[Q] Android email & security - Android Software/Hacking General [Developers Only]

We are in the process of getting Android devices at work
On these devices we're being forced to use TouchDown email klient instead of the built in Android klient. Head of IT Security tell us it's because the android klient is not encrypted, while TouchDown is.
I think he means the local data stored on the device, because it surely do use SSL for transfering data.
My question is...wait, what? It isn't encrypted? Can anyone shed some light on this for me?

Hello I'm a htc touch pro 2 owner with android on my phone,I must have the electrum programable drum machine,I noticed the sound installments in the open market but not the drum machine I tried 2 google it but it wouldn't download if there's anyway u can help me it would be most appreciated thank you.
Sent from my MSM using XDA App

I found my answer here: https://code.google.com/p/android/issues/detail?id=8686
It seems Android won't get device encryption at all. If google was working on it, they could at least drop a hint, to keep people from jumping ship.

I hate to say this but this is where apphole had Android beat. My company is doing some pretty sweet stuff with iOS that just isn't possible with Android. For example Cisco VPN. It is built-in iOS. To get it to work on Android takes a huge work around. But it did take 4 generations of iOS before apphole got it. So maybe by graham cracker Android will too.
posted via the xda app with my Evo

Related

Logmein Remote Control "Ignition for Android"

I've been waiting for this app and am not disappointed. What a great way to remote control your desktop. All you need is this client on your Evo and a free account at logmein.com. Total no brainer setup. The App is in the market as of today. Very cool.
This is by far the most underwhelming product logmein has come up with. I was a beta tester and I can tell you I would recommend waiting on this to mature (or not buy it at all).
This app force closes, has a memory leak, sometimes will randomly log me out of my pc, and my personal favorite - restarts my phone at will.
I have tried it with
- stock rom
- rooted rom
- diff evo
- new sd card (for giggles)
- on wifi
- on 3g
To ask 30 bucks for this is absolutely crazy. It's a pitty really. I would almost think about it if it was reliable.
Yeah, seriously, this is one of the worst product ever and definitely the worst ever from LogMeIn.
Everything that fr0st said + the app doesn't even let you use your finger as the mouse. Rather, you have to drag the screen around to your static mouse position... W.T.F!
The web interface for LogMeIn is WAY better than this app AND it's free. $30? Again, W.T.F are these guys smoking...?
I've been satisfied with PhoneMyPC since I got my first Android device.
This was the reply from logmein.
We did make changes after the beta ended. If you purchase the finished product and are still having issues, you can call in to our support team at 1-800-993-1790 to get assistance with resolving them.
I hope this helps. Please feel free to contact me if you have any further questions.
Wendy Merrifield | Sr. Support Representative
· ·· LogMeIn, Inc.
www.LogMeIn.com | [email protected]
p. +1-800.993.1790
Click to expand...
Click to collapse
Ah, no. Not giving you 30 bucks to call tech support.
I used the beta too and found it difficult to navigate the pc with the static mouse. The 30 dollar price tag is WAY too much for an app in my opinion. Unless it does something amazing.
HTC evo
for those with the technical knowledge and ability, Wyse has a VERY nice RDC/VNC client available. (basically, configure your home pc to accept rdc connections and configure your router to allow the traffic through and viola...direct RDP connection...no logmeinscrewyou needed.)
http://www.wyse.com/products/software/pocketcloud/android/index.asp
fr0st said:
This is by far the most underwhelming product logmein has come up with. I was a beta tester and I can tell you I would recommend waiting on this to mature (or not buy it at all).
This app force closes, has a memory leak, sometimes will randomly log me out of my pc, and my personal favorite - restarts my phone at will.
I have tried it with
- stock rom
- rooted rom
- diff evo
- new sd card (for giggles)
- on wifi
- on 3g
To ask 30 bucks for this is absolutely crazy. It's a pitty really. I would almost think about it if it was reliable.
