Database Info

HOWTO: Get File Hashes (and Why?)

Greetings Dear Friends,:highfive:
This will be a short tutorial on (1) WHY? , and (2) HOW? , GREAT ROM developers (and software programmers in general) post the cryptographic file hash values, along with the download links to their files.
This can easily become a LaBrea Tarpit (pun, haha), if you get 'stuck' on the word Crypto. But the sense that the word Crypto applies to this tutorial, has absolutely NOTHING to do with encryption, and nothing to do with signing any files, and nothing to do with X.509, or SSL, or anything related to non-repudiation, authentication, or secrecy. The methods of verifying the hash values described in this tutorial, are but one small area within the much broader field of Cryptography. The algorithms used to derive the digest values (aka, checksums) , and they only refer to the techniques and algorithms, which are similar (and to an extend, to some of the data standards), between those activities, and the primary activity that this tutorial is concerned with, namely, determining the identity of a file copy, matches the identity of the original file it was copied from.
To put it another way, let me quote my friend Jim Bridgman here, "We have both SHA-512 and Md5 going on, on the Atrix2 [for example, in the signed bootloader]. I don't want people becoming confused and thinking that the fxz and roms are signed with a "pure" crypto SHA-3 hash, when it is a cheksum derived from a crypto style hash." --- so, before going any further, please understand that this is not the top-secret spy type of stuff. As Jim points out, the hash functions that create the hash values in this tutorial are used as just plain ol' "typical... checksum{s}, and not the secure signature that most think of and understand from things like SSL, and RSA in thier VPN software".
This OP here is perhaps already longer than it truly needs to be, but it will also perhaps grow over time. That is because I do not currently have easy access to an Apple Mac computer, so I will begin with instructions focused on Windows users, then Linux, and lastly the Mac platform (I'm sort of hoping someone will help me out by posting some original screen caps and some basic instructions for Mac Users). In order to keep this tutorial to within some reasonable length, I am not going to try and describe how a message digest algorithm works (actually, they all works slightly different). But for the truly hard-core nut, here are some links to make you happy, if you wish to know more:
http://en.wikipedia.org/wiki/Md5
http://en.wikipedia.org/wiki/SHA-1
http://en.wikipedia.org/wiki/CRC32
http://en.wikipedia.org/wiki/Checksum
http://en.wikipedia.org/wiki/Cryptographic_hash_function
Thus, let us begin then...
(1) WHY should this behavior separate the GREAT DEV'S :angel: from the CRAPPY DEV'S :cyclops: ? The answer to this question is 2-fold, and includes a technical answer, as well as a philosophical one. First, you WILL eventually come to understand that many technical factors can result in a file downloaded that is not a perfect copy of the original. Network congestion, ISP Nazi-Proxies, failure to use Google DNS, hard-drive and other hardware/wire intermittent instabilities, human error, and many other problems can corrupt or cause loss of bits and packets in files. A cryptographic hash, is a VERY reliable way to positively identify the file, as a nearly exact copy (as near you will ever need). If a dev is egotistical (enjoys posting as showing-off primarily), is slightly sadistic (enjoys causing frustration), lacks empathy (never sympathizes with others), or is just plain sloppy and error-prone (makes more mistakes), they are less likely to take the extra time and effort to post any hash values. If a dev is detail oriented, cares about others (that social investments come back), has integrity (takes the honorable route), and take pride in their work (wants to pursue excellence), they are more likely to post hash values. :victory:
==========================================================
WINDOWS USERS
(2) HOW: There are a number of software applications that are totally FREE, that can make it a trivial (easy) task to obtain the hashes of a file. The program I use most often is called "HashTab" and it can be found here. Hashtab essentially adds a tab to the 'properties' of files, inside Windows explorer.
STEPS: So after you install HashTab, then right-click any file, select 'properties' and then the 2nd or 3rd tab over will be a tab labeled "File Hashes", which you can open, and then right-click again on one of the 3 default hashes (the most commonly used hash algorithms, CRC, MD5, and Sha-1), and select "Copy All" as you see in the screencap below:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
TYPICAL HASH VALUES:
CRC32: 0ED8B0A6
MD5: 7F9790B04684DA66222A4EAFE323CB2E
SHA-1: F839029742F73E508557E7B0674C5CE0B06AD815
There are other ways to also click both files and then do a comparison, so by all means, feel free to experiment with other methods and/or other applications.
==========================================================
LINUX USERS
(below commands, and screen capture image, compliments of Jim Bridgman --- thanks Jim!!)
Above image illustrates checking the md5, by using the proper command like this:
Code:
$ md5sum system.img
f9a74ca080a8ea2badb09c6d06badc42 system.img
EXPLANATION: In the above screen image, you can see that Jim was in the directory listed to the left of the $ sign, which is his 'prompt'. So he typed "md5sum system.img" (without the quotes), and the operating system then returned the result of that, which was the digest (basically, the hash value or checksum), and the name of the file that hash value corresponds to, which was "system.img". It is obvious that Jim perhaps ran the ls command (equiv. to dir in *nix), or he already knew that the system.img file was there. The first part he typed, aka, "md5sum" is the keyword for the function (or program application) that runs the command, and in this case, accepted the 'argument' which was the name of the file whose identity (checksum) is being checked.
==========================================================
APPLE MAC LION USERS
(coming soon, I hope?... with help?)
(below are some basic screenshots, from the HashTab website, used in accordance with "Fair Use" principles for non-profit, educational use only):good:
Apple Mac File Hashes (menu selection)
Apple Mac File Hashes (computing)
Apple Mac File Hashe (values displayed)
==========================================================
Hopefully, I have cleared up a little bit of confusion for someone new to the scene, or who may simply have never had the time to really research and understand a bit more about these hash values and why they are used the way they are (or how).
Best Regards,
Paul
ps. For easy reference, if you want to find this post again in the future, you can simply go here: links.PJR.bz/HashTabTutorial

