Everybody likes to have the latest and greatest on their devices and that typically means that you are downloading and installing a lot of extra goodies on your device. It is becoming increasingly common to have unwanted things delivered with whatever you are trying to install on your device. To be absolutely safe, you shouldn’t download anything that doesn’t come directly from your OEM and even that is no guarantee that extra “unwanted” stuff won’t end up on your device. These extra things may compromise your privacy or they may just bomb you with adware, either way here is a short guide to help you from installing malware.
1. Stay away from warez.
If someone is going to crack an app to save a little money, they probably can’t be trusted not to add a little bit of extra code designed to line their own pockets. The more warez on the website the more you should be worried about your download. The Google and Amazon app stores really care about their reputations, so they typically go to some effort to remove malware as soon as they find it. Same goes for xda, but you should still expect some malware to sneak through, but the problem is really much worse with the alternative App stores that don't care so much for their user base.
2. Pay close attention to what is being downloaded.
Check the name and the extension of what you downloaded, if they are wrong, then it is probably something you don’t want to install.
An increasing number of file hosts are trying to “trick” users into downloading windows or Mac Installers that typically deliver adware to your computer. If it ends in .exe or .dmg but you are expecting .apk or .zip then you should probably stay away. Please note that All-In-One tool kits and some other things may actually come with .exe, so just use your common sense. Similarly, many malware engines won’t flag adware because it is something that you have “chosen” to install, so it is probably a good idea to be careful with anything that even 1 or 2 malware engines flag as adware. Many file hosts have started offering more than one download link. A real link, for what you want, and then some fake links that take you to ads or provide you with unwanted malware rather than the file you want. Using an adblocker will help reduce these fake links, but again, just make sure what you end up downloading is what you really want. Asking to install a download accelerator, download manager, or pretty much any kind of update to get the download to work are common ploys to get you to download and install something you really don't want.Example of fake download links:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
3. Run a malware check on the download before installing it.
I prefer https://www.virustotal.com & http://sanddroid.xjtu.edu.cn/#home but there are plenty of other tools (see http://wiki.secmobi.com/tools:android_dynamic_analysis for a more thorough listing).
Virustotal uses a number of anti-malware engines to scan your file for known malware. The more tools that return a positive match the more likely it is that you have downloaded malware. If you downloaded something that can root your phone then in all likelihood some scanners will flag it as malware and those can be considered as false positives. Please be aware that just because an app is rated as clean, doesn’t mean that it really isn’t malware. Maybe it hasn’t been identified as malware yet or maybe the sandbox didn’t activate the malware parts of the app.
good: https://www.virustotal.com/en/file/...d13216cf9a7b22f840cbf094/analysis/1389439909/
bad: https://www.virustotal.com/en/file/...8c2e88f327848f21c16dae2965d870829c1/analysis/
false positives from Rooting App:
https://www.virustotal.com/en/file/...b456d9095cae1deb07e72072d6dcc057d43/analysis/
Sanddroid is just for checking apps and will run them in a sandbox and then tell you about the behavior of your app.
good: http://sanddroid.xjtu.edu.cn/report?apk_md5=B22FDFE14B422E9B1DA9767918B55037
bad: http://sanddroid.xjtu.edu.cn/report?apk_md5=7CA1039040C67F62290B2F3F180AED8C
Please feel free to post any tips or tricks you have for avoiding malware and I will see about adding them here.
Please do not ask if something contains malware or not, if you are in doubt then don’t use install it, if it is something you found on xda and are worried about it, then report the post and a moderator will investigate it. The last thing we want is for people to accidentally green light something that is bad, it is your device so in the end it can only be up to you.
reserved
reserved
Sometimes when viewing pages for adults some apps from such websites are downloading automaticly to my smartphone
mosek said:
Sometimes when viewing pages for adults some apps from such websites are downloading automaticly to my smartphone
Click to expand...
Click to collapse
Try an adblocker....or maybe visit other sites
mosek said:
Sometimes when viewing pages for adults some apps from such websites are downloading automaticly to my smartphone
Click to expand...
Click to collapse
just deny the download request *facepalm*
To avoid the double extension, for example .apk.exe or.img.exe or .exe.exe
To verify the size of the unload before executing, for example waits 5mb and the size is of 247Kb to suppress directly and to look for another file, this what it will do yes is touched on him it will be a launcher impossible to stop executes and installing programs desinstalables needing of a complete formatting, I go five days to recover the computer for one of these for not realizing this and executing the file.
