Are there really no firewalls with application-based rules for WM yet?? - General Questions and Answers

Hi everybody, I got my 1st WM device 2 weeks ago, and wherever I went, I found links to this forum. Since then I found so many great applications here (and I haven't even done a systematic search), so thanks a lot for this cool place!
One thing is missing badly for me though: On my old Symbian 3rd I was asked every time an application wanted to access the internet (and also write/read data). I could block it, allow it once or permanently. So almost exactly the same I have on my desktop with Sunbelt.
Now on WM, it seems to be totally common that every application can access the net as it likes to, without any kind of user confirmation. And I really don't feel comfortable about it. Who knows an application doesn't scan my phonebook or other personal data and upload it somewhere without me even knowing about it?!
So I did lots of searches, and the "best" I found was "Airscanner Mobile Firewall". Unfortunately though, it lacks application-based rules. You can only block E-Mails completely, or ICMP, or... But it doesn't protect you from installed software going online is it pleases.
Apart from that, there seem to be no tools for this at all. There are call blockers or tools that cut off internet completely, but no tools to control web access based on application. To be honest, I'm totally surprised by this, since there is thousands of apps for WM for anything else. It doesn't even seem to be a topic that concerns lots of WM users, while the creators of Symbian obviously took it quite serious.
I know I could have posted this in the "ideas for apps" thread, but first I wanted to check I didn't miss any existing software.
Thanks for any hints!

http://forum.xda-developers.com/showthread.php?t=382660&highlight=firewall

Rudegar said:
http://forum.xda-developers.com/showthread.php?t=382660&highlight=firewall
Click to expand...
Click to collapse
Tak for the reply, but as I said...
I did lots of searches, and the "best" I found was "Airscanner Mobile Firewall". Unfortunately though, it lacks application-based rules. You can only block E-Mails completely, or ICMP, or... But it doesn't protect you from installed software going online is it pleases.
Click to expand...
Click to collapse

Well, if this seems to be of no interest to anybody, I guess it means there never have been any cases of spyware on WM yet ever?
Is it not technically possible for an application to read the entire memory of a WM device and send it anywhere without the user taking notice? Let alone install a keylogger, reset the device and other evil stuff?

not that I know off and the virus are also a handful which are more likely proof of concept then real malware

Related

Smartphone software recomendaions:

Hi all
Wondering if all the smartphone users could post here the names of any software they find they couldnt live without with a short description and a link to download.
I mean like essential apps/games/home screen layouts and stuff
thanx
duke_stix said:
Hi all
Wondering if all the smartphone users could post here the names of any software they find they couldnt live without with a short description and a link to download.
I mean like essential apps/games/home screen layouts and stuff
thanx
Click to expand...
Click to collapse
Obviously you just didnt realise what you just typed.
i'm sure you know there are tons of sites already doing this.. rating "software" and recommending software.. and no need of such waisted threads.
here's a link to begin your quest for recommended software.
www.download.com <- filter to mobile software (top rated, popular) .. ofcourse there are more sites on the net that does this better.
hey
lol. i can assure you i am aware of what i type!
my intentions were to eventually setup a CAB file repository for MS Smartphones here on xda-devs which can be accessed via our smartphones over wifi! i am working on compiling a list as we speak however i am having trouble finding some good freeware apps and will end up having to post 'trial' versions

Looking for schedule-application that will open/close my phone

Hi!
I'm looking for an application that will close my phone based on a daily schedule. For instance I want my phone to be off 01:00AM to 08:30AM. Is there any such application?
Have you tried PhoneWeaver ?
It has lots of usefull functions including profiles and schedules like the one you mentioned.
Of course it is commercial.
Thanks. This is what I'm looking for! ...do you think that I could "find" it somewhere around?
What do you mean by "find" ?
I mean not to buy
papadi said:
I mean not to buy
Click to expand...
Click to collapse
This is not the right forum for such a questions.
Ok, I know there are other sites with tones of illegal copies of software. But it's not like this site is completely legal. There is also lot's of "stuff" here also, especially in ftp site.
Anyway, let's not make it a deal.
By the way, another software that does the same thing and I believe in a much better way is "Profiles for Windows Mobile". This is my choice finally.
papadi said:
Ok, I know there are other sites with tones of illegal copies of software. But it's not like this site is completely legal. There is also lot's of "stuff" here also, especially in ftp site.
Anyway, let's not make it a deal.
Click to expand...
Click to collapse
I thought the same way while starting to visit xda-developers.
There are several posts on this matter ... I don't want to copy/paste them here.
Just read

