More information here, and in other XDA threads.
I don't have root on my HTC Status yet...can someone check to see if the ChaCha/Status is affectec by this vulnerability?
According to the reports its an app named htcloggers you would need to delete if you have root.
I can't find that app on my phone and chacha isn't on list of affected handsets either.
We do have htclog app but reports explicitly say it is htcloggers in the system thats the culprit.
Sent from my HTC ChaCha A810e using Tapatalk
Here is another rootkit installed by the phone companies and carriers that is even worse than previously thought. And more information here as well.
I don't have root on my AT&T HTC Status. Can someone check to see if this rootkit is indeed running on our phones, and if so, how to go about disabling/deleting it?
Thanks!
Anyone?! Now that Carrier IQ's actions have been published by the mainstream media, can someone who has rooted their HTC Cha Cha or Status confirm if Carrier IQ has been installed on our phones?
Thanks!
As I said, I looked but couldn't find it
Sent from my A810e using Tapatalk
Related
THE REASON WE ARE HAVING SO MANY ISSUES PORTING DIFFERENT ROMS FOR THIS DEVICE IS BECCAUSE OURS AND THE I.S HAS HIDDEN SECURITY FEATURES. Read ME: http://www.engadget.com/2011/03/24/htc-locks-down-incredible-s-against-custom-roms-too-starts-a-fi/
HTC's goal was to give us a hard time developing for this device!
READ ME:http://www.androidpolice.com/2011/0...-bootloader-and-recovery-are-signed-as-well/:
Your second link is dead but I agree that HTC is building their own coffin at this point. That's one of the main reasons why i returned my Atrix. If we buy your device we should be able to freely modify as we see fit!
How does this affect the TB now? Aren't we already past this security with S-OFF and CWM installed?
R.I.P H.T.C
Sent from my ADR6400L using XDA Premium App
YES BUT A SOURCE FROM HTC THAT WILL REMAIN UN NAMED. TOLD ME THERE ARE MANY HIDDEN SECURITY FEATURES IN THIS DEVICE THAT'S WHY WE CAN'T KEEP SU RUNNING SMOOTH...
Sent from my ADR6400L using XDA Premium App
Jaywan said:
THE REASON WE ARE HAVING SO MANY ISSUES PORTING DIFFERENT ROMS FOR THIS DEVICE IS BECCAUSE OURS AND THE I.S HAS HIDDEN SECURITY FEATURES. Read ME: http://www.engadget.com/2011/03/24/htc-locks-down-incredible-s-against-custom-roms-too-starts-a-fi/
HTC's goal was to give us a hard time developing for this device!
READ ME:http://www.androidpolice.com/2011/0...-bootloader-and-recovery-are-signed-as-well/:
Click to expand...
Click to collapse
I'm sure it's Verizon behind this, and not HTC doing it by choice. It is in HTC's best interest to just follow Big Red's wishes, and it doesn't appear that they are locking things down in the same way that Motorola is these days. Aside from the "locked" bootloader and memory, what hidden security features are we running into?
Probably not HTC at all.. They are probably just filling a requirement. Its probably the carriers in reality and they need to create products that meet their customers requests.... Verizon, ATT etc and we are their customers. After all they want to make $20 for tethering etc. More they can lock down more they can charge..
So much for Android being "open" forever....
The bootloader hasn't been an issue since basically day 1.
I have a hard time believing there's mysterious secret features in the phone that give us a hard time modding it.
HTC could have gone the Motorola route and encrypted the bootloader, but they didn't.
I haven't had any issues with su.
Jaywan said:
YES BUT A SOURCE FROM HTC THAT WILL REMAIN UN NAMED. TOLD ME THERE ARE MANY HIDDEN SECURITY FEATURES IN THIS DEVICE THAT'S WHY WE CAN'T KEEP SU RUNNING SMOOTH...
Sent from my ADR6400L using XDA Premium App
Click to expand...
Click to collapse
Hardware based? I'm not an expert but once the kernel source is available wont we have access the all the code meaning we would see any hidden landmines?
Jaywan said:
YES BUT A SOURCE FROM HTC THAT WILL REMAIN UN NAMED. TOLD ME THERE ARE MANY HIDDEN SECURITY FEATURES IN THIS DEVICE THAT'S WHY WE CAN'T KEEP SU RUNNING SMOOTH...
Sent from my ADR6400L using XDA Premium App
Click to expand...
Click to collapse
I've ran 4 ROM's on my Thunderbolt and since updating to the newest SU I have not had 1 issue with it running smooth...