If the size of the download does not correspond with the size of the file very probably partner is going to go malware and it is enough to pulsate in order that it has not gone back
My English is terrible for what I have to help with an automatic translator
Thank you for this guide.. And also I suggest others to install an adblock to avoid popups, viruses, malwares..
justmpm said:
Try an adblocker....or maybe visit other sites
Click to expand...
Click to collapse
This is what I have, I use adblock plus (for android) and MoaAB.
Probably only need one, but works for me.
Thanks for the info, all terrific points.
dsunglao said:
Thank you for this guide.. And also I suggest others to install an adblock to avoid popups, viruses, malwares..
Click to expand...
Click to collapse
really.? adblock (for android) can block viruses dan malwares..
asandi said:
really.? adblock (for android) can block viruses dan malwares..
Click to expand...
Click to collapse
Yes and no. Adblockers typically don't scan downloads for adware or malware, but if a link is flagged by adblocker as containing adware then that link will be blocked. It isn't perfect, but in the end you are much less likely to download adware/malware if you are using an adblocker.
I've never been infected either, a little bit of common sense and know how goes a long way.
I think it all comes down to how long someone and 'lived' on the internet to understand how it and everyone works, regardless..
Thanks @justmpm. This kind of information is vital and definitely deserves the Sticky. Well done.
I hate when I click on a link to download something and it ends up at that stupid devhost site. There is a few others that try to pull that crap too, but yea it pisses me off because I dont usually click on something unless its really something Im after. Good post OP
Well as long as you don't install weird .apk files, Android should run fine and virus-free.
mosek said:
Sometimes when viewing pages for adults some apps from such websites are downloading automaticly to my smartphone
Click to expand...
Click to collapse
just dont click to install . nowaday it happens anywhere of adware
Yup ,
Sent from my Blekota S5 Lite ROM
A good adblocker to use if you're rooted is Adaway. If you're not rooted you can use adblock plus (the app, or the Firefox add-on). One disadvantage to the adblock plus app is that it uses quite much ram (~100mb). Adaway modifies the hosts file, so it doesn't use any resources.
justmpm said:
Edit: Long quote of the OP removed
Click to expand...
Click to collapse
How to check for malware before the download of the software? I downloaded one and found it to be malware itself..????
Thanks for Your Info, Currently using UCWEB Browser. there itself they enabled adblock default.
Related
Hey all the Android-Users out there
Do you want your private data to be secure on your Android Smarthphone? CHECK THIS OUT!
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Many of us wouldn't run naked trough the city, would you ?
So if your privacy concerns you and you don't like to expose some of your dirty little secrets, just stay tuned.
Not only Google, Microsoft and Apple etc. like to get all your data, but everyone else likes your data too, especially some sneaky programmers..
Here are some Apps that can help you to optimize your system and to get some privacy and control.
Apps:
Root:
Superuser(ROOT) (no need to say how, use forumsearch)
App-Permission-Manager:
LBE Security Masterhttp://forum.xda-developers.com/showthread.php?p=20914000
PermissionDog (free) (Market)
Firewall:
Droidwall (free) (Market) (+)
Adblocker:
Adfree (free) (Market)
System Apps Manager:
Titanium Backup Pro (Market) (+)
Root Explorer:
Rootexplorer (Market) or
Supermanager (free) (Market)
SQLite Editor:
SQLite Editor (Market)
Autorun Manager:
Autostarts (Market)
Taskmanager:
Autokiller (Market)
Multi App Management:
Android Assistent (free) (Market)
Ok, there are many apps out there, i just listed the best!
So just get the Apps above and now you need to use them properly.
The main app that will enhance your privacy the most is LBE Security Guard.
You'll wonder how many apps want your ID/IMEI or GPS or something, that the apps actually don't really need!
The others are also great apps with many function!
Now just learn how to use them.
For every app there are some tutorials and howtos out there, just enter the apps name and what you wanna do and you'll find it.
Just use the search function on the forum:
http://forum.xda-developers.com/search.php
or search on google or if you like use http://scroogle.org
So thats all for now, hope you will be a little saver with your private data.
ps: don't be shy to push the thanks button from time to time!
peace and have a great day!
If you want to get to this thread, just go to:
www.tinyurl.com/androidprivacy
Please post suggestions, what could be done to improve the Security of your android phone!
Mieow
Oh check out the Android Security Warning if you did'nt allready have.
And here is a new chance to see this thread! (threat!)
Changelog:
0.4
-added attachments
0.3
-added market links
0.2
-added some more apps
0.1
-initial thread
Some great information and apps.. thanks a lot or sharing. Found a number of apps that were a little too nosey for my liking.