Click to expand...
Click to collapse
All those issues pretty much stink. I've been using it for a couple days pretty hard and have not had a single issue....yet. I'm using a rooted 1.47 and have used it on wifi, 3g and 4g without a problem. The screen movement under the mouse takes a little getting used to but I kind of like it now. I'm new to android and have not tried any of the other remote apps but it sounds like I need may to, to get some perspective. For now it is the only way I can run my company scheduling program on my Evo.
What about a remote control software for mac?
Sent from my PC36100 using XDA App
I haven't had any force closes with lmi for android and I've been using it for over a month. To be able to remote into the more than 100 pcs that I support, from my EVO, is a huge time saver. Worth the money to me.
Sent from my PC36100 using XDA App
Its actually a known issue.
http://community.logmein.com/t5/User-to-User-Support/android-force-close/m-p/40391
I am just saying I would not recommend it. If it works for you thats awesome. I support clients all over the US and logmein would be a great benefit to me. However even when you contact tech support the tell you "its a new app, give it time". So I am waiting for it to improve.
Also. Please provide the rom your using a point of reference. I would like to do some additional testing.
Whooaa 30 bucks for that program? Hmm maybe a penny is what its worth.
*This was posted from my Evo 4G*
Second the request for a Mac option. So far, LogMeIn is the only one i know of that supports Mac, but if there's another way, I'd love to know!
DraginMagik said:
for those with the technical knowledge and ability, Wyse has a VERY nice RDC/VNC client available. (basically, configure your home pc to accept rdc connections and configure your router to allow the traffic through and viola...direct RDP connection...no logmeinscrewyou needed.)
http://www.wyse.com/products/software/pocketcloud/android/index.asp
Click to expand...
Click to collapse
Wow! This is awesome! Thanks a bunch. So much better + free.
OK, well Wyse looks very cool and I configured it and all, but just get a Could not connect to server message...
mmm...
i use it to connect to both work and personal systems...in local network and through firewalls...both RDP and VNC...to a few flavors of Windows and one flavor of linux. aside from not being on a 22" wide screen it works quite well.
the only thing i can think of off the top of my head would be this....
on the username line - did you enter it like "mydomain\myaccount" or "MyComputerName\MyAccount" or simply "MyAccount".
also, you may want to try connecting via IP address...to eliminate DNS issues.
Got it all sorted out, thanks. Awesome program. WAY better than LogMeIn. Hopefully their price is reasonable when it leaves beta.
Nagrom Nniuq said:
Got it all sorted out, thanks. Awesome program. WAY better than LogMeIn. Hopefully their price is reasonable when it leaves beta.
Click to expand...
Click to collapse
Just out of curiosity, what fixed it? It didnt work for me at first, then i set up a desktop password and it worked. My only issue with it is that you log into the computer as another user and cannot use it as to start music and have it played through the home computer.
dcmtnbkr said:
Just out of curiosity, what fixed it? It didnt work for me at first, then i set up a desktop password and it worked. My only issue with it is that you log into the computer as another user and cannot use it as to start music and have it played through the home computer.
Click to expand...
Click to collapse
The Windows Operating System requires a password be used on accounts that allow a RDC session (just a baseline level of security).
not sure about your last sentence.
- my assumption is that you are remoting into your desktop...double clicking on MediaPlayer...and not hearing anything on your EVO....i would expect that behavior.
- if you wish to stream audio from your home pc then you'll need an application designed to that.
- if you meant that you basically wanted to be able to scare your girlfriend by remoting in and turning on winamp with some deathmetal...you should be able to do that, but i have not tested it.
and yes, i pray they provide pleasant pricing for the product.
I just logged in using 3G instead of WiFi (so off the network) and it worked fine.

