Related
Hello everyone.
I hope someone can advise me on the best way to completely lock down GSM/3G/HSPDA data usage (as opposed to voice or WiFi) when roaming.
I'm in the UK with 02 (Orbit2) with an all you can eat data package, but
I'm off to the US in a couple of weeks on business, and I'd like to be completely confident that I'm not going to get a nasty bill when I get home.
I know I could use the HTC communication manager, but I not yet sure I can trust it. It seems that when I hook up to data based apps (explorer etc.) it initiates a new data session anyway.
I also want to be able to use Wifi for my main data access whilst away, but Ideally, in a pinch I'd like to be able to send the occasional short email - but only if I'm sure what its going to cost. If I expressly block data via o2 whilst I'm away then my options will be limited.
So what does everyone else do?
What about the gotcha's like autoupdate of weather forecasts, quickgps etc - these I know about, but there are probably others...
So to summarise: I want free use of data, but only WiFi whilst away. GSM or 3G in emergencies, but only if I unlock it.
Alternatively is there a US based service I can subscribe to for a few dollars a day whilst I'm away?
Try This
Hi,
this this little tool... Makes it easy to change what type of phone connection you will allow.
Cheer
Rar9
Thanks.
Thanks, this seems to do just what I wanted.
it's very small, and when run it gives you the option to individually toggle your data connections.
I toggled to off:
- O2 Active
- Mobile Web
I then fired up explorer - no access (and it said that it couldn't re-establish the connection) - Good.
I then enabled Wifi and was able to use explorer.
Checked phone working, no problem
Then re-enabled GPRS data etc (toggled the two settings back to enabled), and everything returned to normal.
IP Table based Android firewall apps (i.e., DroidWall, LBE Privacy Guard) are known to provide a good measure for preventing applications accessing the internet. However, during the boot time, while they are not fully loaded in the background yet the phone might still be vulnerable.
It might have not occurred but there is actually a very simple solution to the above problem. Disabling the Data service before restarting the phone will leave no chance an application can get a chance to transmit data on the startup process. The option to disable/enable data is normally found under the Data Delivery from the Settings menu.
Also on my Motorola Atrix I found when data is disabled the phone starts a bit quicker for obvious reasons -- any apps that allowed to access the internet does not perform its tasks i.e. weather widgets.
I'm sorry if this tip was already a widely known knowledge. Hope it helps someone new in Android world.
When using the internet on your device that has an active carrier data plan and no WIFI network is available, the device automatically switch to carrier's data plan.
There are many instances where people with limited monthly plans have run into bloated bills due to unintentional excess data usage.
I searched far and wide across the forums, to find any tips, tricks, tools or best practices for optimized data usage, but could not find much.
This is my humble attempt to come up with such a list.
Hopefully this will help someone avoid those surprise excess usages and bloated bills.
Please bare with me if this is insufficient or if the information herein becomes outdated due to new features in latest Android versions.
I'm not an expert. I am kind of a half-noob myself
1. Install a Data Monitor application.
There are applications which help you monitor data usage.
They show how much usage has happened through carrier's packet data and how much is through WIFI.
They also show data usage per application.
If your ROM does not already have these features, there are so many applications available on the android market (Google play store).
Search for one that suits your needs. I personally prefer My Data Manager
Note that all these data monitor applications monitor the usage at real-time.
That means, they can only monitor your usage form the day you installed them. Don't wait till you run into an excess usage problem, install one now.
2. Explicitly turn off packet-data during huge WIFI downloads.
If you are downloading huge data over WIFI (say a 600 MB file), and in-between if your WIFI becomes unavailable, chances are that the phone switches automatically to carrier data and continues with the download.
This is a sure shot scenario to cause surprise excess usage.
The WIFI might become unavailable due to any number of reasons like:
Straying out of the signal area - if you are moving around
Source getting disconnected - I have a cabled broadband with unlimited data on my laptop, I make my laptop a WIFI hotspot (kind of reverse tethering) using a USB adapter (wireless N150 USB adapter from buffalo). Whenever there is a power cut, my broadband connection goes off until I manually reconnect. Also, my connection periodically times off if it's on for a long time, or my laptop might restart.