Awesome, thank you for the great explanation!
Glad this is a sticky.

Thank for the HashTab link, it's nice to have something integrated into explorer instead of having to open a program to get the hashes.

congrats on sticky! this is super easy in linux. it is all built in to ubuntu. look it up, there is a shell command.

Here's an interesting link along these same lines.
http://forum.xda-developers.com/showthread.php?t=1727796

Very nicely done indeed! Thanks for the easy-to-follow explanation, and for putting this all together for us. Your posts are helpful and appreciated! Keep up the good work, Paul. :thumbup:
Sent from my MB865 using xda premium

[APP][2.2+][UPDATED 08/23/12] SnapNotify - Roll Your Own Custom Cloud Notifications

SnapNotify – Roll Your Own Custom Cloud Notifications
What’s the point?
SnapNotify makes getting cloud-based android notifications as easy as posting to a webserver – and the entire system (including running your own server) is free!
How does it work?
SnapNotify consists of a lightweight server (powered by node.js, which you can run for free on heroku) and an android app that handles receiving notifications. It allows you to push custom notifications to all of your mobile devices, without having to learn Google Cloud Messaging or having to write your own android app.
Sample use:
Code:
$ curl -d "Test Message,SnapNotify works. yay : )" "http://YOURSERVER/message"
Produces a notification on all of your devices that looks like this:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Some Simple Use Cases:
1) A simple web scraper / monitor
- Write a script that loads a page, checks content, and notifies you upon changes
- Offloads the heavy lifting to your server
2) Server tasks
- Just tag a POST onto the end of your management scripts to be notified when time-consuming events complete
Basically, the idea is to make it easy to incorporate GCM messages / notifications into hacks that don't need an independent and full-fledged Android App.
Installation / Setup:
I've written a full setup guide with download links and source on my website, which you can find here:
http://sagark.org/snapnotify-roll-your-own-custom-cloud-notifications/
Post here if you have ideas for improvement / find it useful / etc.

Wow awesome!

Just set this up on my Galaxy Nexus by following the Heroku guide. It works great! Thanks a bunch :laugh: :good:

Sorry for the double post, but quick question: If I already have a domain name and stuff, is there a way that I can point it to the heroku server so that I don't have to remember the long subdomain? Thanks

woot_galaxy_nexus said:
Sorry for the double post, but quick question: If I already have a domain name and stuff, is there a way that I can point it to the heroku server so that I don't have to remember the long subdomain? Thanks
Click to expand...
Click to collapse
Yep, Heroku supports this functionality. You can follow the guide at the top of this page and then setup a CNAME in your DNS:
https://devcenter.heroku.com/articles/custom-domains

sagarkar said:
Yep, Heroku supports this functionality. You can follow the guide at the top of this page and then setup a CNAME in your DNS:
https://devcenter.heroku.com/articles/custom-domains
Click to expand...
Click to collapse
Thanks it worked :laugh:

Looks good so far... but you knew this question would come up:
How do we customize notifications (different icons, different sounds, launch a custom intent on click -- maybe encoded in the notification itself, etc.)? Do you have something coming to the APK and/or source code for it?
Thanks!

