Database Info

Play Store vulnerability.

I recently was thinking about something, I decided to test it out.
On the Play Store app, you can choose to add a pin number, and make this pin be required to make purchases.
This is a good idea, as we don't want anyone charging our credit cards or carrier bills if our device gets lost/stolen.
However, there is a flaw in this. The aforementioned pin number is stored locally on the device, whilst the credit card info is connected to your google account, and obviously your carrier billing options are stored online.
All someone has to do to be able to make purchases on a supposed secure play store is go to Settings>Applications>All>Google Play Store and click clear data. No more pin.
trter10 said:
its also stored in plain text! /data/data/com.android.vending/shared_prefs/finsky.xml
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Click to expand...
Click to collapse
The fix to this would obviously be that google have the pin be connected to your google account, instead of stored locally on the device.
Reported to Google. PLEASE STAR THE ISSUE! Will help it get to the people that can fix the problem!
http://code.google.com/p/android/issues/detail?id=38025&thanks=38025&ts=1349027733

Good find man! Definitely opens up my eyes, as my little brother has a phone with my google account on it, because of all the apps I've bought-en, and I enabled the pin feature on it.

Wow... way to drop the ball on that one google!!!

Yeah. Not sure they've ever thought of it or not.
Posted by Mr. Z's HP Touchpad.

What?I haven't made any purchases yet, but my friends come to me on some days and they could buy paid apps.This must be fixed soon.

I notice this a lot when I update my ROM. Because it doesn't come packaged with gapps (well it wouldn't, it's illegal to do that), the data gets cleared when you reinstall the play store, thus no more pin. As I update daily, I never have the pin for more than one day, which is a major security flaw IMO
Sent from my Galaxy Nexus using Tapatalk 2

Indeed Maybe Google needs to be informed of this!
!DH eriseD ym morf dneS

You should DEFINITELY post that issue on the Google Support page!
Kinda like this one, http://code.google.com/p/android/issues/detail?id=27431

Reported to Google:
http://code.google.com/p/android/issues/detail?id=38025&thanks=38025&ts=1349027733

wow how dumb of google

"STAR" THE ISSUE!
The more stars it gets, the more likely Google will see it!!!

zanderman112 said:
I recently was thinking about something, I decided to test it out.
On the Play Store app, you can choose to add a pin number, and make this pin be required to make purchases.
This is a good idea, as we don't want anyone charging our credit cards or carrier bills if our device gets lost/stolen.
However, there is a flaw in this. The aforementioned pin number is stored locally on the device, whilst the credit card info is connected to your google account, and obviously your carrier billing options are stored online.
All someone has to do to be able to make purchases on a supposed secure play store is go to Settings>Applications>All>Google Play Store and click clear data. No more pin.
The fix to this would obviously be that google have the pin be connected to your google account, instead of stored locally on the device.
Reported to Google:
http://code.google.com/p/android/issues/detail?id=38025&thanks=38025&ts=1349027733
Click to expand...
Click to collapse
its also stored in plain text! /data/data/com.android.vending/shared_prefs/finsky.xml

trter10 said:
its also stored in plain text! /data/data/com.android.vending/shared_prefs/finsky.xml
Click to expand...
Click to collapse
I was just coming to post this same thing... glad somebody else seen this also...

flastnoles11 said:
I was just coming to post this same thing... glad somebody else seen this also...
Click to expand...
Click to collapse
Thanks guys, added that in a comment on the google code page.

Actually, I believe that function is more of a "Child Lock". The screen lock/wipe is supposedly what prevents stolen phones from being used. In most cases, someone that usually knows your password (Of course, adb enabled phones can have their screen lock disabled). That's usually your kids that use your phone for games, watching videos, etc. That's what the pin is for - blocking them from downloading paid stuff without your knowledge. I suppose Google doesn't think that they would be the ones who will be hacking your phone, and of course, not be the ones who steal your phone.

Just added a link to the google support issue page in a few of my newer videos, and in a few of my most popular videos!