Parental control

I'm looking for something that will have a few features
1. Remote location including turning on GPS
2. Remote phone locking/ turning off mobile and data connections
3. Prevent access to security settings
4. Prevent easy uninstallation of the app.
I think most parental control apps should fulfill this, but I'm struggling (on my phone) to get honest pricing details, what is "free" from the play store then seem to require monthly subscription.
Does anyone have any experience of these apps, and can maybe recommend one with a single payment (or even really free)
Where's my droid was great for location, but too simple to remove
Thanks
Sent from my GT-I9300 using Tapatalk 2
They all will be monthly subscriptions and to be honest any kid with internet access will be able to get around it. As a test I tried everyone I could find on my 12yr old sons devices. And within a few days they had it disabled. And they are not really all that tech savy. When I asked them about it they just said they searched the internet and found out how to remove it.
Wayne Tech Nexus
Maybe I've found a part solution? Installed where's my droid pro and set as administrator, then applock used to lock itself and settings. Might work?
Sent from my GT-I9300 using Tapatalk 2
It depends on. How bad they want to get rid of it. A simple wipe will remove it.
Wayne Tech Nexus
When I was in college I was an admin on one of our development labs. CS 1.6 by then was a plage there, most of the people spent more time playing it than coding. I removed everybody's permission to install software, they just used a portable version. I downsized their quota to about 50mb, they put it on the shared drives our university had. I downsized their quota there as well, so they shared the files over their quotas do get the full game there again. I made a script to search and delete the game files hourly, they had the game patched, so the files had names my script could not find. It was 2003, they did it as freshmen, and none was really skilled, and after looking at someone's browse history I just found what they used to deceive me. After that I gave up, printed a poster asking them to play only after 5 pm (when the classes ended). If you accomplish to have parental control on a kid's smartphone is just a matter of time and interest on the little guy/girl's part to have it circumvented.
At least if he finds a way around it he'll have learnt something
Sent from my GT-I9300 using Tapatalk 2

[MobileIron] Using Android where only iOS supported?

Hi
I am due to move on from my trusty old iPhone 4 to a new Android.
I currently have access to corporate email on my phone via MobileIron.
I very much want to get an Android phone, but IT doesn't support Android. Apparently when testing, the email client (didn't say which one) did not render HTML properly. They are now 'testing' compatibility with Android, but this is on the backburner.
There's no way to argue with IT, as they are not going to change their policy (I work in a large company with bureaucracy).
My iPhone is jailbroken and I use xcon to trick MobileIron into thinking I'm not.
Is there any way of getting MobileIron to work on an Android phone? For example, tricking the client into saying I'm on iOS, or perhaps loading the MobileIron app and just calling IT to activate my phone and tell them that it's an iPhone?
I ONLY want email, nothing else. Perhaps that makes it a little easier for me to just connect despite being on Android?