Installed LBE Security and AdFree.
Thankyou!
What on earth could Angry Birds want my IMEI/IMSI for??
Just some statistics from my own experience:
85~% of the apps you will ask you for permission to use your IMEI/IMSI!
40~% wants your position / GPS
30% ask to read your call logs / contacts etc.
...... but see it yourself!
Btw: If you find a good app, that I could add to this list, don't hesitate to post here.
I agree wholeheartedly. Privacy, and hence liberty, is being eroded at every turn. People just don't seem to realize how much information they're giving away, and don't care. What's the big deal about wearing a little yellow star someone once said. That is the evil insidious problem of Facebook. A generation ago people kept diaries under lock and key. Now people publish their every banal moment to Facebook. And, to be fair, most of these people are safe doing this. Most people are not criminals or terrorists and have nothing, or what they consider very little, to hide. But this is the thin edge of the wedge. I read 1984 in 1970. I also read Fahrenheit 451 and Brave New World. Although the authoritarianism of our present system is less overt and more insidious than that shown in these books, you really can see distinct similarities between these fictional times, and the way we live now. It is easy to find copies of these books, everyone should download them and read or re-read them. Yes, it might interfere with watching professional sport or dancing with quasi celebrities...but that which does not kill you makes you stronger. If you live in a free country it is your duty as a citizen to be informed, or else we wind up like we are now....rioting in the streets while our leaders ignore us, while they kowtow to the global financial elites.
And the above post is the saddest thing of all. If we want to use any app we have to give them blanket permissions. I'm sorry, I don't want them knowing who/where I am. Who my contacts are, what I'm doing. I miss the ownership of my data that the old Palm OS gave me. And I rue the day I was forced into the cloud. I don't want to see their ads. I don't want to help them in any way. That may seem unreasonable considering most of the programs are free, and you can call me selfish, but to me free is free period. If you want to charge for your app, and it is good, I'll pay for it, but if you're going to call an app free it should be just that, free. The "business is business argument" doesn't cut it with me, there is only one "thing" and that's the right" thing". Integrity is the only thing that sets regular people apart from the wealthy.
Thanks to the OP
Thank you very much.
I'd recommend Privacy Inspector to check what your apps can do. Full version Privacy Blocker can actually change applications so they would not be able to gather personal information about you.
thx for this help post, very much needed
You should really remove the Taskmanager (here for why) since they do more harm then good.. Now an app like Watchdog alerts you when apps are misbehaving and lets you kill them but other than that you should just leave them alone.. at least on 2.2+
ffcloud2000 said:
You should really remove the Taskmanager (here for why) since they do more harm then good.. Now an app like Watchdog alerts you when apps are misbehaving and lets you kill them but other than that you should just leave them alone.. at least on 2.2+
Click to expand...
Click to collapse
This is a good one, didn't know that about taskmanagers.
But still, to kill some unwanted apps you need a taskmanager.
I will recommend watchdog now of course too.
btw. there is an update for lbe privacy guard.
I will add that soon in the 1st post.
stay tuned!
Hy, thanks for the post. The lbe guard seems nice, I was using "Permission denied" until now, but the interface was not that good xD
What's your opinion to virus scanner like lookout mobile security?
^^
Sent from my Soulcarrier using Tapatalk
CM7 builds have added permission management- in manage applications > app name, touching on a permission will revoke it. This feature has to be enabled in Cyanogenmod settings...
Swyped from my HTC HD2 running CM7 (Gingerbread 2.3.5)
Tagged for future upload of image - kittens playing w/yarn.
thanks!!
i just want to say thanks for posting this information !!!! i clicked the thanks button for you also haha anyway i downloaded the lbe guard...its amazing it shows me everything!!!! and see some sketchy apps so i deleted them!!!! anyway thanks from thew newbie !!!
hey...
did the app u attach is the latest version???
Some good ones for you guys.
PDroid – The Better Privacy Protection is a program you can use to block acces to personal data. Read the link. Super! It doesnt do anything without paching the ROM youre using. But patching is fairly easy using pacher found at aplication thread. No ICS support yet . I suggest asking your ROM devs to implement PDroid patch. If we demand...
Edit: You find all instructions in the PDroid thread.
And then the other: Bloatfreezer. App that can freeze any other app in system. Freezing doesnt make system misbehave and it works on system apps too. You can freeze anything. Alot better than task killers. Author is Trey Holland who find the Carrier IQ in android systems. He has been sued by google from reveiling Carrier IQ which is app that sends all your data to somewhere. Even your key presses.