Awesome post!

psouza4 said:
Looks good so far... but you knew this question would come up:
How do we customize notifications (different icons, different sounds, launch a custom intent on click -- maybe encoded in the notification itself, etc.)? Do you have something coming to the APK and/or source code for it?
Thanks!
Click to expand...
Click to collapse
Yep, this'll probably come as something encoded in the POST + predefined settings (key, values) in the app. Unfortunately, school starts tomorrow so I don't have a ton of time on my hands anymore
I'll try to get it done soon though.

Update Aug 23, 2012:
For those of you running on heroku, snapnotify-server now posts to itself every 20 minutes to prevent idling. Idling wouldn't be a problem by itself, but heroku provides a read-only fs (thus no storing to registration_store), so you'd need to re-register after every recovery from idle. Preventing the idling seems to be the simplest solution at this point. After updating, everything should work as expected. Nothing should change for anyone running on their own server.
Upgrade paths:
1) Running on heroku:
Server: Obtain the new files, change settings in snapserver.settings, git add -u, git commit -m 'update', git push heroku master
App: No need to update
2) Your own server:
Server: Stop Node.js, obtain new files, change settings in snapserver.settings (notably, change the new heroku attribute to false), restart Node.js
App: No need to update

Wound up writing my own app and ditching node.js for something that'll run on a traditional webserver. I'm not that patient and wanted to customize a bunch of stuff. Thanks for the great idea/work so far!

Thanks for this OP, it's awesome Can't wait for more features

Hi,
I want to integrate your code to my app, I don't find the Android source code. Will you release it? Is it opensource?
Thank you for your help.

Followed the heroku guide. Using the curl example I always see this error in my heroku logs:
{ messageId: undefined,
canonicalRegistrationId: undefined,
errorCode: 'MismatchSenderId' }
I've tried creating a registration_store containing the long string (seen when I registered from the Android app), but same error.
Any suggestions to getting this to work?
Edit: Got it working! I had my Sender ID wrong. Thanks for the great guide!

snoopy33 said:
Hi,
I want to integrate your code to my app, I don't find the Android source code. Will you release it? Is it opensource?
Thank you for your help.
Click to expand...
Click to collapse
I'm planning on open-sourcing it once I get time to rip out admob (the revenue from ads vs having this open source, open source wins ) and clean up the code. Unfortunately, school has started so I don't have much free time.

sagarkar said:
I'm planning on open-sourcing it once I get time to rip out admob (the revenue from ads vs having this open source, open source wins ) and clean up the code. Unfortunately, school has started so I don't have much free time.
Click to expand...
Click to collapse
Well once you open source it, the community can do it for you
Sent from my GT-I9300 using Tapatalk 2

I cant seem to get a notification to my device.
I followed the setup on your site and managed to get it up, but when I browse to my heroku address I get this:
Welcome to snapnotify-server! Your server is now running at: YOUR_SERVER_ADDRESS:45961
Click to expand...
Click to collapse
I entered the correct settings in the config file, but when I enter the example, curl -d ..., I get a log in heroku saying Invalid request: 401 and syntaxerror: Unexpected token
I have changed the URL in the snapserver.settings, but I'm sure it is supposed to say the actual address?

soulcrusher said:
I cant seem to get a notification to my device.
I followed the setup on your site and managed to get it up, but when I browse to my heroku address I get this:
I entered the correct settings in the config file, but when I enter the example, curl -d ..., I get a log in heroku saying Invalid request: 401 and syntaxerror: Unexpected token
I have changed the URL in the snapserver.settings, but I'm sure it is supposed to say the actual address?
Click to expand...
Click to collapse
Are you sure you committed and pushed after changing the settings? Also, make sure you don't include http:// in the url in snapserver.settings

sagarkar said:
Are you sure you committed and pushed after changing the settings? Also, make sure you don't include http:// in the url in snapserver.settings
Click to expand...
Click to collapse
Thanks, got it to work!
I needed to use git add -u and git commit -m 'update' to get it to update. I don't have any experience with terminal commands

psouza4 said:
Wound up writing my own app and ditching node.js for something that'll run on a traditional webserver. I'm not that patient and wanted to customize a bunch of stuff. Thanks for the great idea/work so far!
Click to expand...
Click to collapse
Would you be able to share what you have done also as this sounds very interesting.