Rooting Samsung Fridge w/Tizen 3.0

My fellow hacker friends,
I have recently procured a Samsung Smart Fridge RF265BEAESR/AA that is currently running Tizen OS 3.0 (FHUB2.KM.US.AW1-12.MP 20170424_141153. I have scoured the interwebs for a solution, but to no avail. There is a usb port inside the right door cover. I've heard many great things about KingRoot, but apparently this hasn't been tested out on a fridge. BTW, Tizen also controls the fridge/freezer temps, the damn thing cost 2700 US dollars so I am warry. Please weigh in if you all have any ideas.
Thanks,
Dave
I'd like to get somewhere with this fridge as well.
Had a discussion on Reddit which didn't get very far but I put links to all the info I could find there:
reddit.com r Tizen comments 7ftshm how_to_sideload_apps_on_family_hub_fridge
Samsung actually sent me a link to DL the family hub variant of Tizen. But they have also locked out any kind of developer access to the fridge. I'm thinking the only way (without resorting to hackzzz) would be to dismantle the door and find the serial port connection and try and enable developer mode.
I looked at similar attempts to root Tizen TVs and cameras, I can't see any obvious ways to execute commands but I'm far from an expert with Linux.
Also looking at adding a proxy inline and seeing what traffic is being sent to it.
---------- Post added at 02:28 AM ---------- Previous post was at 02:22 AM ----------
I believe the fridge has the same version of webkit as the vita, so in theory this could work but beyond my skill or time allocation:
https:slashslashblog.xyz.isslash2016slashwebkit-360dot html
A scan with nmap reveals a mongoose 6.6 server on port 17654 and reverse SSL on 47180. The mongoose server give a file structure listing
hehehe
yourFridgeIP:17654/.krate/owner/share/scloud/glazeCameraInfo.txt
So if anyone has experience with reverse SSL and possibly Mongoose server exploits...
rambutan2000 said:
A scan with nmap reveals a mongoose 6.6 server on port 17654 and reverse SSL on 47180. The mongoose server give a file structure listing
hehehe
yourFridgeIP:17654/.krate/owner/share/scloud/glazeCameraInfo.txt
Click to expand...
Click to collapse
Hmm... nice find. There are a few vulnerabilities however my refrigerator has not yet been delivered so I cannot check:
Mongoose Exploit:
express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for `GET /User?distinct=password` and get all the passwords for all the users in the database, despite the field being set to private. This can be used for other private data if the malicious user knew what was set as private for specific routes.
Google CVE-2016-10533
Someone i know asked me how to add apps on their 5000$ samsung family hub smart fridge. After extensive research the OS used on the samsung fridges is a specific version of Tizen developped specifically for the fridges and nothing else. So long story short: you can't access the Tizen store on the fridge because the Tizen version of the fridge is not compatible with them.
TLDR: it's not possible to add applications on the samsung smart fridges. If you have one, sell this **** quicky and buy a regular american fridge with an external fridge camera ( https://store.smarter.am/products/fridgecam ) instead and an ipad connected to it. This will work 1000 times better than a regular samsung smart fridge and cost less money as well.
I was able to enter into DEVELOPER MODE, but is asking for a password. Anyone having an idea what would be?
Has anyone gotten anywhere with this?
Bump? Anything new? With tizen 4.0? It is RIDICULOUS that basically the only apps available is some airplane ticket ordering thing for rich people, some expensive wine shopping app for rich people, amazon junk like Ring and some god damn Nespresso capsule app!! The voice input doesn't even work in my language even English recognition is FAR below android standards. The food expiration / food list is basically useless lol. Bixby is useless. No reason to have family hub, I can't even get my parents to install the family hub app and I can't even have fun with the OS. Cannot set dns server so I have to use Pi-hole to block the goddamn ads everywhere in the apps and browser..
Bump ....this is really frustrating and the biggest tech mistake I've made buying this heap of garbage.
StrongOneX said:
Bump? Anything new? With tizen 4.0? It is RIDICULOUS that basically the only apps available is some airplane ticket ordering thing for rich people, some expensive wine shopping app for rich people, amazon junk like Ring and some god damn Nespresso capsule app!! The voice input doesn't even work in my language even English recognition is FAR below android standards. The food expiration / food list is basically useless lol. Bixby is useless. No reason to have family hub, I can't even get my parents to install the family hub app and I can't even have fun with the OS. Cannot set dns server so I have to use Pi-hole to block the goddamn ads everywhere in the apps and browser..
Click to expand...
Click to collapse
dreamtheater39 said:
Bump ....this is really frustrating and the biggest tech mistake I've made buying this heap of garbage.
Click to expand...
Click to collapse