The router might malfunction or in worst case, the phone's WIFI connectivity might itself dysfunction.
The point is, keep in mind that the WIFI can go off half way through the download and you might end up using carrier data.
The best solution is to turn off your carrier data. [Uncheck Settings -> Wireless and network -> Mobile networks -> Use packet data]
You can turn it on once the download finishes or once you have stopped/paused the download and you are sure that it won't use up your packet data.
This way, you can ensure that you are actually downloading through WIFi.
3. Firewall - allow/disallow data access to individual applications.
There are firewall applications on the market that allow you to:
Block internet access to selected apps.
Many apps like offline games and simple tools require full internet access permission. At first glance, this looks suspicious as these apps do not seem to have any business going online.
The main reason most of them use this permission is to allow in-app Ads.
By using firewalls, you can block internet access to selected apps that do not require internet access for their normal functioning.
Separate packet (3G/GPRS) and WIFI data.
Some apps consume too much data, like Facebook, Google plus and some games.
If you don't need to be online on these apps all the time, you can allow them only WIFI access, so that they can sync only when WIFI becomes available and they can never use up your carrier data.
Toggle blocking status.
Useful when you want to occasionally turn it on for a while.
There are many such firewall apps available on the market and some antivirus apps also come with inbuilt firewall features.
I personally use DroidWall
Note:
Provide access to all android system applications, and apps which come pre-configured from your vendor (I guess they could be trusted)
Make sure all apps that require internet access are given the access - both in WIFI and 3G mode.
Make sure known data guzzlers are denied access - both WIFI and 3G (provided they do not require access for their normal functionality)
If in doubt about any particular app - I prefer to provide it access. Better safe, than risk impaired functionality.
4. Download Manager - pause/resume downloads.
Say you are downloading about 10MB of data and the connection drops when you are about 8MB completed.
At this situation, you do not want to start downloading from scratch again when connection becomes available.
This way, if you are moving in and out of connection, you will end up trying to download the same data again and again, drastically increasing the usage.
You need a download manager with pause, resume, auto resume features to handle this situation.
There are many available on the market, search and use a one that best suits your needs.
This works only for downloading from browser links, dropbox, etc.
The download manager does not come into picture if you are trying to download data directly from an app (like many games download huge data when started for the first time after installation).
I am yet to find an app which can handle this kind of situation. Something like - intercept any downloads initiated from within other apps, and provide you option to manage those downloads.
If anyone knows of any such app, please do update us.
However, most games and apps which do huge data download have inbuilt capability to manage the download.
For example, Sygic has an excellent download manager that manages maps and other downloads for it. It comes by default with Sygic.
5. Push Notification Detectors.
When you install certain applications, they might have tie-ups with certain advertisers to send add notifications directly to your device's notification bar.
Such ads are called push notification ads. They allow the developers to make some revenue and help keep the free applications free.
These notifications show up on your notification area periodically, even when the original application which installed them is not running.
As of now, I cannot find any statics/benchmarks to understand how much data push-notifications consume. But they definitely do consume some data.
It is a personal choice whether you want such notifications or not, I personally feel a little bit of data usage is OK, as it is a small price to pay and helps the developers.
But some applications might be tied up with greedy advertising schemes that do extensive push notifications and consume excessive data.
One best way is to go through the apps description carefully before installing.
If the developer clearly states that the app uses push notification adds, it shows some responsibility on the developer’s part and you can assume he has taken the steps to ensure that the notifications are not excessive and does not consume excess data.
You can then choose to either install or not install the application.
However, there are many applications which are silent about the fact that they use push notifications.
There are many detectors on the market which detect all the installed apps on your device which appear to use known notification Ad frameworks.
They do not block the Ads, but inform you which applications are causing them. You can then choose to uninstall those applications or give them only WIFI data access or freeze them for a certain period of time to monitor your data consumption.
