Database Info

[Q] Android app security

While I'm waiting for my GS2 (my first Android device) to be shipped I have been doing a little research into the apps and general security and was shocked to find that many apps actually leak private information and data back to ad servers. This scares me a little. I don't want my location, and other personal data being sent to places I haven't authorised.
Is there any way of being able to stop or block this or any way of identifying which apps do this? How can one know if a publisher of an app can be trusted?
I try to keep my PC locked down from this sort of thing and want to do so with my phone. I just want to be able to make an informed decision with Android.

There is a app called Permissions Denied that can do that.

When you download an app from the market, it tells you what permissions theapp has to have. Most of th time, the permissions aren't for what you think. Internet connection is usually cause it has ads. Also, see what the apps are rated, and read the comments to see if the app is trustworthy.
[sig]I'm close to root, im patiently waiting on those puzzles[sig]

First thing I downloaded when I bought my EVO was Lookout mobile. Very good AntiVirus app with free features that Sprint is trying to sell with their own junk. Try it out.

Thanks for the comments guys. The thing is how do you really know that the app is not maliciously harvesting your data?
Take the Lookout Mobile app triagetoday mentioned above. Now, I'm only using this app as an example and am not saying that there is anything wrong with the app as I've not used it. But it makes a good example.
The app wants permissions for everything. Most user comments are positive, there are a few that say that they cannot uninstall it which is worrying but generally the comments are favourable. But how can I be sure that this app wasn't written to harvest data on the pretence that it's protecting your phone? In fact there is even one comment suggesting just that. I can't see anywhere where I can look at the source code so is it a case of blind faith and hope the publisher is not malicious?
After reading many reports about huge increase in malware on Android and data leakage it's a real concern on how to protect your data.

Any way to get rid of ads when not rooted ?

I know an app that blocks ads but it needs root so I was wondering is there a way to hock them without root.
Sent from my HTC Sensation 4G using XDA App

Nope.avi
Anyway, the blocking of ads is illegal, I believe...or at least frowned upon. It's the same as pirating an app.

I'm afraid not my friend

redbullcat said:
Nope.avi
Anyway, the blocking of ads is illegal, I believe...or at least frowned upon. It's the same as pirating an app.
Click to expand...
Click to collapse
How is it illegal? The wouldnt be adblock extention for google Chrome or adfree on the market. It's far from pirating, you choose NOT to use instead of USE.

tinky1 said:
How is it illegal? The wouldnt be adblock extention for google Chrome or adfree on the market. It's far from pirating, you choose NOT to use instead of USE.
Click to expand...
Click to collapse
But blocking of ads in adblocker isn't the same...you don't need any form of root for it.
Android adblocking is different, because you need root to do it and it deprives developers of money...ads are only ever in free apps, and most of the time those apps have a paid form. If you don't like the ads in an app, go buy the app. Don't be a cheapskate by just blocking the ads.

redbullcat said:
But blocking of ads in adblocker isn't the same...you don't need any form of root for it.
Android adblocking is different, because you need root to do it and it deprives developers of money...ads are only ever in free apps, and most of the time those apps have a paid form. If you don't like the ads in an app, go buy the app. Don't be a cheapskate by just blocking the ads.
Click to expand...
Click to collapse
In the US rooting a phone is not illegal.
http://www.androidguys.com/2010/07/26/rooting-android-phone-longer-crime/
Blocking ads is no different than muting my TV when ads come on, or using an ad blocker in a web browser. A developer also developed the ad blocker.
You may not like it, or the people who use them, but it's not illegal.

samnada said:
In the US rooting a phone is not illegal.
http://www.androidguys.com/2010/07/26/rooting-android-phone-longer-crime/
Blocking ads is no different than muting my TV when ads come on, or using an ad blocker in a web browser. A developer also developed the ad blocker.
You may not like it, or the people who use them, but it's not illegal.
Click to expand...
Click to collapse
Might not be illegal, but it's not right.
It's a completely different matter from muting the TV when ads come on. With adblocking in apps, you are pretty much stealing from the developer. As I said, if you want to get a version of the app without ads, pay for the app and support the developer. Don't be a complete cheapskate and just block the ads.

