I'm using Nexus 6, Android 6.0.1, AirDroid 3.2.1
Recently couldn't find HTTPS option. Was it removed or it's just me being blind? I'm using application primarily to quickly get files from my phone but doing this in corp network, especially when Wi-Fi on a separate subnet, using plain HTTP might not be safe. I know, might sound suspicious but I just want to keep private things as much private as possible.
To answer your question, No. There is no HTTPS / SSL. Everything is sent over plaintext.
I started using Airdroid yesterday and wanted to test the security.
When I send a message from my phone to my PC it shows, in Wireshark, the entire stream in plaintext including:
- The message I typed "test"
- My device model and name of the device in airdroid
- The source IP address and port number
- My airdroid account id number, name associated with my airdroid account, email address associated with my airdroid account.
- The unique device ID and version of the app
Push data from airdroid.com to the Windows client is also sent in plaintext.
Airdroid had this message on their site when they used to support secure connections.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
http://help.airdroid.com/customer/en/portal/articles/1301287-is-airdroid-secure-
Hmm, that article seems to be removed.
Google cache link
Airdroid supported HTTPS in the past, however running a secure connection locally from the phone to the PC usually uses a self-signed SSL certificate. This is considered insecure and causes a warning message in most browsers so Airdroid removed the feature. Or rather they could have just removed encryption to allow for analyzing messages for whatever reason.
Related
FilePortal is a free app that offers easy file transfer between Android 2.2+ devices, devices and PC running Win, Mac, Linux Devices can be paired using QR Code scanning (with the included scanner) .
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
How to use:
transfer files from PC to device
transfer files fom device to PC
Features:
Share files between devices
Share files between devices and PC
Share single or multiple files of any type (photos, videos, zip files, APK's... You name it!)
Works with all 3rd party file managers and photo galleries.
Support android 2.2.+
Google Play link:
https://play.google.com/store/apps/details?id=com.AvatarBlueray.FilePortalAds
app for PC View attachment FilePortalServer.zip
known bugs
1) Service running, no file transfer
menu -> kill service
2) Camera assigned by another app
restart device
3) wrong codepage
run codepage_fix.reg
or set Enveronment variable to "JAVA_TOOL_OPTIONS"="-Dfile.encoding=UTF-8"
4) scaner close, but no file transfering
check firewall on PC, ping PC from device
Support and feature requests
If you have any issues or suggestions, please feel free to contact me via email AvatarBlueray [at] gmil.com or reply to this thread. You can suggest new features here: http://avatarblueray.hpage.com/
Please try it and let me know what you think.
Proxy Server Explorer (Automatically Updated Server IP every 1~2 hours)
【Software Name】Proxy Server Explorer (Automatically Updated Server IP every 1~2 hours)
【Software Language】English
【File size】395K
【Download】https://play.google.com/store/apps/details?id=pk.proxy_server
【Introduce】If you're wondering search how to browse blocked Websites at school,office or the library, or anywhere protected by a firewall then you've come to the right
App.
**It's very easy to operate!
Step1: Choose the country's Proxy Server at the Main Form.
Step2: The default website is google search engine.
Step3: You can change the URL address. And Press the Button 『GO』.
Then it will visit the website you want to link.
You can go back to previous page by clicking the 『Return key』 of your mobile device.
You can go back to the Main Form by clicking the Button『Proxy』.
If you want to exit the program--->firstly,go back to the Main Form--->Secondary,clicking the 『Return key』of your mobile device.
**The Proxy Server IP data will be updated automatically every 1~2 hours.
**When you try the proxy server,and it shows the connection is temporarily unavailable.
Maybe the proxy server is busy or no response at this moment.
You can choose other country's proxy server.
** Note:File downloading is not supported right now.
【App download】View attachment proxy_server_explorer.apk
【Q-Code Download】
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
【Screen-Shot】
http://dl.xda-developers.com/attachdl/03e0c1a4aadedbe27e86d72f358bf585/52875781/2/3/9/5/3/0/0/1russia_youtube1.png
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
By Magrathea designHave you ever thought about recycling an old android device? Would you like to remotely download files from a slow/limited network connection?
StreamStation is a download server that works on your Android device, allowing you to control file downloads from a web client (a PC or another mobile device).
Leave your device where there's a fast or unlimited web connection, such as at office, enable port forwarding on your router and comfortably download any large file from your slow/cheap/restricted internet key or home connection.
Features:
Name: StreamStation
Size: ~2.5Mb
Year: 2014
Platform: Android 2.3+
Language: English (other in update)
Permissions: internet, network connection access, storage management
Android application (server):
Web page (client):
Using StreamStation is very simple: after the first configuration, enable the server on the application; to start, stop and control the downloads, on the client head to:
http://<ip-address>:<port>Where the default port is 9090 (customizable).
I published more detailed instructions on Magrathea design's StreamStation user manual
Or you can have a look at my article at Magrathea design.
UPDATE: Now open source!!! Page on GitHub
Download on Google Play and enjoy!
VERSION 1: first version
UPDATE 2: new icon, bug fixes
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
GeniPass is a deterministic password manager that uses child key derivation cryptography to securely derive your passwords at runtime. What does this mean? It means GeniPass uses math to "load" (calculate) your passwords rather than store them in a database or on some server. Go to the second post to see the changelog and download the apk or download from the Play Store.
It works by deriving large random number from each other until it uses one of the random numbers to look up words in a dictionary, creating your password (for why see here.) If you're interested in more technical info in this cryptosystem see the readme. This app can also be used to test the strength of the passwords you already use. It will give you a rough estimation of how long it'll take someone to brute force the password.
Your passwords will be available across all devices running this app without needing to sync any data with some server. You don't need to worry about me stealing your passwords or uploading them to a server because I don't have a server and GeniPass can't open any network connections (it doesn't have the right permissions).
Screen shots are available at the bottom of this post.
GeniPass is open source! The source code is available here.
GeniPass is "Pending Publication" in the Play Store but the link will be here soon, in the mean time you can download the apk from the second post.
As a rule of thumb this app only with on devices with +1 GB of RAM, if it runs on a device with less than that please let me know.
Download latest apk.
SHA-256: 436770f0a4b70f61247c4c02ce86242ca5f94b75200400b95ebe1ef22483feda
Known Issues:
Let me know
Changelog:
v 1.0: Initial release
reserved
Hello everyone...and sorry for my English!
My name is Evgeniy and I made android application called DPITunnel
DPITunnel is an android application designed to bypass site blocking systems (yes, in some countries some sites are blocked).
How site blocking systems work?
DPI (Deep packet inspection) systems looking for site address in all TCP packets. They try to find an address that needs to be blocked and if they find they do not allow the packet to reach the remote server.
How to bypass DPI's?
Most DPI's can't reconstruct TCP-session, so we can send HTTP/HTTPS request in some packets. Another way to bypass DPI's (it works only for HTTP) is to change host header spell or replace CRLF end of line symbol with LF symbol. Another problem is that some ISP's redirects all DNS requests to their servers and may return the wrong answer if site is blocked. To overcome this problem we must use DoH protocol.
DPITunnel's features:
Support many DPI bypass methods
Support DoH protocol
Support SOCKS5 proxy
Don't impact perfomance of sites
If you have any ideas, suggestions or you found a bug/mistake, feel free and let me know.
Email: [email protected]
Github repository: github.com/zhenyolka/DPITunnel (XDA don't allow me to post links)
DPITunnel's screenshots:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
This app get error when turn on VPN. I can not use this app.