Database Info

[Exploit] Location Stealing on Samsung smartphones

Edit: Uploaded new APK which is compatible with devices from Android 2.0 and up.
First of all, let me say this: I love Samsung smartphones, I myself own one, the Samsung Galaxy S, and these are great devices. Me sharing this information is only in the will to do good, so that people know how to protect themselves from this exploit and to pressure Samsung in fixing it on future updates.
What my exploit does it to obtain the user location, without the app needing any android permission AT ALL. Usually you could obtain the user location by using permissions such as ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION or even via Internet. The thing is, by using one of those, the user is alerted that that particular app will have access to those permissions on the device, but with my exploit the app is able to get the same info without issuing any of those. Also, this does not rely on having Root permissions on the device, this exploit works on out-of-the box devices.
The reason why this happens is because a certain widget (accurweather widget that comes with the phone) on some modern Samsung phones places the info about the location readable by every app in System Properties, its hidden from the 'naked eye' if you're just looking at the API, but you just have to know its name to get it. So these next 2 lines of code will get you the information used for the exploit (go ahead and compile your own version if you're afraid of my APK):
String value1 = Settings.System.getString(getContentResolver(), "aw_daemon_service_key_city_name");
String value2 = Settings.System.getString(getContentResolver(), "aw_daemon_service_key_detail_info");
The problem is even more serious than I first though, because you only need to have the widget on the launcher once, and that info will remain in the system informations when you remote it from the launcher, even across reboots or even if you clear the widget's data and cache (pretty scary :S). Sometimes (I don't know why exactly yet) the info goes away for good, but only if you don't have this widget on your launcher!
So, what devices does this affect. From my tests, it affect the Galaxy Note and the Samsung Galaxy S II, but it should affect much more new Samsung devices probably, I just didn't test. I have a SGS but since I run cyanogenMod there was no point running it there either (cyanogenmod ftw! ).
Of course you might be wondering right now, that if you MANUALLY set the place to some strange place on the widget (let's say a remote village in China) what is reported by the exploit will be that place, but it seems to me that most people will be using this on "current location" setting.
So my truly advise is, root the phone and remove the widget for good (needs root because it is a system app). If you don't want to root the phone, then just manually change the place of the widget to something else.
In this thread I leave the simple app that shows you if your device its exploitable, and if so it shows you SOME of the information that could be exploited. As you'll notice during install, no permissions are required, nor the app will at any time ask for root permissions.
Market link to same app: https://market.android.com/details?id=com.pedronveloso.samsunglocationstealing

Indeed, very good sharing...
Keep the good work...
Cheers

Fortunately i don´t use TW....

"Issue parsing the package" error and does not let me download in the market as I'm on an LG Thrill. I would however like to see if the Thrill/O3D's Accuweather widget is also prone to this issue. Thank you.

So would it be enough for Accuweather to be updated (once its patched), or is the problem deeper then that?

Simple solution for me, just removed it.
Will search for an other weather app.

We have a class action lawsuit against HTC/Accuweather going on over on the HTC EVO side, although our accuweather issue is it's transmitting location unencrypted in plain text to advertisers.
Wonder if this could be modified to work with the Sprint/HTC accuweather

Snuble said:
So would it be enough for Accuweather to be updated (once its patched), or is the problem deeper then that?
Click to expand...
Click to collapse
From what I understand, the data is pulled with no permission or anything only because it's a system app. Remove it and be safe.

I knew I froze the app for a reason! Thanks for sharing your discovery.

Snuble said:
So would it be enough for Accuweather to be updated (once its patched), or is the problem deeper then that?
Click to expand...
Click to collapse
I don't know for sure yet, but I'm guessing it probably could. The thing is, I think accurweather its a modified version for the Samsung phones, so only a ROM itself would carry such update, and we know how long those take :\.

bedwa said:
"Issue parsing the package" error and does not let me download in the market as I'm on an LG Thrill. I would however like to see if the Thrill/O3D's Accuweather widget is also prone to this issue. Thank you.
Click to expand...
Click to collapse
Was probably because I made the minimum SDK equals to Android 2.3.3 . I've fixed that now, on the attachment and on the Market, so go ahead and try again please

Could anybody do me a huge favour, all i need is a screenshot of the results this application gets (a real location)
Im doing a dissertation on android gps forensics and it would be useful and as i dont have a samsung myself i cant do it.