And how do you suggest people outside the US can get rid off the ads in Angry Birds as an example?

Get Market Enabler (can't do that if we're not rooted, sadly ) or use the Amazon Appstore outside of the US by following this guide: http://android.modaco.com/content/s...tore-from-outside-the-us-including-paid-apps/

redbullcat said:
Might not be illegal, but it's not right.
It's a completely different matter from muting the TV when ads come on. With adblocking in apps, you are pretty much stealing from the developer. As I said, if you want to get a version of the app without ads, pay for the app and support the developer. Don't be a complete cheapskate and just block the ads.
Click to expand...
Click to collapse
So by watching tv without looking at the ads I'm stealing from the networks right?
Good luck with that.
If your only means to compensation is through methods most consumers feel negatively about then you are in trouble to begin with. People will always support products and services they find value in. Annoying ads(not all ads) in applications are an impediment to my finding value in them. Every content creator says the same thing about their content and ad revenue - tv, radio, developers, bloggers, newspapers ad infinitum. It's just one method of generating revenue. There are others which somehow manage to make money.

redbullcat said:
Get Market Enabler (can't do that if we're not rooted, sadly ) or use the Amazon Appstore outside of the US by following this guide: http://android.modaco.com/content/s...tore-from-outside-the-us-including-paid-apps/
Click to expand...
Click to collapse
But the devs need that ad money! You're suggesting people steal from those poor devs!
Maybe the app is not priced at its true value and they need to make up the difference in ad rev.

redbullcat said:
Get Market Enabler (can't do that if we're not rooted, sadly ) or use the Amazon Appstore outside of the US by following this guide: http://android.modaco.com/content/s...tore-from-outside-the-us-including-paid-apps/
Click to expand...
Click to collapse
Can you buy Angry Birds from Market in the US? I can download it, but not buy it to get rid of the ads.
And do you really mean I have to go to hell and back again just to support a stupid company that doesn't allow me to buy the game because I don't live in the US?
I have Amazon Appstore and know it's a pain in the ass to get working. Made it work just to get rid off commercial actually, but I mean people shouldn't have to go trough such a hassle to be legal. I buy the apps I can, but for the rest I used to use adfree.

redbullcat said:
Might not be illegal, but it's not right.
It's a completely different matter from muting the TV when ads come on. With adblocking in apps, you are pretty much stealing from the developer. As I said, if you want to get a version of the app without ads, pay for the app and support the developer. Don't be a complete cheapskate and just block the ads.
Click to expand...
Click to collapse
Not always possible, if the developer doesn't make something available ad free in your country, eg Angry Birds.
I know there are ways around it, Market Enabler for example, but it shouldn't have to be that way!
Whilst blocking the ads isn't nice on apps from some developers, sometimes they should offer an AdFree version or not include so many ads. If I developed a free Android app, the ads just ruin it in my opinion.

Lads, what are you arguing about? IIRC no one gets money from ads if its not clicked on. And who clicks on ads? So adfree is there just to take away visual presence, it's not stopping you from clicking an app, which no one does anyway.
Sent from my HTC Sensation Z710e using XDA App

redbullcat said:
Might not be illegal, but it's not right.
It's a completely different matter from muting the TV when ads come on. With adblocking in apps, you are pretty much stealing from the developer. As I said, if you want to get a version of the app without ads, pay for the app and support the developer. Don't be a complete cheapskate and just block the ads.
Click to expand...
Click to collapse
I think your logic is flawed.
First, I'm pretty sure developers only get paid if I actually click on an ad. So by your logic not clicking is stealing. If I never click then blocking the ads or not has no financial impact on the developer, thus isn't stealing.
Second, you can say muting a TV ad isn't the same, but I think it is. So is fast forwarding through ads with my DVR, and tossing junk mail without reading it, and signing up for a do-not-call list blocking telemarketers.
Third, clicking or not clicking or blocking ads costs me nothing, so I'm not a cheapskate no matter what I do. If a developer creates a limited app and I want the extra features I pay for it. So I do financially support developers who create apps I want.
I've contributed to the thread hijack enough. It's ok if we agree to disagree.
Note: My phone isn't rooted so I don't block ads, but I do on my PC, and I do all the other ad avoidance things I mentioned.

