Database Info

Need Apps. Rss,Chat,BoardExpress Replica

Just like the title says I'm looking for a RSS reader plus others Right now I'm using simpirss which I think is best one but I know there has to be something better out there which is free. Now I heard someone on the forums talking about flory but I see windows yet again took another great program off the marketplace. Finally board express please tell me there's a replica because I've been looking for an app like that for awhile now but I'm not paying 2.99 for something that has a ton of bugs.
Sent from an HD7 free version XDA App lmfao

rss central, great app

Yeah but its not free.. See I don't usually go for the payed apps because I'm always switching phones. Like even now I'm looking for a new phone lol id like to find one with a front mounted camera and since windows has got Skype now well good chance it will be a windows phone but will see

Android APP Developer needed 50/50 revenue split

Android APP developer needed
$150 Good Faith base once project is started and then Revenue Share 50/50 Split
Already have desktop website with 10,000 Members , 100,000 Monthly Uniques to our website and 1 million page views...so a Base of Buyers is already in Place on top of Android Market
Fuel Stations locator Map (and list view) ..with Prices
User should see x amount of Stations in a select-able radius
User should either be able to Login/or register
User should then be able to Post Prices
Members can have Favorites list
odds and ends
Already have database ..and hopefully you can just reuse some coding from the websites pages
I have neither the talent , time , energy or money to do this on my own.. essentially looking for someone to develop and maintain the APP side of our Business as their "baby" and simply handle the odd and end issues that arise , basic maintenance , keeping the APP updated as Android is updated etc ...
I provide database / data / members TRAFFIC ..
So a nice 50/50 split
Anyone interested in a revenue share on a APP project like this please PM me
Thanks !

Are you allowed to post ads like this here? I take this down just a safe.
Sent from my DROID X2 using Tapatalk 2

thelowend said:
Are you allowed to post ads like this here? I take this down just a safe.
Sent from my DROID X2 using Tapatalk 2
Click to expand...
Click to collapse
That's kind of funny lowend.. I am offering to pay for a service and your not sure if that's allowed.. but it is allowed to ask fro free work on xda..(handful of developers and a whole bunch of us looking for /demanding the next free release of xyz ..me included)
I know what you mean though I didn't see a "marketplace" or" Developers for Hire"..so posted here and let the Moderators sort it out.. what ever they need to do is fine..

There is a job listing in the marketplace might want to try there
Sent from my GT-I9100 using xda premium

[Q] Publishing WP7.x xaps

Hi, quite recently i dived into wp app development and id love to post my apps somewhere so people could try them and provide some response. But if i got it right theres a 99 bucks fee to be able to post to the ms marketplace. Is there any other nonofficial or whatever marketplace or something?
Tldr: where to post my xaps for people to try without spending fortune?
Sent from my Google Nexus S using XDA

cahir_cz said:
Hi, quite recently i dived into wp app development and id love to post my apps somewhere so people could try them and provide some response. But if i got it right theres a 99 bucks fee to be able to post to the ms marketplace. Is there any other nonofficial or whatever marketplace or something?
Tldr: where to post my xaps for people to try without spending fortune?
Sent from my Google Nexus S using XDA
Click to expand...
Click to collapse
There are a few routes you can go. The downside is that the users (including you) who you wish to use your app will have to be developer unlocked at the minimum (There's also InterOp Unlocked and Fully Unlocked. You'll have to search the forum to find out information on that). There is a homebrew marketplace named Bazaar (http://forum.xda-developers.com/showthread.php?t=1383648) and W.I.N.C.O App Store (http://forum.xda-developers.com/showthread.php?t=1668020)
It's always best to create a thread to display your app so that users can know what the purpose of the app is and a place for the users to go to for support. Also, creating beta testing pools helps out a lot. See what I did for R1ng3d in my signature.
I hope this helped out,
snickler

Can a dev target a specific device in play store?

Call me paranoid but I recently gave a dev a bad review of his software from playstore which got me thinking that if he wanted to, since devs some times communicate with reviewer without having given them your email, he could create an update that would target my phone based on my email. Assuming my email is used on my phone.
Is it possible?