I personally use AirPush Detector
6. Freeze / Unfreeze applications.
If you suspect some application to be causing excess data consumption through push ads, you can freeze it for certain time and monitor the data usage to check if there is any significant change.
There are many such applications on the market which allow you to freeze/unfreeze select apps.
Most of them require root access (I do not know of any such app which works without root)
Titanium Backup (Requires Root) is the best application out there as per my opinion.
It does much more than freeze/unfreeze. It's a must have app for any root user.
PS:
Be very careful which apps you decide to freeze.
There are many apps that should not be frozen, especially system apps and some of those that come preinstalled on your ROM.
If you try to freeze any such app which should not be frozen, you might render your phone unusable.
Please refer threads related to your device to get a list of safe-to-freeze apps for your particular device.
Rooting might void warranty and has an associated risk of rendering your device unusable if done improperly.
If you are unfamiliar with concepts, read through the forums here on XDA, use the search button
This is all I can think of for now.
If you have any more useful tips/tricks or best practices related to data usage, please add them here, so that it can help others as well.
Cheers,
Sandeep
I want to create an "un-steal-able" phone.
Of course this is impossible, but I want to make it as difficult as possible for thieves to get away with it, and as easy as possible for me to find it.
Assumptions:
Phone has available call and text messaging service.
Phone has internet capabilities and "permanent" Internet access. (We will consider 2G, 3G, or 4G cellular access with a data plan to be permanent. Depending on an open WiFi network to be available at all times is unreliable).
Phone is on and has some charge in its battery. (If the phone is off, we can't do anything).
Phone has an accurate GPS receiver.
Requirements:
Software that relays GPS coordinates via an Internet connection. As a backup for when there is no cellular data signal, software that relay GPS coordinates via SMS
Software cannot be disabled or removed without authentication.
GPS on phone cannot be turned off without authentication (alternative: remote activation of GPS receiver via Internet or SMS)
Cellular data and/or WiFi cannot be turned off without authentication (alternative: remote activation of cellular data via SMS)
Where GPS signal can be used for macro location (within 10 to 30 meters), there must be some method of micro location (within a few feet).
Phone cannot be powered off via any button press, on-screen menu, or removal of battery
Phone cannot be wiped by on-screen menu or by computer cable connection
Now I have approached this solution from two starting points: the iPhone running iOS, or an Android-based smartphone. Both have different advantages and technical details. Let's look at how we can meet each of these requirements one by one.
iOS solution:
Unfortunately, if your iPhone is not jailbroken, your choices are not so great. But FindMyiPhone does do the basic job of relaying GPS coordinates. For a jailbroken iPhone, iCaughtu seems to be the best of the bunch from the research I have done and gives you a bunch of cool anti-theft features.
and
Using the options under Settings -> General -> Restrictions, you can disallow users from deleting apps AND from turning off location services. Of course, you can accomplish something similar by simple setting a password to access your phone. Unfortunately I haven't yet seen any program that allows you to remotely activate the GPS receiver on an iPhone.
Unfortunately I don't think there is anyway to prevent a thief from disabling your cellular connection other than setting a password on the whole phone. This has its advantages and disadvantages.* Similarly, I don't see any way to remotely activate the Cellular Data on an iPhone via SMS.
This is where things start to get more complex and we need to start thinking of actually modding the phone. So far the best RF tracking solution I have found (in terms of size, cost, and effectiveness) is a cheap chinese-made product that I picked up in Asia and cannot find a link to. This one is very similar http://www.amazon.com/Loc8tor-LTD-Loc8torLite-LOC8TOR-Lite/dp/B0012GMDC4/ but the reviews are meh. It is RF-based but does not really give any directional information. Once you are close to the RF transmitter (using the GPS coordinates), you can use the RF receiver to basically play a little game of hot and cold and walk in different directions all while watching if the signal gets stronger or weaker. I've done two real world field test with the similar device and was able to successfully find a purposely concealed bag in a slum twice.
