Database Info

[ROM] pffmod Revoke permissions & Privacy mode

Long time no see.
Any way there is a new build this one is based on the latest and greatest from CM 7.1. the download link is below.
Spoofed permissions:
READ_PHONE_STATE - You can now make your device return spoofed data from the methods protected with READ_PHONE_STATE permission. There is a demo app
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
you can use to see the effect of spoofing and revoking READ_PHONE_STATE permission. Run the app revoke or spoof run the app again.
Since majority of time spend on READ_PHONE_STATE spoofing was about laying the needed infrastructure for spoofing in general, expect new spoofed permissions shortly.
ROM info:
This is a preview build bases on CM7 nightly builds. Some things may not work some features may be missing.
Some applications may not work properly with revoked permissions.
You can revoke permission of SYSTEM applications!!! DON'T DO IT UNLESS YOU KNOW WHAT YOU ARE DOING.. However reboot resets the permissions of the system applications so you probably can recover.
If an application is running changing some permissions like say INTERNET will not be fully applied until the application is restarted.
If you come from CM7 nightly or CM7 RCx you probably don't need to wipe. I something is not working do a wipe.
Google apps are not included. You need to download them separately and flash them right after the ROM.
It will probably require ClockworkMod 3.x to flash properly.
You uses it at your own risk and I cannot be held responsible for the consequences.
Some technical stuff:
If an application checks for its permissions it will appear that all required permissions are granted. This is done to keep some ad networks code happy. As far as I've tested this is safe since the permission check is done at the remote end of the call when protected method is invoked. Please report your findings.
Screen shot:
This is the extended Manage application screen.​
Download:
update-pffmod-7.1.0-Desire-KANG-signed.zip
old builds:
direct link: update-pffmod-0.9.1-Desire-DEV-20110418-signed.zip storage provided by: http://onlinestoragesolution.com
direct link: update-pffmod-0.9.0-DESIRE-DEV-20110328-signed.zip storage provided by: http://onlinestoragesolution.com

Wow, This is so quick, I read about it in Reddit day back. Thanks! Still there are lot of discussion about this between developers.
Details here
http://www.androidpolice.com/2011/0...rmissions-cue-mass-force-closing-as-a-result/

ukanth said:
Wow, This is so quick, I read about it in Reddit day back. Thanks! Still there are lot of discussion about this between developers.
Details here
http://www.androidpolice.com/2011/0...rmissions-cue-mass-force-closing-as-a-result/
Click to expand...
Click to collapse
Actually I've submitted this to CM
here is the original thread for Desire HD http://forum.xda-developers.com/showthread.php?p=12161601#post12161601

Great patch though Personally I feel this is great addition.Thanks for this! I'll try this and let you know.

new build with data spoofing see the first post.

Neat!
Is this based on something close to nightly 41? There's been a major bug recently, which caused many issues, it's fixen in #41.
http://cm-nightlies.appspot.com/?device=bravo
p.s.
Please add this to the CM branch...

JDima said:
Neat!
Is this based on something close to nightly 41? There's been a major bug recently, which caused many issues, it's fixen in #41.
http://cm-nightlies.appspot.com/?device=bravo
p.s.
Please add this to the CM branch...
Click to expand...
Click to collapse
This is like current git

Swapping real IDs for the word "spoofed" is quite obvious, and, IMHO, might cause problems if an application stores it as an integer value. Why don't you just return random numbers?

I'm working on something that will generate plausible data from the calling app package name. I'm just too impatient and decided to release it early.
The other thing is that it's bean too long since the last release

And a final request. Please do something with the usability Maybe a dropbox underneath each of the permissions. Best if colored - red for "revoked", yellow for "spoofed" and "granted" without highlighting. Currently, a brief view at the list of permissions totally misses their states.
Yes, I do understand the engine is far more important than bells&whistles, but as for me, the mod is quite ready for everyday use, and I'd be happy to see it more user-faced.

