Database Info

Android Town

Ok, Android Town is now an obsolete name and application on the market. It was renamed to Peeples. Peeples is a seperate app on the market so you would need to download that one. It uses the same DB as Android Town so all your information is saved.
Peeples is a social community application which is location based. It enables users to see other users of the application on the map and strike up a conversation with them. Privacy options are also available.
So far the application has over 11k users.
Peeples has the added options of:
- uploading profile pictures and avatar through the application
- sending files from SD card with messages as attachments (5Mb limit for now)
Try it out and let me know what you think.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Running it on a G1 running CM 4.2.15.1.
Noticed a few things.
1) Registration via App Only (not a big deal, just no indication on the site as such)
2) Registration within the app resulted in "passwords do not match" ANY time I left a password field even when they did match
3) Map reacts slowly when being moved or zoomed in/out
As there's no one yet in my area run ning this, I haven't tested many of the other features. I'll report as I experience more.

Thanks for giving it a try. Hopefully some more US citizens register so you'll be able to interact with them. 5000 kms (around 3100 miles) is the biggest radius so far. Most of the users are in Europe at the moment.
Thanks for the heads up on the registration part. I will definitely try to improve it.
I was also thinking about adding content from social networks if users have any (FB, Twitter, FLickr...). What do you think about that?
And thanks again for testing

Have yet to install the newer release for testing, but looking forward to it.
The concept of linking other social media is a fine idea, provided that there are switches set in place to allow for selected/unselected status. I know plenty of users who would want to publish information for their Facebook, but may want to avoid doing so on other networks.
Either way, yeah, further integration with social media is a fine idea.

ill install and test tmmrw probably

seems pretty cool ill make sure to throw it on my EVO as soon as it freakin comes out

Added to my G1. Will let you know what happens.

Cheers. I sent you a msg in the app as well. Can you test how the send message screen looks on lower resolution please?

Testing it out now , but not many *users* in norway.
I'm the only one

Application is still in its's early days. If you choose a larger radius you will see more users (around 45 accross the world right now)

Application has just been published to the market as well, under the Social category of applications.

How about making a public chat channel that every one is in , when we connect . And late maybe switch it so it will be local / country only.
All depending on how many users this app gets

That's actually a very good idea. I'll be sure to do that as soon as possible...shouldn't be that hard (at least for a single one for starters)

Good nice app!

Already tweeted this. I'll Buzz it as well.

Private Messages look fine on the G1. No issue there.
I'll be comparing my experience to my friend's on the Nexus. Hopefully provide you some better feedback concerning how this works with the G1's older hardware.
Edit: First things we noticed, "Passwords do not match!" error is still present when registering via the app, even if the passwords do match. This issue has been replicated on the G1 and the Nexus 1.
Other noted issues:
Attempt to "Add as friend" on the G1 results in a toast of "Error". No other information contained in error.
Sending a picture on the G1 took about 1 min 45 seconds from time of shot to "Picture sent!" toast showed up.
I'll see what I can do to provide better information (such as screenshots, etc)
Let me know what else you could use.

Just a thought, an option to register via the desktop(internet) as well.
i couldn't figure out how to register until I found it as an option in settings when the app was open.
Doh.
It's lonely in the south of england......

Working on the mentioned bugs as we speak. Will probably release an upgrade today that might fix a few things.
@squirreleater: the internet register option is definitely needed. I agree.

anyone from germany?
feature request: please include option to add user with the username directly so that people from here can invite eachother other than searching on the map

install
Wont install on my Hero ??

ChevronLab Tokens

For over a week now I keep reading this on ChevronWP7 Labs:
The sale of tokens has been put on hold until more arrive, thanks for your patience.
Is it just me or is there a recurring problem with the Tokens?
It's alright if InteropUnlock gets fixed, thanks to some very hard work by Heathcliff and others....
But if I can't get ChevronUnlocked because they aren't giving out 'tokens' , well that's just annoying really isn't it?
Any one else having these issues?

Not good communicator
Not only that, but they don't reply to postings in their forum. If anyone posts a question, they might, on rare occasions, get an answer from another poster. I have to say that I am unlocked via token and appreciate that, but as far as being transparent and keeping people up to date, these developers are doing a very poor job. There are requirements to use this service that appear no where on the site other than pointing to the forums or twitter, they do a horrible job of setting expectations and, in general, are not setup to provide customer support.