Complaining to the right People at T-mobile

Hi Everyone,
Ive been on a bit of a mission with T-mobile and have been in touch with the directors office, they are under the impression that nothing has been locked down on the phone in rc7/rc30 that would limit the use of the phone from a development standpoint.
Ive given them a few examples of things that cant be done but they refuse to do anything (other than cancel my contact if i want) as im only one person who is complaining.
I know everyone runnning rc30v1.2 and rc8v.12 is ok atm, but could EVERONE please send a little email of complaint. Just explaining that you are unhappy that they have locked down the phone and denied us root.
cl&[email protected]
They say that if they get more complaints then something will be done
ITS WORTH A SHOT ISNT IT?
PS... If anyone wants to cancel their contract in the uk because of the lack of access, call 01707 315000 and ask to talk to Leah within the Directors team about your G1 problem. I explained that i couldnt get my apps working because i couldnt edit/add files to system directories.
They should offer to cancel it, it worked for me
Yeah, it's worth a shot, although from past experience with T-Mobile this may be akin to trying to extract blood from a stone
I tried doing the same thing after I got my G1 (before anyone figured out the hole in RC29). I found the people over at T-Mobile USA are just as clueless. As soon as you mention the words Android or G1, they instantly transfer you to a different support queue. I tried to explain what root access was and they didn't have a clue what I was talking about.
I found that here in the UK also, these people work in the directors team and so far have not fobbed me off.
They dont claim to be technical but are at least talking to the T-mobile developers about this. They have raised my concerns with the UK G1 manager, i think my case just needs a little more oomph from others complaining.
I've already called HTC, G1 support, and the PDA/Smartphone support ppl. None of them were willing to even try to understand the issue.
T-mobile have just called me and have advised that we should expect a statement about the issue by the end of the week. The issue is now with board members apparently
Maybee they are actuclly starting to understand??
You should have them email. At least that way it leaves a paper trail.
SGTDavePwnage said:
T-mobile have just called me and have advised that we should expect a statement about the issue by the end of the week. The issue is now with board members apparently
Maybee they are actuclly starting to understand??
Click to expand...
Click to collapse
That's very interesting that T-Mobile is even considering the idea of allowing root access, to the point where it would be an executive decision by the board members. Do you have any other information on this aside from your first post? Can anyone else confirm this?
i phoned tmobile uk today and asked why i couldnt get root on my tc5-rc8.
and i had a long talk with the guy and he said he had a email about this issue
and went throught a few things with me on my phone. and then he said he would phone me back tomorrow with someone that new more about the g1 then the tec support staff. and he would be able to give me more answers about it.
qtronix
Cool
Sounds like my insessant *****ing at T-mobile support might have gotten us somewhere?
At least techies are not fobbing people off at the moment.
Could you please concider sending an email to the address i posted, just so they are aware that others are miffed.
******This is a copy of the email i sent to the directors team******
Leah
Many thanks for your call....
As t-mobile dont seem to see/understand the problem I have given the contact details of the director team to a group of developers so that you can hopefully get a few more calls about this. Please believe me that I am not the only person who has these concerns, but when people call tech support about this they are simply fobbed off by people who are not trained/do not understand the issue.
I would like to point out an error with t-mobiles response that they have in no way locked down the phone so that it is detremental for putting developed software onto the phone.
Please see a few examples of how the new RC8 Software limits Developers :-
1. Say I wanted my screen to automatically rotate without wanting to open the keyboard, this is simply a matter of editing offset: 1104724 within /system/framework/framework.odex to 0x0F001246.
I could do this on the old software but not on the new RC8
2. Say i wanted to update the web browser to do the same, this would mean editing the origional browser source code released by Google and putting it on my phone. Again, this was possible with root access on RC7 but has now been made impossible on the new RC8.
3. Say i wanted to make a tethering application that allows me to use my G1 as a modem to my PC (i know this would cost me money on my contract for data transfer) but I might want to do it so that i can connect to my workplace vpn to fix something. This was Doable on RC7, but now is not.
4. The G1 currently has no way of clearing cache for the marketplace, this again was doable on RC7 but not on RC8
5. The G1 has a limited ammount of space to install applications. It would be a good idea if we could install applications to our SD memory Cards, but again we cant do this because of the new software.
The above examples are just some simple things developers are working on that would benefit the phone, but we cant develop them and put them on the phone.
Basically anything that means editing a system file / writing a file to a system directory is now impossible.
Please understand that developers are not trying to take over the world or ruin the phone. We are simply trying to make the phone do what we want / improve the features.
This is how OpenSource works. Everyone has access to the Source code so that it can if neccecary be customised/edited to improve things for everyone.
The new software has made it impossible for programs that interact with the main system files or require extra files to be put in a system folder, to work.
Developers understand why the phone RC7 software was unsafe in the way it ran commands, we understand why you fixed the command running problem, but instead of fixing the issue properly you have just locked down root access?? Why??
If the new software in no way limits what developers can do, then why when you search on the net are so many people “Jailbreaking” their phones to get the access they require.
http://arstechnica.com/news.ars/post/20081105-android-liberation-t-mobile-g1-jailbroken.html
Can i draw your attention to