But how do we get this into the phone? If you disassemble the transmitter, it is a very small circuit board, but most phones these days are already packed to the brim. Additionally, these units need power, so you would need to solder it into the phone's power system.
For the iPhone, concerns about a battery-based shutdown are reduced by its "sealed" battery compartment. Of course, with the right tools, someone can get to the battery. But this is not likely to happen quickly and will likely occur in a specific home or shop, from which we can get coordinate data. We only need to delay the thieves long enough to track them. The bad news is that preventing an iPhone from being shutdown via button press is much more difficult. Even with a lockscreen password, anyone can turn off an iPhone with a long power/sleep button press. I found a mod on Cydia that required a password before any shutdown, but it seemed it was only compatible with iOS 5 and I am running iOS 6.
This is the most challenging problem, as the most common method for any experienced phone thief to avoid detection is simply to power off the phone (or disable internet/3G) and as quickly as possible get to a computer and perform a complete wipe using any number of computer programs. A password on the phone can prevent access to the menu options for resetting factory default, but very little can prevent a thief from physically connecting the phone to a computer and wiping it.
Again I turn to physical modding. Would it be possible to modify the iPhone connector in such a way that the pins for power and charging would still work, but the pins for a data connection would require a specially modified cable to conect to the computer? Once my phone is through its initial setup and/or, most anything I need to do as far as data can be accomplished via WiFi. If needed, I would keep my special data cable at my home only and never take it out. But losing the ability to charge from any iPhone cable would be too debilitating to daily usage.
So I ask the experts: how can I improve on or solve these ideas? Is there software out there that I don't know about, either on the App Store or the Cydia Store? Are there ways to remotely control the iPhone's wireless and GPS functions via text? There should be. Any ideas on incorporating a tiny RF transmitter into the iPhone? Is there any way to prevent an iPhone from being shut down via the sleep button? Is there anyway to sabotage the lightning connector in an intelligent way to prevent a computer-based wipe?
*Advantages and Disadvantage of a phone-wide password. Honestly, I would rather not have a lockscreen password on my phone. I'm not a privacy freak and I don't care if a thief sees my pictures of e-mails or Facebook. If my phone is stolen, I'm hoping it is stolen by an idiot and that they WON'T try to wipe the phone. None of my solutions are foolproof. Everything in here is about delaying the thief long enough to track them. If an idiot steals a phone without a password, he MIGHT just use it as is. But if an idiot steals a phone and can't doing ANYTHING with it, he is going to take it to someone who will be smart enough to wipe it MUCH SOONER. Of course, the disadvantage is a loss of privacy, but iCaughtu has a cool solution for that too.
Android solution:
Android phones are much easier to root, and software solutions exist that will work reasonably well even for nonrooted phones. The best software I have seen is Avast! Anti-theft (part of Mobile Security), AndroidLost, and Cerebrus. All of these can report GPS coordinates, and with Avast! at least, you can also see coordinate history online and actually follow the path of your phone through the minutes, hours, and/or days. AndroidLost can report GPS coordinates online OR via SMS!
,
and
Avast! cannot be removed without a pin code. It can also prevent the user from during off Cellular Data and GPS. AndroidLost can be used to activate WiFi, Cellular Data and/or GPS via internet command OR via SMS. There are a ton of other internet-based and SMS commands in AndroidLost as well. Even without an active lockscreen password, a thief would be powerless to disable communication between the tracking software and you. In this department, Android truly outshines the iOS solution.
Getting an RF tracker into an Android-based phone has the same challenges as an iPhone.
I haven't found ANY glimmer of hope for a mode to disable shutdown via a long-button-press on Android. At least I found one mod for iPhone, even if it was the wrong iOS version. This is a huge gap in the goal of building an "unstealable" phone for both operating systems. As for the battery: Android phones come in many flavors. Many have removable batteries, so if you want to make life more difficult for thieves you'll have to limit yourself to a phone with a "sealed" battery compartment such as the HTC One.