[APP][2.3+][Material] Password Creator - CHRISTMAS SALE + new features

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Hey all, I would like to present to you my application, it is my first app which I released to market.
Clean, simple and material design on your device from android 2.3+
Nowadays, every website is vulnerable to hackers. So our data are not safe everywhere. You shouldn't have one, two or even three main passwords for all your accounts. If you want to feel safe you should have in each of them their own password, independent of the others. Password Creator will create it for you and make it easier to manage them.
Password Creator is an application which allow you easily generate and manage your unique passwords for everything. Additionally, you can change each list and generate a password, in its sole discretion. Additional options, such as exclusion and repeat will ensure that your password will stronger.
Built-in manager will help you remember all of your passwords, categorize them and keep in one place.
You can feel safe because passwords are stored in encrypted DataBase with AES algorithm (128Bit key - depends on your PIN). Additionally there is NO Internet connection permission, so you can be sure that your passwords never will leak outside your smartphone.
Manager and settings are safely because of main PIN which you have to only remember.
All these function in fully responsible and easy material design with backward compatibility to android 2.3.
Of course you can import and export your password, move them to other device - just do it with current PIN.
FEATURES of Password Creator:
• Fully editable lists from which you generate your password
• Categories with ability to define your own
• Manager to store all your passwords
• History of generated passwords if you want get one back
• Material design starting with version 2.3+
• No internet connection required
Full version:
• Unlimited passwords in the manager
• Unlimited history
• Unlimited categories
• Lists are editable
Thanks:
@AlwaysAndroid
@Pilatus47
@$wap
+RaffaeleLandi
+LuigiMarcucci
+Oliver
+Christobal
Download:
Facebook: https://www.facebook.com/passcr
Beta channel: https://plus.google.com/u/0/communities/116369350111513931386
I will be very grateful for any feedback, not only if you have issues. All comments and ideas are welcome.
I am not responsible for any third party applications you have installed and can cause damage to your phone and data stored on it

Changelog:
1.0.6
- sort passwords ascending and descending
- visual improvments
- password modification dialog is closing now after update
1.0.3
- added Spanish
- PIN changes now correctly
- bug fixes
1.0.2
- generator also secured by PIN (everything to better secure your database) - next will be added AES128/CBC/PKCS5 as an option and passphrase as main PIN (in this case password)
- fixed stack in settings
- added Polish, Italian and Croatian langauge
- other fixes
1.0.1
- Bug fixes on tablets
- Updated app icon
- Other small fixes
- If you want help translate to other languages - contact with me
1.0.0 - initial release

Do you plan to translate into other languages?

Why not open source? Especially when it comes to privacy, passwords, etc. people want to know how it works. What are your apps' advantages worth mentioning over other free apps, let's say Twik?

The less you know the better you sleep
Seriously, there are two most important things:
NO INTERNET connection permission - you can be sure that in no magical way, your passwords do not leak
Material - created in accordance with the principles of Material design
I think that first point is the most important because I don't what happen with my data in other applications which require it. Twik need it for icons? They are too heavy to put it inside app? Maybe yes, but I don't have time to check code every update, is the code from the git is an application that I use. I checked several popular applications of this type and all have Internet Connection permission. They have over 100k users who probably don't know what is happening in app or after they closed it. I don't want to wake up one day and find that after last update my informations are circulating on the Web.
Other advanteges:
No ads
Additional options to generate password (eg you can define how many repeats should be max in row)
One again Material design which is good point in that app (available from android 2.3.3+)

Good work

pawtok said:
Do you plan to translate into other languages?
Click to expand...
Click to collapse
Yes, if only there will be people who want to translate it to different languages.
Upcoming new version with fixes for tablets, rate bar. App is ready now to translate to different languages and prepared for future encrypting algorithm. Now is DES with 64bit key -> will be AES with 256bit key (both depends on your PIN of course)

Great App! Good looking!
Do you intend to support existing database format like keepass2 for example ?

Hello,
If you have a file with all the variables that needs to be translated, I can provide you the French version.

admiralwilly said:
Great App! Good looking!
Do you intend to support existing database format like keepass2 for example ?
Click to expand...
Click to collapse
I have to check whether it is able to save decrypted database. But eWallet probably will be first one which will be supported.
Inermis said:
Hello,
If you have a file with all the variables that needs to be translated, I can provide you the French version.
Click to expand...
Click to collapse
Thanks, I'll contact you as soon as I prepare excel.

