App security - Security Discussion

How would I know if an app is using https in its webview? Is there any method apart from reverse engineering?

srbjain said:
How would I know if an app is using https in its webview? Is there any method apart from reverse engineering?
Click to expand...
Click to collapse
Just do some network sniffing, check here: http://www.androidtcpdump.com/
You can use the pcap file with Wireshark and check for the SSL/TLS protocol

Related

[Q] VPN

How to set up a vpn on android. does it hide my ip address? I want to access a site that is blocking my ip. should I set up a vpn or any technique to hide my ip? I tried droidvpn but it just reboots the phone. I have root, busybox, tun.ko and openvpn binary but no openvpn config file < whatever that means
Try proxydroid its only need root and work perfect on my phone
Sent from my GT-I9100 using xda premium
cant change ip?
I downloaded proxydroid and set it up to use first htttps then socks4/5 proxy bug it still shows my original ipaddress at whatismyip.com how to use this app?
Go to proxpn.com for $10 USD a month you can download their android app. No need for root. They have several vpn server locations such as x2 Usa, Uk Singapore and included is PC usage as well. Apparently it is no problems watching geolocation locked online tv
Sent from my GT-I9300 using xda app-developers app
aussie2sweden said:
Go to proxpn.com for $10 USD a month you can download their android app. No need for root. They have several vpn server locations such as x2 Usa, Uk Singapore and included is PC usage as well. Apparently it is no problems watching geolocation locked online tv
Sent from my GT-I9300 using xda app-developers app
Click to expand...
Click to collapse
Don't bother with the Android app if you just need it temporary (Certainly don't bother with the windows client).
If you download the Windows Client exe you can open it with 7zip and get the openvpn config files (Attached to this post).
Which you can then use with :
https://proxpn.org/createaccount.php
And then just fill in the required items.
It says allot about the company that they don't even use a different certificate and key for each user.
(Or provide L2TP)
For 7$ a month you can get a really good VPS in the US.
(See lowendbox.com)
Then just set it up yourself. (Anything you want L2TP/IPSEC / Openvpn or PPTP).
You can find a tutorial to set this up for pretty much any Linux distro. (In a better manner than the god awful way they configure this).

Any app for monitoring where do apps connect to?

Is there an app that can tell to which servers do other apps connect?
That way, if App X is supposed to connect to Google, but ends up also connecting to something-suspicious dot com, I'll know it "phones home".
iptables, more of that for more of use, please
l-w-c said:
Is there an app that can tell to which servers do other apps connect?.
Click to expand...
Click to collapse
Is your kernel "netfilter" capable?
Try a firewall with Log (I use droidwall) block the connection for a particular app and check the Log, it usually lists blocked ip (then just Google the IP)
no twitter said:
Is your kernel "netfilter" capable?
Click to expand...
Click to collapse
I don't know. I have FIREFDS.V2.GINGERBREAD.XWKK5 (Android 2.3.6).
dxppxd said:
Try a firewall with Log (I use droidwall) block the connection for a particular app and check the Log, it usually lists blocked ip (then just Google the IP)
Click to expand...
Click to collapse
Kind of an indirect solution. Isn't there anything that just lists hostnames of allowed connections?
no twitter said:
Is your kernel "netfilter" capable?
Click to expand...
Click to collapse
And if the kernel it is, what can be done? i'm interested too. :cyclops:

Anyway to block or filter websites WITHOUT root?

I'd like to block some websites. Are there any good methods without having to root my device?
Thank you!
Set your DNS to openDNS and create a web filter with that?
https://signup.opendns.com/homefree/
*Detection* said:
Set your DNS to openDNS and create a web filter with that?
https://signup.opendns.com/homefree/
Click to expand...
Click to collapse
Would that work even if I'm on 4G?
Adguard
Sent from my SM-G930F using Tapatalk

Enable private DNS on MIUI 10 android pie.

