Database Info

Tough security ROM

I want to port the rom which gives me highest level of security on my rooted oneplus one device, whether it eats battery, slow working, less features, no matter of camera, video and/or internet. I wish that ROM should be most secured for hacking and must be rewarded for a great price for bug bounty programs.
Can anyone please suggest me the name of best secured ROM till now?

GirishSharma said:
I want to port the rom which gives me highest level of security on my rooted oneplus one device, whether it eats battery, slow working, less features, no matter of camera, video and/or internet. I wish that ROM should be most secured for hacking and must be rewarded for a great price for bug bounty programs.
Can anyone please suggest me the name of best secured ROM till now?
Click to expand...
Click to collapse
First things first. You are in wrong thread. This should be in Q&A section.
All the ROMs here are secure. You should take care of what you install and from where you install.
BTW Ever heard of iOS??

GirishSharma said:
I want to port the rom which gives me highest level of security on my rooted oneplus one device, whether it eats battery, slow working, less features, no matter of camera, video and/or internet. I wish that ROM should be most secured for hacking and must be rewarded for a great price for bug bounty programs.
Can anyone please suggest me the name of best secured ROM till now?
Click to expand...
Click to collapse
Kali Nethunter.
#A0001

Please check this link:
http://thehackernews.com/2015/11/ios9-zero-day-hack.html?m=1
Will you still like iOS?
Nothing is secure, even if you are installing from authenticated source though, that is why I urge to great ROM developers to please put more weightage to security rather than battery, camera, audio, video, internet speed, fancy pump and show etc.

GirishSharma said:
Please check this link:
http://thehackernews.com/2015/11/ios9-zero-day-hack.html?m=1
Will you still like iOS?
Nothing is secure, even if you are installing from authenticated source though, that is why I urge to great ROM developers to please put more weightage to security rather than battery, camera, audio, video, internet speed, fancy pump and show etc.
Click to expand...
Click to collapse
Mate, one way to ensure security on any ROM based on OPO is to enable encryption from Settings.
Yes, iOS was hacked by those hackers, TBH, iOS is stable and more secure than Android.
Rooting is one of the way that you compromise your security.
Best combination for security is : Non root + Stock + encryption + no sideloading of apps + restricting permissions + Antivirus app(if you are interested)
Developers can only develop apps and integrate in ROMs
Only Google can enforce more security by coding the required lines in AOSP

I am downloading the zip file from below link:
http://images.kali.org/kali_linux_nethunter_2.0.1_bacon_lollipop.zip
Is it flashable ROM please i.e. installation like other ROM through twrp?

GirishSharma said:
I am downloading the zip file from below link:
http://images.kali.org/kali_linux_nethunter_2.0.1_bacon_lollipop.zip
Is it flashable ROM please i.e. installation like other ROM through twrp?
Click to expand...
Click to collapse
Better ask the location where you got the ROM from.

Asking for opinion regarding customizing tablet for nursing staff

Hi,
I'm currently programming an app for a hospital as a bachelorsproject. Now I've discussed with my mentor about the fact we want the devices to be used only as pupose for the app I'm making, apps we preinstall and future apps that are made for the personel thats using them.
Currently I'm working with a Galaxy Tab A 10.1 (2016) running android 6.0.1 without it being rooted.
So what do you guys suggest with this I've done some reading along how to root whats possible and seen some guides for my device on how to root it.
What I want to do is actually have like a stock android so no samsung bloatware and microsoft apps etc, even chrome doesn't need to be installed as they don't need acces to browsing. And then pre install specific apps like my app, the one from the hospital itself, future apps and others we specifically need.
Also I'm new to android in general so can I create like a nurse user, and a IT-desk user so the IT desk user can log on the tablet and install an app, while the nurse doesn't even have acces to settings maybe.
Would love to hear what you guys think along what to do, and maybe some general steps like root it, flash a stock rom, create your (2)users, and install apps.