A computer-based wipe via USB cable presents the same challenges as an iPhone EXCEPT that we're dealing with a more standard interface so that MIGHT make modding an easier task. Is there any way to make the microUSB jack more "proprietary" so that any normal USB cable can charge it but only a specially one can transmit data?
There is one other detailed I am interested in, but which is, I believe, currently impossible since it would require modifications to the lowest level of the phone's software, and that would be an auto-on feature. If the phone's battery dies for any reason (or any other shutdown that is not user-initiated), I would love for the phone to automatically power back on whenever it receives a new power source (either being plugged into the wall or getting a fresh battery).
Why am I so interested in doing this? I live in a third-world country and I travel to many other third-world countries. For 3 years, I guess I had good luck, but in the past year I have had three phones and a laptop stolen from me on the street and I have been punched in the face. Several of my friends have also had phones stolen during that time, and one friend was even kidnapped and robbed. Maybe crime is getting worse or maybe it is just coincidence. I have tried to be more careful each time, but one should not live life in fear or blame ones carelessness alone. It is time to fight back. Money, time, memories, self-respect, and peace of mind have been taken away from me and from people I care about. These thieves bear the real responsibility for these crimes. And the police and government here is largely unwilling, incapable, uncaring, and/or corrupt. Maybe I can help others as well.
Thanks for your suggestions and input.
Your thoughts are well expressed.
Hopefully something is coming fast to consumers.:good:
I have concerns related to the security of S4 as a hotspot. While using the device as a hotspot it
became extremely hot, and started to malfunction. I could see that no one other than myself was
connected to the hotspot. Other unusual activity was observed as well, and the carrier has taken
extreme & unusual steps to prevent me from discussing it with their employees.
When using an S4 with (selinux enforcing) as a hotspot, is there any risk that a malicious webserver operator
can somehow access the device using the carrier assigned (dynamic) ip address?
What type of protections (on the wan side) should be in place to properly secure an S4 with 4.3 for use as a hotspot
so the device itself can't be compromised? (assuming no 3rd party apps are installed) I assume device encryption would
not help this situation because the device has to be decrypted to run the hotspot. It's unclear samasung knox 1.0 could
provide anything useful, and I think they force packets through lookout so it slows the connection.
greens1240 said:
I have concerns related to the security of S4 as a hotspot. While using the device as a hotspot it
became extremely hot, and started to malfunction. I could see that no one other than myself was
connected to the hotspot. Other unusual activity was observed as well, and the carrier has taken
extreme & unusual steps to prevent me from discussing it with their employees.
When using an S4 with (selinux enforcing) as a hotspot, is there any risk that a malicious webserver operator
can somehow access the device using the carrier assigned (dynamic) ip address?
What type of protections (on the wan side) should be in place to properly secure an S4 with 4.3 for use as a hotspot
so the device itself can't be compromised? (assuming no 3rd party apps are installed) I assume device encryption would
not help this situation because the device has to be decrypted to run the hotspot. It's unclear samasung knox 1.0 could
provide anything useful, and I think they force packets through lookout so it slows the connection.
Click to expand...
Click to collapse
bump
greens1240 said:
Other unusual activity was observed as well, and the carrier has taken
extreme & unusual steps to prevent me from discussing it with their employees.
Click to expand...
Click to collapse
would you elaborate on that?
keen36 said:
would you elaborate on that?
Click to expand...
Click to collapse
Those are actually 2 separate issues even though the carrier's actions may seem unusual.
I don't see https in the url for this site, and when I try to force https it redirects to remove the ssl,
so privacy didn't matter here?
Some of the unusual activity involved messages about "sim data" refresh/change when no 3rd party
apps were ever installed, the phone wasn't rooted, and updates turned off. Apps that were turned off
showed subsequent network activity. After a factory reset, disabling some apps and changing other
settings, the main issue was the phone getting extremely hot when using the hotspot to test a vpn
service (vpn settings config on pc not on android).
