[Q] HTCLogger security vulnerability: Is Desire S affected? - HTC Desire S

HTC Stock ROMs for some devices are apparently affected by a major security vulnerability.
http://www.androidpolice.com/2011/1...e-numbers-gps-sms-emails-addresses-much-more/
Does anyone know if this issue affects stock Desire S? Also are the various sense roms available in the developer forum generally affected or not?

runagate17 said:
HTC Stock ROMs for some devices are apparently affected by a major security vulnerability.
http://www.androidpolice.com/2011/1...e-numbers-gps-sms-emails-addresses-much-more/
Does anyone know if this issue affects stock Desire S? Also are the various sense roms available in the developer forum generally affected or not?
Click to expand...
Click to collapse
Sounds shady on HTC's part to attempt something like this without explicit consent from the customers... Then again it could be a radical new backup service where you could backup your entire device on the cloud. Who knows? Will read up a lil more about this and get back to you.

enigmaamit said:
Sounds shady on HTC's part to attempt something like this without explicit consent from the customers... Then again it could be a radical new backup service where you could backup your entire device on the cloud. Who knows? Will read up a lil more about this and get back to you.
Click to expand...
Click to collapse
From what I've read a malicious application can access all sorts of inappropriate data via the logging api. There no doubt was some useful function behind this idea. It seems to have been terribly implemented.
I can't find any info on Desire S being directly affected. I do wonder if this issue might affect newer versions of roms ported from potentially affected models such as HTC Sensation, as is the case with Virtuous Unity.

desire s is not among the htc devices listed . . . . check gsmarena.com for more info
cheers

Boooo!!!! Not happy!
lynxnoon said:
desire s is not among the htc devices listed . . . . check gsmarena.com for more info
Click to expand...
Click to collapse
gsmarena.com said:
Do note that this issue is only faced on the latest HTC devices running the latest firmware. If you have an older device or a newer rooted device running a custom ROM then you have no reason to worry about.
Click to expand...
Click to collapse
Unfortunately no version numbers or specifics are provided, which in my mind creates doubt which I don't like!
I also have a HTC loggers as a running application on my device which is set to start at boot and has access a huge amount of potentially damaging information (location, network access, personal information, development tools, storage, system tools etc)
Well I did have HTC loggers running so I've since removed it. Using a combination of Task Manager and Titanium Backup its now gone.
Task Manager - Force stop, clear data and clear cache
Titanium Backup - Uninstall the application.
A lack of any decent response from HTC is also unimpressive especially after they have recently impressed with the turnaround on un-lockiung our Bootloaders.

ben_pyett said:
Unfortunately no version numbers or specifics are provided, which in my mind creates doubt which I don't like!
I also have a HTC loggers as a running application on my device which is set to start at boot and has access a huge amount of potentially damaging information (location, network access, personal information, development tools, storage, system tools etc)
Well I did have HTC loggers running so I've since removed it. Using a combination of Task Manager and Titanium Backup its now gone.
Task Manager - Force stop, clear data and clear cache
Titanium Backup - Uninstall the application.
A lack of any decent response from HTC is also unimpressive especially after they have recently impressed with the turnaround on un-lockiung our Bootloaders.
Click to expand...
Click to collapse
I basically did the same thing this morning.Froze it with titanium and then removed it ,never thought of clearing cache and data though

looks like someone at HTC is going to be in a bit of trouble. just hope that the attention and bad press don't holt progress on cloud backup idea

I agree with runagate17, it has been terribly implemented.
And i think you can find similar security vulnerabilities in nearly all ROM'S from all producers.
The only way to avoid this to happen frequently, is to make apps and ROM'S completely Open-Source, so vulnerabilities can be discovered fast ...

Related

[Q] Why there is no uninstall feature in Android?