Looked again today and still no tokens..
Did they close down and not tell me or something?

well better flash a DFT unlocked ROM than to trying to Unlock, its far better, u can install xap files using IE9 within WP7.

maybe they lack of manpower.

I'm also waiting for a week or more, checking several times every day.
So anoying that they are not selling tokens

December 12th?
They tweeted on their web site that more would be available December 12th.

A thought occured to me that MS might be clamping down on the release of these (they have to allow it with Chevron). The intent of these tokens was to allow people to play with app development and NOT allow a method for getting Interop-Unlock.
If MS is following any of the MULTIPLE web postings on how you can IU your phone but need to be Dev or Chevron unlocked first they probably don't care much for that (MS does not want people accessing native code and registry; that is apparent from the lock downs 2nd gen devices have plus the continued clamping down they have done with each new generation).
I wouldn't be surprised if
a) They stop issuing tokens
b) They revoke tokens (and give refunds)
There has been too much publicity on using the Chevron tokens to open up your phone to allow the various Interop-Unlock methods to be used.

LiFePo4 said:
A thought occured to me that MS might be clamping down on the release of these (they have to allow it with Chevron). The intent of these tokens was to allow people to play with app development and NOT allow a method for getting Interop-Unlock.
If MS is following any of the MULTIPLE web postings on how you can IU your phone but need to be Dev or Chevron unlocked first they probably don't care much for that (MS does not want people accessing native code and registry; that is apparent from the lock downs 2nd gen devices have plus the continued clamping down they have done with each new generation).
I wouldn't be surprised if
a) They stop issuing tokens
b) They revoke tokens (and give refunds)
There has been too much publicity on using the Chevron tokens to open up your phone to allow the various Interop-Unlock methods to be used.
Click to expand...
Click to collapse
I wouldn't be surprised if that's why 7740 update come out of no where all of a sudden.

I don't think that MS is putting the kaibash on token sales. You didn't see the tweets?
For all other issues, please email us at [email protected]. The PayPal dispute process is not for tech. support. ^RR
29 Nov
We're working on switching payment gateways prior to re-opening token sales. Possible ETA: December 12. ^RR
29 Nov
Good news, we're switching payment gateways soon. This means those having trouble with PayPal won't have trouble anymore. ^RR
21 Nov
Click to expand...
Click to collapse
They're like, a three man-team overwhelmed with a tsunami of unlockers who've been waiting for this, and lo-and-behold, there are: a) technical issues they didn't anticipate with different phone models/versions and worse b) clearly real problems with managing payments/purchases and customer service/payment support.
So they were probably naive about how much work it would be to deal with people who have trouble with their unlock. People doing things like: issuing a chargeback to Paypal (who not only reverses $9, by the way, but then hits then with another $10 'dispute fee' no matter the outcome... and eventually does massive fund freezes without explanation or recourse. Anyone who's used PayPal for any but smallest, least-refund-prone business has been there.) If they'd never undertaken something like this before, it wouldn't surprise me that they hadn't anticipated those types of problems beyond the technical.
Assume they're trying to get a merchant account opened.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
whyJoe @ChevronWP7 I'm guessing what's going on is you guys have also discovered how much #PayPalSucks. / @ChrisWalshie @longzheng @paypal 7 minutes ago
in reply to ↑
@WithinRafael @whyJoe @ChevronWP7 @ChrisWalshie @longzheng Yep, and how slow banks are.
Click to expand...
Click to collapse

Chevron token is frozen, tried to contact them no reply, haven't seen any info on what to do, and links?

To root or to app-root?