"In contrast, the G1 has been developed by the Open Handset Alliance project. It's extremely unlikely that this alliance, which is committed to an open platform, will engage in the same kinds of protective shenanigans that Apple has resorted to. The Android philosophy states that "anyone can contribute to Android and influence its direction. That means that anyone can download, build, and run the code needed to create a complete mobile device."
So why jailbreak an already-open device? One big jailbreak advantage is that it allows you to bypass the G1's internal storage. Until now, you were limited by the G1's built-in memory for installing and running programs. With the jailbreak, you can install applications onto a local SD card and run them from the card. Running low on memory? Just swap cards in and out.
Jailbreaking also allows you to use low-level tools that run in the background. Want your G1 to call home and report your location every 20 minutes? A simple Unix process, called a daemon, can handle that for you. You can set daemons up to remind you of appointments, to scan for nearby wireless devices and more. The world of handheld computing doesn't begin or end with graphic interfaces. There's an enormously rich world of possibilities available through command line processes.
Most importantly, jailbreaking gives you complete control of your system from the bottom up. It lets you stop thinking of your phone as a handheld gadget and start using it as a fully-capable Unix platform. "
Please could you explain how T-mobile are of the opinion that they have not limited developers with the above examples in mind.
The G1 is being sold as a Developer friendly OpenSource Phone. How can you claim this is developer friendly when the software severely limits what developers can do?
Are T-mobile saying that the phone was never supposed to allow users this access and that the RC7 root access was a mistake?
Eagerly Awaiting your response..
******
Well written, although I would have DEFINITELY left out the part about tethering the phone.
vr24 said:
Well written, although I would have DEFINITELY left out the part about tethering the phone.
Click to expand...
Click to collapse
I did think about that, but then i reconcidered as we already have tetherbot which works without root.
Suppose we will just have to see if anything comes of it
SGTDavePwnage said:
I did think about that, but then i reconcidered as we already have tetherbot which works without root.
Suppose we will just have to see if anything comes of it
Click to expand...
Click to collapse
you can always call t-mobile and say that after you updated the phone it is now:
constantly feezing, apps are running slow, and at times you can not connect to internet.
also tell them that you tried a factory reset and it did not help (make up a story that you have friend that has a lot of app and his phone runs faster than you phone with no apps installed)
if you have insurance they will send you one for free, you just have to return your old phone,
i believe they are still sending out rc29 for replacements as of now.
friend and cousin tried it and it worked.
might be worth a shot
Just got this in my inbox:
"Thank you for letting us know of your concerns with the 'open source' and 'root access' on your G1 mobile phone. We really do appreciate your comments about this.
We're aware that there are concerns in relation to this and our leadership teams in the UK and the USA are currently reviewing your comments and our position. We plan to provide you and other customers with similar concerns, with a response early next week, which should answer your concerns. I'll be in touch with you then.
Your comments are extremely valuable to us Mr * and I'm grateful for your patience while we look into this. I'd like to thank you personally for your co-operation.
In the mean time I hope you enjoy your weekend.
Kind regards
Leah Young
Directors' Office Co-ordinator
T-Mobile (UK)"
Of course, their answer could be anything from "f*ck off" to "yes, we'd love to embrace the openness of android with both arms, here everyone, have root!" so we'll all have to keep our fingers crossed 'til monday.
Well I just hope they release an update with options that allow us to turn off all background services (myfaves) and unwanted datatraffic (or actuall prevent overriding options when roaming).
How did that dead horse like the beating?
Perhaps a dead horse. Could it be that Tmo has now figured out that with root access, it won't take long for people like the coders at XDA to fully jailbreak the device to the point that voIP will be easy for any user to obtain? Are they just trying to protect their ability to profit off of voice traffic?
rynosaur said:
Perhaps a dead horse. Could it be that Tmo has now figured out that with root access, it won't take long for people like the coders at XDA to fully jailbreak the device to the point that voIP will be easy for any user to obtain? Are they just trying to protect their ability to profit off of voice traffic?
Click to expand...
Click to collapse
Hummm... I think ALL wireless providers are threatened by VOIP but the main reason root access was blocked was due to bad press mainly by tons of articles stating that there is a huge security risk and a flaw was found with Android which could let remote users attack someone's device...blah blah blah and so forth. That pretty much scared T-Mobile and Google which hated to have bad press so close to the G1 just being released and were forced to correct this issue. The only problem with that protection came with closing alot of freedom for the G1 and may happen to alot of more Android-based devices in the future, I'm afraid... Maybe Google will realize that there are other ways to protect mobile hijacking (which is extremely rare anyways) by creating some type of built-in firewall software instead?
rynosaur said:
Perhaps a dead horse. Could it be that Tmo has now figured out that with root access, it won't take long for people like the coders at XDA to fully jailbreak the device to the point that voIP will be easy for any user to obtain? Are they just trying to protect their ability to profit off of voice traffic?
Click to expand...
Click to collapse
Root is not necessary to build a voip app. Fact is, G1 launched with a skype-compatible voip app called iSkoot. Look it up.
SGTDavePwnage said:
Cool
Sounds like my insessant *****ing at T-mobile support might have gotten us somewhere?
At least techies are not fobbing people off at the moment.
Could you please concider sending an email to the address i posted, just so they are aware that others are miffed.
******This is a copy of the email i sent to the directors team******
Click to expand...
Click to collapse
i wont quote the entire email because its big. but you sir are very well spoken, great email!