Phil750123 said:
Could anybody do me a huge favour, all i need is a screenshot of the results this application gets (a real location)
Im doing a dissertation on android gps forensics and it would be useful and as i dont have a samsung myself i cant do it.
Click to expand...
Click to collapse
This an earlier screenshot I have, almost the same but field names are in portuguese, however the info extracted is the same and reads in English so you can get the idea.

Thanks a lot just what i needed!

Hi, very good work.
it's possible to know which version of accuweather you refer?

Reports null on my samsung
Sent from my SGH-T679 using XDA App

ActionConnect APK for connecting to Ego 727

The new Liquid Image Ego 727 action camera (similar to GoPro) has built in functionality for live video streaming over WiFi. However, the compatibility list for the android app is not very good, so you must either go through the trouble of tricking the Google servers that your phone is actually a Samsung Galaxy S, or download the attached APK because I'm such a nice guy. Of course, if you actually have a Samsung Galaxy S, you won't have any issues :laugh: .
Now, if you have a Huawei Ideos U8150 running Android 4.0.4, you might find that the app doesn't work - you can launch the app and go into the camera's settings, but the app exits when trying to view full screen. If anyone has android earlier than 4.0.4 (but later than 2.2) on their Huawei Ideos U8150, please see if you can get the app working properly and if you can, throw an email to Liquid Image Tech Support: [email protected]
I have discussed these issues with a helpful staff member from Liquid Image Tech Support and the problem has been forwarded to their software engineers.
If anyone gets this app working on any phone or tablet, please throw up a video.
Also, since this app is pretty big and the board only allows 8MB max per attachment, I had to split the APK into two ZIP volumes. You will need to rename ActionConnectvlm2.zip to ActionConnectvlm1.z01 in order to extract the APK. If you can't be bothered doing that, I have also uploaded the APK to rapidshare: https://rapidshare.com/files/802073762/ActionConnect.apk
Cheers!

Asus PhotoFrameWidget (4.2/4.4)

Hi,
First:
I am no means called developer so be warned, I consider myself more like an android enthusiastic, so please don't ask me to make it work for your devices or telling me it does not work.
Second:
I have tested this on my devices (on Nexus 7 stock 4.4.2 and Samsung Galaxy Note 4.2.1) and it works on both, considering it works on two different devices, I am hoping it should work for most of devices.
Installation (root required):
Unfortunately, even if I tried to make this work as normal app install, i could not able to display the pictures (if you install as normal apk, photos does not display), so you need to push this apk to system/app folder and reboot to your phone and tablet.
Download:
see attachment.
Secreenshot:
https://www.dropbox.com/s/pq2agsjcgzfdolu/Screenshot_2014-04-09-13-13-19.png
https://www.dropbox.com/s/pq2agsjcgzfdolu/Screenshot_2014-04-09-13-13-19.png
https://www.dropbox.com/s/l3xdqfzdcgpd9th/Screenshot_2014-04-09-13-14-13.png
https://www.dropbox.com/s/u4ttvzbreplg3hx/Screenshot_2014-04-09-13-14-34.png
https://www.dropbox.com/s/6ut5nk7s6s4lsej/Screenshot_2014-04-09-13-15-20.png
I really liked this photoframe widget from Asus, that's why I am sharing with you guys. If it works on your device, a little thank you is more than enough.

Kids Mode is missing

For some reason my Tab 4 10.1 didn't have the homescreen/app drawer shortcut to download Kids Mode. Could someone share their Kids Mode apk?
Thanks!

boberthepker said:
For some reason my Tab 4 10.1 didn't have the homescreen/app drawer shortcut to download Kids Mode. Could someone share their Kids Mode apk?
Thanks!
Click to expand...
Click to collapse
A reset under General>backup /restore should bring it back. My tab booted a little differently from the first boot after I did a factory data reset. If you don't want to lose your setup I'm sure someone will post the apk but the fact you don't have it you should do a reset.

macbroom said:
A reset under General>backup /restore should bring it back. My tab booted a little differently from the first boot after I did a factory data reset. If you don't want to lose your setup I'm sure someone will post the apk but the fact you don't have it you should do a reset.
Click to expand...
Click to collapse
Makes sense. I'll try that. Thank you!

boberthepker said:
For some reason my Tab 4 10.1 didn't have the homescreen/app drawer shortcut to download Kids Mode. Could someone share their Kids Mode apk?
Thanks!
Click to expand...
Click to collapse
Check for a software update. The Kids Mode download appeared after I did an update check.