Dear all: This is my first post. I spent two days reading posts concerning the highly anticipated unlocking of the S7 G930T bootloader. It sounds as though the developers at XDA and anot entity known as Chainfire are chomping at the bit in expectation -- TWRP is written and waiting at the border. That is awesome and I wish you all the best of luck. There are several apps that I wish to install on my phone. Most of them address device security (firewalls, etc...) and secure communications. Thank you in advance for your many hours of work.
My question is one of methodology and the ultimate goals of device rooting using the Android 6+ OS. Why not use a virtual root as a cheap and tawdry temporary work around? A similar method appears to have worked well for a Corbin Champion who create Gnuroot. His app creates rooted Linux environments on Android devices and requires no Android root.
Will this work for applications that require a rooted Android? Is my question rooted in reality? What are the limitations of a rooted app or virtual root system?
Why would anyone want to use a cheap trick? Is it possible that using an app or a virtual root may avoid potential crashes and instabilities? Samsung may have locked the bootloader to prevent or slow the use of the S7 G930T in illegal activity. Wouldn't the development of an app for non-developers all us to benefit from many wonderful apps while preventing non-developers from engaging in less than ethical hacking with root as a lockpick?
I also read an XDA post concerning chain-loading an OS from a USB device. This also seems like a clever work around. It may also be an effective security tool that may allow a cellular device to be driven by a portable OS. It may allow one to protect device data and USB-OS data while enjoying network communications. What are your thoughts?
If I could pull this off on my own, I would do it and release it for free since that seems to be the thing to do -- to contribute in an academic manner to the karma/knowledge pool. I hope that capable hands consider a project like this to be worth while. If is already done, please point me in the right direction.
Thanks.
Cheers!

Dear all:
After I posted and asked questions that I though were interesting, I continued to read and look for helpful apps.
I lot of new apps appeared in the Google play store. Or maybe I just had not paid attention well enough before.
However the coincidence occurred, the most useful apps were the IP tools such as trace and location search.
Before that day I never once obtained an IP trace result and location that was at all useful or even remotely interesting. This time I was able to summon the leviathan.
The corresponding IP address to a machine that was and may still be in constant communication with my Samsung Galaxy S7:
172.217.3.238
The corresponding GPS coordinates:
37.4192000, -122.0574000
In the links below you will see that this corresponds to an office building on the property of the Moffett Federal Air Field near Mountain View and Stevens Creek California. How did that happen. My attorney doesn't know either. He says that no one is looking for me or is in great want of a chat with me. I am a medical student. ????
Ok. So I sent a complaint to the California State Attorney General Kamala Harris... several time by fax, online portal, and email. I called her office to confirm. Her staff confirm, don't confirm, and say that they have no way of tracing documents received by their server. So my attorney called and emailed.
Anyway... this smells of phone spoofing and phone trapping again so I will have to fight just to submit a complaint.
Links to the IPtrce and IP location searches.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
The link to my complaint to California Attorney General Kamal Harris.

Why wond the images post?
I am not sure what went wrong, But the image files are not visible.. How do I correct this?

Ahzreal2 said:
I am not sure what went wrong, But the image files are not visible.. How do I correct this?
Click to expand...
Click to collapse
I'm not sure about this whole thread... That IP is Google, which has nothing to do with your post about a 'virtual root', OS on USB, or whatever.
See this: http://172.217.3.238.ipaddress.com/

Blu, maybe Huawei and ZTE privacy "bug"

Firmware (made by Shanghai Adups Technology Co. Ltd) that "calls home" was found installed on chinese phones sold in US:
http://www.kryptowire.com/adups_security_analysis.html

SoNic67 said:
Firmware (made by Shanghai Adups Technology Co. Ltd) that "calls home" was found installed on chinese phones sold in US:
http://www.kryptowire.com/adups_security_analysis.html
Click to expand...
Click to collapse
Not just "Chinese" phones, else why are they contacting Google?

Well, at least my phone contacts Google because I have a Google account. I choose to allow that when I input my gmail address. I choose to trust Google with my contact lists and calendar and whatever. I choose when to update the apps or not.
This chinese spyware is embedded in firmware (trusted app, capable of escalation) and on a totally different level of what it can do, you could read it in the article. Or not. The article has even a comparison with a similar spyware from 2011:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

SoNic67 said:
Well, at least my phone contacts Google because I have a Google account. I choose to allow that when I input my gmail address. I choose to trust Google with my contact lists and calendar and whatever. I choose when to update the apps or not.
This chinese spyware is embedded in firmware (trusted app, capable of escalation) and on a totally different level of what it can do, you could read it in the article. Or not. The article has even a comparison with a similar spyware from 2011:
Click to expand...
Click to collapse
No I mean the security company Kryptowire are contacting Google, along with Blu. Does that mean a Google phone is affected or is it just as they have a sales channel? Probably the latter but it does raise a lot of questions about exactly & how much control they have of the manufacturing process across their supply chain. Whether it's the the actual phone or individual chips being programmed. And is there any attempt by companies that make products in places like China to check the phones that actually come off the line for compromises. I doubt it but it seems to be a security risk to me.
Of course we all have to trust someone or some company in some way as most things are not open. I to trust Google with much of my data & security.
(I have read several articles on this, but still not much info, all seem to be a rehash of the press release from Kryptowire)

