Database Info

{DEV} Remember the CIQ Apps Found In HTC Devices?There Is More And It Isn’t Pretty!!

Taken From XDA Portal
For the last few weeks, we have been intensely covering security and privacy issues that involve quite a few of the latest HTC devices (Sensation, EVO 3D, etc). It was discovered by XDA Recognized Developer TrevE that there are multiple apps and services that basically collect all sorts of information about our devices, their usage, and everything that is done on them to later on be sent to some Amazon cloud drive. HTC has come back a couple of times with official statements saying that the apps are indeed harmless and that the information collected is to basically help HTC and the carriers to improve their products and services to us. Moreover, they claimed that, at least, the HTC services can be opted out and they would stop collecting said information. Well, TrevE has been doing a lot of research as of lately and further proved that not only can these services not be turned off by regular means, but also has shown, by doing an experiment in a controlled environment, that the apps are inherently dangerous as they can be easily exploited by virtually any app that has android.permission.INTERNET enabled, which a ton of apps in the market currently do.
The kind of information that can be pulled from the device could be enough, potentially, to clone a device completely if the person receiving this knows how to do it. The app seems to allow the dump of virtually all stats and values by the device. Regardless of HTC’s motives to collect this information, the important part about this, and really the core of the issue, is that the information from these apps can be easily intercepted and sent anywhere to anyone. For the skeptics in the room, TrevE has put together a small demo app (proof of concept) that shows what could potentially happen when this is intercepted. He also has put together a Youtube video that shows exactly what is going on. It seems that the only real way to get rid of these services is by rooting the device and manually removing them, but there is no known way to remove them from an unrooted device.
HTC has been notified about the issue approximately 5 days ago and we are still waiting for a response, which they said they are working on. You will have to keep in mind that this is only the first app that TrevE is working on, and if you remember from previous articles, there are 5 of them. Long story short, you can expect one of these articles on XDA at least once a week for the next month or so.
Well, HTC, as you may see it, this is no longer about us wondering why you are getting our information, but it was discovered that whatever you are using to get it is simply not secure. For the sake of your customer’s privacy, we request that you take the proper measures and release any and all necessary patches to fix this for any and all devices being affected. This is about people’s data falling in the wrong hands, so please we ask that you take action on this soon.
HTCLogger allows any app that has access to android.permission.INTERNET on devices such as the evo3d to obtain full access to query sensitive info such as network/appusagestats/meid/esn/phone#/past 10 location broadcasts and last known locations/and more.
http://www.youtube.com/watch?v=YoTUkQ7SlNU&feature=player_embedded
You can find the original thread here. Also, you can check if you are vulnerable by using the app found in this thread.
Want something published in the Portal? Contact any News Writer.
Thanks TrevE for the tip!

More links regaurding new findings!!..
http://infectedrom.com/showthread.php/559-Vunerability-1-Android-Security-Elevation
and heres an app to check if you are vulnerable...
http://forum.xda-developers.com/showpost.php?p=17612559&postcount=110

Does this help anyone?! LOL....Im sure NOBODY like BIG BROTHER WATCHING YOU!

lightninbug said:
Does this help anyone?! LOL....Im sure NOBODY like BIG BROTHER WATCHING YOU!
Click to expand...
Click to collapse
Well you kind of threw that out the door when you decided to buy an ANDROID device.. didn't ya ? LOL

so if you run something like cyanogen or miui am i right in thinking you would prob not be vulnerable, but custom sense based roms prob would be?

meegs said:
so if you run something like cyanogen or miui am i right in thinking you would prob not be vulnerable, but custom sense based roms prob would be?
Click to expand...
Click to collapse
Thats basically what Im thinking.. But who knows...For all we know the STOCK sms app is sending HTC all our texts...think of how many drug dealers/ or other illegal things people do that is uploaded to htc....I For-see a NEW AGE IN CRIME STOPPING upon us...and the general public doesnt even know it.