Tommyboy500 said:
Hi,
I'm currently programming an app for a hospital as a bachelorsproject. Now I've discussed with my mentor about the fact we want the devices to be used only as pupose for the app I'm making, apps we preinstall and future apps that are made for the personel thats using them.
Currently I'm working with a Galaxy Tab A 10.1 (2016) running android 6.0.1 without it being rooted.
So what do you guys suggest with this I've done some reading along how to root whats possible and seen some guides for my device on how to root it.
What I want to do is actually have like a stock android so no samsung bloatware and microsoft apps etc, even chrome doesn't need to be installed as they don't need acces to browsing. And then pre install specific apps like my app, the one from the hospital itself, future apps and others we specifically need.
Also I'm new to android in general so can I create like a nurse user, and a IT-desk user so the IT desk user can log on the tablet and install an app, while the nurse doesn't even have acces to settings maybe.
Would love to hear what you guys think along what to do, and maybe some general steps like root it, flash a stock rom, create your (2)users, and install apps.
Click to expand...
Click to collapse
You could build an AOSP ROM for that model number with only the apps and features you choose, it would require AOSP source code and your stock source code.
Then, yes, android natively supports setting up user profiles, with root access you can set it so that the "nurse user" profile can only use the device and an "admin user" would have exclusive permissions to make whatever changes are needed. You can set it so that the "nurse user" would not be able to install new apps, wouldn't be able to browse the web or even set it so they could browse if needed but would be limited in what they can access on the web, and you'd be able to set it so they would be locked out of all settings.
What you want is very possible, the most difficult part would be compiling the ROM if you go that route, you may not need or want to though because with root, you can strip down the existing stock firmware to remove the extras you don't want or need.
Mind you, there would be some details and specifics to deal with that would require trial and error along the way, obviously.

Rooting an Oppo R11

Hi all, was just putting this out there to ask if any of the XDA faithful have been able to successfully root an Oppo R11? I don't need to go into details about how bad the ColorOs is, so you get where I'm coming from
I've read a fair bit since receiving the phone (Gift) about being able to root older models from the work by Wuxianlin and others.
Is it safe to assume the older methods of rooting the Oppo phone wont work for the R11?
Details are below of the model (Australia) etc
Model # - CPH1707
ColorOS version - v3.1
Android version - 7.1.1
Build # - CPH1707EX_11_A.06
Cheers guys, appreciate any help or guidance
Sanchez

dirty cow - NO. msmdownload tool - YES

sanchez78 said:
Hi all, was just putting this out there to ask if any of the XDA faithful have been able to successfully root an Oppo R11? I don't need to go into details about how bad the ColorOs is, so you get where I'm coming from
I've read a fair bit since receiving the phone (Gift) about being able to root older models from the work by Wuxianlin and others.
Is it safe to assume the older methods of rooting the Oppo phone wont work for the R11?
Details are below of the model (Australia) etc
Model # - CPH1707
ColorOS version - v3.1
Android version - 7.1.1
Build # - CPH1707EX_11_A.06
Cheers guys, appreciate any help or guidance
Sanchez
Click to expand...
Click to collapse
The ColorOS is by far and away the worst experience I've ever had on a phone.... it boggles the mind how they thought this was a good android alternative. The phone is great but really unusable for me at this stage.
carlochiefsg said:
dirty cow - NO. msmdownload tool - YES
Click to expand...
Click to collapse
Can you please go into detail, I've never rooted and Android device, as I've never needed to. I'm coming from a BlackBerry PRIV, which I used for many years, and I came dependant on the keyboard (BlackBerry PRIV onscreen keyboard). This is all good, as you can download a Blackberry manager and install the keyboard, however, the keyboard doesn't appear when you tap into message, email, you name it. Sometimes you'll have to tap 4 or 5 times before it'll appear. And it's got all the permissions in the world.
Now I'm here, hoping I can install a stock android version. Is this at all possible? Any help would be much appreciated.