Google code is not affected. This is part of the specific firmware that manufacturer puts in the phone and it is allowed to even be updated OTA.
Meanwhile if I root my device is considered "unsafe"... But that's the only way to see those files and act to remove them.
As much as I hate Apple, I am more and more tempted. At least they control all the manufacturing chain.

Can I load a custom firmware on my phone to eliminate this?

If you can unlock the bootloader, yes.
At the minimum you need root, to be able to disable/eliminate the software. The original article that I have linked has the details of the software names:
com.adups.fota.sysoper
com.adups.fota

Hi guys,
I knew that by now you have all heard about this news the Chinese budget android devices are secretly sending users’ data to China...
I thought I'll ask amongst the experts anyway how much of a thread could it actually be, as I'm a new P8 user (previously only had Samsung's)
What bothers me is the fact news comes from a private contractor to US govt which aren't really fair & square on the privacy issues in the first place, and apparently the 'feature' was 'accidental' discovered...really?!?
Considering the timing and situation on the market, seems to me to be a competition battle...but it's just my thought
Anyway...Do you think a simple root is enough to get rid of such 'back door' code?
Looking forward to your input
PS. articles available at:
http://www.theverge.com/2016/11/15/1...-text-messages
http://www.nytimes.com/2016/11/16/us...rity.html?_r=0
and original report http://www.kryptowire.com/adups_security_analysis.html

...and not two days later another news emerges... hehe just when some may have thought they are any different
https://interc.pt/2gkn4dz

M4ti said:
Hi guys,
I knew that by now you have all heard about this news the Chinese budget android devices are secretly sending users’ data to China...
I thought I'll ask amongst the experts anyway how much of a thread could it actually be, as I'm a new P8 user (previously only had Samsung's)
What bothers me is the fact news comes from a private contractor to US govt which aren't really fair & square on the privacy issues in the first place, and apparently the 'feature' was 'accidental' discovered...really?!?
Considering the timing and situation on the market, seems to me to be a competition battle...but it's just my thought
Anyway...Do you think a simple root is enough to get rid of such 'back door' code?
Looking forward to your input
PS. articles available at:
http://www.theverge.com/2016/11/15/1...-text-messages
http://www.nytimes.com/2016/11/16/us...rity.html?_r=0
and original report http://www.kryptowire.com/adups_security_analysis.html
Click to expand...
Click to collapse
who cares who finds it, so long as someone does. Rooting and deleting all the relevant files should work, I guess, but possible could cause some other issues, who knows.

Its pretty funny since most of the people reading those articles doesn't really understand it very well....people quickly jump into conclusion and think that Chinese Smartphone device secretly sending private information to China....
If you read the articles very carefully then you will realize that Shanghai Adups Technology Co. Ltd is a company that provide FOTA services, that means and manufacturers that use their services for OTA updates are likely to effected with the spyware not just Chinese Smartphone....their market share is exceeding 70% across over 150 countries and god know how many devices manufacturers & services operator have been using their services for OTA updates...

Hacked Android Phone

I have been hacked several times on my last two phones.
The functionality of my social media and email apps has been changed, causing data loss and compromising my online accounts. The type of connection is irrelevant.
Based on the symptoms, it appears that my apps may have been cloned and are being used to piggy-back, on my credentials, everytime I login.
What can I do to stop this, or make it so difficult for the attacker, that he gives up the chase?

What device/OS version?
Get the social media apps, shopping apps etc off the phone.

I would say copy your data (pics, music, docs etc.) out of your phone and in to some external storage, then do a full wipe/factory reset using some RUU. Odin tars, etc., re-install whatever apps clean from play store, or from apks that you download from reputable sources like APK Mirror etc., not restored from some Titanium backups, then copy your personal data back to your phone - oh, and before anything, change your passwords for ALL online accts everywhere using some clean device, NOT your compromised phone. You're looking at hours of work, but I don't think there is any other way to be sure.
Edit: If you use Play Store, you can go to your Google acc and see the approved Devices in Security section (again, while using a clean device), maybe you'll spot some device there which is not yours - then you can remove it.