About the big brother watching you.
Why do you think Android is free? Companies like HTC and Google want you to spend as much time as possible on the internet so you can see the ads that pay their bills. That's the whole idea behind Android, cheap access to the internet so you can use Google products and see their ads. HTC is probably doing something similar here. HTC has access to lots of user data via the phones that they sell. This is valuable data to data miners who can sell their products using this information.
Personally I don't have a problem with this. But if you do it makes sense to stop using the internet

Call me crazy but I quite frankly don't care much about them knowing what apps I run or where my wifi network is located or where my phone has been. I voluntarily share that kind of information with Google in return for making my life easier by allowing my to use services like Google Maps and Google Search. Now if I were a terrorist or someone running from law enforcement I could see how this would bother me a lot more.
Moreover, if this information actually helps HTC improve the user experience on my next device (similar to how it has helped Google improve their services), I'll personally send it to them in a .zip file. It is troubling though that they kind of just take these kinds of stats regardless of your consent.
Anyway, let me know when they start listening in on my phone calls and reading my text messages. Maybe then I'll care more. -_-
EDIT: I still really do appreciate TrevE taking time out of his day to do this research and share his findings with the community.

Guys I think there trying to say that HTC or google is not gathering our info securely,and anyone with the knowledge can intercept our info from google or HTC. Say the president uses a HTC sensation,and a terrorist intercepts the presidents info that is suppose to go to google or HTC. Now that terrorist knows where the president is,etc. See how that's a problem? I sure don't want no crazed lunatic knowing were I'm at,worst,cloning my phone!
Sent from my HTC Sensation XE with Beats Audio using xda premium

brd912 said:
Guys I think there trying to say that HTC or google is not gathering our info securely,and anyone with the knowledge can intercept our info from google or HTC. Say the president uses a HTC sensation,and a terrorist intercepts the presidents info that is suppose to go to google or HTC. Now that terrorist knows where the president is,etc. See how that's a problem? I sure don't want no crazed lunatic knowing were I'm at,worst,cloning my phone!
Sent from my HTC Sensation XE with Beats Audio using xda premium
Click to expand...
Click to collapse
just in case we wondered why the president still uses a crackberry

Another reason to use Cyanogenmod. Yipee!
Sent from my Sensation using Cyanogenmod

I'm running a stock T-Mobile version of sense, rooted and when I installed the app, it says connecton refused, I looked for the app htclog.apk in /system/app and it's not there...

In ["TrevE!"] we trust!! OPT out!*CIQ's!* YAHOO, MSN, MSNBC, FORBES Magzn!!! "TrevE!!

In ["TrevE!"] we trust!! OPT out!*CIQ's!* YAHOO, MSN, MSNBC, FORBES Magzn!!! "TrevE!!
Just seen this on **YAHOO** front page, Thank's TrevE!
Forbes Magazine on "TrevE"
MSN MSNBC!
"Eckhart says Carrier IQ's software, designed to monitor the performance of a cell phone on a network, is a "rootkit," spying on unsuspecting users. Carrier IQ says it is not."
"While we look at many aspects of a device’s performance, we are counting and summarizing performance, not recording keystrokes or providing tracking tools," the company said in a recent statement. We've contacted Carrier IQ for more information.
I even made a video to let my subscribers know what he had done for the Android and XDA community, great find thanks to him.

heplful video helped me remove that crap from my htc. Treve rules

BaT420 said:
heplful video helped me remove that crap from my htc. Treve rules
Click to expand...
Click to collapse
They(CIQ) wanted a media storm, surfed the web and there it was.