Boss428man said:
Probably not HTC at all.. They are probably just filling a requirement. Its probably the carriers in reality and they need to create products that meet their customers requests.... Verizon, ATT etc and we are their customers. After all they want to make $20 for tethering etc. More they can lock down more they can charge..
Click to expand...
Click to collapse
Ive seen the tethering argument made before but I don't see how that would affect anything. Even devices with high security and a signed bootloader can be rooted to allow free tethering, a custom rom is not needed for this. Are there any devices that haven't been at least rooted?
bp328i said:
I've ran 4 ROM's on my Thunderbolt and since updating to the newest SU I have not had 1 issue with it running smooth...
Click to expand...
Click to collapse
+1 I waited to root until the new su was available and I have yet to lose root on any rom.
Sent from my ADR6400L using Tapatalk
Yep nor have I had a single issue with su. Its to Vee expected the first week that you have su issues.
That being said i have yet to have a permissions issue. I have changed my rom i have already edited my framework and so fourth with no problems. S off. Stands for security off incase you were wondering
Sent from the Ole TB
Look at who Engadget and AndroidPolice sources for those articles (us, TeamAndIRC). So take this comment based on that.
This posting is utterly inaccurate.
We have removed all those cited "security features" in the thunderbolt.
This thread is in the wrong section as well.
Jaywan said:
YES BUT A SOURCE FROM HTC THAT WILL REMAIN UN NAMED. TOLD ME THERE ARE MANY HIDDEN SECURITY FEATURES IN THIS DEVICE THAT'S WHY WE CAN'T KEEP SU RUNNING SMOOTH...
Sent from my ADR6400L using XDA Premium App
Click to expand...
Click to collapse
SU runs great on my device. Tell your source to hit me up if he wants his su fixed.
jcase said:
Look at who Engadget and AndroidPolice sources for those articles (us, TeamAndIRC). So take this comment based on that.
This posting is utterly inaccurate.
We have removed all those cited "security features" in the thunderbolt, and they don't exist in the incredible.
This thread is in the wrong section as well.
Click to expand...
Click to collapse
Bring the HAMMER down Thanks for the info.
Jaywan said:
YES BUT A SOURCE FROM HTC THAT WILL REMAIN UN NAMED. TOLD ME THERE ARE MANY HIDDEN SECURITY FEATURES IN THIS DEVICE THAT'S WHY WE CAN'T KEEP SU RUNNING SMOOTH...
Sent from my ADR6400L using XDA Premium App
Click to expand...
Click to collapse
The superuser issues stem from sqlite db handling, and were addressed before this device launched. The first rooting threads were just distributing older files.
Locking down of devices is likely more carrier influenced than manufacturer, as they have considerably more reasons to want customers locked out of their hardware.
The security mechanisms have been owned, at this point theres not much to worry about (for shipped devices anyways). They could always update the hw to a.newer more secure revision, but that would be quite costly and not likely to happen at all.
Sent from my ADR6400L using XDA App
jcase said:
SU runs great on my device. Tell your source to hit me up if he wants his su fixed.
Click to expand...
Click to collapse
LOL....awesome post!!!
Wasn't the su issues just from the change made in Sense more than anything else? And I'll join the chorus saying I've had no issues since the updated su.
Does anybody know the Roms that support carrier billing? I know a few do cause I used a Rom in the past that gave me carrier billing on my inspire but can't remember which one it was, but I do know it's not based on the inspire since HTC said it wasn't supported. Do all the desire hd Roms support carrier billing?
Sent from my Inspire using XDA Premium App
Like you bill the carrier for your data usage? I'm interested as well, lmk when you find one.
Gtg's sense rom had att carrier billing but I think he removed that option. Not sure.
Inspired from my Inspire 4G using XDA Premium App
What needs to be done specifically to make this work in any rom?
Out of curiousity, what do you use carrier billing for? I never found a need to worry about it in a ROM.
mehal88 said:
Out of curiousity, what do you use carrier billing for? I never found a need to worry about it in a ROM.
Click to expand...