Same same
OppoR11 said:
The ColorOS is by far and away the worst experience I've ever had on a phone.... it boggles the mind how they thought this was a good android alternative. The phone is great but really unusable for me at this stage.
Can you please go into detail, I've never rooted and Android device, as I've never needed to. I'm coming from a BlackBerry PRIV, which I used for many years, and I came dependant on the keyboard (BlackBerry PRIV onscreen keyboard). This is all good, as you can download a Blackberry manager and install the keyboard, however, the keyboard doesn't appear when you tap into message, email, you name it. Sometimes you'll have to tap 4 or 5 times before it'll appear. And it's got all the permissions in the world.
Now I'm here, hoping I can install a stock android version. Is this at all possible? Any help would be much appreciated.
Click to expand...
Click to collapse
In the same boat.... for me ColorOS is almost unuseable as I struggle to get the font size and colour that works for my eyes... and it's very non customisable. I am playing around with Themer (Play store download) and it looks better but so far not a final solution

[Doogee Shoot 1 ] App Android "Chromes". what's it? [TRIADA Malware]

Dear friends,
i am struggling with a strange APP named "Chromes". It seems to be undocumented (i googled a lot).
The only thing i know is that IT INSTALLS ALONE without any visibile message. After a Factory reset i found it (AGAIN) in the phone.
I couldn't SEEK what / when / Who installs it in my phone.
It gains telephone and archive rights without any ask to me.
I also know that my doogee phone suffers of a vulnerability (never closed) by DOOGEE and i don't know if it'd be related with it.
No clue.
Does anyone have had the same experience? Does anyone have EVER seen it?
Let me know please.
Best Regards.
EDIT: ****warning: I remember to everyone that ROOTING/HACKING/INSTALLING a different ROM in your phone may void the warranty AND can potentially BRICK your phone . Do it ONLY IF YOU KNOW WHAT YOU ARE DOING . I warned you.*****
edit 13/11/2017 *LIST OF REPORTED DEVICE AFFECTED WITH CHROMES (Malware) app *:
----------------------------------------------
Doogee Shoot 1
Gretel A9
UHANS A101
NOMU S10
Leagoo M8
leagoo M8 pro
----------------------------------------------
Report if you have it. Thank you.

i just found it on my phone too and started googling it.. and yours seem to be the only instance ive found so far.. i dont know what it does or where it comes from.. i can close it from the task manager but itll start itself again 3 processes that itself have about 2-3 services.. mostly ChromesService DaemonService and ChromesService2 the main proces seems to be signed from com.appclone.lyhj the second one doesnt have the daemonService and is signed from com.android.qnsettings and the third one had com.yunshi.market listed. again i dont know there they come from or whats their purpose.. and if they have anything to do with the ad popups i get since a few days now that dont seem to be app related since its the same popups for most apps .. apps that dont have those popups natively like whatsapp or facebook. i have since uninstalled pretty much anything and tried some antivirus but i guess its gonna be rooted and gets a custom rom. it is also a china cell called nomu s20 . after googling a bit it seems there are a lot security problems with my device.
edit: ive found something on this link i cant post because i am not a trusted user yet
also after running kaspersky antivirus it did indeed find something (as opposed to the comodo antivirus that kept silent)
it found Trojan.androidOS.Boogr.gsh as the chromesBase.apk and another one i just deleted without writing the name. it seems though this might be related to the Triada-Virus/trojan .. soo.. yeah it might be a good idea to save your stuff and not only try with a factory reset but completely reinstall the whole rom.
edit2: just deinstalling them hasnt solved anything .. the problem sits way deeper meaning it is definitely related to the triada virus. it just reinstalls the software again without anything showing.
edit3: found it.. it is indeed the triada virus on my phone ..

I have been dealing with that damned "Chromes" app for two or three weeks now (BTW, they appear two of them with the same icon and logo.)
MalwareBytes detects it as malware (Avast sometimes does, sometimes does'nt)
I have trie , for sure , uninstalling (completely unuseful) stopping all the apps I can (seems to have an effect in the reinstalling time ), and also keeping them installed but removing the Phone, Storage and SMS permissions, which, surprisingly, remain removed (until you uninstall the app)
I dealed in the past with the virus app on the Shoot 1 firmware, which turnaround solution (disabling the fake app) worked OK for me. But recently there have not been any fw update, so this time is not the firmware the responsible.
Any hint or help will be greatly appreciated.
¡Cheers!