I have about two weeks experience with Android OS and as a software developer I will be interested to know the technical details behind the Android OS.
I have already noticed this is possible to upgrade applications ported with the handset's ROM i.e. the Market app. This raised the question to me why can't I uninstall applications from the ROM without rooting or risking my handset's warranty to achieve this?
Is my expectation as a user of computers for 20 years unreasonable to think in 2010 with all software development and technological advances the uninstall feature should have been in Android OS from day one?
This is not exactly like Google is the first company in the world developed an OS to just the lack of experience with what users would want. From what I have seen so far in world of Android is that, the first thing users would want to know how to root their handset to remove packages that they have no use for.
My guess is that Google doesn't want users removing Systems apps. I'm assuming that they think that these applications are core and thus don't want you removing them. Remove the market, no more apps... or way to get it back etc.
Applications installed by you can be uninstalled, I'm just thinking it is the same as in windows, you can't uninstall the task manager etc (Bad example but meh =P)
Very simple - to prevent lay users from removing critical components.
Can you imagine the service costs involved in reparing devices that that have been damaged by people trying to remove bloatware?
They still give you the option to restore.
OK DISREGUARD THIS AS I MISSED THE PART ABOUT NEEDING TO ROOT!
They can be removed but its not recommended to do so without know EXACTLY what your removing and weather is vital to your phones operating system.
BUT in order to do so your phone needs root access, and root explorer installed. There are several forums on just about all android support sites that explain how to root, install the manager, and which apps/files NOT to remove.
J_HaX said:
They can be removed but its not recommended to do so without know EXACTLY what your removing and weather is vital to your phones operating system.
BUT in order to do so your phone needs root access, and root explorer installed. There are several forums on just about all android support sites that explain how to root, install the manager, and which apps/files NOT to remove.
Click to expand...
Click to collapse
Ye u can remove almost every stock app but this may affect the stability of your phone, modifying your phone always comes with the option restoring it back to default. If something goes wrong with moding (something really hard and extraordinary rare ) u can restore it. Browsing through Xda might solve many questions, we all didn't wanted stock rom (not because it was bad, because we can have s omething better. This community has VERY VERY good developers.
Androids own!!!
One thing I still don't get is...
How can Google upgrade Market app without the su privilage but the rest of the world has to root their phones to remove bloatware such as 'amazon mp3'?
@ftgg99: How much bloatware in Windows cost Microsoft or PC manufacturers? None in fact they get paid to include them with your hardware. However, I see an issue with mobile devices. You have already paid for the ROM storage, the bigger ROM size is the more expensive your handset would be, then the manufacturer uses your already paid ROM to make even more money by installing bloatware. I would be a fool to think manufacturers would pass on a percentage of the bloatware earnings by reducing the cost of their products to the consumers in this model.
The way I see it, the burden has been put on the communities such as xda. Users wouldn't ask the manufacturers how to root their handsets and this is left to the dedicated individuals to overcome the mess compnies normally leave us with. I'm not going to say the mess is a cost saving measure by companies.
The thing is that there are a lot more people buy and use phones than computers. After someone buys a smart phone with intention to use for calls, text, web and to use some apps, they realize the possibilities of the smart phone, they start digging in to the files, therefore Google blocked the root folder from modifying, otherwise Google would have to repair warrantied phones that didn't have to end up there just because people didn't know or care what they did. But if you got passed ROOTING, you must know what you are doing and from this point you can modify files and apps, but now ROOTING becomes too easy.
Basically just because too many juveniles got their hands on the equipment.
CSharpHeaven said:
One thing I still don't get is...
How can Google upgrade Market app without the su privilage but the rest of the world has to root their phones to remove bloatware such as 'amazon mp3'?
Click to expand...
Click to collapse
I'm also very interested to read the answer for this one!
CSharpHeaven said:
One thing I still don't get is...
How can Google upgrade Market app without the su privilage but the rest of the world has to root their phones to remove bloatware such as 'amazon mp3'?
Click to expand...
Click to collapse
RAMMANN said:
I'm also very interested to read the answer for this one!
Click to expand...
Click to collapse
The answer, from my point of view, is quite simple: they just upgrade the application on /data/app ON TOP of the /system/app default Market version. So, you can always go back to your "default" version just by "uninstalling updates".
Summary: they do not upgrade the Market form ROM, just install the new version on top.
CSharpHeaven said:
I have about two weeks experience with Android OS and as a software developer I will be interested to know the technical details behind the Android OS.
I have already noticed this is possible to upgrade applications ported with the handset's ROM i.e. the Market app. This raised the question to me why can't I uninstall applications from the ROM without rooting or risking my handset's warranty to achieve this?
Is my expectation as a user of computers for 20 years unreasonable to think in 2010 with all software development and technological advances the uninstall feature should have been in Android OS from day one?
This is not exactly like Google is the first company in the world developed an OS to just the lack of experience with what users would want. From what I have seen so far in world of Android is that, the first thing users would want to know how to root their handset to remove packages that they have no use for.
Click to expand...
Click to collapse
Have you tried to work with iPhone(don't know about iPhone 4)? They build fortress around their system and even the apps you install cannot be uninstalled until you gailbrake it and use 3rd party installer to uninstall. And not talking about the "MONOPLY" they run with AT&T.