pointless - mods close this thread
Sent from my HTC Sensation 4G using Tapatalk

redbullcat said:
Might not be illegal, but it's not right.
It's a completely different matter from muting the TV when ads come on. With adblocking in apps, you are pretty much stealing from the developer. As I said, if you want to get a version of the app without ads, pay for the app and support the developer. Don't be a complete cheapskate and just block the ads.
Click to expand...
Click to collapse
To be honest the Dec should make a paid version with more features than just remove ads. I block ads because I don't want animated gifs of mobile contracts plastered on my phone. If an app is good I buy it. I don't pirate them but equally I wont pay just to remove ads. Also there are those apps that have ads and no way to pay to remove them.
Good devs get paid for their work. Simple as that. Just like good films get bought and good computer games sell loads too.
Sent from my HTC Desire using XDA App

There is nothing noble about ads. Ya Devs should be paid, but forcing ads on someone is a horrible way to make that money.
All ya have to do is go into Airplane mode.... And ads go bye bye

Well it seems I'm getting flamed here. But I still think you shouldn't rip devs off for their work by just blocking the ads.
I agree to disagree with you guys and I think a mod should close the thread

Well Damn! I wasn't trying to start a war. Don't get me wrong I pay for the apps I use its just those few that you can't enjoy because half it screen is covered in bs.
Sent from my HTC Sensation 4G using XDA App

security concerns migrating from iOs to Android

As title suggests, coming from a so called "clean" iOS environment to Android, my main concern how susceptible is my data to being stolen. I have no (current) plans to root my next phone and will be used mainly from business, but from what I have read in the past even google play store apps have been to known to have malicious content. Am I worrying too much ? I do carry sensitive work data on my iPhone.

applefag said:
As title suggests, coming from a so called "clean" iOS environment to Android, my main concern how susceptible is my data to being stolen. I have no (current) plans to root my next phone and will be used mainly from business, but from what I have read in the past even google play store apps have been to known to have malicious content. Am I worrying too much ? I do carry sensitive work data on my iPhone.
Click to expand...
Click to collapse
As long as the apps you install are from known sources (i.e. Play Store) you don't need to worry. Also every time you download an app check the permissions. If you think that the app shouldn't have those permissions then don't download it. Finally for safety reasons never install any apps from unknown sources (i.e. outside of Play Store) unless you trust the developer.
If you still find yourself worrying read this.

applefag said:
Am I worrying too much ?
Click to expand...
Click to collapse
Yep
I think you won't install any app outside Google Play so install apps that you know and you won't need to worry. FYI http://en.wikipedia.org/wiki/Security-Enhanced_Linux
kalpetros said:
Also every time you download an app check the permissions. If you think that the app shouldn't have those permissions then don't download it.
Click to expand...
Click to collapse
Well only if you are sure. Sometimes apps need permissions that aren't justified for some people.

for the open nature of the android ecosystem, it is somewhat normal that you will have to be careful though there are several different techniques, i use this the most.
Root your phone, install xposed framework and install xprivacy. here is a review of what it does http://www.xda-developers.com/android/manage-individual-app-permissions-with-xprivacy/ . I know the installation pprocess may seem daunting, but it is easier than you think this module wil allow you to block apps of certain permission. IE. you can block location service for all the apps on your phone so that no app can get your location. There are bunch of other permissions that you can block like access to contact, gallery etc
My question to others is : Is antivirus application on android worth it? I mean can it protect me from real time attaks and malwares??

SaffatBokul said:
My question to others is : Is antivirus application on android worth it? I mean can it protect me from real time attaks and malwares??
Click to expand...
Click to collapse
Not useful IMO. FYI I remember this article.