Why even waste the time and effort? It just isn't worth it at all and could never be useful.
Sent from my SM-S767VL using Tapatalk
At least I got 30% off on it on Black Friday
Hi everyone, I bought that *** fridge from exposition and appears to be locked by PIN. No one from seller to smasung subcontractor is able to reinitialize the frigde (liek reset factory mode -which default one is not accessible in fridge menu due to missing pin code).
any idea how could I solved that myself via engineer mode + usb port pls ?
many thanks
[email protected]
xoolit said:
Hi everyone, I bought that *** fridge from exposition and appears to be locked by PIN. No one from seller to smasung subcontractor is able to reinitialize the frigde (liek reset factory mode -which default one is not accessible in fridge menu due to missing pin code).
any idea how could I solved that myself via engineer mode + usb port pls ?
many thanks
[email protected]
Click to expand...
Click to collapse
Theres a person on Reddit that was able to get into the LCD through a serial connection - "There is an interactive UART console available on an unpopulated connector (CN9) on the bottom of the board on pins 3/4. I connected to the flash chip in-circuit right when the bootloader starts to access it so it gets the proper init sequence. Then I mounted the ext4 partition and changed the root password. Now I have a permanent root shell over serial . Time to put that kernel source to good use and disable SMACK auditing so I can boot my own rootfs." Post was titled "Rooted family Hub screen playing hardware accelerated gstreamer RTSP stream"
This is more headway than I have ever seen. I really hate that this POS cant be updated and its locked down, to boot...
https://www.reddit.com/r/hardwarehacking/comments/dv0nqd/samsung_family_hub_rooted/
Looks like someone was able to get access to the OS and make a complete dump. Anyone brave enough to pop out the panel?
Hannover2k said:
https://www.reddit.com/r/hardwarehacking/comments/dv0nqd/samsung_family_hub_rooted/
Looks like someone was able to get access to the OS and make a complete dump. Anyone brave enough to pop out the panel?
Click to expand...
Click to collapse
lol This is pretty incredible NGL almost want to go buy a new fridge in hopes this gets development.
pieboots said:
lol This is pretty incredible NGL almost want to go buy a new fridge in hopes this gets development.
Click to expand...
Click to collapse
I really don't see the point, what could you possibly do with it that would actually be worthwhile?
Sent from my SM-S767VL using Tapatalk
Droidriven said:
I really don't see the point, what could you possibly do with it that would actually be worthwhile?
Sent from my SM-S767VL using Tapatalk
Click to expand...
Click to collapse
Would be nice to be able to install some of my own apps on there. Not looking to do anything crazy but Samsung only allows licensed apps so they're constantly removing apps and swapping things out. and I wouldn't mind having my Sirius Satallite radio app on there or something other than Pandora. To at least be able to have a choice of apps and not just every crappy samsung app that they feel like adding or removing.
?
Hannover2k said:
Looks like someone was able to get access to the OS and make a complete dump. Anyone brave enough to pop out the panel?
Click to expand...
Click to collapse
I have one!
Same boat
Agreed! Would love to install the xfinity and Netflix apps so this could essentially also be a “Kitchen TV”. We don’t have any Samsung smart TVs (we are Roku/vizio house) so installing these apps on the fridge are kind of our only option ATM. Dying to figure out how to sideload apps. Wonder if the similarities to the smart TVs can be useful here

3DS Streetpass

Hi all,
I live in a country where it seems, or at least feels like, I am the only person who has a 3DS. Its got some great games but some use Streetpass for good benefits.
I read online that one could simulate Streetpass by having an Android Hot-spot named a certain way, but it also requires the hot-spot to have a MAC address within a certain range of numbers.
It seems that spoofing the mac was far easier on older versions of android. It does not work on my OP6. Does anyone know an effective way to do it on more up to date versions of android?
I use this app but you need root.
NateDev said:
I use this app but you need root.
Click to expand...
Click to collapse
Thanks!
How did you set it up? To me, it seems that this app doesn't change the mac.
Edit: Actually it seems more that Nintendo might have discontinued their Streetpass Relay system.
I can't imagine it taking much to keep it online. Streetpass interactions are rather minimal, just a code of "a user exists" + a list of games. The 3ds can then check the associated profile via normal Internet for additional preferences. Most games that use it just power up the username after repeat "visits" and don't even interact with any profiles.
But for many people, the relay was the only way to get Streetpass. Disabling the relay really messes up people using things like Tamagochi 3ds, which was only released last year.
It's not really that big of a loss. My jRPGs will work fine regardless.
Sent from my OnePlus 6 using XDA Labs

Categories

Resources