My understanding is that apps require your permissions to do anything that could be considered a safety hazard, like accessing your contact list or full internet access. Check what permissions have changed for the update before you install. Of course there is always the possibility of subversive code within any program.... I haven't heard of any problems like that yet.....
Sent from my PC36100 using xda app-developers app

i doubt this, but anything is possible I'm sure with enought effort and hackery.
---------- Post added at 03:21 PM ---------- Previous post was at 03:09 PM ----------
i doubt this, but anything is possible I'm sure with enought effort and hackery.

Sending you an email? I don't think that can bypass GMail's alerts and receive the apk in the background.
Although there are other ways of performing unethical activities.
Go see the app's data usage. If it's not an app that needs Internet so much than the data usage must be very low. But if the data usage goes very high and u donno how then that could be something fishy.
That can also be actual normal usage. You have to reason it right.
Sent from my GT-I9103 using xda app-developers app

lmali92 said:
Sending you an email? I don't think that can bypass GMail's alerts and receive the apk in the background.
Although there are other ways of performing unethical activities.
Go see the app's data usage. If it's not an app that needs Internet so much than the data usage must be very low. But if the data usage goes very high and u donno how then that could be something fishy.
That can also be actual normal usage. You have to reason it right.
Sent from my GT-I9103 using xda app-developers app
Click to expand...
Click to collapse
What I mean by "email" is I've written reviews in the past, I then get an email to my gmail account that is the same gmail id on my phone that I also use for playstore. The email from the dev I just addresses my review. This has happened more than once. So that tells me that when you review an app the dev some how gets your email.
So, I'm thinking I write a bad review, dev gets pissed, pissed enough to create an update to the software that targets any user that has a specified "email" on the device. The update says "bug fixes" but along with bug fixes he targets any device that has the target email.
I have no idea if this is possible but I don't see why not if he knows my email and can get the software on my phone with an update.
Again, I know it's a little paranoid, I'm just wondering if it's possible, theoretticly.

DomoDom said:
What I mean by "email" is I've written reviews in the past, I then get an email to my gmail account that is the same gmail id on my phone that I also use for playstore. The email from the dev I just addresses my review. This has happened more than once. So that tells me that when you review an app the dev some how gets your email.
So, I'm thinking I write a bad review, dev gets pissed, pissed enough to create an update to the software that targets any user that has a specified "email" on the device. The update says "bug fixes" but along with bug fixes he targets any device that has the target email.
I have no idea if this is possible but I don't see why not if he knows my email and can get the software on my phone with an update.
Again, I know it's a little paranoid, I'm just wondering if it's possible, theoretticly.
Click to expand...
Click to collapse
I really doubt this would happen, Developers cant get your email from leaving a review, at least not from the developer panel.. there are many times I would have loved to email and help people that just cant be bothered to email me for support so leave a 1 star rating.
If the app was paid for then they could get your email through google checkout by looking for your transaction.
<rant>As a developer I hate not being able to reply to ratings and reviews, nearly all the 1 star and 2 star reviews of my apps are stupid things that are easy to fix but the reviewer is far to lazy to ask for help. And alot seem to think you can reply to reviews, I get alot that say they need help but not leave any way to contact them </rant>
Sent from my MB860 using XDA Premium HD app

zacthespack said:
I really doubt this would happen, Developers cant get your email from leaving a review, at least not from the developer panel.. there are many times I would have loved to email and help people that just cant be bothered to email me for support so leave a 1 star rating.
If the app was paid for then they could get your email through google checkout by looking for your transaction.
<rant>As a developer I hate not being able to reply to ratings and reviews, nearly all the 1 star and 2 star reviews of my apps are stupid things that are easy to fix but the reviewer is far to lazy to ask for help. And alot seem to think you can reply to reviews, I get alot that say they need help but not leave any way to contact them </rant>
Sent from my MB860 using XDA Premium HD app
Click to expand...
Click to collapse
Well I can assure I've been contacted after posting a review. Also recently the devs have post responses to reviews that appear right below the review. Also they are purchased apps most of the time.
You do bring up a good point. Its not entirely fair to post a review without contact the dev first. In my case it was an issue about the hidden costs once you buy an app.