Hmm, seems they didn't get it, a rootkit is something that hides from the user by running in a low level beyound the operating system, this does not imply any malicious intentions yet, so it definitely is. Thing is, they already stated that it does in fact log all phone connections and SMS (not the actual content they say), what apps are running on the phone and how much they utilize the cpu and even more, which i consider malitious personally, and send the informations to your carrier who should have those informations anyway except the app stuff. They say they collect this information to see if a disconnect happens due to a faulty cell tower to improve their network, but they should be able to get all this information's from their cell towers as well. Also they claim that they collect that app info to know what is causing battery drain on your device, but i think this should be handled in a different, more privacy respecting way.
--------------------------
tapatalked from vizio vtab1008

Jeeze I'm glad I run a custom rom and a custom kernel the day I got my phone. Gives my the shivers knowing that my carrier has that info. This would totally suck for federal agencies that use these CIQ infected devices.

Why is anyone the slightest little bit surprised?
This is an OS created by Google, a company that exists to collect data on you. By definition the more it invades your privacy, the better it is accomplishing its job description.
Chrome is growing in installations every day. This is a browser that exists to collect your data. Everything you type or click on while in that browser gets processed through Google's servers.
What do you think is going to happen when google comes out with a "free", stable, OS for pc's? How much of your activity do you think they'll be monitoring?
Google and Facebook are waging a war right now to see who becomes "big brother" through controlling your access to the internet. Wake up and smell the "long game" running.
Yes, I know CIQ is not a Google product.

Someone just turned derp up to 11

mid_life_crisis said:
Why is anyone the slightest little bit surprised?
This is an OS created by Google, a company that exists to collect data on you. By definition the more it invades your privacy, the better it is accomplishing its job description.
Chrome is growing in installations every day. This is a browser that exists to collect your data. Everything you type or click on while in that browser gets processed through Google's servers.
What do you think is going to happen when google comes out with a "free", stable, OS for pc's? How much of your activity do you think they'll be monitoring?
Google and Facebook are waging a war right now to see who becomes "big brother" through controlling your access to the internet. Wake up and smell the "long game" running.
Yes, I know CIQ is not a Google product.
Click to expand...
Click to collapse
Its the carriers that put this software on not Google. My nexus s has no sign of it. I'm custom rom since day one but have a nandroid of my stock image and nothing there.
Also your last statement is a bit tin foil hat isn't it?
Sent from my Nexus S using xda premium

slimdizzy said:
Its the carriers that put this software on not Google. My nexus s has no sign of it. I'm custom rom since day one but have a nandroid of my stock image and nothing there.
Also your last statement is a bit tin foil hat isn't it?
Sent from my Nexus S using xda premium
Click to expand...
Click to collapse
Not on the stock or custom roms for the Inspire either.
As for the foil hat. You think the new chip being installed on all US phones after tyebnew year so the government can force texts to your phone is only so they can send you a text? Yeah....I am not so sure about that lol

SPY Surveillance Apps

I would like to use this thread to post all kinds of spy or surveillance apps.
For example I want my Employees to get phones, on which I can see all their steps and what they do and write. All is legal in my country, if I tell them about it.
Expecially it would be great, if this way I could identify possible phone thieves.
It should work online, so I can have a look anytime and also if I don't have physical access to the phone, if stolen....
I would like to know about sms, chat and so on ...

I would like to suggest you Flexispy, Mobile spy and MobiStealth because these spying apps are most commonly selling Tracking software in the market. Flexispy is little expensive app as compare to the other both. I am using Mobistealth because it has very amazing features and it is economical as well.

Thank you boss
Sent from my Dell Streak using XDA

Keylogger Apps for Android (Galaxy Note)

looking for some keylogger apps for android (galaxy note) which can run under stealth mode.
lots of result can be found on google but all dead link, any suggestion?