If your phone number ends up on that "list" you should expect management to take an approach with you
as if litigation is underway. Expect very little cooperation, leave 15 messages over a 30 day
period with 5 different corporate managers to finally get a return call from yet a different manager who
finally admits they have ways to prevent your phone from getting through to support or customer service.
They must have thought none of their customers would figure out that advanced call rejection features
can do all kinds of things, such as put select callers on hold indefinitely, forward the call to a number that
rings but never answers, have the caller hear fast busy signals, have the caller hear a message that no
one is available to take their call, etc, etc. A word to anyone with a cell phone - If you can't get through
using 611 or the carrier's toll free numbers, try calling from a different phone, and if you get through
with the different phone, then you know.
xda admins probably thought that encryption is not overly important, this being a public forum and all... i would also prefer ssl everywhere, but it does add a layer of complexity and also increases demand on the server, so i can see why it is not implemented here.
what do you mean with
Code:
"sim data" refresh/change
? what do you mean when you say you have apps "turned off"?
i can easily see you getting blocked if you annoy any support-hotline too much. i do not see something especially suspicious about that.
if i may be honest: you appear to be a little paranoid.
keen36 said:
xda admins probably thought that encryption is not overly important, this being a public forum and all... i would also prefer ssl everywhere, but it does add a layer of complexity and also increases demand on the server, so i can see why it is not implemented here.
what do you mean with
Code:
"sim data" refresh/change
? what do you mean when you say you have apps "turned off"?
i can easily see you getting blocked if you annoy any support-hotline too much. i do not see something especially suspicious about that.
if i may be honest: you appear to be a little paranoid.
Click to expand...
Click to collapse
As network packets travel over the Internet, anyone with physical access to a network device (within the packet route) can view your activity without your knowledge. There are redirection protocols used by thousands of businesses and ISPs to divert port 80 traffic to web caches, internet filtering appliances, and data mining "honeypots". Not sure if still true today that network router and Layer 3 switches manufactured by Cisco ship with a redirection protocol (WCCP) that can be used to re-reroute HTTP traffic through an external filtering or a logging device. Most would agree when it comes to discussions about network security- exchanging plain text email, and requesting advice on plain text message boards is not the best practice.
"refreshing sim data" was a message I observed after the s4 was rebooted. It seemed odd that the message appeared when there was no update or installations. But I'm not an expert on the device, for all I know it might be normal to see the message when there's no activity. As far as turning off apps, it's normal to turn off apps that use resources, drain battery, etc. if you don't need them. Turning off, not deleting, and changing permissions doesn't appear to be an option on 4.3 without a 3rd party app.
As far as sounding paranoid, there's a lot more to the story that I didn't go into involving what looks like attempted identity/phone theft by the carrier's own employee(s) or reseller(s). The way the situation was handled it genuinely looked like a cover up, and still does.
There is still the issue of securing a hotspot which no one from any tier 2 support centers has been able to answer. Not sure if a droidwall or other firewall would be doing anything beneficial since I assume any port scanning would be of the device connected to the hotspot rather than the s4 itself.
yes, anyone along the route can intercept the packets and even read them if they aren't encrypted. yes, there exist man-in-the-middle attacks. yes, most would agree that when exchanging security related information, it would be best to encrypt. that doesn't change what i said: this board is not security oriented, it is a public, developer oriented board. encryption is not very important here, so the admins must have thought that the benefits of not encrypting outwheigh the risk. if you really have sensitive security-related questions, this is not the right place to ask them, i fear.
what do you do exactly when you "turn off" an app? step-by-step?
have you tried googling what "refreshing sim data" does and why it is happening? it looks harmless to me!
last thing, to get this clear: you think that someone hacked your hotspot because the phone gets hot and unstable when you use it? no, wait, you have about a thousand small other things that also point to that explanation, right? this sounds like a case of unfounded paranoia to me. i have some experience with paranoid schizophrenics, and while i am not (!) calling you that, i have to advise you that the way you argue reminds me of them.
you are looking for suspicious things and you do not understand enough about these phones (they are ridiculously complex, so that is quite normal i might add) to see whether something is suspicious or not.
keen36 said:
yes, anyone along the route can intercept the packets and even read them if they aren't encrypted. yes, there exist man-in-the-middle attacks. yes, most would agree that when exchanging security related information, it would be best to encrypt. that doesn't change what i said: this board is not security oriented, it is a public, developer oriented board. encryption is not very important here, so the admins must have thought that the benefits of not encrypting outwheigh the risk. if you really have sensitive security-related questions, this is not the right place to ask them, i fear.