Click to collapse
if I'm guessing correctly he/she is using carrier billing to purchase apps from play store i have the same issue and have been hunting many sites for a solution to this issue, i have always used ota root keeper and hide root, so that att doesn't disable this feature, I've tried rolling back to different versions of google play and still no luck I'm a bit of a noob, (getting close to amateur status) is it possible for someone with more experience to maybe write a kernel or something to reactivate this feature, i know some roms have this fearure already working so if someone with more experience could offer some input it would be greatly appreciated.,
Device: Inspire 4G
Rom Version: aospX- 1.0 1-DHD w/ inspiremod .5 thatks for your input hopefully a person much smarter than me can look into this issue
It's still an option in google play. I'm on a rooted Rom and still have the choice. It is not available for everything though. For example on music I notice there is no carrier billing but for apps like world of goo its an option. I don't know if it's certain publishers or just certain categories. But it's still there.
Sent from my Inspire 4G using xda premium
Just wondering.
Sent from my HTC-Z710a using XDA App
like a jailbreak?
LOL
The iPhone is not an android phone. There is an unlock for the iPhone it's called Ultrasn0w.
I'm sure it's technicially possible, but Apple had no official way on unlocking a phone so services like Ultrasnow were created. With Android devices you can go on a site, pay 20 bucks, and have an unlocked phone.
Well, for one, I know that the MT4G root and S-OFF process also unlocked the device. There would NOT be just one universal way to unlock any Android phone. Every android phone is different. It's not like the iPhone, where there is just one tool that does everything to the iPhone 4 and you say why isn't this available for Android. Because there are a plethora of android devices meanwhile it's not the case for iOS.
Basically what armoguy94 said- iphones are all pretty much standardized as far as the OS goes, whereas android phones are all running different versions. It would be pretty much impossible to write an unlocking program that would work on EVERY flavor of android out there.
I do understand the unlocking process on androids and iPhones. I don't think any android phone is hardware locked. I've always wondered why no one has created a software unlock. Different software is a definate reason. But if we can have one software to root multiple phones, why not unlock?
Sent from my HTC-Z710a using XDA App
If I understand you correctly then, you're wondering why there's no software unlock so that you can install whatever you want, even if it's not in the market? If that's your question, then the answer is there's no need. Just tick the check box to install unknown sources and you're good to go.
sent from HTC Sensation
xnifex said:
If I understand you correctly then, you're wondering why there's no software unlock so that you can install whatever you want, even if it's not in the market? If that's your question, then the answer is there's no need. Just tick the check box to install unknown sources and you're good to go.
sent from HTC Sensation
Click to expand...
Click to collapse
No, he meant SIM unlock
There is. I've done it for my inspire and my mytouch as well as my vibrant. It's called a goldcard.
But if your referring to something like superoneclick that would be brilliant.
Sent from my HTC Sensation 4G using XDA Premium App
Oh my fault. Yes, I meant SIM unlock.
Sent from my HTC-Z710a using XDA App
I have read that most of the custom ROM's on this forum removed the HTC "snooping" software, but now the news is reporting an equally invasive (potentially) issue with something called CarrierIQ. For those who dont know it basically logs every keystroke, website, duration of call, location, etc. and sends it to your carrier for "analysis". A pretty shocking video is at the link for those who are interested. So my question is, does running a custom ROM prevent my carrier from getting all this information?
http://www.appleinsider.com/article...troversy_prompts_scrutiny_from_us_senate.html
Another link for your reading pleasure
http://www.forbes.com/sites/andygre...ve-violated-wiretap-law-in-millions-of-cases/
I believe AOSP/source does not have CarrierIQ, and neither does CyanogenMod.
There is no Carrier IQ on the HTC Sensation at T-Mobile US.
a4ol said:
There is no Carrier IQ on the HTC Sensation at T-Mobile US.
Click to expand...
Click to collapse
Do you have a link to back that up?
webmaster said:
Do you have a link to back that up?
Click to expand...
Click to collapse
Multiple people have searched, and could not find it.
However, HTC has their own snooping software that you can opt out of, I don't think it does key logging though.
Thanks for the info on T-Mo Sensation!
Worth a read http://www.pcmag.com/article2/0,2817,2397128,00.asp
So is Carrier-IQ mainly a US thing, or do European handsets have this too? Another thing, if you buy a SIM free (non carrier linked phone), then presumably there shouldn't be any Carrier-IQ software on the phone, at least not from a network carrier.
a4ol said:
There is no Carrier IQ on the HTC Sensation at T-Mobile US.
Click to expand...
Click to collapse
If I have done my research correctly, all carriers use the IQ software on their devices. But I know for sure that the US carrier companies are the main ones that use IQ with thier devices. The reason you can not find it on HTC devices as mentioned in the articles, threads, blogs, and TrevE's website is because of of HTC Sense. Sense is so intergrated I.to the Andriod OS that even the settings are somewhat different than a pure Android device like the Nexus line of devices. But beleive me, IQ is there running in the background collecting information and sending it to the IQ website.