DomoDom said:
Well I can assure I've been contacted after posting a review. Also recently the devs have post responses to reviews that appear right below the review. Also they are purchased apps most of the time.
You do bring up a good point. Its not entirely fair to post a review without contact the dev first. In my case it was an issue about the hidden costs once you buy an app.
Click to expand...
Click to collapse
Yes they are rolling out the ability to directly reply but its only for the 'top' devs at the moment.
If they are paid its likely they found your transaction and contacted you.
Yes i think more people need to stop and email the dev (we infact offer every level of support going. Live chat/forum/email and yrt it still happens) often the issue is fixable and a mistake by the dev.
However that of cause isnt always the case
Sent from my GT-N7000 using xda premium

Just write another review telling him to **** off
Sent from my HTC One X using xda app-developers app

The main question is, if you gave him a bad enough review that will make him want to revenge, why do you still have his app on your device ?
Sent from my GT-N7100 using xda app-developers app

CreepyDroid said:
The main question is, if you gave him a bad enough review that will make him want to revenge, why do you still have his app on your device ?
Sent from my GT-N7100 using xda app-developers app
Click to expand...
Click to collapse
I think the main question is in fact what I asked, is it possible for a dev to write code that can target a phone that uses a specific email and does nothing to any other phone. Common sense tells me it would be possible, zero coding sense tells me to ask, I just wanted to hear from someone with more knowledge than me if it can be done.
I don't actually "know" that he would do anything and maybe he would just blow it off as he received several similar reviews to mine. Again, it got me thinking as to whether it could be done. That's all.

DomoDom said:
I think the main question is in fact what I asked, is it possible for a dev to write code that can target a phone that uses a specific email and does nothing to any other phone. Common sense tells me it would be possible, zero coding sense tells me to ask, I just wanted to hear from someone with more knowledge than me if it can be done.
I don't actually "know" that he would do anything and maybe he would just blow it off as he received several similar reviews to mine. Again, it got me thinking as to whether it could be done. That's all.
Click to expand...
Click to collapse
Can it be done? Yes. Is it easy, practical or ethical? Not in the least. It would rely on many factors that I will not get into. But it can be done. I wouldn't worry to much about a developer doing it. They would lose too much if it was found. Developers get bad reviews all the time.
Sent from Arkham

Thanks

Good point.
Sent from my GT-I8150 using xda premium

Xposed/Xprivacy conflict (bug/security leak) with a popular game.

OK guys I'm new here (kinda) , I searched the forum, read etc and haven't come across any of the above mentioned issue.
Now my reason for not naming the above game is because I do not want other users to go doing anything they shouldn't.
I'm not sure if this is really really serious or its just a feature I didn't read in the App (xposed/xprivacy). Anyways I'll get to the point!
I recently found out I can access another users account (on a popular game) when xposed is installed and activated.
I tried it two times and it actually works (I didn't do anything to the account but I was curious).
Now my question is, could this be a bug in the game or something? M thinking this could be a real big issue if gotten in the wrong hands.
I will report it to the devs of the game but I want to know first etc.
Sent from my SGH-T999V using XDA Premium 4 mobile app

Best thing to do is follow industry standard and practice responsible disclosure. Generally a secure, private message notifying your discovery to the developers that have made the potential mistake is the first step to take.
If they don't respond kindly and promptly explaining how they're working to resolve the issue, then it would be best to inform them that you're going to be responsible in informing the app's distributors (play store?) to have them figure out if it's a serious problem enough to disable distribution until the bug is fixed.
If after that you've still not seen any honest progress in mitigating the vulnerability, call the press, those vultures love rotting flesh for the front page.
What is Responsible Disclosure? http://forum.xda-developers.com/showthread.php?t=2338337