My 8.0 said it had an update shortly after I first set it up. The update preamble specifically mentioned Kids Mode being included. And now I have an icon in the app drawer for it.

matt0401 said:
My 8.0 said it had an update shortly after I first set it up. The update preamble specifically mentioned Kids Mode being included. And now I have an icon in the app drawer for it.
Click to expand...
Click to collapse
I just got mine today and it didn't have the kids mode on it but as soon as I did the update that it told me I had, I had kids mode on the tablet. Now I have one question. What the heck is this supposed to do to your tablet? Is this something that you can set up for your kids and also protects your stuff from any accidental deletion? I just want to know before I decide to run this app. Don't want to mess up settings that I have set up on it right now by running this.

LTE Tab 4 models have Kids Mode removed
I spoke to Samsung Telecommunications US headquarters this week out of frustration of not having the Kids Mode App on our two new AT&T LTE Samsung Tab 4 devices and have confirmed that all LTE models have had the Kids Mode feature removed from their devices. And, the most frustrating thing is actually on Samsung's own website for the individual, specific LTE models which lists the Kids Mode feature as a key selling point. And yes, the first thing people say is: "Have you checked for the latest updates (Android & Samsung.) And, the answer is yes. I have confirmed this removal with Samsung and notified them that this is indeed a huge problem. Maybe not so much for me or for you who may thrive off all things tech, but for the grandparent or parent buying this for their child with the sole purpose of using this key selling feature to help protect their child. Their frustration and discomfort in trying to use what they've been sold and not being able to will only push them away from Samsung or other Android devices. It is a disservice to both the Samsung and Android names as well as to the customer. And it makes us maybe reflect on what we can learn from apple (which pains me to say): when they advertise a feature, it does work on their devices especially on the new ones and even more so on a product listed to have the feature. It's both disappointing and embarrassing to see as both a Samsung and Android supporter.
And one more thing that pains me as an AT&T employee, which I am but not in mobility, that must be said!.. Samsung and AT&T have thought of our kids protection and replaced the Kids Mode with another app. FAMIGO!.. which is a PAID subscription of $4.99 a month to protect your Child!! THINKING of this even more gets me so infuriated!! What an absolute disservice and embarrassment!!

So i have found a solution for the Tab 4 8" Users. on the 10.1" Device it should be not working because the Screen is bigger but i think there is an other way.
I have the Tab Active (T365) with the same specs as the Tab 4 8" and i missed the Kids Mode to.
So now we have two Solutions for Root Users and for Users without Root.
Access to the Samsung Kids Store have only Root Users or the T330NU User!!!! Users without Root can use the Kids Mode only with other Apps from the PlayStore or should be download Kids Games over the Samsung App Store (not the Kids App Store).
How-To Install Kids mode for Users without Root:
Download this KidsModeT330-T365.zip File
Extract ZIP and copy to your Tablet SD Card
now install ALL Apps at the normal Way (Filemanager and klick on each App to Install)
ignore some error Messages if they comes and realy install all Apps
now Reboot your Device
now Kids Mode must be work
How-To Install Kids mode for Users with Root:
Download and Install the SecKidsModeInstaller.apk
Make a Backup from your build.prop
Edit your build.prop (3 Points):
Code:
ro.product.model=[B]SM-T330NU[/B]
Code:
ro.product.name=[B]milletwifiue[/B]
Code:
ro.product.device=[B]milletwifiue[/B]
Save the buil.prop and set the Permissions (rw-/r--/r--), now Reboot your Device
After Reboot launch the KidsModeInstaller App and follow the Instructions
After Installed Process you can launch the Kids Mode and go into the Kids Store and download all Games you needed
If you are ready and finish you must be Reverse the Changes in the buil.prop . So delete the build.prop and copy / replace it with you Backup build.prop (set Permissions) and Reboot
On my rooted Tab Active LTE (SM-T365) this is working (Android 4.4.4).