[APP][1.6+] PDroid - the better privacy protection app - will you use it?

Hi,
I have recently developed a privacy protection application for Android.
You can use it to block access for any installed application to the following data separately:
Device ID (IMEI/MEID/ESN)
Subscriber ID (IMSI)
SIM serial (ICCID)
Phone and mailbox number
Incoming call number
Outgoing call number
GPS location
Network location
List of accounts (including your google e-mail address)
Account auth tokens
Contacts
Call logs
Calendar
SMS
MMS
Browser bookmarks and history
System logs
SIM info (operator, country)
Network info (operator, country)
For device ID, phone and mailbox number, SIM serial, subscriber ID and device location it also allows supplying custom or random values.
Unlike others (e.g., Permissions Denied or CM) this does not make applications crash when access to private data is blocked.
The following short video shows some of its functionality.
PDroid does not require ROOT or any Android permission to function, nor does it need any services running in the background. But it does require patching some ROM components, so that it needs to be ported to different devices. Currently it is available for Nexus One, Nexus S, Desire HD (Gingerbread) as well as Magic with CM 6.1 (Froyo).
So I am wondering if I should release it for public use and maybe port to other devices. I will only do so if you would like to use it, since it requires some fine-tuning to be more user-friendly. So please vote if you would like to use PDroid.
I would love to use this app on my galaxy s and tab.
Especially the point to give the apps random or custom information instead of just blocking the access is important.
If you need help testing the app on those mentioned devices just let me know
I hope you get enough positive feedback to port and continue developing this app.
I ll love to have such an app on my Xperia X10 mini pro (cyanogenmod 7)
so basicly it's a LBE replacement? The major disadvantage of that one is being closed-source. Do you plan to open-source yours?
I would like to give this app a shot too with my devices (Nexus S 4G, EVO 3D and Epic Touch 4G). Does not require root, but assume that root is ok? Also seen that you have for Nexus S, but was not sure if that implies to the NS4G as well. Looks promising.
XlAfbk said:
so basicly it's a LBE replacement?
Click to expand...
Click to collapse
Kind of. The functionality is similar to that of LBE while I tried to account for its disadvantages, such as not being able to disallow access to some data (e.g., system logs, incoming and outgoing call numbers etc.), requiring root or being unreliable since LBE requires its protection service to be running so that malicious apps still can steal data if they are started before LBE after boot.
XlAfbk said:
The major disadvantage of that one is being closed-source. Do you plan to open-source yours?
Click to expand...
Click to collapse
Most likely yes (depends on how much spare time I can allocale to this project).
Tahde said:
Does not require root, but assume that root is ok?
Click to expand...
Click to collapse
Yes, it won't interfere
Tahde said:
Also seen that you have for Nexus S, but was not sure if that implies to the NS4G as well.
Click to expand...
Click to collapse
Yes, basically any device, for which Android can be directly built from AOSP (and this includes Nexus 4G) is supported right now.
Love to see it for the T-Mobile G2x especially if it is open.
svyat said:
You can use it to block access for any installed application to the following data separately...
Click to expand...
Click to collapse
That's a nice list. I'd really like a version for my Motorola Defy.
How hard would it be to reuse the code to make it run like LBE, i.e. make an apk that works on every phone without having to patch ROMs for every type of device?
I too would like to use this app, sounds awesome. If you need any beta testers, I volunteer
rogier666 said:
How hard would it be to reuse the code to make it run like LBE, i.e. make an apk that works on every phone without having to patch ROMs for every type of device?
Click to expand...
Click to collapse
Impossible, since the actual application logic performing the data access control is based on the Android application framework and not the SDK. Plus, doing it the LBE way requires root and will never be 100% reliable. In other words, there is no way of creating a proper solution without patching the ROM.
I would like to have this for t-mobile US Vibrant since we're getting no Gingerbread love from t-mo or Sammy and I'm all flashed out with nothing else to do.
I would like to give your app a spin to see how it works
KB0SDQ said:
I would like to give your app a spin to see how it works
Click to expand...
Click to collapse
I am also interested in this app... Sounds very promising and I hope this will get ported for the G2/DesireZ, so I can get some freakin' privacy!
If I can help in any way, any way at all, I'd be very happy to do so.. I'm running CM7.1.0 on my DesireZ @ 1.2ghz...
Thanks a lot!
Looks great. I'd love to get that on my Thunderbolt (CM7) would there be anyway to block permissions like internet and SD card access, I know Cyanogenmod lets you disable them but you have to reset your phone after a change for them to take effect. Also I don't know if it falls into the scope of what this project is intended for but I've seen people ask about making certain apps work on 3G that only work on wifi or the other way around if you could make an app think it was using one or the other for a connection I think that would be very helpful to some folks.
I'd test this on the t-mo Galaxy S2 if you're willing to do it...
Sent from my SGH-T989 using xda premium
I guess this is TISSA (http://www.csc.ncsu.edu/faculty/jiang/pubs/TRUST11.pdf) ?
I would like to see for Desire , Great to have this kind of app! I'll help which ever way
IvanNCase said:
would there be anyway to block permissions like internet and SD card access
Click to expand...
Click to collapse
Not in near future. Doing that would require modifying the kernel and that, in turn, would make PDroid much less portable.
IvanNCase said:
Also I don't know if it falls into the scope of what this project is intended for but I've seen people ask about making certain apps work on 3G that only work on wifi or the other way around [...]
Click to expand...
Click to collapse
Nope, it doesn't
ukanth said:
I guess this is TISSA (http://www.csc.ncsu.edu/faculty/jiang/pubs/TRUST11.pdf) ?
Click to expand...
Click to collapse
Nope, I've developed PDroid completely from scratch as a part of my Master's Thesis.
svyat said:
Not in near future. Doing that would require modifying the kernel and that, in turn, would make PDroid much less portable.
Nope, it doesn't
.
Click to expand...
Click to collapse
Fair enough.
By the way how do you install this does the ROM patching need to be done by the original creator or done with a zip file through recovery?
svyat said:
Nope, I've developed PDroid completely from scratch as a part of my Master's Thesis.
Click to expand...
Click to collapse
That's great to hear. Good job done ! I can't wait to see you release. I'll surely try to port it for Desire