We need to get this big, it needs as many people as possible to star it. We really need to get this on the portal and everywhere else
Sent from my ARCHOS 80G9 using Tapatalk 2
---------- Post added at 04:45 PM ---------- Previous post was at 04:35 PM ----------
Tweeted to xda, android, android police, androidauth, retweet this
https://twitter.com/Quinny898/status/253157268806328320
Sent from my ARCHOS 80G9 using Tapatalk 2

Seems it'll get a news story soon
Sent from my Galaxy Nexus using Tapatalk 2

Quinny899 said:
Seems it'll get a news story soon
View attachment 1370476
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
Thanks, but PoorCollegeGuy already wrote it up. I send him stuff as soon as I see it, or in this case, when I wrote it. Article is already on the Portal.
Have yet to see other sites pick it up however.
Posted by Mr. Z's Galaxy S3.

I wouldn't really call this news.
http://www.redmondpie.com/clearing-...rom-settings-removes-pin-protection-security/

How to add flight schedule to Google now

I have booked a flight from Seattle to little rock for next month and I want to add that flight schedule as a card on Google now. What's the best way of doing this? I love the idea of the information provided through Google now and would love to get this going. I searched Google but it just tells me to search flights.. I've searched the flight I'm taking. Plane, time and every combination of words I could think of and I just can't figure it out. Is there a manual way of adding this information? I've noticed with the new update it will take your flight schedule from the email sent after booking but it didn't work. I've got the card enabled for that feature.. nothing.
Sent from my Galaxy Nexus using Tapatalk 2

Just replying to bring this question back to the top.
Is everyone who's viewed this really not understand either
Sent from my Galaxy Nexus using Tapatalk 2

tsdeaton said:
Just replying to bring this question back to the top.
Is everyone who's viewed this really not understand either
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
Same question, waiting for Answer.
I am on AOSP Jelly Bean 4.1.1 on HTC One X

Tony Tan said:
Same question, waiting for Answer.
I am on AOSP Jelly Bean 4.1.1 on HTC One X
Click to expand...
Click to collapse
I just booked my flight today and received the email about it but Google now refuses to accept it. I ordered a bunch of stuff and Google now saw the emails and kept me notified automatically of its shipping status.
After further research it seems like having flight information is limited to using Google to search and book flights rather than kayak or other popular apps. Very lame!! As it can understand when I order something from amazon and even gohastings which is very minor company most common in the south.
Sent from my Galaxy Nexus using Tapatalk 2

I too don't know the best way to add a flight card, but I do know that if you search your flight, a card will appear... now how to make it re-appear like magic on the date of the flight, I don't know.
I'm using CM10 Japanese remix.

Asitaka said:
I too don't know the best way to add a flight card, but I do know that if you search your flight, a card will appear... now how to make it re-appear like magic on the date of the flight, I don't know.
I'm using CM10 Japanese remix.
Click to expand...
Click to collapse
Mine appeared only once I was in the airport
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Sent from my Galaxy Nexus using Tapatalk 2

I know on mine I had to add to calendar(just for my own personal reasons on that) and it did show up like hours before taking off
Sent from my SAMSUNG-SGH-T989 using xda premium

mattc3325 said:
I know on mine I had to add to calendar(just for my own personal reasons on that) and it did show up like hours before taking off
Sent from my SAMSUNG-SGH-T989 using xda premium
Click to expand...
Click to collapse
Yea really annoying. I wish there was a way to get Google to notice this but not enough people use the feature for Google to care/notice
Sent from my Galaxy Nexus using Tapatalk 2

Manually get the flight card in google now
I figured out a way to get the flight card and destination weather forecast to appear in google now, simply send the flight confirmation to your google mail account (the same one used to register the phone), no need for adding calender event.
I used an old confirmation, edit the mail content to reflect a new flight date for tomorrow and sent it to my google mail and voila, google now updated immediately.

is that avaiable in europe?

dustynoff said:
I figured out a way to get the flight card and destination weather forecast to appear in google now, simply send the flight confirmation to your google mail account (the same one used to register the phone), no need for adding calender event.
I used an old confirmation, edit the mail content to reflect a new flight date for tomorrow and sent it to my google mail and voila, google now updated immediately.
Click to expand...
Click to collapse
Can u share the format of your email pls
Thanks

tranquill1800 said:
Can u share the format of your email pls
Thanks
Click to expand...
Click to collapse
Same here. I wanna know how it looks like too.

sunnymiu said:
Same here. I wanna know how it looks like too.
Click to expand...
Click to collapse
same here, I just sent an email with my flight information and I also added flight information to my calendar.
Nothing show up in Google Now!
Edit:
I found an article, the flight status appears about 10 mins later after I searched for the flight number.
http://www.tech-recipes.com/rx/39504/android-4-2-using-google-now-to-monitor-your-flights-status/

hey dustynoff,
Can you please send me the old confirmation e-mail that you used to add the flight schedule card.
Kind regards
Killer360kill

sending flight info to gmail works!
dustynoff said:
I figured out a way to get the flight card and destination weather forecast to appear in google now, simply send the flight confirmation to your google mail account (the same one used to register the phone), no need for adding calender event.
I used an old confirmation, edit the mail content to reflect a new flight date for tomorrow and sent it to my google mail and voila, google now updated immediately.
Click to expand...
Click to collapse
This totally worked for me!
I sent myself this message:
Subject: flight confirmation
Body: American Airlines flight 1456 Miami to Boston arrives 2:15pm, August 4, 2013.
Google Now immediately provided a card with this info and more - basically everything I would get if I Googled "American Airlines 1456". I expect that some of the detail in the message I sent was unnecessary, like the cities, and arrival time.

Google Now
Sent your itinerary to your gmail on your phone, close to date of travel it will appear in your google Now account.

How the heck does tap and pay work???

I tried using tap and pay at Starbucks and it didn't work, but it says it's set up in settings and in Google Wallet.
So how does it work?
Sent from my Nexus 5 using Tapatalk

pandacookie said:
I tried using tap and pay at Starbucks and it didn't work, but it says it's set up in settings and in Google Wallet.
So how does it work?
Click to expand...
Click to collapse
You tap and pay.
But seriously: did the Starbucks have a PayPass terminal? It should look something like below. If so, what happened when you tapped it?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Johmama said:
You tap and pay.
But seriously: did the Starbucks have a PayPass terminal? It should look something like below. If so, what happened when you tapped it?
Click to expand...
Click to collapse
No, they didn't. It was similar to that, but it was more of a bar code scanner.
Sent from my Nexus 5 using Tapatalk

I'll have to try it here in New Zealand next time I see one if those payment options and see if it works.
Sent from my Nexus 5 using xda app-developers app

Taubin said:
I'll have to try it here in New Zealand next time I see one if those payment options and see if it works.
Sent from my Nexus 5 using xda app-developers app
Click to expand...
Click to collapse
Google wallet is US only. You would need another app that takes advantage of NFC and tap to pay.

Greg Tolan said:
Google wallet is US only. You would need another app that takes advantage of NFC and tap to pay.
Click to expand...
Click to collapse
Such as? I tried looking on the play store. nothing. i live in canada

zxyz said:
Such as? I tried looking on the play store. nothing. i live in canada
Click to expand...
Click to collapse
Sorry I don't know of any. I would assume that at some point there will be more digital wallets utilizing nfc. I would be really suprised if PayPal doesn't get in the game really soon.

To pay at Starbucks you need their mobile app which has a barcode that will scan at their scanner, I use it all the time. You an connect a gift card to the mobile app and then have that gift card auto reloaded by your credit card.

Try & checkout your local McD's to see they are participating and/or rolling out the pilot program, namely ISIS Mobile Payment system - details here - http://nrn.com/blog/what-they-didnt-tell-you-about-mcdonalds-mobile-payments-trials
I do recall seeing a similar terminal (didn't pay much attention to details) recently at the local McD while getting coffee in the morning - next to thte cash register, not sure if it was functional.
I suppose the demographic profiles of the junk-food consumer going to Golden Arches are more aligned with using smartphones like N5 with NFC enabled, oookkkaaayyy.

Letitride said:
Try & checkout your local McD's to see they are participating and/or rolling out the pilot program, namely ISIS Mobile Payment system - details here - http://nrn.com/blog/what-they-didnt-tell-you-about-mcdonalds-mobile-payments-trials
I do recall seeing a similar terminal (didn't pay much attention to details) recently at the local McD while getting coffee in the morning - next to thte cash register, not sure if it was functional.
I suppose the demographic profiles of the junk-food consumer going to Golden Arches are more aligned with using smartphones like N5 with NFC enabled, oookkkaaayyy.
Click to expand...
Click to collapse
I notice a lot of people on laptops when I go there. Usually geeky looking guys.

I love McDonalds. I love my N5. I love NFC and Tap to Pay. Win.
Sent from my Nexus 5 using XDA Premium HD app

incredulous said:
I love McDonalds. I love my N5. I love NFC and Tap to Pay. Win.
Sent from my Nexus 5 using XDA Premium HD app
Click to expand...
Click to collapse
I love McDonalds as well... but it doesn't help my stomach :crying:

I was at Jack in the Box last week when I looked down and saw the "sideways wifi symbol" of PayPass. I had already setup Wallet on my phone so I gave it a try. It worked great. I tapped, my phone asked me for my pin, and then a few seconds later a receipt for my meal popped up on my phone. Later that night I tried at the CVS. I had read somewhere that if you are asked for a option (debit, credit....) choose credit. That is what I did at the CVS and all was well.
I am not sure how useful paying with Google Wallet is, but it sure was fun. The Jack in the Box lady told me I was only the 2nd person she saw pay like that...... trend setter and all

Google assistant app

Hi, is there any app mod to install google assistant from pixels?

It Will be coming to all 6.0+ decices this week in US
Sent from my SM-G935T using Tapatalk

I got android 7
Sent from my SM-G935F using Tapatalk

matale0 said:
I got android 7
Sent from my SM-G935F using Tapatalk
Click to expand...
Click to collapse
Well seven is higher than 6... it will also be getting it

Natjosh said:
Well seven is higher than 6... it will also be getting it
Click to expand...
Click to collapse
:laugh:
Do we know when it will come to other parts of the world, like here in the UK?

3Shirts said:
:laugh:
Do we know when it will come to other parts of the world, like here in the UK?
Click to expand...
Click to collapse
Not sure man, Im in Australia, im just gonna sign up to the beta, hopefully it will get it quicker

I got the play services update. How in the world do I use assistant??

KD8DNS said:
I got the play services update. How in the world do I use assistant??
Click to expand...
Click to collapse
Press down on the home key for a few seconds while you're on your home screen , or say Ok Google. I still haven't got Google assistant yet for some reason... Updated Google play services, Google play, and the Google app to the latest and still nothing

matale0 said:
Hi, is there any app mod to install google assistant from pixels?
Click to expand...
Click to collapse
If you cant wait and are rooted try this
https://forum.xda-developers.com/android/software/guide-how-to-enable-google-assistant-t3477879

Gunshots911 said:
Press down on the home key for a few seconds while you're on your home screen , or say Ok Google. I still haven't got Google assistant yet for some reason... Updated Google play services, Google play, and the Google app to the latest and still nothing
Click to expand...
Click to collapse
So we're both in the same boat.

KD8DNS said:
So we're both in the same boat.
Click to expand...
Click to collapse
Thank God. I thought I was the only one

Google Assistant
For those who want google assistant.
Here is an easy way to get it if you are rooted.
Using root explorer or any other text editor
add the following line to your "build.prop"
file which is located in root system/ and
add the following:
ro.opa.eligible_device=true
Be sure to SAVE the updated build.prop fille
after adding that line.
After that go to the play store and make sure that you have
the latest update of the google app and then reboot your
phone...
That's all there is to it.
Good luck, have a great day!

Is it the same assistant as in Google Allo?
Sent from my SM-G935F using Tapatalk

When I press and hold home on S7 edge with android 7 I get this.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Still no google assistant for me :X
Any of you recieved it yet on s7/s7 edge?

Cooldato said:
Still no google assistant for me :X
Any of you recieved it yet on s7/s7 edge?
Click to expand...
Click to collapse
Not yet... I read that it may take a week or two for it to roll out to everyone, but I may call Google soon (since I doubt I'll get a reply with email, and you can't really chat with them via text.) And ask them what's up and if there's anything I can do to get it now.

Gunshots911 said:
Not yet... I read that it may take a week or two for it to roll out to everyone, but I may call Google soon (since I doubt I'll get a reply with email, and you can't really chat with them via text.) And ask them what's up and if there's anything I can do to get it now.
Click to expand...
Click to collapse
A week or two, uhmm.. Can you please post here if you get any info from google about this )

matale0 said:
When I press and hold home on S7 edge with android 7 I get this.
Click to expand...
Click to collapse
I believe thats Svoice
You just need to go into settings and change what a long press on the home button launches

today there is a new Google service update 10.5.35 which supports google assistant.. but it is not for 1440p (v.440) yet
maybe it will be in the upcoming few days
Update:
Some users confirm that it is working with 10.2.98 !