JDima said:
And a final request. Please do something with the usability Maybe a dropbox underneath each of the permissions. Best if colored - red for "revoked", yellow for "spoofed" and "granted" without highlighting. Currently, a brief view at the list of permissions totally misses their states.
Yes, I do understand the engine is far more important than bells&whistles, but as for me, the mod is quite ready for everyday use, and I'd be happy to see it more user-faced.
Click to expand...
Click to collapse
Interested in helping with that?
Just grab AppSecurityEditablePermissions.java, app_editable_permission.xml and app_editable_permission_item.xml from http://review.cyanogenmod.com/4055 and start hacking

New build... Link in the first post.

Android Malware..

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
http://pocketnow.com/android/android-malware-now-capable-of-recording-your-phone-calls
"The information comes from CA Security Advisor Research Blog who claims that software on Android is now capable of recording your conversations. After asking for permission, making it look like a legit, harmless app..."
How bad is this problem going to get before Google takes sterner measures to filter these nasties from the Market?

DirkGently1 said:
http://pocketnow.com/android/android-malware-now-capable-of-recording-your-phone-calls
"The information comes from CA Security Advisor Research Blog who claims that software on Android is now capable of recording your conversations. After asking for permission, making it look like a legit, harmless app..."
How bad is this problem going to get before Google takes sterner measures to filter these nasties from the Market?
Click to expand...
Click to collapse
Um then dont give it permission. Dont download apps that request all sorts of stupid permissions. Dont download apps that exist on microtransactions.

Permissions
I always check what permissions an app wants when I am downloading it, dont see why a game needs full access to my calls and messages. Having said that I have had a few games try and get root permissions, very dodgey.

LBE Privacy FTW.
I never understood why a live wallpaper would need access to my call log and be able to send SMS, so I never downloaded them. Now, I just block permissions on an individual basis when the app is installed.
Again.... LBE Privacy FTW.

This information is trustworthy and very helpful.
Thanks for sharing it here. It is very important that everybody knows what really is going on.
At least everyone will know how to adjust.

johncmolyneux said:
LBE Privacy FTW.
I never understood why a live wallpaper would need access to my call log and be able to send SMS, so I never downloaded them. Now, I just block permissions on an individual basis when the app is installed.
Again.... LBE Privacy FTW.
Click to expand...
Click to collapse
Awesome app! Read about it on either androidpolice.com or goodandevo.net. I can now download apps I would not normally and just block the permissions I don't like. (Ebuddy messenger asking for gps location)

Thanks for useful info

Why doesn't Google just monitor the market at the first place?

Good post!
Regarding permissions - note that sometimes a free applications requires "strange" permissions that seems irrelevant to the actual app, for it's monetization solutions (in app ads, registration etc.) Usually the dev explains it in the description, so always good to read

agreed. The permissions apps are asking for lately are getting out of hand. I'm always really careful when updating or installing a new app.

thank for info

OMG this is harmful. Does any Android-form Anti virus scan this ?

I don't think anything ever came of that particular issue, or at least wasn't common in the wild. But it's almost on a weekly basis now that you do hear about malware in the wild. It's not that widespread yet, but it has the potential to be.
As always the best defence is common sense. Don't install apps from untrusted sources, read the comments and ratings, and always check the permissions before installing. If you install warez that borks yours device, you have it coming!

johncmolyneux said:
LBE Privacy FTW.
I never understood why a live wallpaper would need access to my call log and be able to send SMS, so I never downloaded them. Now, I just block permissions on an individual basis when the app is installed.
Again.... LBE Privacy FTW.
Click to expand...
Click to collapse
But some of them change when messages/calls have been received and as such need to access them in order to work.

I shall certainly be more careful in the future.
Thanks for the heads-up.

DirkGently1 said:
As always the best defence is common sense. Don't install apps from untrusted sources, read the comments and ratings, and always check the permissions before installing. If you install warez that borks yours device, you have it coming!
Click to expand...
Click to collapse
Amen!! Thanks for the info!

yes but
good advice but...generally you just download and bang.
better install anti-virus like LOOKOUT.