Carrier IQ is a spying app in millions of phones. Nokia, blackberry, android etc.
You can scan your system using logging test app by xda user Trey Holland; TrevE
Edit: Some thanks would be nice because these are gems here.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
http://pocketnow.com/android/android-malware-now-capable-of-recording-your-phone-calls
"The information comes from CA Security Advisor Research Blog who claims that software on Android is now capable of recording your conversations. After asking for permission, making it look like a legit, harmless app..."
How bad is this problem going to get before Google takes sterner measures to filter these nasties from the Market?
DirkGently1 said:
http://pocketnow.com/android/android-malware-now-capable-of-recording-your-phone-calls
"The information comes from CA Security Advisor Research Blog who claims that software on Android is now capable of recording your conversations. After asking for permission, making it look like a legit, harmless app..."
How bad is this problem going to get before Google takes sterner measures to filter these nasties from the Market?
Click to expand...
Click to collapse
Um then dont give it permission. Dont download apps that request all sorts of stupid permissions. Dont download apps that exist on microtransactions.
Permissions
I always check what permissions an app wants when I am downloading it, dont see why a game needs full access to my calls and messages. Having said that I have had a few games try and get root permissions, very dodgey.
LBE Privacy FTW.
I never understood why a live wallpaper would need access to my call log and be able to send SMS, so I never downloaded them. Now, I just block permissions on an individual basis when the app is installed.
Again.... LBE Privacy FTW.
This information is trustworthy and very helpful.
Thanks for sharing it here. It is very important that everybody knows what really is going on.
At least everyone will know how to adjust.
johncmolyneux said:
LBE Privacy FTW.
I never understood why a live wallpaper would need access to my call log and be able to send SMS, so I never downloaded them. Now, I just block permissions on an individual basis when the app is installed.
Again.... LBE Privacy FTW.
Click to expand...
Click to collapse
Awesome app! Read about it on either androidpolice.com or goodandevo.net. I can now download apps I would not normally and just block the permissions I don't like. (Ebuddy messenger asking for gps location)
Thanks for useful info
Why doesn't Google just monitor the market at the first place?
Good post!
Regarding permissions - note that sometimes a free applications requires "strange" permissions that seems irrelevant to the actual app, for it's monetization solutions (in app ads, registration etc.) Usually the dev explains it in the description, so always good to read
agreed. The permissions apps are asking for lately are getting out of hand. I'm always really careful when updating or installing a new app.
thank for info
OMG this is harmful. Does any Android-form Anti virus scan this ?
I don't think anything ever came of that particular issue, or at least wasn't common in the wild. But it's almost on a weekly basis now that you do hear about malware in the wild. It's not that widespread yet, but it has the potential to be.
As always the best defence is common sense. Don't install apps from untrusted sources, read the comments and ratings, and always check the permissions before installing. If you install warez that borks yours device, you have it coming!
johncmolyneux said:
LBE Privacy FTW.
I never understood why a live wallpaper would need access to my call log and be able to send SMS, so I never downloaded them. Now, I just block permissions on an individual basis when the app is installed.
Again.... LBE Privacy FTW.
Click to expand...
Click to collapse
But some of them change when messages/calls have been received and as such need to access them in order to work.
I shall certainly be more careful in the future.
Thanks for the heads-up.
DirkGently1 said:
As always the best defence is common sense. Don't install apps from untrusted sources, read the comments and ratings, and always check the permissions before installing. If you install warez that borks yours device, you have it coming!
Click to expand...
Click to collapse
Amen!! Thanks for the info!
yes but
good advice but...generally you just download and bang.
better install anti-virus like LOOKOUT.
Hey just wondering how to get this crap of my phone. Don't want to be tracked in anyway.
WWW.carrieriq.com
Thanks in advance
How do you know its definitely installed? ..
Also I'm guessing your device is currently unrooted, which means chances are you won't be able to remove it. Unless you choose to root your phone.
Apart from that, the fact you have a mobile at all means you can be tracked ,just from the cell you are using to make or receive calls or txts
Excuse me sir, I seem to have misplaced my hat.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
zeekiz said:
Excuse me sir, I seem to have misplaced my hat.
Click to expand...
Click to collapse
I'm not paranoid ,just stating a fact .. Don't give a flying one who knows where i am lol
Lol sorry mate, that was actually directed at OP, not at you. I've never been overly worried as to location collection via my mobile phone(s), purely because pin pointing your exact location using the tower can be rather difficult.
det66 said:
I'm not paranoid ,just stating a fact .. Don't give a flying one who knows where i am lol
Click to expand...