YAs for the question pissed in the OP, yes any true AOSP ROM like Cyanogen Mod ROMs, MIUI ROMs, or any ROM based off of them does not have any IQ in them, it is even not in the kernel as long as it is a true AOSP kernel.
T-Macgnolia said:
If I have done my research correctly, all carriers use the IQ software on their devices. But I know for sure that the US carrier companies are the main ones that use IQ with thier devices. The reason you can not find it on HTC devices as mentioned in the articles, threads, blogs, and TrevE's website is because of of HTC Sense. Sense is so intergrated I.to the Andriod OS that even the settings are somewhat different than a pure Android device like the Nexus line of devices. But beleive me, IQ is there running in the background collecting information and sending it to the IQ website.
YAs for the question pissed in the OP, yes any true AOSP ROM like Cyanogen Mod ROMs, MIUI ROMs, or any ROM based off of them does not have any IQ in them, it is even not in the kernel as long as it is a true AOSP kernel.
Click to expand...
Click to collapse
Ok, so you are saying the Tmo USA Sensation does come with CarrierIQ? I just want to get a definitive answer on this! For what its worth, I am running a CM7 based ROM so I suspect I am ok, but its the others who are running a stock Sensation that I am concerned about.
UPDATE! Tmobile USA has just confirmed that they DO use CarrierIQ on their phones. The below link includes an internal screenshot that shows customer service how to respond to inquiries from customers about it. Interestingly, Tmobile also allows business accounts to remove CarrierIQ from their phones if they call in but consumer customers are out of luck.
http://www.tmonews.com/2011/12/t-mo...rnal-quick-guides-for-carrier-iq-information/
Check if it's on your own phone with Supercurio's app.
https://market.android.com/details?...ctvoodoo.simplecarrieriqdetector&rdot=1&pli=1
UKseagull said:
Check if it's on your own phone with Supercurio's app.
https://market.android.com/details?...ctvoodoo.simplecarrieriqdetector&rdot=1&pli=1
Click to expand...
Click to collapse
thanks for that.
I don't think it's accurate though...
according to the previous post Tmous uses CIQ but when I ran the app it says my phone is clean...
Does anyone know if this is true with AT&T?
Sent from my Inspire 4G using XDA App
I work for Tmo. There are only about 9 devices that have ciq on T-Mobile. The Sensation is NOT one of them. Now if you have some kind of ROM ported from the Amaze, that's another story.
Sent from my HTC Sensation Z710e using XDA App
Mainspring said:
thanks for that.
I don't think it's accurate though...
according to the previous post Tmous uses CIQ but when I ran the app it says my phone is clean...
Click to expand...
Click to collapse
Not all devices have it. Check my previous post.
Sent from my HTC Sensation Z710e using XDA App
FYI this has happened in the past on other HTC devices, but if you officially unlock via htcdev.com, you will likely lose certain apps like Calculator and Flashlight. I bought an AT&T version yesterday and unlocked via htcdev last night, and sure enough, the calculator app is gone from mine.
This may interfere with the ability of the device to receive OTA updates.
Personally, I did not yet install a custom recovery, or did I root. Literally all I did was unlock the bootloader. Frustrating to see that taking such a simple step--and doing nothing else--might prevent me from receiving OTA updates.
Any ideas? Could somebody post the stock calculator APK from the One Mini so I can download it? Thanks.
If you're rooting your phone, then I doubt you are the type who waits for OTA updates
But yeah, it sucks to know that apps disappear. I have the same at&t version, but didn't see a flashlight app at all. Had to get one from the play store. Where was yours hidden?
Sent from my HTC One mini using xda app-developers app
PuffDaddy_d said:
If you're rooting your phone, then I doubt you are the type who waits for OTA updates
But yeah, it sucks to know that apps disappear. I have the same at&t version, but didn't see a flashlight app at all. Had to get one from the play store. Where was yours hidden?
Sent from my HTC One mini using xda app-developers app
Click to expand...
Click to collapse
Oh I just assumed it was there because HTC devices typically have them. I actually unlocked the bootloader before I did anything else at all so I'm actually also just assuming that it originally had a calculator, too. I'm basing my assumption on the fact that it is confirmed that the full sized one did delete calculator and flashlight from the device when unlocking using htcdev.
Sent from my Nexus 7