Hi guys!
I'm having the same problem as you two. I can't believe that Doogee has screwed up on this again... (I also have the shoot 1 [nice screen ]) I'm surprised that, as you said, I've not found anything on the internet about this*. In addition, the application consumes a large amount of mobile data!
I hope there is an update soon, and that the problem is solved
Thank you all for your comments! Greetings from Spain!!
*Well, here they have the same problem
https ://android.stackexchange.com/questions/185520/how-to-get-rid-of-a-malware-app-chromes

Don't wait too much from Doogee. In fact don't wait nothing at all. They didn't solved yet the firmware virus that came with the first OTA update. We're alone...

And your GPS signal how is it going? In my case it does not get fixed to any satellite. Has someone managed to root it successfully? The truth is that I do not understand much about this, that's why I'm a bit afraid to do it.
I found this in a spanish forum, look at the last post (#19). (I think you have to translate it )
http: //ww w.htcmania. com/showthread.php?t=1291106
Summing up a bit, he says that Doogee sells mobiles with malware in the system. The fact is that they do it conscientiously. And then put a "solution", which is to install a firewall, so that you can control the internet connection of the applications.
Thanks again!

Some updates...
let me give you some updates :
1) the Shoot 1 phone is not easy to root with standard tools (kingroot & others: i tried a lot of them);
1) i successfully installed twrp with the FLASHTOOL and a specific recovery image TWRP + SU (if needed i can help about it);
2) I backupped everything (included malware of course) just to be sure i could go back in case of brick;
*** 3) I downloaded and installed the FANTASTIC lineage OS without any STUPID bloatware. ***
My phone is secure and fast NOW.
i warmly RECOMMEND all of you to root and update to lineage OS 7.1.2 (ver 14). Thankx to the lineage team! **they deserve a donation!!****
* about Shoot1 GPS *
i still didn't test it with the new LINEAGE and i will update you
Before i discovered the malware inside the GPS was not fixing correctly and in general not working like my previous LG or HTC
I was using an external BLUETOOTH antenna by using a middleware driver named Bluetooth GPS. Once you configured the driveer it works like a charm with tomtom and all GPS software ( i tested a lot). The external GPS solution lets the phone cold and free to charge during long gps travel session.
I will test anyway with the internal GPS again with the new LINEAGE ROM.
For any test or info write here and send me a PV message.
UPDATE: the lineage team is releasing the version 15 (development) with OREO. Anyway i will not install it soon. I am SOOOO SOLID now!

jmam said:
Any hint or help will be greatly appreciated.
¡Cheers!
Click to expand...
Click to collapse
Unfortunately you can't get rid of it. No one knows if there is another fake app or background service that loads it again. It seems to appear (after a factory reset) some days later (i.e. just the time to download from whoknowswhere).
The fact is that I CAN'T TRUST ANYMORE the Doogee and the entire ROM so i warmly suggest you to ROOT (via TWRP + SU) , backup all, and install a LINEAGE fresh n° 14 release for shoot 1.
i did it and it worked like a charm.

Chromes
I have phone that is not rooted or changed firmware. Antivirus said that i have chomes and facebook apps that are not safe, but i do not have facebook installed. I tried factory reseting the phone twice, but it still comes back....

Have got the same "Chromes" problem on Gretel A9 mobile. Not rooted, only used Google Playstore for few apps. So frustrated and so little information on how to solve it for a non techie like me. Tried to contact Gretel who never reply. Still under an AliExpress warranty but not sure if malware stuff is covered. Needrom have the official stock rom for the A9. Do I have to root the phone to reinstall a clean stock rom? Can anyone point me to instructions on how to replace the stock rom? Thanks for any help.

I am really sorry to say that. The SUPPORT from some of these Chinese Supplier is really poor. I can't help you with your GRETEL . Please search on this XDA forum is anyone can do .
Root it and install a reliable distro. Be careful: when you root your phone you loose your WARRANTY and (sometime) some functions of your phone is not available or not available at 100%.
Custom ROMs should be considered ALWAYS as "bleeding" and "in development".
As i said i will never buy anymore low cost China phones DUE to this lack of support and this (unbelievable) disattention to release malwared firmware.