Very nice helpfull tool,
but the length option doesn´t work

Marurban said:
The less you know the better you sleep
Click to expand...
Click to collapse
Sorry, but this is one of the dumbest things I've ever heard[emoji58]
Seriously, there are two most important things:
NO INTERNET connection permission - you can be sure that in no magical way, your passwords do not leak
Material - created in accordance with the principles of Material design
I think that first point is the most important because I don't what happen with my data in other applications which require it. Twik need it for icons? They are too heavy to put it inside app? Maybe yes, but I don't have time to check code every update, is the code from the git is an application that I use. I checked several popular applications of this type and all have Internet Connection permission. They have over 100k users who probably don't know what is happening in app or after they closed it. I don't want to wake up one day and find that after last update my informations are circulating on the Web.
Other advanteges:
No ads
Additional options to generate password (eg you can define how many repeats should be max in row)
One again Material design which is good point in that app (available from android 2.3.3+)
Click to expand...
Click to collapse
Having no Internet permission is an absolutely good thing, but being open source those apps can be reviewed and even compiled without it, so it's not really as dramatic as you described. Twik also free of ads, but I agree with you that your app offers more possibilities of creating passwords.
But nonetheless, nice app

Marurban said:
I have to check whether it is able to save decrypted database. But eWallet probably will be first one which will be supported.
Thanks, I'll contact you as soon as I prepare excel.
Click to expand...
Click to collapse
Your app looks good.
Just ask if you need a german translation

New update is available now. To better protect your data, generator must also be protected with PIN. I tested AES128/CBC/PKCS5 on my S3 and it is very slow but is better than DES encryption algorithm. Because most of user don't have any of top devices like Nexus 6, this algorithm will be added as an option. Here I have a proposal to add option to login to app once but only at your own risk. What do you think?

Is there anyone here who would like to translate the application to Spanish?
(Added thanks in 1st post and fanpage: https://www.facebook.com/passcr)

@Marurban after installing it force closes on my galaxy y duos gt-s6102,running stock rooted GB 2.3.6 rom. log attached.

Marurban said:
Is there anyone here who would like to translate the application to Spanish?
(Added thanks in 1st post and fanpage: https://www.facebook.com/passcr)
Click to expand...
Click to collapse
Nice app. Clean and simple!
If you´re still looking for a spanish translator, I can give it a try.
Saludos

Exactly what I needed, I just had to increase the security of my accounts since I was using some really weak passwords.

killoid said:
@Marurban after installing it force closes on my galaxy y duos gt-s6102,running stock rooted GB 2.3.6 rom. log attached.
Click to expand...
Click to collapse
I checked it and... are you trying to change something by xposed? On emulators everything is ok
Pilatus47 said:
Nice app. Clean and simple!
If you´re still looking for a spanish translator, I can give it a try.
Saludos
Click to expand...
Click to collapse
New version with bug fixes and Spanish language (finally added), will be available to download in 1 hour. But if you have any suggestions to translations pm me.

Marurban said:
I checked it and... are you trying to change something by xposed? On emulators everything is ok
Click to expand...
Click to collapse
nope. xposed has nothing to do with this app i guess!
Edit: new log attached.

[APP][4.0+][FREE] MD5 Checker and Hash 3.8 with upto 81 algorithms (17th)