Click to collapse
This information is used by our customers as a mission critical tool to improve the profitability of the network by invasion of privacy, understand device issues like imbedded spyware and ultimately improve the collection of user’s info. Our software is embedded by device manufacturers along with other diagnostic tools and software normally called viruses prior to shipment.
While we look at many aspects of a device’s performance, we are counting and summarizing performance, not recording keystrokes or providing tracking tools yet.
All this and more and we haven’t been sued yet, or any of our customers, for online stalking and the illegal distribution of information because the user signs away its rights when it buys that much needed mobile device.
Click to expand...
Click to collapse
I don't to be tracked no matter what. Thought you people would have understood that, guess I was wrong.
Short of not owning a mobile, flashing a custom rom will get rid of the HTC apps and widgets on the stock rom that has far, far too many permissions. Same with carrier apps, since they too mine data from the device in question. The peep, facebook, HTC power control and HTC calendar apps in particular required a disturbing amount of permissions to run. Part of the reason why I rooted and flashed to CM 7.1, actually. It has phone goggles and permission controlling built it actually, so it can be a safe, user controlled, relatively tracking free experience.
Hope this helps.
Oh to add, just rooting the phone will allow you to uninstall ANY app on the phone. But I think this can have a detrimental effect at times, since some of the apps tie in with the stock sense rom, which could have the consequence of having a unstable, buggy, crash prone device of your own making. Could be wrong though.
cheers mate, phone has been rooted for some time now but I thought you guys might be more specific about which files need to be deleted as to avoid detection.
I use startpage instead of google but I don't think that makes much difference.
I know it's definitely being done with i-phones and google is doing it with android devices
http://www.techrepublic.com/blog/mac...-you-care/1109
http://www.dailymail.co.uk/sciencete...s-company.html
http://radar.oreilly.com/2011/04/app...-tracking.html
http://www.wired.com/gadgetlab/2011/...hone-tracking/
http://gizmodo.com/5793925/your-ipho...ere-youve-been
http ://news.yahoo. com/ smartphone-spying-204933867. html
well its true now as to how to remove this goofy thing is dif story.
im pretty sure nobody in this forum thinks this is acceptable!
had to put in spaces due to im a NOOB!
I've read (Engadget or Lifehacker - I forgot) that this is only on stock ROMs.
according to one article
it looks like Android phones from Sprint have a keylogger and deep-packet inspector factory-installed, and you can't remove it without exchanging a chip.
Carrier IQ Video Shows Alarming Capabilities Of Mobile Tracking Software
You may be aware of the growing controversy surrounding Carrier IQ, a piece of software found pre-installed on Sprint phones that, according to developers who have investigated, is capable of detecting, recording, and transmitting various user actions and inputs. Among the data CIQ potentially has access to are location, SMS, apps, and key presses.
News of the software has been percolating for months on development forums, but when Trevor Eckhart recently summarized his findings, he found himself facing a cease and desist while Sprint vigorously denied the charges, saying “We do not and cannot look at the contents of messages, photos, videos, etc., using this tool.”
The C&D was quickly retracted, but Eckhart has now released a video that seems to give the lie to both Sprint and Carrier IQ’s assurances.
Click to expand...
Click to collapse
more here http://techcrunch.com/2011/11/29/ca...ing-capabilities-of-mobile-tracking-software/
from about 5 mins in
http://www.youtube.com/watch?v=T17XQI_AYNo&feature=player_embedded#
already an xda article on it
http://www.xda-developers.com/android/the-rootkit-of-all-evil-ciq/
Note also that if you're running an Android Open Source Project (AOSP) based ROM—like CyanogenMod—you do not have Carrier IQ installed on your system. These apps are based on the original, open source version of Android, and don't include any carrier or manufacturer additions like Carrier IQ. If you're using a modded version of your manufacturer's ROM, however—for example, a modded HTC Sense or Samsung TouchWiz ROM—you could still have it installed. To avoid this, either flash AOSP based ROMs, or flash ROMs with Carrier IQ specifically removed (many will say NOCIQ or something similar on their description pages).
Click to expand...
Click to collapse
makes sense.
Interested in your thoughts on this comment
The application accessibility will close on the phone, however the data will still be left behind as residual storage in the same way every computer in the work can leave behind traceable history even if you physically delete everything from the hard-drive. It only takes a external programmer from a wifi connection to gain access onto the phone (even when its turned off) and they are able to uplink all that information stored on the phones memory aswell as call/storeage/user memory.