Deki-bg said:
I have phone that is not rooted or changed firmware. Antivirus said that i have chomes and facebook apps that are not safe, but i do not have facebook installed. I tried factory reseting the phone twice, but it still comes back....
Click to expand...
Click to collapse
I struggled a lot to remove it with normal antivirus and antimalware.
It seems to BE NOT POSSIBLE without a rooted phone.
In my phone there were 2 problems:
1) the malware CHROMES
2) the injected system library (dunno what it does).
So , once i removed the CHROMES %$£"%$£% app....i could not know if it was related (or somehow connected) with the malware injected system library. So i couldn't trust anymore that factory o.s. and i replaced it with LINEAGE (atm something not working 100% like GPS) but at least it's clean and works.
I hope LINEAGE could support more chinaphones to get rid of the buggy malwared firmware from Doogee, Gretel and others Chinamakers

UHANS A101 affected as well!
CHROMES and
fake FACEBOOK app

garibald75 said:
I am really sorry to say that. The SUPPORT from some of these Chinese Supplier is really poor. I can't help you with your GRETEL . Please search on this XDA forum is anyone can do .
Root it and install a reliable distro. Be careful: when you root your phone you loose your WARRANTY and (sometime) some functions of your phone is not available or not available at 100%.
Custom ROMs should be considered ALWAYS as "bleeding" and "in development".
As i said i will never buy anymore low cost China phones DUE to this lack of support and this (unbelievable) disattention to release malwared firmware.
Click to expand...
Click to collapse
Thanks for the reply.
Do warranties usually cover an infected Rom (I'd need to send it to a Poland service centre)
Is it hard to flash a new clean stock rom over an infected stock rom?

owlsman said:
Thanks for the reply.
Do warranties usually cover an infected Rom (I'd need to send it to a Poland service centre)
Is it hard to flash a new clean stock rom over an infected stock rom?
Click to expand...
Click to collapse
If you can't ROOT it, try to open RMA or open a ticket, try (at least). I hope we can MOUNT CASE and create a bit of hype around this CRAZY THINGS .
In my case it doesn worth. The DOOGEE has a really poor website and we yellew there a lot about this malware.
No way to return. IT doesn't worth.
However tell them and try to have it swapped.

Hey guys, I just got the apk. If a dev can make it "peaceful", I will really appreciate that. Just rename the chromes(blablabla).txt to chromes(blablabla).apk

jimmy1235 said:
Hey guys, I just got the apk. If a dev can make it "peaceful", I will really appreciate that. Just rename the chromes(blablabla).txt to chromes(blablabla).apk
Click to expand...
Click to collapse
WARNING for all the users: THIS APK IS FOR DEVELOPERS. This apk CONTAINS a malware. it's *ONLY* FOR RESEARCH purposes. so Don't try to install it!!

the really interesting THING would be to know if it RECALLS some system service or other RESIDENT modules to complete the cleaning and to allow US to use the original firmware again.
Let's see if anyone can help us.

Well... This is getting REALLY deeply...
https://www.kaspersky.com/blog/triada-trojan/11481/

i tested KAV and other antivirus and malware removal tools.
KAV was not able to remove and to detect it.
the 1st (maybe not the only one) that warned me has been DR WEB ANTIVIRUS and it (also) couldn't remove it without rooting.
It's impossibile, though, to know WHAT / WHICH process is linked in memory or injected in the original ROM since the Chinese CRAPPYPHONES are full of bloatware and "weirdware" .
The trust is ZERO for them ATM.

General question on changing ROM in device

Hi there,
Few months ago, I was told in XDA site that nowadays changing the ROM is not anymore the best way to de-google a device. Now it is better to de-bloat and tweak the device.
Do you agree with this statement?
Did you change the ROM in your device or only de-bloated it? Tell me your experience. Easy to install, need to root, unblock the bootloader, update, what is NOT working, speed, battery, ...?
I own a Samung Tablet S5e LTE few months old, under guaranty and would like to de-google it. I was thinking to change the ROM, is tit the best way?
What is your advice? If needed, what ROM to use? What way, software to de-bloat?
Many thanks

MrNice said:
Hi there,
Few months ago, I was told in XDA site that nowadays changing the ROM is not anymore the best way to de-google a device. Now it is better to de-bloat and tweak the device.
Do you agree with this statement?
Click to expand...
Click to collapse
Fully agree with this.