Suggestions? Yeah, don't spy on your girlfriend

yeah..
_terror_ said:
Suggestions? Yeah, don't spy on your girlfriend
Click to expand...
Click to collapse
Yeah a phone is not primarily meant to be used by other people.. So whats the point of spying yourself? unless you install it on your phone and let others use it so you can get their info and everything..

why do you need it?
Sent with a grin (^.^)

may be easier to find a new girlfriend at Google.
Gesendet von meinem GT-N7000 mit Tapatalk 2

garytako said:
looking for some keylogger apps for android (galaxy note) which can run under stealth mode.
lots of result can be found on google but all dead link, any suggestion?
Click to expand...
Click to collapse
How much would you trust a random keylogger found on google? It would be easy for someone with malicious intents to include a malware in that keylogger that would send everything on a server or pastebin.
It's not a good thing to spy on people, even using your phone, and it may be illegal in some states/countries, but your best bet would be to make one all by yourself, using a keyboard application template.

for sure it's being used to catch cheating spouse, keylog mainly use to gather info and evidence before we getting divorce.

garytako said:
for sure it's being used to catch cheating spouse, keylog mainly use to gather info and evidence before we getting divorce.
Click to expand...
Click to collapse
for that just check phone bill, you can see numbers and times somewhere, no need for keylogger for that.
anyway if in relationship with no trust, its not good anyways...

Sent from my GT-N7000 using Tapatalk 2
---------- Post added at 09:42 AM ---------- Previous post was at 09:28 AM ----------
Gary. Sorry you need it dude. Like others have said its a very dodgy thing to get. Unless it's from an A1 source you will have your bank details etc ripped.
I'd go the other way. Look for a call recording app, that can be set to record all calls, then use the setting in apps to hide it.
I got a recording app that picks up both sides but is not automatic. I'm sure there is one if you look.
As with both these methods in some States its illegal, &can get you in deep dodo ...
Sent from my GT-N7000 using Tapatalk 2

Odp: Keylogger Apps for Android (Galaxy Note)
enyaly said:
Yes, call lists don't mean anything, she may cantact with her best girlfriend or work partner. Knowing the chat logs will really know what she has done behind you.
Click to expand...
Click to collapse
Good time to reply

I think if you need a keylogger youre enfringing a persons privacy. How would you feel if someone uses that on you?
if there is doubt, there is no doubt, a relationship without trust is like a house build on quicksand
it will also not prove anything in court, cause it illegal

Not every one will think for others
baz77 said:
I think if you need a keylogger youre enfringing a persons privacy. How would you feel if someone uses that on you?
if there is doubt, there is no doubt, a relationship without trust is like a house build on quicksand
it will also not prove anything in court, cause it illegal
Click to expand...
Click to collapse
I can't agree with you more, but one thing, not every one will think for others.

Monicar John said:
I can't agree with you more, but one thing, not every one will think for others.
Click to expand...
Click to collapse
Yes, now most forum users just provide the related-answer to the OP, won't think such kind of moral or law issues too much. I saw a lot of users offered iKeyMonitor android spy app for Samsung, which seems very famous in this field, but I don't think it is a good tool in catching a cheating spouse. The relationship can be broken up by using the tools. ikeymonitor.com

garytako said:
looking for some keylogger apps for android (galaxy note) which can run under stealth mode.
lots of result can be found on google but all dead link, any suggestion?
Click to expand...
Click to collapse
Your requirement is very easy to meet because there are so many keylogger apps online now! is one of the most powerful keyloggers that you can trust. , it is downloaded for free, just see it by yourself, I don't plan to post an ad to you.
mod edits to remove links

Well
There was MobileSpy, but they operated under U.S. law, lost a case and notified all users they were being monitored and shared whatever data they had on the "installer" with the recipient. Mspy looks like it's going to go the same way soon. Assuming it's for legal purposes I would use the "new" A1 Keylogger is cool, they have always been offshore, been around since 2009 and the stuff works on Android, PC and pretty much everything. They are under a new name now, but it's the same developer.
We use some of their stuff as a network monitor, you can monitor 10 PC's in your office in one dashboard. So it makes an affordable monitor for those not big enough to have a server closet.

iKeyMonitor don't work...Stops logging and sending notifications for no reason

Keylogger is the best tactic for keeping your company record safe from hackers . By installing it in your PC may leads with many advantages such as you can monitor all the works done by the user from your computer because this software will track all the records in every single seconds.
mod removed link as paid apps and warez

[Q] barcode scanner like in a shop?

there is an app that allow smartphone to work like a real barcode scanner used in a shop? it may be not very comfortable,but i d like avoid spend my money to buy some real barcode scanner.
it d be useful to some 'occasional cashier'.