MD5 Checker - hashed online comparison is an application completely free and optimized algorithms, no ads, no background processes, working exactly and diverse about functions.
MD5 Checker - hashed online comparison is an application completely free and optimized algorithms, no ads, no background processes, working exactly and diverse about functions.
Release is integrated 81 hash functions: MD2, MD4, MD5, BLAKE224, BLAKE256, BLAKE384, BLAKE512, BMW224, BMW256, BMW384, BMW512, CubeHash224, CubeHash256, CubeHash384, CubeHash512, ECHO224, ECHO256, ECHO384, ECHO512, Skein224, Skein256, Skein384, Skein512, Fugue224, Fugue256, Fugue384, Fugue512, Groestl224, Groestl256, Groestl384, Groestl512, Hamsi224, Hamsi256, Hamsi384, Hamsi512, HAVAL128_3, HAVAL128_4, HAVAL128_5, HAVAL160_3, HAVAL160_4, HAVAL160_5, HAVAL192_3, HAVAL192_4, HAVAL192_5, HAVAL224_3, HAVAL224_4, HAVAL224_5, HAVAL256_3, HAVAL256_4, HAVAL256_5, JH224, JH256, JH384, JH512, Keccak224, Keccak256, Keccak384, Keccak512, Luffa224, Luffa256, Luffa384, Luffa512, PANAMA, RadioGatun32, RadioGatun64, RIPEMD, RIPEMD128, RIPEMD160, SHA0, SHA1, SHA224, SHA256, SHA384, SHA512, Shabal192, Shabal224, Shabal256, Shabal384, Shabal512, Tiger, Whirlpool1
With 3 core features:
-Compare two files using SHA, MD5 or CRC32 hash code
-Compare file with provided SHA, MD5 or CRC32 hash code from offical source.
-Encoding long text or big note to hash string by upto 41 different algorithms, listed below.
This hash generator and hash tool is useful for ton of actions as ROM checking, file signature validating.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
​Here is one more screen shot of UI:
Now let try it:
Get it on CH Play
Hopefully, the app will support a small portion of your working or researching!

What in 1.0 version?
Default – English (United States) – en-US
Added 13 standard hash functions.

Is this the app?
https://play.google.com/store/apps/details?id=com.caovanthanh203.appcode
No offense but I will have to pass.
Based on the reviews and developer's responses the product looks very sketchy.

TheBigL said:
Is this the app?
https://play.google.com/store/apps/details?id=com.caovanthanh203.appcode
No offense but I will have to pass.
Based on the reviews and developer's responses the product looks very sketchy.
Click to expand...
Click to collapse
Sorry TheBigL, I can make my app stable but this reviews come from exchange network and user so I can not change it. I hope your can help me to review it, if you give it low rate I will try to improve it better. Thanks

TheBigL said:
Is this the app?
https://play.google.com/store/apps/details?id=com.caovanthanh203.appcode
No offense but I will have to pass.
Based on the reviews and developer's responses the product looks very sketchy.
Click to expand...
Click to collapse
I have never built a spam application to attract users to view ads. So your answer is a minor injury for me.
I hope you can understand about it. I have another application with better location to make sure about what I said: https://play.google.com/store/apps/details?id=com.vias.cvt.dialer&hl=en_US

caovanthanh203 said:
Sorry TheBigL, I can make my app stable but this reviews come from exchange network and user so I can not change it. I hope your can help me to review it, if you give it low rate I will try to improve it better. Thanks
Click to expand...
Click to collapse
If you know they are exchange network reviews, why do you reply to them?
caovanthanh203 said:
I have never built a spam application to attract users to view ads. So your answer is a minor injury for me.
I hope you can understand about it. I have another application with better location to make sure about what I said: https://play.google.com/store/apps/details?id=com.vias.cvt.dialer&hl=en_US
Click to expand...
Click to collapse
I am sorry, I didn't mean to discredit you or your work.
All I did is to spot an unusual behavior, point it out and behave accordingly.

TheBigL said:
If you know they are exchange network reviews, why do you reply to them?
I am sorry, I didn't mean to discredit you or your work.
All I did is to spot an unusual behavior, point it out and behave accordingly.
Click to expand...
Click to collapse
Thank TheBigL, I think that's my fault. I will learn from your suggestions, that be careful before reply an review. Thank you very much, have a nice day! :fingers-crossed:

TheBigL, you showed me that there are straightforward and constructive people here.. :good:

What's new in v2.0?
Default – English (United States) – en-US
Added more 8 Hash functions are BLAKE-224, BLAKE-256, BLAKE-384, BLAKE-512, SKEIN-224, SKEIN-256, SKEIN-384, SKEIN-512

New Update!
Rollout history
24 minutes ago: Full rollout version 3.1
What's new in this release?
Default – English (United States) – en-US
Added more 12 algorithms: BMW224 BMW256 BMW384 BMW512 CubeHash224 CubeHash256 CubeHash384 CubeHash512 ECHO224 ECHO256 ECHO384 ECHO512

Updated to version 3.5
WHAT'S NEW
Added more 8 algorithms:
Fugue224
Fugue256
Fugue384
Fugue512
Groestl224
Groestl256
Groestl384
Groestl512
Now have 41 methods to generate hash! :fingers-crossed:

New updated version 3.6!
Added more 19 algorithms to generate a hash password:
Hamsi224, Hamsi256, Hamsi384, Hamsi512, HAVAL128_3, HAVAL128_4, HAVAL128_5, HAVAL160_3, HAVAL160_4, HAVAL160_5, HAVAL192_3, HAVAL192_4, HAVAL192_5, HAVAL224_3, HAVAL224_4, HAVAL224_5, HAVAL256_3, HAVAL256_4, HAVAL256_5
Now have 59 methods to generate hash! [​IMG]
Is http://www.sha1-online.com/ enough to you? I think it is not
In ver3.7 we will add more and more, until reach all available hash algorithm on the world.