Thank you for your fast answer.
Could you be more specific and tell me why, how (big picture) and if you have experience what tools did you use?

People most times use terms "De-google" and "De-bloat" not knowing what they are really speaking of.
The Vanilla Android ( read: AOSP - today often called GSI ) is totally free of apps developed by Google ( topic: GMS ) and the service ( GFS ) they need to run, this because NOBODY basically needs these to operate a phone. But the overwhelming majority of the users of mobile devices want an Android what is extended by features, so they can download & install more apps, play games, listen to music, watch porn videos. OEMs respect this wish - they want to sell their products - and therefore typically add GMS & GFS to their Android OS, so it in reality becomes a Custom ROM.
Resume: Vanilla Android - and all ROMS that are based on Vanilla Android ( like Lineage OS and many others ) must not get "De-googled".
Bloatware ( or Potentially Unwanted Programs - PUP ) is software users don’t want, that burdens and slows down a mobile device. It usually comes pre-installed by vendors, manufacturers or carriers. IMO "De-bloating" is the first thing a user should do when starting up a new device.
Bloatware typically is installed as system-app, hence phone's Android must got rooted before you can start "De-bloating".

As I am not very skilled in Android, I appreciate your post.
I installed LineageOS 17.1 on my Samsung S6, it working fine, I am happy for the usage but the only issue I have is that I can't update. This is another story in another XDA forum.
My need are usual plus
Read books, music sheets, social networks, Internet TV, news, training, conference (low bit-rate), email, messaging, GPS travel, basic pictures,
some specific app for music practice (tuner, metronome), veg gardening (I need to find one suitable for me).
but no game, no HD movie (download or stream), no large download
Backup locally (I need to learn more), no cloud usage.
As I run GNU/Linux for around 20 y, I hate to have to register for account in any app from GAFAM and I don't want as much as possible give them my data. I try to select the app without tracker, FOSS and I block the permissions as much as possible.
If I can de-google this is the best for my mindset.
I understand that de-google or de-bloat, I 'll have to root so break Knox. Right?
I don't know if I need GMS and/or GFS for my use. Could you tell me? For what app it is mandatory?
With my S5e I want to be more cautious, I need a way as secure as possible to not brick it.
With all these info, what do you advice?

MrNice said:
Hi there,
Few months ago, I was told in XDA site that nowadays changing the ROM is not anymore the best way to de-google a device. Now it is better to de-bloat and tweak the device.
Do you agree with this statement?
Did you change the ROM in your device or only de-bloated it? Tell me your experience. Easy to install, need to root, unblock the bootloader, update, what is NOT working, speed, battery, ...?
I own a Samung Tablet S5e LTE few months old, under guaranty and would like to de-google it. I was thinking to change the ROM, is tit the best way?
What is your advice? If needed, what ROM to use? What way, software to de-bloat?
Many thanks
Click to expand...
Click to collapse
For the Tab S5e de-googling it is next to impossible with stock samsung rom. LOS works great on it and not too difficult to install, CRDroid works well on it but is better with google installed, /e/ rom was being developed for it but I don't know if they are still working on it. I built an /e/ rom locally for my Tab S5e last year and it worked very well. If you want to get away from google you need to ditch the OneUI or whatever they are calling it.

tek3195 said:
For the Tab S5e de-googling it is next to impossible with stock samsung rom. LOS works great on it and not too difficult to install, CRDroid works well on it but is better with google installed, /e/ rom was being developed for it but I don't know if they are still working on it. I built an /e/ rom locally for my Tab S5e last year and it worked very well. If you want to get away from google you need to ditch the OneUI or whatever they are calling it.
Click to expand...
Click to collapse
Thanks for you advice, I'll work on it soon.