Thanks dude! Will do as u suggested, however I posted in their forum asking them to contact me as I'm on my phone n isn't close to a pc n it's really hard to navigate their website on the phone.
Sent from my SGH-T999V using XDA Premium 4 mobile app

Understandable. If you can, see if their team has a direct contact anywhere I their site when you have a desktop to work with. play store usually has a contact link for app Developers too. I'd like to think most software teams are at least responsible enough for reputations sake and will give their due diligence depending on severity, but I've not a clue. Someone brings me a tip like this and I'd be all ears, but some of the projects I work with deal with a bit more sensitive data (unless this app you're talking about had in app billing, which would make this much more serious. Legal implications for improper handling of consumer financial data can be quite serious unless you're on wall street.)

Well, it DOES have in-app purchase! I went ahead and checked out again, I realise it can (continually) access only one set account based on Xprivacy 's "global fake account", settings, when I go manual and change uses random settings, it does not access that said account, from further test I realise accessing another players account has to do with the email address, because when I unchecked the other features it does not work (it takes me to a new game instead) I'm not sure how the devs of Xprivacy provide or Crete the "global fake account" but it has something to do with accessing the app, if someone is really determine n decide to modify/rewrite Xprivacy I believe it can be used to access anyone's account based on If u know who actually plays that game, easiest way is to just go on play store see who comment and find some way to get their email address!
Edit: I also emailed them with pictures of the users account and how I accessed it, I didn't mentioned Xprivacy as I was uncertain if I should. Do u think I should?
Btw I still don't get any reply and that was from about 12 hours ago.
Sent from my SGH-T999V using XDA Premium 4 mobile app

wow
geminixx said:
Well, it DOES have in-app purchase! I went ahead and checked out again, I realise it can (continually) access only one set account based on Xprivacy 's "global fake account", settings, when I go manual and change uses random settings, it does not access that said account, from further test I realise accessing another players account has to do with the email address, because when I unchecked the other features it does not work (it takes me to a new game instead) I'm not sure how the devs of Xprivacy provide or Crete the "global fake account" but it has something to do with accessing the app, if someone is really determine n decide to modify/rewrite Xprivacy I believe it can be used to access anyone's account based on If u know who actually plays that game, easiest way is to just go on play store see who comment and find some way to get their email address!
Edit: I also emailed them with pictures of the users account and how I accessed it, I didn't mentioned Xprivacy as I was uncertain if I should. Do u think I should?
Btw I still don't get any reply and that was from about 12 hours ago.
Sent from my SGH-T999V using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Awesome it's great to see that there is always someone to test those boundaries, as its people like myself that always take it for granted that, when someone says a game is safe we take it as "Gospel" so to speak, that it actually is.I found this thread a genuinely interesting read and I learned that not everything is as plain as the nose on my face...thanks guys!

geminixx said:
Well, it DOES have in-app purchase! I went ahead and checked out again, I realise it can (continually) access only one set account based on Xprivacy 's "global fake account", settings, when I go manual and change uses random settings, it does not access that said account, from further test I realise accessing another players account has to do with the email address, because when I unchecked the other features it does not work (it takes me to a new game instead) I'm not sure how the devs of Xprivacy provide or Crete the "global fake account" but it has something to do with accessing the app, if someone is really determine n decide to modify/rewrite Xprivacy I believe it can be used to access anyone's account based on If u know who actually plays that game, easiest way is to just go on play store see who comment and find some way to get their email address!
Edit: I also emailed them with pictures of the users account and how I accessed it, I didn't mentioned Xprivacy as I was uncertain if I should. Do u think I should?
Btw I still don't get any reply and that was from about 12 hours ago.
Sent from my SGH-T999V using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Xprivacy forces your 'phone' to report bunk settings, which xPrivacy also allows you to manually set. So if this is a vulnerability in this particular app, where the app developers are relying on what they previously thought was solid and unmanipulable data from the users' phone.... then there's certainly potential for abuse, and potential for this vulnerability to be fairly widespread. It seems like an honest mistake on the part of the game developers because most situations the data that xprivacy is allowing manipulation to is in most cases static and unique per phone/user. You very well may have opened up pandora's box... Authentication to an app with purchasing power shouldn't rely solely on supposedly static strings within the android system...