New updated version 3.6!
Added more 19 algorithms to generate a hash password:
Hamsi224, Hamsi256, Hamsi384, Hamsi512, HAVAL128_3, HAVAL128_4, HAVAL128_5, HAVAL160_3, HAVAL160_4, HAVAL160_5, HAVAL192_3, HAVAL192_4, HAVAL192_5, HAVAL224_3, HAVAL224_4, HAVAL224_5, HAVAL256_3, HAVAL256_4, HAVAL256_5
Now have 59 methods to generate hash!
Is http://www.sha1-online.com/ enough to you? I think it is not
In ver3.7 we will add more and more, until reach all available hash algorithm on the world.

New updated version 3.7!
Added more 12 algorithms to generate a hash password:
JH224, JH256, JH384, JH512, Keccak224, Keccak256, Keccak384, Keccak512, Luffa224, Luffa256, Luffa384, Luffa512
Now have 61 methods to generate hash!

What's next?
New 3.8 release will be added more 10 algorithms!

New updated version 3.8!
Added more 10 algorithms to generate a hash password:
PANAMA, RadioGatun32, RadioGatun64, RIPEMD, SHA0, Shabal192, Shabal224, Shabal256, Shabal384, Shabal512
Now have 81 methods to generate hash!

You have 100 emails?
OK, you should use 100 strongest passwords that are different from each other to keep security.
How to remember it without any password manager? I will tell you have to do it:
Do you have ever think about how to make strong password from your name?
It's simple with hash functions:
Example my email is [email protected]
I can re-use md5 hash of mail address ([email protected]) as password, it's 48ddb93f0b30c475423fe177832912c5bcdce3cc72872f8051627967ef278e08, you can check its with passwordmeter(.)com, it's very strong. But it is very easy to remembered, right?
Because you only need remember simple input and steps, you don't need to remember your strong password.
So, someone worries about security. Ok, I can use other complex pattern:
mail_password = sha256(md5(mail_address))
Wow, pretty good, who is the hacker with enough effort to solve this? This app have up to 81 algorithms, haft of them are rare, you can not find out any tool which give your same algorithms.
You have 100 emails? OK, you can use 100 strongest passwords that are different from each other.
YOU ONLY NEED TO KEEP YOUR PATTERN SECRECT IN YOUR MIND!!!
Try it:
https://play.google.com/store/apps/details?id=com.caovanthanh203.appcode&hl=en

After installing XDA ROM Google drive shows error... can't refresh.. check your network connection.
Kindly help.

[email protected] said:
After installing XDA ROM Google drive shows error... can't refresh.. check your network connection.
Kindly help.
Click to expand...
Click to collapse
Checkout thread that you get ROM, sometime network error can solved by clear app data or update app version

If he use my application, I won't lost his $250M (7K titcoin)
California man has more than $250M in Bitcoin but can't remember his password
Stefan Thomas said he saved the password on an old hard drive, but that drive only allows 10 wrong password attempts before it locks forever.
www.wthr.com

[APP][4.1+] Hypatia: A real-time malware scanner

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Hypatia is the worlds first FOSS malware scanner for Android. It is powered by ClamAV style signature databases.
Features:
- Near zero battery impact: you'll never notice any impact on battery at all
- Extremely fast: it can scan small files (1MB) in <20ms, and even large files (40MB) in 1000ms.
- Memory efficient: with the default databases enabled it uses under 120MB.
- Regular scan: allowing selection of /system, internal storage, external storage, and installed apps
- Realtime scanner: can detect malware in realtime on write/rename in internal storage
- Completely offline: Internet is only used to download signature databases, files will never ever leave your device
- Persistence: will automatically restart on boot/update
- Tiny codebase: coming in at under 1000 sloc, it can be audited by even someone with basic programming experience
- Minimal dependencies: the app only uses libraries when necessary
- Signature databases can be enabled/disabled at the users demand
Links:
- F-Droid: https://f-droid.org/packages/us.spotco.malwarescanner/
- Source Code: https://github.com/Divested-Mobile/Hypatia or https://gitlab.com/divested-mobile/hypatia
- Donate: https://divested.dev/donate
Screenshots:
Spoiler