YES!!!!!!!!
Darkman said:
So i have found a solution for the Tab 4 8" Users. on the 10.1" Device it should be not working because the Screen is bigger but i think there is an other way.
I have the Tab Active (T365) with the same specs as the Tab 4 8" and i missed the Kids Mode to.
So now we have two Solutions for Root Users and for Users without Root.
Access to the Samsung Kids Store have only Root Users or the T330NU User!!!! Users without Root can use the Kids Mode only with other Apps from the PlayStore or should be download Kids Games over the Samsung App Store (not the Kids App Store).
How-To Install Kids mode for Users without Root:
Extract ZIP and copy to your Tablet SD Card
now install ALL Apps at the normal Way (Filemanager and klick on each App to Install)
ignore some error Messages if they comes and realy install all Apps
now Reboot your Device
now Kids Mode must be work
How-To Install Kids mode for Users with Root:
Download and Install the
Make a Backup from your build.prop
Edit your build.prop (3 Points):
Code:
ro.product.model=[B]SM-T330NU[/B]
Code:
ro.product.name=[B]milletwifiue[/B]
Code:
ro.product.device=[B]milletwifiue[/B]
Save the buil.prop and set the Permissions (rw-/r--/r--), now Reboot your Device
After Reboot launch the KidsModeInstaller App and follow the Instructions
After Installed Process you can launch the Kids Mode and go into the Kids Store and download all Games you needed
If you are ready and finish you must be Reverse the Changes in the buil.prop . So delete the build.prop and copy / replace it with you Backup build.prop (set Permissions) and Reboot
On my rooted Tab Active LTE (SM-T365) this is working (Android 4.4.4).
Click to expand...
Click to collapse
OMG, thank you so much. I've spent so much time looking for a tablet version of sammy kids mode and settled for an s4 or s5 variant that was crop all wrong and very awkward. I even tried flashing rom but no luck until this post. Im a rooted sm-p607 note 10.1 tmobile 4glte. The prop mod didn't work but installing the files manually did the trick, thank you. :laugh::good:

If anyone runs into this, check your Widgets before you go doing a full-on Factory Reset. I found a 1x1 Widget for Kids Mode hiding in here and saved a ton of time and patience. Hope this helps.

DJScribe said:
If anyone runs into this, check your Widgets before you go doing a full-on Factory Reset. I found a 1x1 Widget for Kids Mode hiding in here and saved a ton of time and patience. Hope this helps.
Click to expand...
Click to collapse
Confirmed 1x1 kid mode widget was there. Dragged to Home Screen then click and ask to download. This was on a T-230NU 7" which after flashing newer firmware then rerooting, kid mode did not show up.

does this give you the kids mode that is actually on the kids tab version. I bought a Samsung Tab A and it has a kids mode but now you need to pay for everything. The only way to get it free is if you bought the kids tab.

official Android 12 ROM released for the Ulefone Power Armor 13 !

Software Download - Ulefone
Software Download,Support
www.ulefone.com
Hey everyone,
I just wanted to help spread the word that there is an official Android 12 ROM for Ulefone Power Armor 13.
This was not publicly announced anywhere as far as I know.
Your phone will NOT receive an automatic update for this (at least as far as my experience goes).
The only way to currently upgrade to the ROM is via the SP Flash Tool.
The only reason I know about this ROM is because I just happened to be looking through their website.
Find it here!
Software Download - Ulefone
Software Download,Support
www.ulefone.com
Edit:
I should note - if you do a full wipe & flash this ROM, it WILL flash you a new IMEI number
This IMEI number will be the same IMEI number for everyone running this ROM fully wiped.

benhall847 said:
Software Download - Ulefone
Software Download,Support
www.ulefone.com
Hey everyone,
I just wanted to help spread the word that there is an official Android 12 ROM for Ulefone Power Armor 13.
This was not publicly announced anywhere as far as I know.
Your phone will NOT receive an automatic update for this (at least as far as my experience goes).
The only way to currently upgrade to the ROM is via the SP Flash Tool.
The only reason I know about this ROM is because I just happened to be looking through their website.
Find it here!
Software Download - Ulefone
Software Download,Support
www.ulefone.com
Click to expand...
Click to collapse
I keep getting an "incorrect scatter file format" error when attempting to flash using SP. Either I'm doing something wrong or they messed it up.