Hi guys.
I'm new to pocophone F1. Coming from a galaxy note 3 with aosp pie rom, i found that i cannot use private dns on pocophone miui 10 pie rom. Several articles on the net said it was removed from miui pie rom. The truth is it was hidden deep within miui 10.
Here's how to access it:
1. Install quick shortcut maker from playstore. Here's the link https://play.google.com/store/apps/details?id=com.sika524.android.quickshortcut
2. Open quick shortcut maker and then scroll to settings. Click on it and then find com.android.settings.Settings$NetworkDashboardActivity (also easier to find it by typing "mor" on search bar. Click on it and then choose try, it will go to network and internet settings where you now can set private DNS there. You can create a shortcut for later use after that.
Thanks. Any code/keyword to enable WiFi sharing (e.g. share WiFi from hotspot using phone with no mobile phone signal)- it is a feature in pixel but not available in miui
radii said:
Thanks. Any code/keyword to enable WiFi sharing (e.g. share WiFi from hotspot using phone with no mobile phone signal)- it is a feature in pixel but not available in miui
Click to expand...
Click to collapse
Not this one?
stonedead said:
Not this one?
Click to expand...
Click to collapse
the option is turned on for me but does not allow wi-fi sharing or doesn't work for me does it work for you? I I've tried
radii said:
the option is turned on for me but does not allow wi-fi sharing or doesn't work for me does it work for you? I I've tried
Click to expand...
Click to collapse
Never tried it before, will test it once i get home later today.
stonedead said:
Hi guys.
I'm new to pocophone F1. Coming from a galaxy note 3 with aosp pie rom, i found that i cannot use private dns on pocophone miui 10 pie rom. Several articles on the net said it was removed from miui pie rom. The truth is it was hidden deep within miui 10.
Here's how to access it:
1. Install quick shortcut maker from playstore. Here's the link https://play.google.com/store/apps/details?id=com.sika524.android.quickshortcut
2. Open quick shortcut maker and then scroll to settings. Click on it and then find com.android.settings.Settings$NetworkDashboardActivity (also easier to find it by typing "mor" on search bar. Click on it and then choose try, it will go to network and internet settings where you now can set private DNS there. You can create a shortcut for later use after that.
Click to expand...
Click to collapse
Good finding!!!
If you want to use the 1.1.1.1 private DNS from CloudFlare, you can just get the 1.1.1.1 app which does it for you
donk165 said:
If you want to use the 1.1.1.1 private DNS from CloudFlare, you can just get the 1.1.1.1 app which does it for you
Click to expand...
Click to collapse
It's not the same mate. Private dns in pie use DNS over TLS which is encrypted and more secure. Also you can use adguard dns in private dns to block ads so you don't need to use any adblocker app or even root your device to block ads system wide. To use adguard dns just put dns.adguard.com to that private dns.
stonedead said:
It's not the same mate. Private dns in pie use DNS over TLS which is encrypted and more secure. Also you can use adguard dns in private dns to block ads so you don't need to use any adblocker app or even root your device to block ads system wide. To use adguard dns just put dns.adguard.com to that private dns.
Click to expand...
Click to collapse
Yeah that is true. Its a shame that MIUI doesnt allow you to set the private DNS settings. Im on crdroid so I can set the dns without any issues. Hopefully they patch it in
donk165 said:
Yeah that is true. Its a shame that MIUI doesnt allow you to set the private DNS settings. Im on crdroid so I can set the dns without any issues. Hopefully they patch it in
Click to expand...
Click to collapse
Using the method i posted here works fine on miui 10.
radii said:
the option is turned on for me but does not allow wi-fi sharing or doesn't work for me does it work for you? I I've tried
Click to expand...
Click to collapse
It seems to work fine for me. I did not enable the setting in developer option. Took out my sim card and then connect to other phone, check from other phone and confirmed the internet is working fine on on both phones.
The third icon from your screen shot is missing on my pocophone, I'll consider factory reset
donk165 said:
If you want to use the 1.1.1.1 private DNS from CloudFlare, you can just get the 1.1.1.1 app which does it for you
Click to expand...
Click to collapse
Private DNS on setting on any PIE AOSP or any PIE Roms is systemwide.
The app itself only the application is affected and by using vpn.
The app is useless if you have the settings available on your device.
On xiaomi.eu when i press DNS the settings app crashes so i cannot set it.
Thanks, works fine here. But seems like I can't connect to internet when using CloudFare dns so I changed to Adguard and it works fine. Both wifi and data has no connection after connecting to CloudFare dns. Btw good sharing!
I'm on crDroid so the private DNS settings work fine for me I've attached a screenshot of the settings I'm using, might be helpful if that menu is available on your ROM
Forgot to attach
Hi...
if i already change to private dns... Will it stick after restart device?
and why i cannot create a shortcut to that setting. ?
Sent from my MI 8 using Tapatalk
MFAR198 said:
Thanks, works fine here. But seems like I can't connect to internet when using CloudFare dns so I changed to Adguard and it works fine. Both wifi and data has no connection after connecting to CloudFare dns. Btw good sharing!
Click to expand...
Click to collapse
That's cause it's cloudflare not cloudfare.
1dot1dot1dot1.cloudlfare-dns.com
Negi9 said:
That's cause it's cloudflare not cloudfare.
1dot1dot1dot1.cloudlfare-dns.com
Click to expand...
Click to collapse
Yeah, my bad. Forgot the 'l'. Like missing a semicolon in a coding ?

Keep the old version of this app but the app keeps updating on its own

I have already disabled auto-update from Play Store, however, every time I open the app, a popup appears telling me that I need to update the app in order to use it and I can't do anything else until I update."
Sounds like it's not updating through playstore. Maybe it's an automated app routine that calls an update request to its update server
How do I fix this?
Firewall block it if it doesn't need internet access with Karma Firewall or equivalent.
I disable Playstore as well.
blackhawk said:
Firewall block it if it doesn't need internet access with Karma Firewall or equivalent.
I disable Playstore as well.
Click to expand...
Click to collapse
It needs the internet
hautrantrung said:
It needs the internet
Click to expand...
Click to collapse
That elevates its risk level. If it's updating from a 3rd party site it could potentially download a virus payload. Ditch it.
Or block the ip address for it's updates... more trouble than I would bother with.
blackhawk said:
That elevates its risk level. If it's updating from a 3rd party site it could potentially download a virus payload. Ditch it.
Or block the ip address for it's updates... more trouble than I would bother with.
Click to expand...
Click to collapse
How can I find the IP address for it's updates? Please recommend me an app that can do that, or if possible, where can I find the tutorial so I can learn it myself. Thank you
hautrantrung said:
How can I find the IP address for it's updates? Please recommend me an app that can do that, or if possible, where can I find the tutorial so I can learn it myself. Thank you
Click to expand...
Click to collapse
Not sure as I never had to do that. Try this maybe. You sure it's really worth all this trouble?

Categories

Resources