Its protected by internal security devices from external attacks, however it doesn't stop the phone companies from getting into your data anytime, anywhere, without your permission. At least with computers you can be protected from such external hacking by setting up a proxy or multiple firewalls (however even this isn't a guarantee.)
Click to expand...
Click to collapse
Check out my posting!
http://forum.xda-developers.com/showthread.php?p=20281786#post20281786
there is also an app called logging test app which will do the same it's by treve here at xda check it out as well.
The Desire S shouldn't have carrier IQ, at it's mostly US phones which have it. The UK phones do not.
Welcome Android users!
As we all know, ads are extremely annoying. It seems like there are more ads than ever in today's Internet world.
Today I will not only show you how to block ads in the official YouTube app, but will also TEACH you how to find their ad domains using an SSL packet capture technique, that way you can find all the ad domains, and block them.
We all know that developers need ads to make income. Having ads will help support developers. But some put too many ads which can be annoying. Don't do this if you support ads. However, If you really don't like ads at all, this tutorial is for you.
The official YouTube app would be the perfect example. Yes, the ads in YouTube has gotten out of control. But remember that this is just an opinion. You do not have to agree with my opinions. I don't mind some ads, but if there is a video ad at EVERY video I watch, that annoys me. You may heard of an app called "Adaway". Most root users probably use adaway to try to block YouTube's ads but after looking at some of the threads on XDA, I am beginning to notice that adaway isn't blocking ALL of YouTube's ads, and that people are still seeing ads. So instead, we are going to actually FIND the ads, and block them by modifying the "hosts" file.
Requirements:
Android Phone that is rooted (BusyBox is recommended!!)
Sift - SSL Security & Firewall App (It's on the Play Store!!!!)
A root browser (Doesn't matter what root browser!)
Hosts Editor (Also on the Play Store!)
Blocking ads using the hosts technique is nothing new. People have been using this technique to block ads for a long time. But how exactly do those people find these "hosts"?
Just like with Windows, Android has a hosts file. It is located in the directory /system/etc/hosts
The hosts file basically maps hosts names to I.P. addresses. If you open it up with your root browser, you will see this line of text :
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
127.0.0.1 localhost
That is your original local host. To block a server or a domain, we will simply add a host name. For example, if I wanted to block www.google.com, I would simply add this to the hosts file:
127.0.0.1 localhost
127.0.0.1 www.google.com
Of course you need a root bowser with superuser privileges to do this. Now try going to www.google.com on your browser. It won't load. That's because you blocked the domain.
That is basically how you block a domain. So let's get started with blocking YouTube's ads.
1. Open up Sift - SSL Security and Firewall and tap on the button on the bottom right. It will ask for your permission to set up a VPN connection. Tap "ok" and it will start running.
Now everything will go through Sift's Firewall and will be captured. Go ahead and open the YouTube app.
2. Just start watching videos until a video ad appears and let it play. Sift will capture that video ad :good:
3. Now go ahead and exit the YouTube app and open up Sift. Go ahead and disconnect from the VPN. Tap on Youtube and you SHOULD see all these kinds of servers like:
Now which servers do you think are the ad servers? Obviously ad.doubleclick.net is one of them. That is a no-brainer. Now all we have to do is add "ad.doubleclick.net" and all the other ad servers that we captured to the hosts file.
4. To make it easier, use Hosts Editor by opening up the app and clicking on the plus button. Add it to the hosts. Should look like this:
Then tap "Add Hostname" .
Congratulations! You have successfully blocked your FIRST ad DNS domain!
Obviously there are more. You might see these ad servers as well:
securepubads.g.doubleclick.net
suggestqueries.google.com
redirector.googlevideo.com
and much more!!
WARNING!!!!!!!!!!!!!!
Don't block EVERY hosts you see that is captured in Sift!!! You OBVIOUSLY don't want to block www.youtube.com. To help you root users, here are the domains that you do NOT want to block:
youtubei.googleapis.com
i.ytimg.com
android.clients.google.com
yt3.ggpht.com
Sometimes you might come across a weird domain like r5---sn-q4f7snel.googlevideo.com.
I haven't been able to officially determine if those are ad servers. YouTube has ALOT of ad domains. I believe different YouTube channels use different ad domains. But I haven't been able to determine this out yet. If you are still seeing video ads, keep adding host names until you don't see any ads.
For a good start, I added a modified "hosts" file to help get you started. Download it below and overwrite your hosts file. Make sure to make a backup if anything goes wrong!! Make sure you set the correct attributes (Permissions) to -rw-r--r- also, remove .txt extension.