User sensibility is your best defense. Don't install apps not from the market. Only install apps with a lot of positive comments.
I would advise again rooting your phone. It's true that there are ways to block apps from accessing your private data on a rooted phone, but the additional vulnerability from unlocking your bootloader and rooting is not worth it. Just stick to apps from major developers.

snapper.fishes said:
User sensibility is your best defense. Don't install apps not from the market. Only install apps with a lot of positive comments.
I would advise again rooting your phone. It's true that there are ways to block apps from accessing your private data on a rooted phone, but the additional vulnerability from unlocking your bootloader and rooting is not worth it. Just stick to apps from major developers.
Click to expand...
Click to collapse
I agree, rooting your phone comprimises your security even if you do it to install security apps.

Primokorn said:
Yep
I think you won't install any app outside Google Play so install apps that you know and you won't need to worry.
Click to expand...
Click to collapse
Unfortunately, new apps in Google Play are rarely verified by Google staff, so there is still always a possibility of trojan or other malware.

Adaway alternative for un rooted phones?

I just try to not root my phone But the ads are really annoying.
Adaway helped me a lot in the past, but the phone has to be rooted.
Is there any alternative available?

Adguard, you can buy the lifetime license for around 4€ when paying in the russian currency.
Add another 2€ for tasker if you're annoyed of the little key symbol.

enlan said:
Adguard, you can buy the lifetime license for around 4€ when paying in the russian currency.
Add another 2€ for tasker if you're annoyed of the little key symbol.
Click to expand...
Click to collapse
Thanks...Tasker I already got.
Cheers man

svenvaeth said:
I just try to not root my phone But the ads are really annoying.
Adaway helped me a lot in the past, but the phone has to be rooted.
Is there any alternative available?
Click to expand...
Click to collapse
http://www.xda-developers.com/netgu...ntrol-over-apps-internet-access-without-root/
blocks adds with the free version unlike adgaurd. Need the github version to actually block ads.

Thanks guys, nothing is really comparable. But I ll try it a little more.

https://block-this.com/ - Free local VPN like AdGuard, but without the insane battery drain.

I tried the 3 apps you suggested:
Atguard
Netguard (from Gifthub)
Block this
But no app could block the ads inside my newspaper app. It is called "Schweiz News" just in case you wanna check it. Quite depressing. With root and adaway, this ads were immediately blocked.

svenvaeth said:
I tried the 3 apps you suggested:
Atguard
Netguard (from Gifthub)
Block this
But no app could block the ads inside my newspaper app. It is called "Schweiz News" just in case you wanna check it. Quite depressing. With root and adaway, this ads were immediately blocked.
Click to expand...
Click to collapse
I just tried that news app with block this and it blocked the ads at the bottom. Block this is the only free app that can block ads in apps, the others you need to pay for.

peachpuff said:
I just tried that news app with block this and it blocked the ads at the bottom. Block this is the only free app that can block ads in apps, the others you need to pay for.
Click to expand...
Click to collapse
Hey, you are right. I just rebooted my phone and now the ads are gone.
Thanks a lot. That's really cool now =)
Cheers
Sven

enlan said:
Adguard, you can buy the lifetime license for around 4€ when paying in the russian currency.
Add another 2€ for tasker if you're annoyed of the little key symbol.
Click to expand...
Click to collapse
One more thing. HowHow can I get rid of the key symbol with Tasker?
I never really used it.

I'm using Adguard since i bought my S7 (don't wanna root it just yet). Didn't notice any major battery drain with Adguard but i will try Block-this for a few days... Just installed it, the app doesn't seem to have any options :/ but nevermind...

Kemby13 said:
I'm using Adguard since i bought my S7 (don't wanna root it just yet). Didn't notice any major battery drain with Adguard but i will try Block-this for a few days... Just installed it, the app doesn't seem to have any options :/ but nevermind...
Click to expand...
Click to collapse
Nope, no options....but it does its job :good:

For browsers I highly recommend "adblock browser". I doesn't address ads in other apps but it does a fantastic job blocking them while surfing the Internets - and you can get it free from the play store. (No extra setup required. Install and launch) great for say... streaming video sites that traditionally would throw a ton of pop ups and redirects at you.