Benovite said:
I keep getting an "incorrect scatter file format" error when attempting to flash using SP. Either I'm doing something wrong or they messed it up.
Click to expand...
Click to collapse
What SP Flash Tool version are you using?
I flashed with SP Flash Tool v5.2216
Another tip - move the ROM folder inside the SP Flash Tool folder.

benhall847 said:
What SP Flash Tool version are you using?
I flashed with SP Flash Tool v5.2216
Another tip - move the ROM folder inside the SP Flash Tool folder.
Click to expand...
Click to collapse
Oh gosh you name it. I went thru numerous versions, some antiquated, some supposedly being the latest versions. Definitely used v5.22, probably twice if not more.
Thanks for the tip about moving the ROM folder. I figured the solution might have to do with the placement of the ROM folder or the SP flash tool folder(possibly both on C: drive) but I just kept on getting the same annoying error message. I'm gonna take your advice right now as a matter of fact. Hopefully it'll work for me as I'm assuming it did for you.
Incidentally, you probably know this already...about the wireless update section having the ability to apply updates 'locally' as well. Tried that a couple of times but no go. Just before you replied I was gonna try the old 'update from recovery mode' but I'd rather try your approach.
Here we go(again!)

Ok.... I'm back. What's it been, over 4 hours since my last post? but in truth I can't claim to have been pulling my hair out for that long. Maybe 2 and a half lol.
>Alternate response: Wow. That was not fun. I somehow managed to boink my phone to seemingly do nothing but start in Fastboot mode.
**But wait, let me give credit and thanks where it's due to benhall. That little tidbit of advice that practically Everyone neglected to divulge about putting the ROM folder in the SP flash folder- a crucial step btw- was the key to getting Android 12 on my PA13. So ben, thank you very much. My deadened eyes sparkled when instead of constantly seeing 'stop feeding me this trash', the little balls of processing hope began-a-spinning to indicate that, yes Virginia, put that dang ROM folder in the SP folder. Again, never saw that in any instructions or any god-awful video that some people made to show how it's done, but instead irritate beyond belief because of their insistence of loud techno music as they talk, or babies yelling in the background while - ok I'm stopping. It was stressful to say the least because I knew I was almost there.
ANd to be fair I actually ended up watching (again) that one video that Ulefone condones on YouTube with the silent Asian (?) guy speeds thru the steps using that client sp thingy with the PDF instructions that Ulefone pushes. I tried SP v5.22 and 6.22 for that matter, but they just weren't working for me. Most likely entirely my fault, but I finally went back to square one with what they suggested and I went over that video again and again and finally....it took!
So, Android 12. It's big, had to reduce the display size because everything is Huge. Visually appealing, nice to get an update.
Funny thing is, sorta like benhall, I happened upon Android 12 in Ulefones Google Drive folder(just bored snooping around). But I was like Whoa we got 12¿?¡! Googled for a quick sec, found this thread cause like the man said it hasn't been mentioned or reported about at all it's so new. If you know you know.

Hey man glad I could help!
Yeah I tried that just out of a hunch & it worked for me haha.
Same thing on my end - no tutorials anywhere mention to do that.

benhall847 said:
Hey man glad I could help!
Yeah I tried that just out of a hunch & it worked for me haha.
Same thing on my end - no tutorials anywhere mention to do that.
Click to expand...
Click to collapse
I've had mostly Samsung phones before I recently got the Uley. Sammy's are easier to flash with Odin compared to Mediatek's SP tool, all good tho.
Btw I don't know what camera app you prefer using (stock or 3rd party) but for what it's worth after many tries I've settled on SnapCamera version 8.7.8. The stock cam app is ok, still checking out the new goods with A12, but SnapCamera has a ton of flexibility as far as manual camera controls. Panorama resolution sucks compared to stock panorama res but the ton of other abilities makes up for it.