[Q] A 'non phone' ROM?

Evening folks, as phones such as my trusty HTC Sensation come to the end of their useful lives, to be replaced by other newer phones, I was wondering if there was such a thing as a 'non phone' ROM I could flash which would remove the calling, texting etc functions and allow it to be used as a 'ipod touch' (for want of a better description). I would be quite happy putting a dummy SIM card into the phone and simply not allowing it to touch the network but I would be happier with the calling etc functions removed from the phone, especially as I'm hoping to give it to my kids to play with.
Any advice? Does such a thing exist? I had a quick google and couldnt really see anything too relevant. Happy to be corrected on that though!
Haven't seen a ROM like that here..
I'm not sure why you want those features removed, but if you want that your kids don't use them, you can set up a password lock on those apps.
I don't think there's any such ROM. But why you insisting on no network feature. Just don't insert the SIM and it will work.
Sent from my HTC Sensation Z710e
Oh, I know I could stop it like that but just was wondering if there was a 'lighter' ROM without the phone aspects.
bowser4 said:
Oh, I know I could stop it like that but just was wondering if there was a 'lighter' ROM without the phone aspects.
Click to expand...
Click to collapse
Or then maybe Link2SD can freeze the apps, so they won't be shown in appdrawer.
bowser4 said:
Oh, I know I could stop it like that but just was wondering if there was a 'lighter' ROM without the phone aspects.
Click to expand...
Click to collapse
You can remove those by using certain apps that can do it. I think titanium backup has this functionality. However, as these apps are not heavy, simply hiding them will do the work.
Edit: Just remembered, on most ROMs. the phone and messaging apps have other apps that depend on them, so removing them completely might cause issues. Hiding them from the drawer (possible on many AOSP based launchers and some Sense ROMs built-in) would be the simplest way to "remove" the apps.
astar26 said:
You can remove those by using certain apps that can do it. I think titanium backup has this functionality. However, as these apps are not heavy, simply hiding them will do the work.
Edit: Just remembered, on most ROMs. the phone and messaging apps have other apps that depend on them, so removing them completely might cause issues. Hiding them from the drawer (possible on many AOSP based launchers and some Sense ROMs built-in) would be the simplest way to "remove" the apps.
Click to expand...
Click to collapse
Thanks for that, I'll go ahead and hide them. Appreciate the info folks, many thanks.