[APP] Android Device-ID

What is it?
This is a simple App to display the two unique Android-IDs of any Android device. ​
What is an Android-ID?
In Android, there exist two different Android-IDs (or Device-IDs).
The Settings.Secure.ANDROID_ID and the GSF Android-ID (aka GTalk Android-ID (required by various Google Services)).
Both Android-IDs are 64-bit numbers as a 16 digit hex string and are randomly generated on every device.
Note, that the values change if a factory reset is performed on the device.​
Why would I need this?
In applications, these IDs are used for various purposes - basically to have a unique ID to clearly identify any(/your) device.
Now, as a user, there may be services you like to use, which require your device's unique ID to authenticate your service calls.
For example, to download APKs directly from the Play Store Website to your PC by using third party tools, such as the
APK Downloader extension for Google Chrome (requires GSF Android-ID).​
Download
net.bexton.android.device_id-1.0.1.apk (via dev-host.org)​
Source
The source code of this app is available via my GitHub.​
App Screen
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Just in case...

Use and recommend to ApkDownloader

I've used this one instead:
play.google.com/store/apps/details?id=com.hasmobi.find.device.id
Still, thanks for the share.

Good day. Do you by any chance, know how to change the GUID without reinstalling? thanks

[ANNOUNCEMENT] To Devs, please read

where is GSF Device ID stored ?
Hello Bexton or anyone who happen to know ...
I'm trying to figure out where can i obtain GSF Device ID, i've googled around and it seems to be close that it may be in :
/data/data/com.google.android.gsf/databases/googlesettings.db
I did a :
select * from partner;
However , there isn't any column that seems to show the same value as what we see in Bexton's app's "GSF Device ID" .
Anyone to help ? Maybe i'm looking at a wrong DB or wrong table ?

Seems useful

Friends, check out this app: Android Device Info
It gives much more information than this app.
Link: https://play.google.com/store/apps/details?id=com.appzdevelopers.anddevinfof

appzdevelopers said:
Friends, check out this app: Android Device Info
It gives much more information than this app.
Link: https://play.google.com/store/apps/details?id=com.appzdevelopers.anddevinfof
Click to expand...
Click to collapse
It also is 8 times as large.
It's a given that for "basic" stuff like this there's always multiple apps able to do it. Yours is a suite of functions, this one is focused on just one. Nothing wrong with either of it, just different approaches to different issues.

GSF Android-ID ... (Google Service Framwork ID)
Is there any possibility to change the Google Services Framework-ID?

habop said:
Is there any possibility to change the Google Services Framework-ID?
Click to expand...
Click to collapse
Yes. Use XPrivacy + XPosed Framework. You can use it to block various info on a global or per app basis. When it blocks info, it replaces it with data of your choosing (by default it replaces most things with the word DEFACE, but you can choose to fill in your own value or have it pick a new random value every time the app requests that info).
To block/spoof GSF ID you need to block "/proc" which is under the Identification heading. Blocking/spoofing /proc can cause some undesired side effects, so XPrivacy doesn't normally block that one for you if you choose the block the Identification category.

Is the Device ID the same as the Developer ID used by AdMob extensions?

habop said:
Is there any possibility to change the Google Services Framework-ID?
Click to expand...
Click to collapse
I have read that the app named Titanium backup could do this, but I never tested it myself.

what info do ad networks collect when you download an app? I mean, is there a way to make it look like 2 different phones download the app, when in fact was the same one. I though of using a vpn, would be that enough?

divinemyth99 said:
Yes. Use XPrivacy + XPosed Framework. You can use it to block various info on a global or per app basis. When it blocks info, it replaces it with data of your choosing (by default it replaces most things with the word DEFACE, but you can choose to fill in your own value or have it pick a new random value every time the app requests that info).
To block/spoof GSF ID you need to block "/proc" which is under the Identification heading. Blocking/spoofing /proc can cause some undesired side effects, so XPrivacy doesn't normally block that one for you if you choose the block the Identification category.
Click to expand...
Click to collapse
Can I use the app store after I obfuscate all my ID?

XPrivacy works per app, so yes.