Blackview A80 Plus.
I'm in the process of replacing the apps with web versions.
I've also added an app-locker, that forces a pin-code to be reentered everytime the app or window goes to background.
I'm also cutting the internet connection when my phone starts running slow.
The biggest problem is my emails. These have sometimes been destroyed during creation, the drafts and other emails deleted.
My bank accounts may also have been affected.

Deleted Google account on phone. Back up all critical data. Factory reset.
Reset Google password* with one that is at least 15 digits including symbol$ and letters. Write it down. Reload with caution; it's likely you installed the malware yourself at some point. Be helpful if you knew how it happened. This is rare or should be. Do not let other use your phone unless you're there.
*as imonxda said... do not reset the passwords on the infected device. May setup a new Google Gmail account to use as the main account backup contact.

I will do everything you suggest.
*Also, assuming this is an APT and the phone was coded to behave this way, in my juris..., what can I do to frustrate the attacker, to make piggybacking on my logins more of a chore and in general to increase his workload to the point where he can't really cause me anymore harm, or at least not very much.
I've done resets before and this is my second phone with this issue.
My last phone was a Xiaomi Redmi 8a.
I'm living in the pacific and my country is a satellite of A'[email protected] and they're just nuts...

MySecDev said:
I will do everything you suggest.
*Also, assuming this is an APT and the phone was coded to behave this way, in my juris..., what can I do to frustrate the attacker, to make piggybacking on my logins more of a chore and in general to increase his workload to the point where he can't really cause me anymore harm, or at least not very much.
I've done resets before and this is my second phone with this issue.
My last phone was a Xiaomi Redmi 8a.
I'm living in the pacific and my country is a satellite of A'[email protected] and they're just nuts...
Click to expand...
Click to collapse
Use a VPN, always use HTTPS.
Vet all apps. Keep all downloads in the download folder until vetted. Check download folder daily for anything that doesn't belong, if so delete, do not open.
Use this settings mode:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Intersting new development...
I emailed the Ooßsa Emb' here recently and they asked for a phone number. They didn't really need that to communicate with me, since they already had my email. Like a dope, I gave them one of my mob' numbers. That was about fifteen days ago. That's when I started noticing my phone's volume control lowering itself, on its own.
I should have told them that I didn't have one or that my phone was broken, I was out of minutes, etc.
Now, I get lots of ads for SKorean games and when I go into settings, to verify country settings, Play Store asks me if I want to change to the SKorean Play Store.
I've been to SKorea. They're an Ooßsa moorc state.
Also, the app locker I was using started popping-up pin entry windows continuously, until I had to restart the phone. This happened at least twice. This demonstrated unambiguously that the attacker had complete control of my phone.
Will a fact-reset change my IMEI? I think I read somewhere that it will.
The moral of the story is, never give the vog your phone number
I suppose you can give them the number of someone you don't like ;-)

MySecDev said:
Intersting new development...
I emailed the Ooßsa Emb' here recently and they asked for a phone number. They didn't really need that to communicate with me, since they already had my email. Like a dope, I gave them one of my mob' numbers. That was about fifteen days ago. That's when I started noticing my phone's volume control lowering itself, on its own.
I should have told them that I didn't have one or that my phone was broken, I was out of minutes, etc.
Now, I get lots of ads for SKorean games and when I go into settings, to verify country settings, Play Store asks me if I want to change to the SKorean Play Store.
I've been to SKorea. They're an Ooßsa moorc state.
Also, the app locker I was using started popping-up pin entry windows continuously, until I had to restart the phone. This happened at least twice. This demonstrated unambiguously that the attacker had complete control of my phone.
Will a fact-reset change my IMEI? I think I read somewhere that it will.
The moral of the story is, never give the vog your phone number
I suppose you can give them the number of someone you don't like ;-)
Click to expand...
Click to collapse
You need to increase the security on your accounts. A phone number shouldn't be enough info to allow someone hack you by alternate logon to your account(s).
You're not a high revenue target so what they're using mustn't take too much time; it's an obvious hole in your security.
Someone using a Stingray etc could do that though. You pi$$ off a LEO or someone in the DOD, NSA, FBI, etc really bad?