Database Info

Miren Browser SECURITY concern

Hi!
I got myself in a real predicament here. I just love this Miren browser (v1.2) from the market. It's actually so unbelievably good, I feel as though I need to make the following request to the community before A LOT of others and myself are totally hooked to it.
So here's the problem, Miren is relatively unknown and from China. Now let's be clear here: I don't have anything against china but I think this does merit that someone takes this thing apart and take a good look at it before we all start punching in our passwords by the thousands. I have fruitlessly spent hours searching online for any info on this browsers integrity. As I unfortunately don't know myself how to e.g. wireshark the phone and check for security flaws, I had hoped some smart linux person here is willing to invest some time and check it out. Thank you

thats a valid concern, the only way to be really sure is
1) find an open source browser and build it yourself
2) go through the code looking for back-doors/root kits/triggers/trojan/keylogger etc
Some choices:
-Firefox mobile
-Default android browser
-Chrome (coming soon I hope)

I see your concern but where do you stop?
What about those "free" apps people mindlessly install? Some have been proven to send data behind the scenes with "rights" loopholes.
Plus, I see you say its "not that its from China..." but... you do seem to have a concern that it's from "China", why not pick on Dolphin Browser?

Good point mentioned by everyone.

Once you have doubt then just stop using it.
You can try Xscope 6 version. It's fast...
Actually there are so many apps that leaking your information regardless if the apps are from China or not. I think all the users should pay attention on the security issues when using smart phone with easy internet access.

[CLOSED] [Q] phone creeper alternative for android

Hello.,
does anybody know if there is a program for the android similar to teh phone creeper for wm6.5
the phone creeper allow easthdropping on phones, phone calls phone locating and so many other features as posted here
http://forum.xda-developers.com/showthread.php?t=527423

so ......
does this mean, nobody knows or there is no such software?

Im wondering the same thing
Sent from my HTC Vision using XDA App

What does "easthdropping" mean?
By the way the MIUI Phone.apk is able to geo-localize the calls, even if it works in China only (AFAIK)

I'm the developer for the phone creeper and will be launching the android version very soon, however it will be very different. The problem with and hurdle for creating the same functionality on android devices is that (at least that i'm aware) there is no way to completely hide an SMS message from phones. You can instantly read it and delete it as with windows mobile, however there will still be an sms arrived alert in the status bar.
To get around this hurdle i've created a website with a database and webpage front end that will allow for all communications to happen with a combo of SQL and Android Cloud to Device Messaging (C2DM). This will allow for a small footprint quick silent communications. However this also means I need to support a website and database.
This basically adds a large level of complexity and creates various pluses and minuses for everybody. The program will still be free as it has always been, however some of the features and those who want to have viewing and controlling capabilities through the web will be charged a slim fee.
The program will still be completely functional and useful without paying a dime but hopefully enough people will want the extra goodies to pay for the web hosting.
As I said it's mostly complete now and hopefully I'll have a release published here shortly and allow for free web viewing trial also.

chetstriker said:
I'm the developer for the phone creeper and will be launching the android version very soon, however it will be very different. The problem with and hurdle for creating the same functionality on android devices is that (at least that i'm aware) there is no way to completely hide an SMS message from phones. You can instantly read it and delete it as with windows mobile, however there will still be an sms arrived alert in the status bar.
To get around this hurdle i've created a website with a database and webpage front end that will allow for all communications to happen with a combo of SQL and Android Cloud to Device Messaging (C2DM). This will allow for a small footprint quick silent communications. However this also means I need to support a website and database.
This basically adds a large level of complexity and creates various pluses and minuses for everybody. The program will still be free as it has always been, however some of the features and those who want to have viewing and controlling capabilities through the web will be charged a slim fee.
The program will still be completely functional and useful without paying a dime but hopefully enough people will want the extra goodies to pay for the web hosting.
As I said it's mostly complete now and hopefully I'll have a release published here shortly and allow for free web viewing trial also.
Click to expand...
Click to collapse
this is great news, let me know if you need testers
also can we have links to the site,
i'm a web designer and php programmer, i can give you feedback if you need

smartechno said:
this is great news, let me know if you need testers
also can we have links to the site,
i'm a web designer and php programmer, i can give you feedback if you need
Click to expand...
Click to collapse
That would be wonderful, I usually only create desktop and mobile applications. I don't have that great of an artistic eye and have rarely created any web sites. Currently I'm also using PHP for the website and will probably have to switch from godaddy hosting since they seem VERY slow at hosting any web pages containing scripts.
Maybe you can help me figure out why the logo seems to get cut off in IE6 (looks fine in other browsers.) it appears that displaying the bars are cutting it off since if I disable them it looks fine.
The link is xxxxxx Mod Edit: Link removed.