ThemGo said:
I have read that the app named Titanium backup could do this, but I never tested it myself.
Click to expand...
Click to collapse
Titanium can restore the Android ID or generate a new random one. This is done across all apps on the phone. You might use this after a factory reset so that your phone is recognized as the same device and not a new device. Android ID is distinct from the Google Services Framework ID, though. I'm not sure if Titanium also backs up and restores the GSF; it only shows the Android Device ID, though.
Device ID from Evozi can show the various IDs that are available on your phone and can be used to test Xprivacy and make sure you're blocking the things you intend.

Your host site freaking sucks. Cant you use a normal site instead of this?

Nikolatas said:
Your host site freaking sucks. Cant you use a normal site instead of this?
Click to expand...
Click to collapse
Seriously! It opened like 4 tabs on my phone all nagging that my phone has a virus. And I use AdAway. Please find another less sh*tty host.

[Q] How to open "App permissions" on Android 4.2.2?

Hi,
today I saw in notifications "App permissions" and opened it, it allows me to manage permissions of installed apps. This should be a native feature as far as I know, the device runs 4.2.2 and is not rooted and the only managing app I have there is 3C toolbox but even that doesn't seem to have app permissions on it's own.
I think I saw this when I first got the phone as well, I had reset it last week and it notified me about this "App permissions" today.
I like it and would like to know how can I open this settings page? Via menu, or secret code or how can I get there again once I close it?
When I opened it from notifications it was turned off. I have turned it on, now when I try to turn it off it says:
"Apps will directly get permissions without your confirmation."
And I get asked when apps try to access something and seems like I am able to limit apps individually and their individual permissions and also manage them on this "Apps permissions" page.
I have not been able to find it in settings, manage apps nor Engineering mode, where is it hiding? How can I open it?
It looks like this:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Thanks.

Come on, someone has to have Android 4.2 and the knowledge here folks! Where is this "App permissions" hiding, where can it be opened?

It wasn't an option in 4.2

There are some app permissions editor apps you can download.

Before install app maximum app display and 3rd party permission app is another good option.

zelendel said:
It wasn't an option in 4.2
Click to expand...
Click to collapse
False, it is available in 4.2.
They changed it afterwards with 4.4 there you can get the opp apps or what it is to get the feature back. It's hidden in 4.2 though, hence I don't know how to get to it once I close it but it is obviously there. You can see the screenshots hey?
ryan012 said:
There are some app permissions editor apps you can download.
Click to expand...
Click to collapse
Yes, if I would root it then they would probably work.
Any good ones that are free and not bloated with rubbish/ads/... like most apps tend to be?

YCkcaJ said:
Yes, if I would root it then they would probably work.
Any good ones that are free and not bloated with rubbish/ads/... like most apps tend to be?
Click to expand...
Click to collapse
I don't know how you could get to it if it is part of your settings somewhere .
You can search "app ops" for some apps to get you to the hidden menu.
The app , Advanced Permissions Manager can remove permissions and reinstall app without them. Lucky Patcher can remove some app components and permissions then reinstall and some more. Xprivacy is an xposed module can restrict anything of an app.
To keep an app from being able to connect on data, wifi, you could use a firewall app. Xposed has a module for that it's called, LightningWall

App ops is a thing introduced in 4.3/4.4, so not to be confused with this older "App permissions" manager that is hidden in 4.2.

YCkcaJ said:
App ops is a thing introduced in 4.3/4.4, so not to be confused with this older "App permissions" manager that is hidden in 4.2.
Click to expand...
Click to collapse
Does that mean the apps ops wouldn't work ?

AppOps
and similar applications give a message that says: "This app is incompatible with your device."
Which is obvious since these are meant for 4.3 and 4.4. Versions prior to these are different when it comes to permission management. And 4.2 has no appops.

Did you find something that will work for you ?

No, no one seems to know how to open this built in "App permissions" manager that I have in 4.2.2 and could one time open from the notifications.
Sure there are 3rd party apps and options to root and so on but why when there are features in the OS already.