Android custom ROM for security + minimal of Google?

Hi everyone,
can you recommend me some custom Android ROMs with focus on better security? Or isolate of dependence on Google?
Both of them together will be the best.
My phone is Samsung Galaxy S2.
Many thanks
dj.houba said:
Hi everyone,
can you recommend me some custom Android ROMs with focus on better security? Or isolate of dependence on Google?
Both of them together will be the best.
My phone is Samsung Galaxy S2.
Many thanks
Click to expand...
Click to collapse
Cyanogen or GingerBread are some good ROMS for good security, as I know.
D-J Mutant said:
Cyanogen or GingerBread are some good ROMS for good security, as I know.
Click to expand...
Click to collapse
Thanks, yes, I know about Cyanogen.
Oh you mean GingerBread from Google? This is exactly what I don't want. I want to separate from Google, coz we all know about NSA case. So I thought, there will be some developers, who will try to build some custom ROM and try to eliminate "Big brother" and focus mainly on security.
Omnirom is supposed to be security and privacy consious.
Sent from my Nexus 7 using XDA Premium 4 mobile app
Well I'd suggest the cyanogenmod, but without the google apps. They're optional.
In the nexus 4 section there is an aokp that is patched so built in Google analytics are gone. There is a patch that can be applied to other ROMs.
Custom roms, including Cyanogenmod, have a history of BAD security. Many rom developers end up introducing new vulnerabilities. In the past, some hardened Android builds existed, but I know of no current hardened roms.
I personally would stay away from custom roms, and stick to as close to AOSP as possible, signed with your own private keys. (and no Omnirom, AOKP, Cyanogenmod are NOT AOSP in any way shape or form.)
jcase said:
Custom roms, including Cyanogenmod, have a history of BAD security. Many rom developers end up introducing new vulnerabilities. In the past, some hardened Android builds existed, but I know of no current hardened roms.
I personally would stay away from custom roms, and stick to as close to AOSP as possible, signed with your own private keys. (and no Omnirom, AOKP, Cyanogenmod are NOT AOSP in any way shape or form.)
Click to expand...
Click to collapse
Is that so , see from what u saying ,,, the ASOP is better then the other build rite
Sent From GT i9300
jcase said:
Custom roms, including Cyanogenmod, have a history of BAD security. Many rom developers end up introducing new vulnerabilities. In the past, some hardened Android builds existed, but I know of no current hardened roms.
I personally would stay away from custom roms, and stick to as close to AOSP as possible, signed with your own private keys. (and no Omnirom, AOKP, Cyanogenmod are NOT AOSP in any way shape or form.)
Click to expand...
Click to collapse
How do you get your own private key and what does that do? Sorry, I have never heard of this, so I'm sure others are probably also wondering.
Sent from my Nexus 5 using XDA Premium 4 mobile app
Thanks
Thanks, I was trying different ROMs, finally I chose PAC-MAN ROM without Google apps
Hello !
does it mean that any modded stock rom with GApps will be insecure ?
Thx
just youtube some galaxy s2 roms you'll find reviews on some good roms
JamieFL said:
How do you get your own private key and what does that do? Sorry, I have never heard of this, so I'm sure others are probably also wondering.
Sent from my Nexus 5 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
http://www.kandroid.org/online-pdk/guide/release_keys.html
something like this
I think you can skip "make dist" part, just do a regular build as you would normally (CyanogenMod ==> brunch your_device
you can fine the need file under "out/target/product/hammerhead/obj/PACKAGING/target_files_intermediates/cm_hammerhead-target_files-")
for Cyanogenmod Nexus 5 for ex (hammerhead )
source build/envsetup.sh
brunch hammerhead
and you'll fine the target_files zip under
out/target/product/hammerhead/obj/PACKAGING/target_files_intermediates/
that the one you need to feed to build/tools/releasetools/sign_target_files_apks
There are some really exciting Android security projects out there... For instance, one awesome function a-la-Truecrypt involves full disk encryption with plausible deniability. You are able to give out a first-layer passphrase if you are coerced - yet a truly private volume remains secure and disguised within the apparent unused portion of the storage disk.
Yet it's unlikely that any of this is relevant to you, otherwise you wouldn't be asking this sort of thing. When it comes to security leaks, try to barricade off the paths of least resistance from the ground up. For instance, even all of that wouldn't do much good if you had forensic evidence of your phone config on your computer, a lockscreen that could be bypassed, a phone seized whilst still turned with encryptions keys remaining in RAM, etc. Also keep in mind all of the data you are sending out in the clear via your cloud storage, SMS/IM, WiFi, etc.
So in the end, just pick a ROM that runs smoothly and you enjoy. Whatever you end up deciding, make absolutely certain to:
- encrypt with strong passphrase (then use cryptfs app to create a shorter lock screen key)
- disable USB debugging
---------- Post added at 06:06 AM ---------- Previous post was at 05:32 AM ----------
JamieFL said:
How do you get your own private key and what does that do? Sorry, I have never heard of this, so I'm sure others are probably also wondering.
Sent from my Nexus 5 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
This probably isn't exactly spot on, but here's a rough sysnopsis... When a ROM is built from source, the creator "signs" their creation (i.e. the ROM and the apps within). This way you can be sure that you're indeed getting an official ROM built by AOKP (or whomever) and not by some malicious 3rd party. Likewise, the Android OS uses signatures to ID which files are legitimate and given permission to run (i.e. official updates). However, there have been incidents with custom ROMs when this functionality has been exploited. This could allow an otherwise innocuous seeming app to deploy hidden malware and cloak itself as a legitimate app, gaining full rights to the phone.
A self-built ROM with your own private key is presumably safer against such an attack. I don't think most people would need to be concerned about this, but still something to keep in mind. Unfortunately jcase is spot on about custom ROMs almost always creating or exposing more vulnerabilities than stock. For instance, features like ADB or USB-OTG are often enabled by default. If that wasn't bad enough, in the event that your phone is ever lost/stolen/seized, having a custom recovery installed is pretty much handing over your identity with a bow wrapped on top. It makes it easy for anyone to bypass PIN/password/face/gesture-lock or dump off the entire disk image. Not to mention analysis can reveal your account passwords, WiFi keys, SMS, phone records, photos. Most of these vulnerabilities can be safeguarded against with careful consideration, but you certainly won't get there by default.
dj.houba said:
Thanks, yes, I know about Cyanogen.
Oh you mean GingerBread from Google? This is exactly what I don't want. I want to separate from Google, coz we all know about NSA case. So I thought, there will be some developers, who will try to build some custom ROM and try to eliminate "Big brother" and focus mainly on security.
Click to expand...
Click to collapse
The only way to eliminate the ability of a nation-state interfering in your data would be to not generate any. If they're watching you, then stopping them from watching you isn't going to be possible. So it's better to ensure that when they watch you appear innocent.
Granted, I'm not saying you shouldn't take any precautions. But to truly get away from their snooping you're probably better of without a phone.
fadedout said:
There are some really exciting Android security projects out there... For instance, one awesome function a-la-Truecrypt involves full disk encryption with plausible deniability. You are able to give out a first-layer passphrase if you are coerced - yet a truly private volume remains secure and disguised within the apparent unused portion of the storage disk.
Yet it's unlikely that any of this is relevant to you, otherwise you wouldn't be asking this sort of thing. When it comes to security leaks, try to barricade off the paths of least resistance from the ground up. For instance, even all of that wouldn't do much good if you had forensic evidence of your phone config on your computer, a lockscreen that could be bypassed, a phone seized whilst still turned with encryptions keys remaining in RAM, etc. Also keep in mind all of the data you are sending out in the clear via your cloud storage, SMS/IM, WiFi, etc.
So in the end, just pick a ROM that runs smoothly and you enjoy. Whatever you end up deciding, make absolutely certain to:
- encrypt with strong passphrase (then use cryptfs app to create a shorter lock screen key)
- disable USB debugging
---------- Post added at 06:06 AM ---------- Previous post was at 05:32 AM ----------
Click to expand...
Click to collapse
:good: Excellent advice.
I still wonder if AOSP or any of the bigger custom ROMs without Gapps is truly Google free. I have been browsing the forums for a while on that question but cant really find a good answer. Google free meaning: it doesn't communicate in any way on any moment with Google.
Anyone who can verify that? Has there ever been a XDA'er who researched this? For some it seems an assumption and some think since Android is developed by Google they surely try to analyze even AOSP roms or derivatives.
Liberr said:
I still wonder if AOSP or any of the bigger custom ROMs without Gapps is truly Google free. I have been browsing the forums for a while on that question but cant really find a good answer. Google free meaning: it doesn't communicate in any way on any moment with Google.
Anyone who can verify that? Has there ever been a XDA'er who researched this? For some it seems an assumption and some think since Android is developed by Google they surely try to analyze even AOSP roms or derivatives.
Click to expand...
Click to collapse
It only sends version statistics to Google, and there's a build.prop setting that allegedly disables it (ro.config.nocheckin=1) -- haven't tried it because I'd rather show my pride in Gingerbread
smartymcfly said:
There is a patch that can be applied to other ROMs.
Click to expand...
Click to collapse
What and where is this patch?
I would think you could block all of Google's ip address's in your host file on any rom also.
You could edit the host file before flashing it.