View attachment hosts.txt
You can also try this method with other apps too!
I really hope this helps everyone who doesn't like ads. Please leave any comments or suggestions that you may have!
I have been posting a lot recently on XDA so I will take a break. If you have any questions, It might take me a while to reply.
This is dope!!!! Im using the modified YouTube APK to get rid of ads and so far its been great (a few members have mentioned ads have been sneaking through of late but I haven't seen any). I'm more interested in trying this with a few apps.
DOES NOT WORK ANYMORE
Sorry but YouTube bypassed this. I am still seeing ads. Instead, visit the link below.
You will actually be using a modified apk in which you'll have to replace your original Youtube app.
https://android.gadgethacks.com/how-to/block-ads-androids-youtube-app-without-using-xposed-0173683/
Sorry yall. Don't try my original method. It only blocks SOME ads
Even if this DOES work or you so find another method of blocking ads I think it is important to know:
When you block ads you are stealing from your favorite YouTube content providers. I have seen videos created by a few of my favorite Tubers and they confirm this and they plead with their subscribers "please whitelist my channel." I know that the typical opinion about this is "oh my ad blocker only takes money away from the YouTube advertisements dust it only affects Google." This is far from true and you are stealing from your content provider who you claim to like.
I always tell people:
Please do not believe me. Please do not take my word for it ever. I do not want people to listen to anything I have to say as though it is fact. Although I do not go around talking about things I don't understand, I fully advised people to do their own research and confirm things for themselves. It is true that using your ad blocker makes your view of a video become unmonetized. It also may make it so that when you click "Like" for a video, this will go into a category of unmonetized likes. Again please look this stuff up for yourself.
I suggest:
If you appreciate what your YouTube Creator is doing, that you help them out some way or another. Perhaps you would like to support them on patreon. if sending them cash money is not an option you are able to utilize, the next best thing to do would be to not use ad blockers.
What I do:
Because there is a viable method for removing all ads from the YouTube app on xboxOne, I choose to utilize it. Because it's nice not to have ads on my TV. However I do do not add block from my phone which I use when I'm out of the house for watching videos and stuff. The other thing that I do is since I have a secondary laptop that is not being utilized for video watching:
I open a browser window, I go to a YouTuber's home page, I turn the sound off and begin playing one of their playlist. And I leave adblocker disabled. I pick a creator whom I haven't done it done it for lately and I leave it run for hours.
There is a modded YouTube app that blocks all ads in the apps. Just search for advanced YouTube.
I also block all ads everywhere.
Are you saying, you are not watching any of the contents and yet just let the device consume power/resources and contributing to global warming for no meaningful purpose?
KirkH420 said:
What I do:
I open a browser window, I go to a YouTuber's home page, I turn the sound off and begin playing one of their playlist. And I leave adblocker disabled. I pick a creator whom I haven't done it done it for lately and I leave it run for hours.
Click to expand...
Click to collapse
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Sh-ort is a how I reimagined a URL Shortener app using Material Design to build a branded experience, through UI and Motion.
There are several apps that take care of shortening urls, and they are great at what they do but they all have more or less the same design and are a little boring.
Also when you have many urls it is difficult to manage the statistics well and to have everything at hand, maybe a general overview of how your links are performing would be fantastic - I thought - and also give the user the possibility to render the entries in the list more recognizable thanks to the preview of the article, or of the page whose URL you have shortened.
Then I thought about who could use the app, to a tempt who perhaps manages several websites for work, and who might want to see how the links belonging to the same site perform.
I have created a small app that attempts to improve the experience with URL shortener, through its structure (overview, all links, best links), the ability to filter links based on the site they belong to, the date, or whether they are added to favorites or not.
The details department is still in its early stages but you can have the complete statistics on clicks already by default, without the need for a subscription as happens in major similar apps.
Of course there is still a lot to improve, so I trust in your feedback to find bugs and to add features that I missed in this first release.
There is a complete lack of translations in all languages and dark mode, which will be implemented once the app has reached a modest number of functions and use cases, making it an attractive app for the average and pro user.
Find more information on my app design and branding process in the Medium article linked below, as well as the link to download the app.
I look forward to hearing from you and your feedback, thanks for your attention.
About the design: https://mirko-ddd.medium.com/how-material-design-helps-you-brand-your-app-b7cb191524f7
App download: https://sh-ort.app/gkd9g
can you use it on the computer?
I don't care about tracking, do I still have to use a Google account?
prplt said:
can you use it on the computer?