Whow, talking about privacy and espionage here
In general, Software like this is greatly coded, and requires alot of skill.
But on the other hand, if you use this App to watch / control somebody elses phone, is really awkward... I would be scared to know that a program like this exists and could be activated silently on my phone...
Just my 2 cents, but respect to the one who is able to program such a tool!

how about totalcare?
http://forum.xda-developers.com/showthread.php?t=835603

badai said:
how about totalcare?
http://forum.xda-developers.com/showthread.php?t=835603
Click to expand...
Click to collapse
totalcare is a nice project, but the main differences are:
OverVi3w can be controlled via a webpage or sms.
Overvi3w has many more features
Overvi3w is actually stealthy, unless something is different about totalcare since last time i'd seen it. The message may be instantly deleted, however when you look at the sms history it would still show that it arrived even if you couldn't open it. although you still could see the command and from who is sent.
Overvi3w allows the phone to be controlled from ANY other phone or from the web console. It still uses a password for protection during sms control and to use the web interface it requires the imei (gsm phones) or meid (cdma phones) for extra security.
Anyway, I should be accepting alpha users later this week.

wow it's already have a name. OverVi3w. can't wait. total care just doesn't work on both my phone (gingerbread and froyo).
your phone creeper really great. works even after flashing new rom.

you misspell register on your website.

badai said:
you misspell register on your website.
Click to expand...
Click to collapse
Thanks.. how embarrassing for me.
I've created a new thread on XDA for anyone interested in becoming an Alpha tester.
http://forum.xda-developers.com/showthread.php?p=14113648#post14113648

The predecessor to phone creeper on windows mobile 5 or 6 years ago
Hi you asked foraan phond creeper program for win mobile 3.5 look for phone creeper or espionage suite .cab and if that cant be found look up phone leash for android and if nothing there is appealing look up blooover.cab its a java thing and works well with winmobile and theres newer **** for other platforms.

chetstriker said:
I'm the developer for the phone creeper and will be launching the android version very soon, however it will be very different. The problem with and hurdle for creating the same functionality on android devices is that (at least that i'm aware) there is no way to completely hide an SMS message from phones. You can instantly read it and delete it as with windows mobile, however there will still be an sms arrived alert in the status bar.
To get around this hurdle i've created a website with a database and webpage front end that will allow for all communications to happen with a combo of SQL and Android Cloud to Device Messaging (C2DM). This will allow for a small footprint quick silent communications. However this also means I need to support a website and database.
This basically adds a large level of complexity and creates various pluses and minuses for everybody. The program will still be free as it has always been, however some of the features and those who want to have viewing and controlling capabilities through the web will be charged a slim fee.
The program will still be completely functional and useful without paying a dime but hopefully enough people will want the extra goodies to pay for the web hosting.
Click to expand...
Click to collapse
chetstriker said:
As I said it's mostly complete now and hopefully I'll have a release published here shortly and allow for free web viewing trial also.
Click to expand...
Click to collapse
i would be happy to donate and help out where do i go to donate and how long do you think until the program is ready.
where do i go to donate

MOD ACTION:
Thread closed since it violates Rule 16 just like the linked thread in the OP which has also been closed.
@cindyloulou
Do you realise that this is a 12 year old thread with the last post in 2014? And please do not create multiple posts within a short time, instead edit your previous post if you need to add some info.

[Q] JAVA/PHP: Should I build an APP or a Website?