Hi,
Well i have read it on the web - it seems that Android version 4.2.2 removed the "Permission Manager".
I'm in the same situation till i migrated my smartphone OS from Android 4.2 to 4.2.2 - thats' really enoying.
I suppose i'll flash the ROM to recover Android version 4.2 (i mean the official factory Android version of my smartphone) or something.....
Cheers.

root device and install 3rd party app for app permission

[APP][5.0+][FOSS][ROOT/ADB] App Manager : Most Advanced App Manager For Android

App Manager
Note: I am not the developer of this app. I am just posting it here (After taking permission from the developer) so this amazing app can reach to more people who likes tinkering with Android.
This app is developed/maintained by muntashir akon and is completely open source.
Yet another Android package manager and viewer but...
Copylefted libre software (GPLv3+)
Material design (and a nice UI)
No unnecessary permissions
Install Bundled APKs/APKM
Does not connect to the Internet (the permission is required for ADB mode)
Displays as much info as possible in the main window
Lists activities, broadcast receivers, services, providers, permissions, signatures, shared libraries, etc. of any app
Launch (exportable) activities, create (customizable) shortcuts
Block any activities, broadcast receivers, services, or providers you like with native import/export as well as Watt and Blocker import support (requires root)
Revoke permissions considered dangerous (requires root/ADB)
Disable app ops considered dangerous (requires root/ADB)
Scan for trackers in apps and list (all or only) tracking classes (and their code dump)
Generate dynamic manifest for any app
View/edit/delete shared preferences of any app (requires root)
Display running processes/apps (requires root/ADB)
Display your app usage, data usage, and app storage info (requires “Usage Access” permission)
Share APK files (hence the use of a provider)
Clear app data or app cache (requires root/ADB)
Batch operations: clear app data, disable run in background, disable/kill/uninstall apps
One-click operations: block ads/tracker components, block components by signature, block multiple app ops
…and other minor features such as installing/uninstalling/updating/enabling/disabling apps, displaying app installation info, opening in F-Droid, Aurora Droid or Aurora Store. This single app combines the features of 5 or 6 apps any tech-savvy person needs!
Screenshots
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Downloads - GitHub Releases
Contribute - Github
Translate - Weblate
Documentation - Check it here
Help/Support/Suggestions - Telegram

• Reserve for posting stable updates

Good afternoon:
Thank you very much for your application.
I am using version 2.5.20 : https://github.com/MuntashirAkon/AppManager/releases/tag/v2.5.20 which is the latest stable one.
Is it possible to use 2.5.24 : https://github.com/MuntashirAkon/AppManager/releases/tag/pre-v2.5.24 as stable ?
Best regards

How can i save the current list of apps? I have set filter of disabled apps , and i want to save this list.
Thanks,

Oh wow. I find this app manager convenient unlike others. Thanks for developing and posting this.

Looks amazing, thankyou.

Can you move apps to sd card?

that is some crazy good polished app, with professional documentation. By the way, Warden and TitaniumBackup or log viewer inside. Only wish it was better for active permission enforcing, i can't see how to apply app ops in batch, keep permission enforced later or apply profiles on new apps.

I've been using this for a few months.It's by far the best app manager out there. Good luck to the dev!

What happened to the telegram group? It says link invalid

I dont know if this is working as it should. Suppose i ingnored a persmission of contact to truecaller app, then app shouldnt get access to my contacts but after sometimes it resets to on. And truecaller displays all my contact names rather than their original name saved in their databases.
Now is it supposed to work like that or sending blank response to a permission request should work here..?
Thanks for the app.
Regards

Amazing work, thank you

I blocked some Google play services with app manager, and phone (galaxy note 8) keep restarting. As it boots to android and see the launcher, it restart.. I'm rooted and have twrp. Can i delete some file in twrp to unblock everything i have blocked with app manager?
Thanks,

Wow""
Just passing by from this thread, and installed this application to see its level and found a brilliant work ..
Admirable work
Best wishes dear friend

I'd love to disable few app ops like run in bg etc for Google but there are literally no app ops available for Google when i try to open that app here (pls look at ss)

I need your help !
I clicked the the 1-CLick Ops > block trackers > no > block
Now all the apps (except system apps) won't open. Instead the android app-info opens and I have 3 options (uninstall, stop, hide). Unfortunatelly there is no more the option to open an app
It's not even possible to open the AppManager anymore

@PratapShiv Please check your inbox. Thanks a lot.
Regards
Oswald Boelcke
Senior Moderator