Well either they don't take it seriously or they don't reach to my mail as yet cuz nobody replied to my email or my forum post, I'm thinking it's cuz I leave out the app I used to get the access, I dunno what else to do so imo just leave it... Or maybe email them one more time...
Sent from my SGH-T999V using XDA Premium 4 mobile app

Thanks flower! Always willing to help out! I do enjoy bug testing! Lol its my fave pass time!
Sent from my SGH-T999V using XDA Premium 4 mobile app

geminixx said:
Thanks dude! Will do as u suggested, however I posted in their forum asking them to contact me as I'm on my phone n isn't close to a pc n it's really hard to navigate their website on the phone.
Sent from my SGH-T999V using XDA Premium 4 mobile app
Click to expand...
Click to collapse
You are possibly violating CFAA (a felony) but continuing to access data on their servers. I would stop accessing their sevices/using the app, and alert them. If you have issues contacting them, I can act as an intermediary, most companies will respond to me.

jcase said:
You are possibly violating CFAA (a felony) but continuing to access data on their servers. I would stop accessing their sevices/using the app, and alert them. If you have issues contacting them, I can act as an intermediary, most companies will respond to me.
Click to expand...
Click to collapse
They contact me on their forum, and what would they charge me for? I didn't do it deliberately. And I wouldn't give u any information cuz I don't know u anyways.
Sent from my SGH-T999V using XDA Premium 4 mobile app

geminixx said:
They contact me on their forum, and what would they charge me for? I didn't give u any information didn't do it deliberately. And I would cuz I don't know u anyways.
Sent from my SGH-T999V using XDA Premium 4 mobile app
Click to expand...
Click to collapse
I recently found out I can access another users account (on a popular game) when xposed is installed and activated.
I tried it two times and it actually works (I didn't do anything to the account but I was curious).
Click to expand...
Click to collapse
intentionally accesses a computer without authorization or exceeds authorized access, and thereby obtains information from any protected computer
Click to expand...
Click to collapse
Source: http://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

jcase said:
Source: http://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
Click to expand...
Click to collapse
Thank u for your info mate but if you realise I POSTED ABOUT IT OUT OF CONCERN! I tested to see if it was INDEED what I suspected! If ur a Dev (I'm not but I know because I do alot of beta testing) I'm sure u would no ALOT of people report false positive.
And HOW would I be able to explain in details as to how I was able to access it if it was done my mistake in the first place? That's what ur normally asked to do isn't it? Hmmmm
So me checking to make sure it wasn't isn't any violation as u call it. I'm not abusing anything...
Sent from my SGH-T999V using XDA Premium 4 mobile app

geminixx said:
Thank u for your info mate but if you realise I POSTED ABOUT IT OUT OF CONCERN! I tested to see if it was INDEED what I suspected! If ur a Dev (I'm not but I know because I do alot of beta testing) I'm sure u would no ALOT of people report false positive.
And HOW would I be able to explain in details as to how I was able to access it if it was done my mistake in the first place? That's what ur normally asked to do isn't it? Hmmmm
So me checking to make sure it wasn't isn't any violation as u call it. I'm not abusing anything...
Sent from my SGH-T999V using XDA Premium 4 mobile app
Click to expand...
Click to collapse
Yes I am a developer, working in the mobile security field (hence being a moderator of this forum). Yes, it was a violation of CFAA. If the company wants to be an vindictive, they certainly could get you charged for it (unlikely). Your post was (and is) fully welcome here, and exactly what we want to see. You possibly stepped too far the first time you accessed it, you certainly stepped too far the second time. If you do this or not, I personally don't care, I was merely offering you (accurate) advice.

K
Sent from my SGH-T999V using XDA Premium 4 mobile app