Click to expand...
Click to collapse
Do you know a better place to ask advanced security related questions about Samsung/Android? Google and Samsung tech support are unable to answer many basic security questions. Anything advanced is a foreign language to them.Ask 1000 Samsung employees "What is Knox?" and 999 will answer "Never heard of it." Most don't care about security, and never will unless and until they become a victim, and have a substantial loss.
keen36 said:
what do you do exactly when you "turn off" an app? step-by-step?.
Click to expand...
Click to collapse
I used app manager. I'f you're familiar with S4 running 4.3 then you're familiar with app manager.
keen36 said:
have you tried googling what "refreshing sim data" does and why it is happening? it looks harmless to me!
Click to expand...
Click to collapse
This message may be related to updating network tower(s) info which I agree, by itself would be harmless.
keen36 said:
last thing, to get this clear: you think that someone hacked your hotspot because the phone gets hot and unstable when you use it? no, wait, you have about a thousand small other things that also point to that explanation, right? this sounds like a case of unfounded paranoia to me. i have some experience with paranoid schizophrenics, and while i am not (!) calling you that, i have to advise you that the way you argue reminds me of them.
Click to expand...
Click to collapse
There's constant network inbound/outbound activity while the device is idle according to the indicator. The activity could be perfectly benign. Many native apps communicate with the network, but it is also possible to turn off (restrict) background activity to limit which apps have network access. I wouldn't know what it is without running a program such as wireshark. A paranoid schizophrenic might think an app that had permission to access the microphone, recorded audio in the room, then encrypted & uploaded it to a server for later retrieval. That could never happen in the real world right?
I'm merely asking questions about various events which may or may not be signs that there's a problem, but I've not concluded anything. More importantly I'm hoping to find information on how to properly secure a hotspot. You've not offered any information about this so I assume you feel no hardening, modifications, or additions are necessary, and in using default settings the device is impenetrable.
keen36 said:
you are looking for suspicious things and you do not understand enough about these phones (they are ridiculously complex, so that is quite normal i might add) to see whether something is suspicious or not.
Click to expand...
Click to collapse
I agree, they are complex. Tech support is of no use, they simply are not trained to respond to a question such as "Is there a firewall running on the device?" "Is code checked for malware by human eyes before an app is put on playstore, or simply trust unknown authors and feedback?"
no, i am sorry, i do not know about any android security related web communities.
i use a sony phone on kitkat, so no, i have no idea what you mean with "app manager". i just want to know what that program did; did it uninstall the apps, did it disable them, did it freeze (rename) them? i have never heard of an app being "turned off", that's why i ask.
what you describe with the microphone listening and uploading what it records to the internet, that is happening every time you open google voice search or -if you use the google now launcher- everytime you go to the homescreen
i do not know how you got the idea that i think that your device is impenetrable ([email protected] sentence btw. )? that is a ridiculous thought, i would never say such a thing. in fact, i am of the conviction that no absolute security can exist on a device which is connected to the internet. there is a reason why some security-related programs are built on machines with no internet access at all.
if you know how to use wireshark, why don't you just use it? if i had to take an uneducated guess, i would think that you would then realise that the network activity you see is benign (not malicious i mean, you might very well discover some nice datamining activity by google etc. ).
i do not know your usecase, if you are living in a country which has an oppressive regime, if you are a general target for hackers somehow (public figure / working at a security-related position etc.), then yes, it might make sense to look at your phones security in detail. if that is not the case, however, then no, i do not think that additional hardening of your hotspot is needed...