Hello everyone! I am new to the forum. Been thinking of joining for a while but my current issue has been the push I needed to join. I have looked high and low for the answer but to be completely honest I am not entirely sure what to look for. Not sure what my question is. I have also looked around this forum for a a good little while stopping on this thread to ask my question. I hope it's the right place to start. I will try to ask this in a way that is understandable and relevant. In your answer please take into consideration that I am new-ish to Android Development. =) (I can do the basics, Root, hack, crack, etc,.) I know enough though I think to follow your answerer and understand it.
** Question: For my Project should I go with a full Android App, go with a website that can be viewed on a mobile phone, or should I build the back-end on a web server and have an android app that delivers the front-end? (Front-end being the login, the styling of the pages, where the interaction between users take place, etc,. ) I'll elaborate on my question below. **
Alright. I started building a website. Conceptual anyway. I have been designing it on paper, white board, Photoshop etc,. The website is going to be a social site of sorts. Unique in it's own way. At first I was going to do just a website. Then I realized as my creation grew that I wanted it to be an App. Then decided, due to all the back-end server programming and functionality required, I would most likely have to build it as a website or web application. To give a brief summery of the site. There will be a login system with profiles, instant messaging. video chats, group chats, ability to play simple games like cards, chess, and more. I will also need to be able to control sessions. Write new session information on the fly based on certain actions the users take.
My problem, I think, is that i'm not sure the most efficient or effective way to go about doing this. If it was going to be on a computer I would write it up in PHP and obviously display the site with HTML/CSS. The display part I think is where I am at a loss. At least one of my issues. Since I would like for this to be an app for Android I may need a new way to display the 'site' if that's what It will even be called once it's an app. If I'm going to shoot for it to be on mobile phones then I'm thinking I can get the cosmetics looking good as well as using it to my advantage. I prefer the 'app-like-interface' rather than scroll with mouse and click on the page as if it were a website. ( 'app-like-interface': I am referring to buttons, and menus, and a overall 'pretty' interface. touch screen etc,.)
So should I write it as a website in it's entirety and just display it as a mobile site?
Should I completely trash the idea of doing this for mobile phones?
Should I (if it's possible) write everything on the back-end with PHP but create an app with java to display the styling and build the interface?
Or should I do something else entirely that I've not mentioned?
My apologies if this question was a bit to long. Tried to be thorough. Thanks so much in advance as well. This answer is something I need before I can even consider continuing. Thanks!
Az Tek

Making the Mobile Web Safer with HTTPS Everywhere

EFF is bringing the security and privacy of HTTPS Everywhere to an important new frontier: your Android phone. As of today, you can install HTTPS Everywhere on Firefox for Android (until now, it could only protect desktop browsers). With HTTPS Everywhere installed, Firefox for Android encrypts thousands of connections from your browser that would otherwise be insecure. This gives Firefox a huge security advantage over every other mobile browser available today.
This is exciting news, because HTTPS encryption allows smartphone users to safely download apps, browse the web, exchange emails and instant messages, sync data between devices, and countless other everyday tasks. As we carry around our phones and tablets, we often connect to unfamilar WiFi networks, putting our personal data at risk of being monitored, collected, and tampered with by anyone else on the same network, as well as Internet Service Providers, network operators, and government agencies. In fact, we discovered last week that NSA and GCHQ have been invisibly tracking and profiling users based on data leakage from smartphone apps.
HTTPS Everywhere guards agains these attacks in your browser by switching insecure HTTP connections to secure HTTPS connections whenever possible using thousands of URL rewrite rules. Whereas data sent to a server over HTTP can easily be read and modified by third parties, HTTPS uses strong encryption to guarantee data confidentiality and integrity.
Click to expand...
Click to collapse
https://www.eff.org/deeplinks/2014/01/making-the-mobile-web-safer-with-https-everywhere
Figured I'd share this with you guys. HTTPS Everywhere has been a great desktop Firefox addon, I'm really happy to see them finally get a mobile Firefox version out. Probably the best way this would protect people are when using public wifi, but of course the site you visit would have to offer some form of HTTPS/SSL for the addon to work. It basically just helps you get the most out of sites that do offer it (some sites, like Youtube for instance default to HTTP).

Hmmm.. interesting.... But does Https Everywhere still have the problem that because of it, pages in general load a lot slower?

I haven't noticed any slow down personally. All this does really is help sites that support HTTPS/SSL to some extent, but for whatever reason do not default to it when I user visits the page. And obviously they make sure the site doesn't get broken before adding it in their extension's site list.
There's a whole FAQ here too that might explain it better than I ever could. All I know is if Tor browsers use it along with Noscript, it's a good security add on. Way better than nothing.
https://www.eff.org/https-everywhere/faq
But the add on should also make use of their SSL Observatory, which is a measure in place to protect users:
The EFF SSL Observatory is a project to investigate the certificates used to secure all of the sites encrypted with HTTPS on the Web. We have downloaded datasets of all of the publicly-visible SSL certificates on the IPv4 Internet, in order to search for vulnerabilities, document the practices of Certificate Authorities, and aid researchers interested the web's encryption infrastructure.
Click to expand...
Click to collapse
https://www.eff.org/observatory

Phone privacy and security, is it possible to be completely private and secure?