Benovite said:
I've had mostly Samsung phones before I recently got the Uley. Sammy's are easier to flash with Odin compared to Mediatek's SP tool, all good tho.
Btw I don't know what camera app you prefer using (stock or 3rd party) but for what it's worth after many tries I've settled on SnapCamera version 8.7.8. The stock cam app is ok, still checking out the new goods with A12, but SnapCamera has a ton of flexibility as far as manual camera controls. Panorama resolution sucks compared to stock panorama res but the ton of other abilities makes up for it.
Click to expand...
Click to collapse
You can use TTSLex to remove the announcement from Google Phone - Call Recording
(it announces to everyone on the phone call that you're recording them when you start recording..)
FIRST -
In Settings > Security > Google Play Protect > Disable google play protect (this makes installing things google doesnt like work better. I've found it doesnt work as good if you have this enabled before beginning these steps)
Steps I used to remove the announcer
1. Open the Google Phone APK inside Google Play - uninstall/downgrade to the stock version of the app.
2. Open Google Phone - Make a phone call (someone has to actually pick up the phone) - record the phone call (it will be announced that the phone call is being recorded)
3. Download TTSLex
4. Set TTSLex as your phone's text to speech.
5. Open the App Info of Google Phone - force stop
6. I forget if this step is correct or not.. - delete storage/cache for Google Phone apk
(if this doesnt work, try again & skip step #6)
7. Update the Google Phone APK before opening it.
8. Make a phone call & record the phone call - enjoy no more announcer <3
Android Auto - Screen2Auto APK for mirroring your screen onto android auto! (movies/tv shows/youtube on car screen)
Steps -
1. Open Android Auto via Google Play store & confirm its downgraded/uninstalled to the stock APK.
2. Download AAAD
GitHub - shmykelsa/AAAD
Contribute to shmykelsa/AAAD development by creating an account on GitHub.
github.com
3. Using AAAD - install Screen2Auto
(they only give you 1 free install per month, ive tested them all on this ROM - Screen2Auto is the best to use.)
4. Update Android Auto & enjoy! <3
Pro tip for Screen2Auto - if you go to Screen2Auto > Other Settings > Alternative touch enabled > Profile 2 (Poco)
This allows you to use the touch screen of your car to control your phone while mirroring your screen.
(pause/play videos from car screen)
I also disable the Screen2Auto > Settings Launcher > S2A Launcher
But you could play with it & enable that if it suits you better than me.
(gives you a launcher page for launching apps from Screen2Auto - customize which apps are shown on the launcher etc..)

Hey all, thank you for the info on Android 12. I'm kind of out of the game with updating, ROMs, and rooting. I've been running stock 11 rooted since I've gotten this phone. I actually backed everything up and tried to update with Android 12 stock rom yesterday. I haven't messed with spflash since I've had my Armor 7. For some reason I cannot get this to work. I'll tried the Linux sp version, but gave up on that quick and grabbed my wife's win notebook. I downloaded all the drivers, latest adb, tried different cords, made sure it's in the same folder but couldn't get it to go. I know it's something very basic but I can't get past the bar on the bottom of spflash being red and then timing out after a minute or 2.
Would someone be kind enough to post an imbecilic like walkthrough for me? I got that itch to mess with it and mediatek is just a pain in the ass. Well hopefully thank you in advance.

Any idea if there is a non eu rom?

dbholte said:
Any idea if there is a non eu rom?
Click to expand...
Click to collapse
They keep their updates on drive so this might get flagged, but here's the link
Non-EU version - Google Drive
drive.google.com
If you go to ulefone's website, go to support, then software downloads, scroll to the power armor 13. The nonEU folder will be in that under the Android 12 folder.

I opus l said:
Would someone be kind enough to post an imbecilic like walkthrough for me? I got that itch to mess with it and mediatek is just a pain in the ass. Well hopefully thank you in advance.
Click to expand...
Click to collapse
After first watching a few very annoying walk-thru videos on how to flash a Ulefone I eventually went back to the video link they provided and used the SP flash version they advised, and it worked(go figure right?). Granted there's no audio and the guy briskly goes thru it, you just gotta slow that sucker down, hit pause and rewind to fully and correctly grasp what's happening. And as was mentioned above, and I think you got this part, the importance of putting the rom folder in the SP flash folder.
Also make sure you're either using the stock charging/data cable or something very close to it(ie. no cheap stuff). Here's the video Ulefone says to follow and the one that eventually got me to successfully flash Android 12: