App Permissions - Security Discussion

Hello everyone
I'm a little concerned with apps sending information to themselves...
I would like to know if it is possible to remove certain permissions from apps even if purchased or free and still download and use the app?

For devices with root there exist several solutions. Via XPosed, LBE firewall - there exist many more.
Without root I only know of SRT Appguard which modifies the app, so every access of permissions is route controlled via Appguard. For me it works fine so far. But it was removed from play store, probably it is not allowed to modify the app afterwards, although no real change is being done to the app.

You need root and get xposed framework, that will give you what you want.
Without root, tough luck, the only way to do that is to manually block comms with a firewall with a router.
Get os monitor app to see what is communicating.

One addition: Android 4.2 has a hidden permission manager integrated. If I remember correctly it can do what you want.
But you may not want to be stuck on 4.2, it was removed in later versions.
Edit: Google says it existed but was hidden in 4.1. In 4.2 it was officially available. Afterwards it was removed.

tag68 said:
One addition: Android 4.2 has a hidden permission manager integrated. If I remember correctly it can do what you want.
But you may not want to be stuck on 4.2, it was removed in later versions.
Edit: Google says it existed but was hidden in 4.1. In 4.2 it was officially available. Afterwards it was removed.
Click to expand...
Click to collapse
How do I open this on 4.2? I saw it today in notifications and opened it from there so I still have it open in running apps but can't find a way to open it via settings menu or anywhere
It's called "App permissions".

Seems I mistook the versions where it was available. Seems it was only 4.3.
Google "app ops Android" or "Permission Manager Android" for more information. As I do not have a device concerned, I've only seen it myself once on the Galaxy Nexus of a collegue.

Related

Some apps no longer accessible in the market - uk

Hi folks,
I'm just wondering of there's a reason why I can't access some apps I was able to find before in the market?
Quick Settings, Launcherpro beta, Adw launcher, Zeam, etc, are nowhere to be find now...
I've got some of them on my download page on the market app and I also wonder if I can still access the updates.
------------------------------
Sent from my Milestone using Tapatalk
think its a problem your end as I can findthen no problems..... Am uk..
regards
lohtse
Thanks for the reply. Ill try to find out.
Maybe your market access keys are incorrect because you have installed a custom rom? For example, test versions from Huawei have test keys installed that will not list all applications. You need to use proper release keys provided by carrier.
Thanks speckles, you point a different possible problem. Even if I don't have a custom rom: just a Milestone 2.1 rooted.
You need to use proper release keys provided by carrier.
Click to expand...
Click to collapse
Well, I think that I have the proper one for I didn't changed it. Can you tell me how can I check this? (I've got still a lot to learn.)
I have been reading a little on old and similar problems, often related issues with protected app, like paid/protected app on rooted phones - and regardless to the models, countries, carriers, and maybe even to the versions.
I am not sure to be concerned, I mean it's a bit different in my case. For instance, I have Tapatalk pro installed and which is protected but I can still find it on the market (I mean outside of the download tab).
So far, my problem only concerns some free apps.
There were from long time app that I wasn't able to find on the market (like TV.com), by example when using appbrain. But now, that's the first time I can't find apps I had already downloaded and that I've got installed. (I spotted the problem while recommending apps to a friend who's got a Desire since a few days. He was himself unable to find them, like Quick settings.)
Edit --
Scanning a barcode pointing on the apps in the market do not work as well.
Some solutions points to the build.prop:
Root your phone and modify your /system/build.prop with the fingerprint of a build that actually works. Then clear all data and cache from the market and google apps, reboot, set your clock to 23:59 and wait 5 minutes to force a refresh of the data before starting the Market app. You'll have to supply your Google account details again but this should work around the problem.
Click to expand...
Click to collapse
Useful as well:
From MasDroid, on XDA -14th April 2010, 08:59 PM
I've read about this issue which was recently explained by a developer of XDA (nprussell).
Apparently everyone is in the same boat so to speak. He states that many "protected" apps are missing from the market. There are generally two reasons why apps will be missing from the market:
When a new ROM or handset is released, the manufacturer (i.e. HTC), sends the build to Google for verification, which includes a 'Fingerprint' (a unique line of text which governs its market access) in one of the build files. Generally, it states the name of the phone and Android version in the fingerprint. With Root & System write access, this fingerprint can be changed, but although it's been claimed that the Desire has recently been Rooted, we still don't have confirmation from any developer of it being able to gain System write access.
Only until Google approve the build, then fingerprint will be added to their allowed database to view these protected apps on the market.
The other cause for apps missing from the market in builds is because of permissions of certain apps. For example, the barcode scanner app requires permissions to use the camera/auto focus. They are NOT protected apps. If the XML permission files are missing from system/etc/permissions, then Google Market will simply block these apps from showing.
HTC need to chase Google up on this and Google need to activate the Fingerprint.
Click to expand...
Click to collapse
Edit 2 --
I have tried to replace my build.prop (using one from a Telus Milestone) but nothing has changed. Maybe I need to erase the market's data as told in the second quote but I'm not sure to know how to do it.
I have the same problem. (Htc desire Vodafone/the Netherlands/original ROM) There was an OTA update few days a go. After that most of the installed apps couldn't be found. It seems that this affected a lot of people...check the comments on launcherpro an adw launcher websites
-------------------------------------
Sent via the XDA Tapatalk App
If you have edited your build.props, then it can take upto 24 hours for them to be published to the market. So wait a few days.
If it still doesn't work, try Eris Market Fix after doing a nandroid backup. Again, you may have to wait about 24 hours before noticing any changes.
I think i have same problem here. Finland/HTC Desire/Stock ROM.
There should be LauncherPro in market right? Had to dl new one from LP's site.
I have got everything back and I'm still using the same build.prop. So I believe that the market had been fixed.
Hope it's the same for you!

[APP] Apps to Phone, v1 released

I've just released a new application onto the Android Market if anyone would like to try it. I really apreciate your feedback !
The application is "Apps to Phone" and the purpose is to simplify the install process on your phone. In other words the appliction will receive messages from androlicious.com and start the install process.
The steps required are:
1. Download & Install "Apps to Phone" application from Android Market
2. Start the application and connect your phone with Androlicious website
3. From the website go to an application details page and click on "Send To Phone"
The application doesn't install anything without user permission, I find this more safe than other solutions even if this requires an extra step.
(The application only works if you have Android 2.2 or later)
Changelog
v1.0
Initial version
Tried this, but it just opens the market with the app you select on the site. I guess Auto-Installer is not working. Any ideas?
Pat123 said:
Tried this, but it just opens the market with the app you select on the site. I guess Auto-Installer is not working. Any ideas?
Click to expand...
Click to collapse
For the moment this is the main functionality, is just to simplify the install process so you don't have to search the app from the phone. Just go to a website, browse and send apps to phone.
I'm aware of the auto install (like the app from app brain) ...but that is a "hack" not a solution. Google already released some updates and that solution doesn't work anymore.
The auto feature will be included only if that solution is official and supported by the Android API.
thanks for feedback
Okay nice. One more request, probably a long shot but worth asking. I believe 2.2 introduced C2DM which is what is used by these types of apps. Is it possible to use the C2DM API to push apk files on a PC to a phone and auto-install them?
I believe not. Through C2DM it is recommended to send short messages only, like a notification. The application, based on the message received can perform actions, like downloading files from a URL...
The problem with the auto-install is that you need a special permission for installing packages, but that permission is only available for system apps. For the moment only one solution exists for auto-install, and that is to trick the Google Talk service to start the installation...
Ooh okay. Thanks. Good luck for Androlicious and let us know when auto-install feature becomes available

[Q] Google Play

I do not know if this is normal, but if I install app from web, it will not download the app into my tablet immediatelly. Instead, I have to open market on my tab, then the download starts. Moreover, after installing the app I often also get a message in the notification area saying, that the application is already installed... I think, that it worked before on background without the need to start the google play. I disabled several apps, none of them should be related to market. Any idea?
original JB, rooted + several apps disabled
rkalas said:
I do not know if this is normal, but if I install app from web, it will not download the app into my tablet immediatelly. Instead, I have to open market on my tab, then the download starts. Moreover, after installing the app I often also get a message in the notification area saying, that the application is already installed... I think, that it worked before on background without the need to start the google play. I disabled several apps, none of them should be related to market. Any idea?
original JB, rooted + several apps disabled
Click to expand...
Click to collapse
Seems to depend on the connection to the Google servers -- I've seen this sometimes, but other times the install went through without a hitch. I wouldn't worry about it, it's a bit hit or miss.

Tronsmart TS7 (aka Glacier TS7) installs random apps without permission

I have a (4GB) Tronsmart TS7 (some times known as a Alps Glacier TS7). It's a Chinese MTK6589 based phone running Android 4.2 purchased from geekbuying.
For the most part the device is stock, there are next to no pre-installed apps apart from the usual, and the only additional apps I have installed are: Playstation, Steam, ColorNote, Shuttle+, Root Explorer DI Radio, Chrome & Gmail
The problem I have is that there are apps appearing on the device that I am not installing. So far it has been the same set of apps that appear:
Mobo Market
UC Browser
TrustGo Security
DU Battery Saver
337 Game Master
GameCenter
(there may be more)
These apps don't start appearing right after a factory reset, but start to arrive 1-2weeks later. They also seem to be packaged similarly; when I say packaged I mean opening them seems to prompt with the same menu & style (accept licence etc) before it gets to the main app. Also, after you open the app from the app drawer it then creates an icon on the desktop. Maybe opening it actually does the installing?
The apps themselves seem to be legit.
I have factory reset the device (twice), and changed my Google password but they are still appearing. They don't show up in my Play store history so they must be coming from elsewhere.
My main concern is that if it is downloading things without my permission, what might it be uploading ? Not to mention wasting my 3g data etc.
So I have a few questions:
Should I be (really) worried?
Is there a way to monitor this? eg connect to a wifi hotspot and packet capture the network traffic? or maybe use a process monitor (the ones I've tried so far haven't shown anything) to see if there is some sort of script in the background?
Can it be stopped?
Thanks in advance, I would be interested to know if anyone else has/had this problem?
I have the same problem.
I haven't tried flashing some other ROM yet, but I guess that is the only way to get it to stop installing those things.
Have you actually found any other roms to install?
For anybody's information:
You may have noticed how you always end up with a 'Tronsmart.mp4' video file appearing in your gallery app. This is damn annoying since it appears twice, once on the internal and once on the external SD card. There is an '\system\app\CopyTest.apk' file which creates both of these. Should be safe to delete it and thus prevent the file(s) appearing
I have actually decompiled this apk. It works as a service that runs when MEDIA_UNMOUNTED or MEDIA_MOUNTED is invoked, and does absolutely nothing else.
I have the same problem, those random apps installing and the video always in my gallery. I have managed to stop tge apps by using a firewall and allowing only my apps that i want to use the internet. I havent found a solution though to fix the problem. Probably tronsmart is spamming its customers...
mariosm1cy said:
I have managed to stop tge apps by using a firewall and allowing only my apps that i want to use the internet.
Click to expand...
Click to collapse
What Firewall did you use? I might be able to use something like that to pinpoint the app that's causing this.
Sory for the late reply. I am usin "android firewall" free from google play store.
USB debugging disabled stopped it on mine
edit: not that easy, wasn't enough. made some cleanup by disabing/removing some system apps. seems to work so far although there are still some strange events like superuser crashing and right after that system downloader.apk reappearing. haven't seen any other junk coming back
these are the apk's i removed:
systemupdateassistant
systemdownloader
omacp
mtkbt
midtest
galaxy4
fusedlocation
engineermode
engineermodesim
cds_info
basicdreams.

[Q] App that lets you select permissions for apps?

Hello.
You download an app, it gives you a big list of what permissions it wants, and you can either agree to it or not use the app...
Is there someway of limiting those permissions? Or provide fake permissions?
Like in most iphone apps you can choose if you want to allow gps, contacts, etc.
I am searching for an app thats will limit those permissions prior to installing it. Won't do me any good if I want to deny contacts access but I do it after its already taken it.
Cheers and thanks
P.S. I'm using a rooted LG G2 d802 with android 4.4.2
I don't think it's possible, even Google's last Play Store update doesn't reveal every single permission when you update stuff, dunno if this limitation affects it or no.
You can use "app ops" (search for it in google play). It is a hidden menu from android os. Obviously it works after installation (iOS works the same, you first install the app and later you decide which permission accept/deny).
PoOoZaQ said:
Hello.
You download an app, it gives you a big list of what permissions it wants, and you can either agree to it or not use the app...
Is there someway of limiting those permissions? Or provide fake permissions?
Like in most iphone apps you can choose if you want to allow gps, contacts, etc.
I am searching for an app thats will limit those permissions prior to installing it. Won't do me any good if I want to deny contacts access but I do it after its already taken it.
Cheers and thanks
P.S. I'm using a rooted LG G2 d802 with android 4.4.2
Click to expand...
Click to collapse
Try to search "3c toolbox" in Google.
This app has many integrated tools within it.
You can change permission also.
Good luck

Categories

Resources