*DroidDream* help with some Privacy/Virus/Malware Protection?

So I have been looking around online just some basic stuff about privacy on the android phones and so forth.
I have also looked around the xda forums about Privacy and Protecting your ID or anything that you dont want to get out or w.e the case maybe so Im looking for some help and maybe this can help others about this if they wish to.
Well im looking for something that I can have the most protection toward viruses/malware/ID theft or any "stealth" like traces after uninstalling apps and anything that falls into that category. I have came across something called DroidDream Not sure if this is still going on in the world of android or some other form of it. But over all its something that the malware is designed to only run while the android phone is sleeping. Also talks about Once the Android smartphone is rooted, DroidDream searches for a specific package named "com.android.providers.downloadsmanager". If the package is not found, DroidDream silently installs a second malicious app without the user's knowledge. Other malicious apps can be installed in stealth from the DroidDream command and control servers I did find this info from pcworld site but thats some basic stuff..also it talks about the the update of gingerbread helped fixed that issue.
But like I said was looking for something that I can use or other members if they are not aware of such to help lock/protect their phones. I also did come across this link int he xda forums http://forum.xda-developers.com/show...hlight=Privacy
Also check this out https://www.androidpolice.com/2011/1...ction-lawsuit/
This app seems to be prefect for what im looking for or maybe anyone may have other ideas for something like this.
Thanks for all who reply and is helpful..

[Completed] [Q] Android Installed Security Certificates and System Installed Apps

Does a comprehensive and plain english list exist anywhere that tells who is who and why they have a security certificate installed on my android phone?
I've asked this before and never found an answer. I find it odd that it isn't questioned and recently when installing FoxFi, it was made more poignant when many became up in arms about the FoxFi cert and the notification that some unknown entity could be monitioring activity. FoxFi is pretty clear about why that cert is there and I can't say that for the factory installed ~200 certs.
Also, is there a comprehensive list anywhere that tells what factory installed and system apps do? Many have very obscure names and even names which are quite misleading upon actually discovering what they really do. I'm sure I can't be the only one that would like to know exactly which apps are safe to freeze, disable or uninstall and upon doing so, what functionality will be lost or what other apps will no longer work, if any.
I think Google needs to step things up in these two areas so people can actually know. The work in the area of app permissions is a step in that direction, but, still a long way from full and forthright disclosure aimed at educating all android device owners.
Thanks for any direction you can provide.
Hmmmmm.... its merely about the desire to know why every android I've owned for coming on ten years now has security certs installed belonging to the DOD, Japanese Government, Experia, Equifax and many more that I have no idea who they are unless I want to research each and everyone of them. Even doing so in most cases still doesn't reveal why those entities have a cert on my phone and what it actually means. I wonder what happens if they are removed and why they are there in the first place.
As far as the many pre-installed apps that I can't imagine many people having a clue as to why they are installed or what they actually do, well, that kinda speaks for itself as well.
Nobody else wonders or does everyone else but me already know?
However, in the mean time, I'll refine my quest to changing permissions and any insightful threads on that for dummies would be appreciated.
Thanks
Hi
Thanks for writing to us at XDA Assist. Unfortunately I can't find anything relating to your question on XDA, it's probably best to ask here:
Android Q&A, Help & Troubleshooting
No response in two days, thread closed.

Categories

Resources