peachpuff said:
I just tried that news app with block this and it blocked the ads at the bottom. Block this is the only free app that can block ads in apps, the others you need to pay for.
Click to expand...
Click to collapse
Couldn't agree more! The only reason I used to root my phone was to block annoying ads and there was no effective way to block in-app ads without a root until I found block-this. This little freebee works like a charm effectively blocking both in-browser and app ads. Few times I do randomly see ads on some webpages, but I can live with that. The only annoying part is that there is a persistent key icon and VPN notification in the notification area but I can live with this, given the comfort this freebee brings without any root.

cingulum said:
Couldn't agree more! The only reason I used to root my phone was to block annoying ads and there was no effective way to block in-app ads without a root until I found block-this. This little freebee works like a charm effectively blocking both in-browser and app ads. Few times I do randomly see ads on some webpages, but I can live with that. The only annoying part is that there is a persistent key icon and VPN notification in the notification area but I can live with this, given the comfort this freebee brings without any root.
Click to expand...
Click to collapse
A guy here mentioned that you can remove the symbol it with Tasker. I tried this, but I have no idea how to do it.

copenhagen said:
For browsers I highly recommend "adblock browser". I doesn't address ads in other apps but it does a fantastic job blocking them while surfing the Internets - and you can get it free from the play store. (No extra setup required. Install and launch) great for say... streaming video sites that traditionally would throw a ton of pop ups and redirects at you.
Click to expand...
Click to collapse
try nochromo browser. search xda. it's chromium, so just like chrome.

You can not remove the VPN key icon without being root. Even with tasker.

enlan said:
Adguard, you can buy the lifetime license for around 4€ when paying in the russian currency.
Add another 2€ for tasker if you're annoyed of the little key symbol.
Click to expand...
Click to collapse
How do you remove the key with tasker?

I see a lot of tasker apps at store.....
A little help please!

Which of this apps affect LESS the battery life and performance (overall and internet speed)?
Atguard
Netguard (from Gifthub)
Block this
Thanks!

Current no root firewall options

I am hoping to get some help in figuring out what the best alternatives are to Droidwall. I have used that app for years on various phones but I now am in a situation where I cannot root my new handset mostly due to the fact I don't want to void the warranty.
I am on an MVNO and I want to restrict all data with the exception of a few programs (MMS, Opera Mini, Uber, and K9 mail) when the phone is not on Wifi and I am thus paying for data. I don't mind having to toggle it on or off when i switch to wifi. I know there are a few firewall apps that can work but the discussions i found on them are from years back. I don't care if the firewall is a paid app but I do not want one that runs ads or phones home to the developer.
And my phone is running 6.0.1 Marshmallow
Thanks

NetGuard: http://forum.xda-developers.com/android/apps-games/app-netguard-root-firewall-t3233012
I do recommend to buy the pro features to support this great dev and he added ads a few months ago.
Free and open source app.

Primokorn said:
he added ads a few months ago.
Free and open source app.
Click to expand...
Click to collapse
So the developer added in-app ads to Netgaurd to support the program's costs because its free? That seems to defeat the purpose of what i want because i do not want any apps other than the ones i noted drawing down data. Does the Pro Version take away in-app ads, there is no mention of that being a feature in the developer notes.
If that isn't an option then it would be a deal breaker.
I am looking for something as close to droidwall as possible. That is unobtrusive and shuts down compete data transfers on all programs other than the ones I allow.

I'm using AFWall+ and I didn't install NetGuard for a while.
Feel free to ask in the XDA thread and I guess ads are removed with the pro license key.

Majesk said:
So the developer added in-app ads to Netgaurd to support the program's costs because its free? That seems to defeat the purpose of what i want because i do not want any apps other than the ones i noted drawing down data. Does the Pro Version take away in-app ads, there is no mention of that being a feature in the developer notes.
If that isn't an option then it would be a deal breaker.
I am looking for something as close to droidwall as possible. That is unobtrusive and shuts down compete data transfers on all programs other than the ones I allow.
Click to expand...
Click to collapse
I recommend you NetPatch Firewall created by me.
It was just released, maybe not very stable.
Feel free to contact me if you have problems.
Download it in Google play store.