Well cheers thank you for this

nice found i am using

Hi,
First of all, thank you very much for the Hypatia scanner for Android. It is very nice to see an open-source scanner!
I tested it on my Nokia 8.1 with Android 11 and the real time protection. But unfortunately, it did not bring any message when I downloaded the EICAR test file or the Hypatia test PNG although I had downloaded all the databases.
Moreover, during the file system scan, Hypatia only detected the Hypatia test PNG, but not the EICAR test file.
Just for your information

PhiLL_9575 said:
downloaded all the databases
Click to expand...
Click to collapse
This is probably the issue, if you enable the MAIN or DAILY databases the app is very likely to not work due to memory issues. Try just using it with the default databases.

SkewedZeppelin said:
This is probably the issue, if you enable the MAIN or DAILY databases the app is very likely to not work due to memory issues. Try just using it with the default databases.
Click to expand...
Click to collapse
Thank you for your reply.
I have tried it again: Default setting, once with ClamAV Android Only, once with ClamAV Main only, once with ClamAV Daily and once with Eset only.
The realtime malware scanner didn't work. Both for Hypatia test PNG and EICAR test file.
At least the manual scan worked with Hypatia test PNG, but also not detected the EICAR test file.

Same here. Avast detected both Eicar.zip

PhiLL_9575 said:
The realtime malware scanner didn't work. Both for Hypatia test PNG and EICAR test file.
At least the manual scan worked with Hypatia test PNG, but also not detected the EICAR test file.
Click to expand...
Click to collapse
Nollie8969 said:
Same here. Avast detected both Eicar.zip
Click to expand...
Click to collapse
Hi!
I'm stupid, it had no permission to read all files on Android 11 and higher.
It is fixed in the latest update, already on my F-Droid repository. Should be on the f-droid.org repo in a few days.
Fixup inability to fully scan on Android 11 and higher (09400664) · Commits · DivestOS Mobile / Hypatia · GitLab
Signed-off-by: Tad
gitlab.com
Thank you for reporting.

Thanx for the fix. Any progress on delete on detection ?

I'm sorry that version of today is the same. With standard database and all databases. Eicar files just download and open. No warning. Bummer ..

Nollie8969 said:
I'm sorry that version of today is the same. With standard database and all databases. Eicar files just download and open. No warning. Bummer ..
Click to expand...
Click to collapse
Can you test with eicar.com.txt, not eicar.zip?

Eicar.com.txt tries to open site, but stays blank. No warning.

Nollie8969 said:
Eicar.com.txt tries to open site, but stays blank. No warning.
Click to expand...
Click to collapse
Here is a video on my end: https://divestos.org/misc/hypatia-detection.mp4
Can you confirm you're on the latest version v2.27?

Ah.. Oké.. Only first Eicar file warns. Other 3 files don't. Why not ?

Nollie8969 said:
Ah.. Oké.. Only first Eicar file warns. Other 3 files don't. Why not ?
Click to expand...
Click to collapse
eicar.com and eicar.com.txt should be detected.
eicar_com.zip is eicar.com zipped which won't be detected
eicarcom2.zip is ecar_com.zip zipped which won't be detected
Hypatia is only a basic signature based scanner and doesn't inspect contents of files.
As in, it hashes a file and checks if the hash is known bad. It does not decompress any files.
It's usefullness is genuinely quite limited, but still functional.

system and external scan auto turn off when i restart the app..using v2.28 (92) on miui 13

arnmaiden said:
system and external scan auto turn off when i restart the app..using v2.28 (92) on miui 13
Click to expand...
Click to collapse
Those options only apply to the on-demand manual scan.
The real-time scanner only scans internal storage.

So .. after a few months I wanted to test Hypatia again. Downloaded your test .png which gave alert. But.. scan on default databases says No database, no scan. Can you have a look ?

Funny .. Eset doesn't detect test.png

Follow up: on my backup phone Nokia 8.1 with Arrow13 scan runs. On my daily phone Poco x3pro with Lineage19 I removed Hypatia, rebooted, reinstalled and still no scan. Dunno ...
Edit: scan worked suddenly. Test.png not found during scan.