I have always known that companies like google and facebook for example collect our data, web searches etc and sell this information for profit. Today, this has become an even bigger issue with what we see in the media with the nsa and other government organizations tapping into our devices and monitoring our usage. At the end of the day, most of us, myself included really dont have anything to hide, so it may not be a real issue. I have often thought that if anyone poked around in my pc or phone they would simply get bored as they are just full of geeky engineering files lol. The real thing for me is simply that it's an invasion of privacy and just not right. With that said, I find myself wanting to go the extra mile to make my pc and my phone completely private from outside sources taking my information, watching my web searches and seeing my data. My question is, is it possible to be 100% secure and private, and if not, how close can we get, and how? I have heard that VPN's can achieve this. Is this true? and if so are there any free secure VPN's for our android devices and or pc's that are really good? Do VPN's slow down our devices? Also, Is there a way when we delete android files to permanently delete them? I noticed when I flashed my rom, after doing the complete wipe that is still contains files from before the wipe.
(I know this isn't a pc forum, I only included the pc because it's relevant.)
Thank you all in advance.

There are no data retention laws in the United States. Meaning, if a data center does not want to hold any logs to their users' activity, they're not required by law to do so. Multiple countries are similar, which is why I recommend using Private Internet Access for your VPN. They have a client for PC and Android and they're really great. I've been using them for many years and have had no issues. And, if you're really wanting to remain "anonymous", you can pay for your VPN subscription using gift cards from popular outlets like Walmart, Starbucks, etc. And for search engines, I'd recommend DuckDuckGo, which doesn't log anything you search. For PC, I'd recommend disabling your IPv6 protocol in your router settings and getting uBlock Origin, HTTPS Everywhere, and PrivacyBadger. They're wonderful add-ons for Firefox or Chrome. uBlock Origin and PrivacyBadger can block WebRTC leaks which would leak your IP address and can be used to identify you. If you want more information, feel free to reply to my post and I'll help you out as much as I can.

Hoxic said:
There are no data retention laws in the United States. Meaning, if a data center does not want to hold any logs to their users' activity, they're not required by law to do so. Multiple countries are similar, which is why I recommend using Private Internet Access for your VPN. They have a client for PC and Android and they're really great. I've been using them for many years and have had no issues. And, if you're really wanting to remain "anonymous", you can pay for your VPN subscription using gift cards from popular outlets like Walmart, Starbucks, etc. And for search engines, I'd recommend DuckDuckGo, which doesn't log anything you search. For PC, I'd recommend disabling your IPv6 protocol in your router settings and getting uBlock Origin, HTTPS Everywhere, and PrivacyBadger. They're wonderful add-ons for Firefox or Chrome. uBlock Origin and PrivacyBadger can block WebRTC leaks which would leak your IP address and can be used to identify you. If you want more information, feel free to reply to my post and I'll help you out as much as I can.
Click to expand...
Click to collapse
Hoxic,
Thank you for all of the information. With the private internet access VPN on my PC and android, will that slow down anything like web surfing, uploads or downloads? I am limited to using Verizon's high speed DSL connection as they refer to it, (I refer to it as slowest speed connection lol) in my neighborhood and this is the only provider for me so it's already pretty slow compared to Fios and other broadband connections. I would hate to slow it down any more.
You mention to pay for these services using gift cards and such. Well as I mentioned, I do not have anything that I am actually worried about anyone seeing, this is simply my way of trying to protect my privacy so I wouldn't go that far but I am curious about that statement. Do you mean that using a VPN truly isn't private or is this just to remove any paper trail linking me to the use of a VPN provider? I have been using DuckDuckGo for several years already just to stop google from taking and selling my info. Weather it truly works or not I dont know but its a great search engine anyway so I figured why not use it.
Your advice to disabling IPv6 protocol in my router settings: I do not see anywhere in my router settings to do this so I googled it, and it looks like there's a way o do this in windows. Is that different that what you're advising? Also I read a windows blog on this and windows 10 says IPv6 is a mandatory part of Windows that they do not advise on disabling. Can you give me some more detail on this, and how to disable it, assuming the windows warning is bull.
Thanks for all of your help.