Question Full backup possible?

Greetings!
Just picked up a Pixel 6a, coming from an LG-V30. Have been out of the custom ROM game since switching from a Nexus5 to the LG which had minimal custom ROM options (stock was really quite good).
With the Nexus5 I was used to doing full backups (boot/system/data) with TWRP so I could try out a new ROM and reverting to my original ROM (completely set up with all my apps and data) with very little effort or down time.
I've spent some time reading the forum and it doesn't look like TWRP is really a thing for the Pixel 6a and I've found very little info about making a similar "full" backup.
Does such an option exist?
I'd like to test drive LineageOS (and maybe one or two others, I was a huge fan of CyanogenMod in the past), but having spent the last several days getting things "just right" in my stock/rooted setup I'm not thrilled at the idea of doing it again just to try something that might not work out.
Not really looking for "Google Backup" style options, I would like a solution I can do 100% local to try something out and then easily and quickly revert if needed.
Thanks!
TWRP style full backup isnt possible anymore, but you can use Swift backup to do a TiBu style app backup. Between Swift and Google a clean flash isnt horrible, but yeah.....I definitely also miss the full backup option.
Hi!
You can try this one: https://forum.xda-developers.com/t/tool-root-adb-partition-backup-restore-tool-for-windows.4512231/
I could backup my Pixel 6a completely.
Sorry, but there is no such option. I have P6 and also miss TWRP or Clockwork kind of recovery solution. There is nothing similar (as far as I know) like what we had on previous phones... Now I use Swift backup for apps backup, but that's not what you looking for.
Thanks for the replies, even if they aren't what I was hoping for...
I have switched to Swift as well, too many issues with TiBU restoring data and ending up with force close problems.
Jan61 - Looks interesting, but I'm not sure it's ready for general use.
Typical Google, one step forward but two steps back for users who want to do more than just buy a phone.
Oh well, guess I will live with stock for a while and let Lineage get more stable (maybe even official).
Can you use Swift Backup to backup app data without being rooted?
baldybill said:
Can you use Swift Backup to backup app data without being rooted?
Click to expand...
Click to collapse
As far as I know no, unfortunately.
"swift" is closed source software being distributed by somebody you can't hold accountable for any kind of security problems in the software. It has the capability of connecting to the internet even if you deny network permission (on an android distribution that has such option, obviously). I would HIGHLY recommend that you avoid this software.
Better backup software is *NEO Backup* (available on F-Droid), which is open source and quite auditable.
96carboard said:
"swift" is closed source software being distributed by somebody you can't hold accountable for any kind of security problems in the software. It has the capability of connecting to the internet even if you deny network permission (on an android distribution that has such option, obviously). I would HIGHLY recommend that you avoid this software.
Better backup software is *NEO Backup* (available on F-Droid), which is open source and quite auditable.
Click to expand...
Click to collapse
You mean like a Microsoft system
or an apple system
Both are closed source
I don't vouch for swift backup, I tried it and most of my restored apps crashed repeatedly / didn't backup correctly. I am still looking for a good backup android solution that works similar to windows system image backups.
I've used it since day one
I've never had a problem with it
I've been using a Google phone since day one
The only backup problem I ever had was tibu
That was the biggest piece of **** there was
piperx said:
You mean like a Microsoft system
or an apple system
Both are closed source
Click to expand...
Click to collapse
Both are hideously untrustworthy, but at least you can hold them accountable for data theft.
96carboard said:
It has the capability of connecting to the internet even if you deny network permission (on an android distribution that has such option, obviously).
Click to expand...
Click to collapse
Curious, does that include being blocked by a a rooted system level firewall (AFWall+/iptables)?
I've never trusted Google's "toggles" to turn things off properly.
And FWIW - You (as an individual user) are as likely to hold crApple/Micro$oft accountable as you would the author of Swift for any data theft.
EDIT - That said, I will give NEO a look, options are always good to have available.
NEO requires root
Maybe this helps someone.
I do full backup with:
- Plug phone into PC and copy each folder down. Sometimes you have to go one-by-one, or a few folders at once, or Windows just freezes up. Once all copied, great.
- Use Super Backup app from Play Store to make a backup of everything. Calendar, Call Logs, Contacts, etc.
Once all done:
Use the phone's built-in migration solution IF same brand; IF not, use Google app to transfer/migrate. This will copy most of your app settings and whatnot to your new device. (I skip pictures, etc.) To copy over pictures, I just use Windows and the previously made backup to copy over the DCIM folder for example.
And that's it, works flawless for me.
baldybill said:
NEO requires root
Click to expand...
Click to collapse
Non-issue, I rooted the phone the day I got it.
I won't own a phone that can't be rooted.
h8Aramex said:
Maybe this helps someone.
I do full backup with:
- Plug phone into PC and copy each folder down. Sometimes you have to go one-by-one, or a few folders at once, or Windows just freezes up. Once all copied, great.
- Use Super Backup app from Play Store to make a backup of everything. Calendar, Call Logs, Contacts, etc.
Once all done:
Use the phone's built-in migration solution IF same brand; IF not, use Google app to transfer/migrate. This will copy most of your app settings and whatnot to your new device. (I skip pictures, etc.) To copy over pictures, I just use Windows and the previously made backup to copy over the DCIM folder for example.
And that's it, works flawless for me.
Click to expand...
Click to collapse
I do something similar for migration, but I'm not looking for a one time migration. I want to be able to bounce around on a couple custom ROMs for a day or two and then settle on the one I like. Used to be easy with TWRP backup to image the entire phone in a single step, not so much any more.
mbellot said:
Curious, does that include being blocked by a a rooted system level firewall (AFWall+/iptables)?
I've never trusted Google's "toggles" to turn things off properly.
And FWIW - You (as an individual user) are as likely to hold crApple/Micro$oft accountable as you would the author of Swift for any data theft.
EDIT - That said, I will give NEO a look, options are always good to have available.
Click to expand...
Click to collapse
Root can bypass *everything*. No exception. That includes either switching to a different user to work around firewall rules, or even adjusting the rules to suit. Selinux? "setenforce 0".
As far as holding the fruit company or vaxx pushers accountable, keep in mind that its not just YOU needing to hold them accountable, but EVERYBODY ELSE harmed by their software. So yes, it will come to something VERY substantial.
96carboard said:
As far as holding the fruit company or vaxx pushers accountable, keep in mind that its not just YOU needing to hold them accountable, but EVERYBODY ELSE harmed by their software. So yes, it will come to something VERY substantial.
Click to expand...
Click to collapse
If it's more than just individuals (ie. class action lawsuit), the only ones who get anything "substantial" are the lawyers.
You'll get a coupon for 10% off your next i-Thing or Windoze "upgrade", the lawyers will get the cash.
mbellot said:
If it's more than just individuals (ie. class action lawsuit), the only ones who get anything "substantial" are the lawyers.
You'll get a coupon for 10% off your next i-Thing or Windoze "upgrade", the lawyers will get the cash.
Click to expand...
Click to collapse
You assume that the objective is to get a payday, when the objective is actually to punish them for bad behavior.

Categories

Resources