
I just think it's sad that XDA is a part of the tracking/profiling. If i was a website owner i wouldn't want to do this to my users.
Google is the single one most evil company, they where originally a CIA/NSA project, and no this is not conspiracy.
Ever heared about prism and xkeyscore?
To be honest google and facebook have broken so many laws, tracking minors, tracking without consent, they are making billions with our personal information and it's not just meaningless information because if you combine everything they know about you... it becomes a massive detailed personality profile.
I don't use google chrome, google search, gmail, google android, google drive, youtube, docs or drive but google still tracks me when i visit websites like XDA because someone who has influence over this site, most likely the owner decided to grant them permissions to track and profile users here in return for money (ads).
Why use google chrome when you have librewolf or brave?
Why use google search when there is searX or bravesearch?
Why google drive when you have mega? Mega offers 20 GB for free...
I know pulling the cable is the only way to be 100% sure you ain't tracked expect surveillance cameras with facial recognition, police robots, stores that refuse cash, are a thing now.
I refuse to buy anythin from a store that doesn't want my cash, ridiculous.
Even using linux with librewolf and searX will leave some traces on the internet but it's SO MUCH BETTER than using google. Your digital footprint is minimized and it's worth it.
About youtube, the censorship is EXTREME, heared about the channel "china uncenosred" they make videos about recent events in china, for example when the hongkong freedom protest happened they showed footage (with no violence!!) but the video was still delete by google! I'm saying it, google is evil, most likely internal corrupted.
I do use youtube but not like most people, https://yewtu.be is an instance from https://invidious.io and they have no cookies or tracking, also hosted over a proxy, they access googlevideo.com to share youtube videos, a great way to watch censored videos like the hongkong freedom protest.
Great that you mentioned "sim card out" i want to ask about that, if my phone uses lineageos and has no sim card attached, is geolocation tracking still possible?
I've heared that if you connect to a wifi (without a simcard) even if using a vpn they can still determine your real location and the only way to avoid that is by connecting the phone via ethernet, is that true and how does this work?

strongst said:
The beginning is your internet service provider. They know you best! Then comes everything else.
If you have a land line they know your complete address which Google doesn't know.
The ISP is your primary DNS provider too, they can view all your internet activity in certain cases.
You didn't know that?
Click to expand...
Click to collapse
The first thing i do after booting is connect to a VPN and i've changed my DNS server to Quad9.
So my internet provider knows nothing about me, unless they're listening to the wire or something..