Have you tried searching in the Playstore ?
There are a lot of apps that can scan barcodes in the PlayStore, just follow the link : Barcode Scanner @ PlayStore

You don't want to spend money on buying a scanner, OK. How do you intend to interface the phone to the computer/register to pass the barcode scanned to the application on the PC or register?

Q] barcode scanner like in a shop?
ph37rd said:
You don't want to spend money on buying a scanner, OK. How do you intend to interface the phone to the computer/register to pass the barcode scanned to the application on the PC or register?
Click to expand...
Click to collapse
i wont use computer/register.
i put a items'price database on the phone.the app use camera to get barcodes,search price in database,and calcolate amount.that s all.
well,it d be the best if the app records all the transactions in a sale database.And also do autodecrement in items price database so that i would know which item go sold out.
@verszipo,i ve tried many app in playstore,the most of them are for storekeepers and consumers

ph37rd said:
You don't want to spend money on buying a scanner, OK. How do you intend to interface the phone to the computer/register to pass the barcode scanned to the application on the PC or register?
Click to expand...
Click to collapse
This can actually be done using Bluetooth. There are a lot of POS systems for Android and even iOS that interface with PC counterparts.
---------- Post added at 09:50 AM ---------- Previous post was at 09:44 AM ----------
FASTWEBAR said:
i wont use computer/register.
i put a items'price database on the phone.the app use camera to get barcodes,search price in database,and calcolate amount.that s all.
well,it d be the best if the app records all the transactions in a sale database.And also do autodecrement in items price database so that i would know which item go sold out.
@verszipo,i ve tried many app in playstore,the most of them are for storekeepers and consumers
Click to expand...
Click to collapse
What you are describing is exactly what you are saying you tried already. You basically want an Android based POS system, this is kinda silly, unless you are using it as an outdoor vendor or to take orders at a table in a restaurant. Keeping track of your sales and your stock is possible, but you really do not want to do this on a phone. Using a large screen tablet, you might achieve what you intend to do.
I develop POS for a living, we have reseached the validity of building a device based POS and I can tell you that the use of Android/iOS devices in a POS environtment is only as a value added addon. Using it to take orders, collecting sales information from your staff who work outside of the store (ie: stand at events) and collecting data at the back door (stock transactions) is where this idea is best implemented. Only if you have a small store, with maximum 2 cashiers can you achieve this, and only if you use a Tablet where there is enough space on the screen to read your transaction easily.

cornelha said:
This can actually be done using Bluetooth. There are a lot of POS systems for Android and even iOS that interface with PC counterparts.
---------- Post added at 09:50 AM ---------- Previous post was at 09:44 AM ----------
What you are describing is exactly what you are saying you tried already. You basically want an Android based POS system, this is kinda silly, unless you are using it as an outdoor vendor or to take orders at a table in a restaurant. Keeping track of your sales and your stock is possible, but you really do not want to do this on a phone. Using a large screen tablet, you might achieve what you intend to do.
I develop POS for a living, we have reseached the validity of building a device based POS and I can tell you that the use of Android/iOS devices in a POS environtment is only as a value added addon. Using it to take orders, collecting sales information from your staff who work outside of the store (ie: stand at events) and collecting data at the back door (stock transactions) is where this idea is best implemented. Only if you have a small store, with maximum 2 cashiers can you achieve this, and only if you use a Tablet where there is enough space on the screen to read your transaction easily.
Click to expand...
Click to collapse
yeah,it s just like say

4509
there are not any app that do those kind of stuff?