Click to expand...
Click to collapse
For the moment I am focusing on the android app, but in future I may extend to web and other platforms
wfred said:
I don't care about tracking, do I still have to use a Google account?
Click to expand...
Click to collapse
Hello, the login part has nothing to do with tracking, it is simply used to let the user create collections of short urls on the server, and sync it across devices.
Mirko ddd said:
View attachment 5216725
Sh-ort is a how I reimagined a URL Shortener app using Material Design to build a branded experience, through UI and Motion.
There are several apps that take care of shortening urls, and they are great at what they do but they all have more or less the same design and are a little boring.
Also when you have many urls it is difficult to manage the statistics well and to have everything at hand, maybe a general overview of how your links are performing would be fantastic - I thought - and also give the user the possibility to render the entries in the list more recognizable thanks to the preview of the article, or of the page whose URL you have shortened.
Then I thought about who could use the app, to a tempt who perhaps manages several websites for work, and who might want to see how the links belonging to the same site perform.
I have created a small app that attempts to improve the experience with URL shortener, through its structure (overview, all links, best links), the ability to filter links based on the site they belong to, the date, or whether they are added to favorites or not.
The details department is still in its early stages but you can have the complete statistics on clicks already by default, without the need for a subscription as happens in major similar apps.
Of course there is still a lot to improve, so I trust in your feedback to find bugs and to add features that I missed in this first release.
There is a complete lack of translations in all languages and dark mode, which will be implemented once the app has reached a modest number of functions and use cases, making it an attractive app for the average and pro user.
Find more information on my app design and branding process in the Medium article linked below, as well as the link to download the app.
I look forward to hearing from you and your feedback, thanks for your attention.
About the design: https://mirko-ddd.medium.com/how-material-design-helps-you-brand-your-app-b7cb191524f7
App download: https://sh-ort.app/gkd9g
Click to expand...
Click to collapse
I've tried this app and it is really amazing compared to Bitly android app.
Thanks, Mirko!
Mirko ddd said:
Hello, the login part has nothing to do with tracking, it is simply used to let the user create collections of short urls on the server, and sync it across devices.
Click to expand...
Click to collapse
Sorry, I meant syncing and saving, not Google tracking me.
Just installed/uninstalled, the app won't even start without a Google login.
I'm not interested in saving, collecting, or syncing shortened URL's, just sending “one and done” links from my phone. Can you tweak this to eliminate the login?
wfred said:
Sorry, I meant syncing and saving, not Google tracking me.
Just installed/uninstalled, the app won't even start without a Google login.
I'm not interested in saving, collecting, or syncing shortened URL's, just sending “one and done” links from my phone. Can you tweak this to eliminate the login?
Click to expand...
Click to collapse
The app is designed to assign an owner to every short url so the owner can check the short url performance. If you are not interested in stats means that this is not an app that fits your needs.
fulvius31 said:
I've tried this app and it is really amazing compared to Bitly android app.
Thanks, Mirko!
Click to expand...
Click to collapse
Thank you very much Fulvius
Mirko ddd said:
The app is designed to assign an owner to every short url so the owner can check the short url performance. If you are not interested in stats means that this is not an app that fits your needs.
Click to expand...
Click to collapse
True, no problem. I'm not your target user.
For some reason that app force closes every time I try to load it. Tried clearing cache/data & even uninstall/reinstall. Android 10 stock, w/ magisk
Chaprnks said:
For some reason that app force closes every time I try to load it. Tried clearing cache/data & even uninstall/reinstall. Android 10 stock, w/ magisk
Click to expand...
Click to collapse
Hello, thanks for reaching out but I cannot guess what is the problem just knowing your android version. For sure I can say that have not passed at least 3 hours yet since you got crashes because the crash console is flat.
Write your device model and as soon I get the report I can see what s wrong and eventually I will fix it.
Mirko ddd said:
Hello, thanks for reaching out but I cannot guess what is the problem just knowing your android version. For sure I can say that have not passed at least 3 hours yet since you got crashes because the crash console is flat.
Write your device model and as soon I get the report I can see what s wrong and eventually I will fix it.
Click to expand...
Click to collapse
Would sending you a logcat of the crash make it easier?
Chaprnks said:
Would sending you a logcat of the crash make it easier?
Click to expand...
Click to collapse
The app code is obfuscated, I don t know if you would actually get something useful from it. But giving a try doesn t cost anything, right?
you can find the email where to send the log in the Google Play page of the app
Edit: by the way, the package name is it.mirko.sh_ort if you want to clean your log