Just got Assistant about an hour ago.

[APP][4.1+] App Hoarder - Get an updated list of on sale for Free apps

App Hoarder
Shows you a list of on sale for free apps everyday.
You can login to your google account and it will keep track of your wishlist and shows you if you have already purchased an app.
It recently got a few talks on reddit and other small youtube channels.
https://old.reddit.com/r/AskReddit/...p_that_everyone_should_have_on_their/dx2svbw/
https://www.youtube.com/watch?v=-GgK1StWuQQ&t=302s
https://youtu.be/u7c_FSkSSCg?t=2m25s
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
It's recently out of beta and now on official release, some feedback would be great
App Hoarder - Paid apps gone free

Reserved comment

Hey guys, App hoarder is now out of beta and would for some of you guys to check it out. Leave any feedback here

Hey, it sounds great.
I love free app and have installed a free downloader (InsTube video download) in my phone and want to install more.
So I am curious about App Hoarder and will use the app if it offers some apps totally for free (Does "paid apps gone free" means the apps are free now and users won't be charged after using them for a period?)

Adeline Bullze said:
So I am curious about App Hoarder and will use the app if it offers some apps totally for free (Does "paid apps gone free" means the apps are free now and users won't be charged after using them for a period?)
Click to expand...
Click to collapse
It means that a paid app is on sale and the sale price is 0, so its free. You won't be charged anything.
When you purchase an app while its in sale it will still be yours when the sale is over. You don't even have to wait for it to finish downloading. You can cancel the download and the app will still be recorded as purchased by you.

Adeline Bullze said:
Hey, it sounds great.
I love free app
Click to expand...
Click to collapse
Oh yeah, everyone does

marl1234 said:
It means that a paid app is on sale and the sale price is 0, so its free. You won't be charged anything.
When you purchase an app while its in sale it will still be yours when the sale is over. You don't even have to wait for it to finish downloading. You can cancel the download and the app will still be recorded as purchased by you.
Click to expand...
Click to collapse
That is awesome. Thanks.

Adeline Bullze said:
That is awesome. Thanks.
Click to expand...
Click to collapse
Your welcome

This is very cool and works as intended.
Any plans to add discounted items as well?

Great app ???, things would be nice to add:
Dark/ Black theme
Multiple account login to check apps purchased from all accounts
Publish in play store, still wondering why haven't you done that, its a great app.

@srmahunt said:
Great app , things would be nice to add:
Dark/ Black theme
Multiple account login to check apps purchased from all accounts
Publish in play store, still wondering why haven't you done that, its a great app.
Click to expand...
Click to collapse
Wow thanks for the suggestions, dark theme is in the works, multiple account might take me some time to implement.
Its already on the play store https://play.google.com/store/apps/details?id=com.marlon.apphoarder

ChessPiece said:
This is very cool and works as intended.
Any plans to add discounted items as well?
Click to expand...
Click to collapse
The app's focus is on free apps, but I am planning on adding this in future updates.

How do you access the filters? I don't see it in Settings.

lauralbaby said:
How do you access the filters? I don't see it in Settings.
Click to expand...
Click to collapse
Upper right hand corner next to 3 dot menu.

ChessPiece said:
This is very cool and works as intended.
Any plans to add discounted items as well?
Click to expand...
Click to collapse
Discounted item qould be good but both should have different sections otherwise it would be a mess.

lauralbaby said:
How do you access the filters? I don't see it in Settings.
Click to expand...
Click to collapse
It's in the 3 dot menu, top right. I'm planning on making its own button to make it more visible.

@srmahunt said:
Discounted item qould be good but both should have different sections otherwise it would be a mess.
Click to expand...
Click to collapse
Focusing more on 'on sale for free' apps, AppSales is already better at handling discounted apps.

@srmahunt said:
Discounted item qould be good but both should have different sections otherwise it would be a mess.
Click to expand...
Click to collapse
*Edit deleted same duplicate comment

Msubramahayam
Sent from my Samsung Galaxy Grand Neo Plus using XDA Labs

Hey is this still in development? I can't login to my Google account as it says I need a browser that has java enabled...