Database Info

ninesky browser - privacy worry

Hi everybody!
I recently started looking for a browser to replace the stock one and I think I installed every possible option there is without giving much thought to the consequences - app permissions and possible violation of my privacy and misuse of my data.
So I found what I thought was a really nice and well-functioning browser called Ninesky from the Android market.
Luckily for me I did not get to use it for long, before I detected a strange pattern - Ninesky would automatically start itself upon boot, connect to a server in China, upload some data and receive some back and then just sit there and wait idly.
The server that it connects to belongs to a company called aBitCool, which is, according to Bloomberg, an ISP in China.
So I kill it off and after a while it's back, doing the same thing. I also noticed a similar behavior for Dolphin HD, except that it would send data just once very quickly after boot-up and then close itself and stay quiet. That led me to Google it a little, which in turn led me to an existing thread about Dolphin HD on this forum.
So here are my noob questions that I hope somebody can answer, please:
1. Can somebody take a look at Ninesky browser and let us all know what kind of data it is transmitting about its users upon boot and maybe even later on during the actual use of the browser? The list of permissions that Ninesky asks for is huge and that makes me a little worried. Also, Ninesky runs a "safety check" of every URL visited. I wonder what that really is.
2. Say it would try to steal information from its users - would it be possible for the app to somehow get access to my stored usernames and passwords from other programs (such as Gmail or Skype) or are these encrypted? I presume that if I were stupid enough to let Ninesky's password manager "remember" my usernames and passwords for certain websites then that information would be easily accessible to them.
3. Can an app with such permissions also function as a keylogger?
4. I can understand why folks here would write some apps on their own and share them with the rest of us. I can understand why a developer or a company would write an app and make one version available for "free" or as an ad supported one and/or offer a premium version for $$$. At the end of the day developers need to eat and pay their bills just like the rest of us and companies are (for the most part) profit-seeking institutions (unless they are GE or MS that have money to burn). That said - why for the love of god would anybody, other than an enthusiast, develop a browser, for which they will not ask for any $$ or won't even display any ads in it? Where is the catch? Now, I know that Opera and Firefox get money from Google to use it as their default search engine, but would this really apply for a few random Chinese companies? Where is the catch?
Thank you.

I was a big supporter of Ninesky but I uninstalled today. It does seem to be constantly running and transmitting data, though what data is being transmitted I don't know. LBE also kept notifying me that it was trying to obtain my location information even when I wasn't using it. I uninstalled it through the Market and left a one star review.
Drunk texted from my MIUI Thunderbolt.

I'm writing a review of about 13 different Android browsers, and came across Ninesky. Has anyone heard anything more about the privacy concerns and what data it might be transmitting?

well....if it keeps requesting the location even while its closed, thats not a good sign...

Not good. This needs addressing.
I have changed my review on Market also until we get some answers.
Cheers to the OP.

I agree. I think my review should come out tomorrow, hopefully the developer reaches out. It really is a decent browser.
Sent from my Transformer Prime TF201 using xda premium

´I'll leave you here my tests made since Monday with last versions of each app:
==|Boat 4.0.1|==
#Just after starting#
- Ask for GPS location
- 211.151.139.246 (China Network Information Center)
#When going to any website#
- IP from that website
--------------------------------------------------------
==|Dolphin HD 8.6.1|==:silly:
#Just after starting#
- 184.73.86.141 (AMAZON.COM - amazonaws.com - US)
- 65.52.32.12 (Microsoft Corp - US)
- 107.20.57.0 (AMAZON.COM - amazonaws.com - US)
and one more on this IP range type...
- 205.251.242.197 (AMAZON.COM - amazonaws.com - US)
- 205.251.242.165 (AMAZON.COM - amazonaws.com - US)
- 72.21.195.98 (AMAZON.COM - amazonaws.com - US)
#When going to any website#
- IP from that website
--------------------------------------------------------
==|Firefox 14.0.1|==
#Just after starting#
- No Ping
#When going to any website#
- 80.67.92.43 (AKAMAI TECHNOLOGIES US) *
- 93.184.219.20 (EdgeCast Networks - US) *
- IP from that website
* note: not always, most of the times just go to IP website we asked
--------------------------------------------------------
==|Opera 12.0.4|==:victory:
#Just after starting#
- No Ping
#When going to any website#
- IP from that website
note: DON'T use Opera Turbo or EVERY single info WILL pass through their servers...
--------------------------------------------------------
It's pretty obvious to me who are the most privacy oriented here...
STAY WAY FROM OPERA MINI AND DOLPHIN MINI AND ALL MINI VERSIONS. They process all info on their server first for speed.

Anyone researched Xscope or could research this browser?
If you explain how, I could do it myself!!
Sent from my GT-I9000 using xda premium

But the OP got it wrong with money burning by GE & MS. There's no such thing, its all business. Just to let you know, in the browser wars - Firefox was Google's first step into browsing. Then came Chrome.
For all privacy concerns, LBE Privacy Guard is a good option. Though its Korean, if am not wrong.
Well, finally there's options out there. Nobody is forcing us to download, install & use their apps.
Sent from my MT11i using Tapatalk 2

bombayboy said:
But the OP got it wrong with money burning by GE & MS. There's no such thing, its all business. Just to let you know, in the browser wars - Firefox was Google's first step into browsing. Then came Chrome.
For all privacy concerns, LBE Privacy Guard is a good option. Though its Korean, if am not wrong.
Well, finally there's options out there. Nobody is forcing us to download, install & use their apps.
Sent from my MT11i using Tapatalk 2
Click to expand...
Click to collapse
Agree with everything BUT Firefox was never connected to Google like Chrome. Firefox's current existence is owed almost exclusively to its search partnership with Google wherein Mozilla Corp receives a portion of ad revenue from Google queries initiated from Firefox's search bar. This revenue amounts to tens of millions of dollars. But Mozilla and Google Relations Strained Due to Chrome.
Firefox its independent and don't collect your data like Chrome/Google do...

sushidog said:
Agree with everything BUT Firefox was never connected to Google like Chrome. Firefox's current existence is owed almost exclusively to its search partnership with Google wherein Mozilla Corp receives a portion of ad revenue from Google queries initiated from Firefox's search bar. This revenue amounts to tens of millions of dollars. But Mozilla and Google Relations Strained Due to Chrome.
Firefox its independent and don't collect your data like Chrome/Google do...
Click to expand...
Click to collapse
Connected with reference to Google promoting & supporting Firefox before they decided to go with Chrome.
I still use Firefox, Aurora & Chrome
Sent from my MT11i using Tapatalk 2

If you're not paying it, you are the product being sold.
Remember this when downloading free apps which are not open source.

DnaPolymerase said:
If you're not paying it, you are the product being sold.
Remember this when downloading free apps which are not open source.
Click to expand...
Click to collapse
Like facebook which sells our data
Sent from my MT11i using Tapatalk 2

Calamitous with Ninesky
Hi,
I stumbled upon XDA Developers forum today and I was so grateful to find this write-up; it was the only honest review I could find of Ninesky. So, thank you.
I want to share an experience our family went through a few weeks ago. Perhaps it will answer some of your questions and alert some users out there of what this browser could do. We have an unfortunate incident happen to our child: My little boy received an android tablet for a gift this October. He was so eager downloading all the apps and games he could find, and in about a month, it was completely personalized. We regularly monitored his downloads, the games he played, and the apps he utilized.
Much to our regret, we really did not give much thought to the browsers he had installed. He had more than three at one point and Ninesky was always in the background. Sadly, whenever he would search for apps, we later discovered Ninesky directly linked him to several stores that was not common to Google or Firefox. Some of them had Anime icons (mostly innocent looking), nicely titled games for their tiles. Some apps were legitimate and very cool games; however, some apps were direct links to hard-core porn websites and a whole universe of filth (not excluding child-porn). They attached themselves to the tablet like trojans and was quite aggressive in linking the user to overseas app stores (inappropriate). Every time a game would be uploaded from one of these stores, it gives auto-access to these atrocious websites and videos. Because Ninsky always functioned in incognito--one of it's touted features--we almost had no access to the history or cookies when this browser was used. Almost anyway ... it took us hours (and some hacking) to track and identify what was really going on, the seeming source of it was this "sophisticated" browser.
So the catch may be that this browser has no advertisements because it plays host to several groups funding the porn industry. That's my suspicion anyway, based on what we went through.
I cannot begin to say how grieved we are that our son was exposed to all this, especially that we discovered it so much later. We thought we paid attention. That being said, he's back to playing with his remote control car outside, where life is a bit less complex.
More power to your forum and thanks again.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
xenofont said:
Hi everybody!
I recently started looking for a browser to replace the stock one and I think I installed every possible option there is without giving much thought to the consequences - app permissions and possible violation of my privacy and misuse of my data.
So I found what I thought was a really nice and well-functioning browser called Ninesky from the Android market.
Luckily for me I did not get to use it for long, before I detected a strange pattern - Ninesky would automatically start itself upon boot, connect to a server in China, upload some data and receive some back and then just sit there and wait idly.
The server that it connects to belongs to a company called aBitCool, which is, according to Bloomberg, an ISP in China.
So I kill it off and after a while it's back, doing the same thing. I also noticed a similar behavior for Dolphin HD, except that it would send data just once very quickly after boot-up and then close itself and stay quiet. That led me to Google it a little, which in turn led me to an existing thread about Dolphin HD on this forum.
So here are my noob questions that I hope somebody can answer, please:
1. Can somebody take a look at Ninesky browser and let us all know what kind of data it is transmitting about its users upon boot and maybe even later on during the actual use of the browser? The list of permissions that Ninesky asks for is huge and that makes me a little worried. Also, Ninesky runs a "safety check" of every URL visited. I wonder what that really is.
2. Say it would try to steal information from its users - would it be possible for the app to somehow get access to my stored usernames and passwords from other programs (such as Gmail or Skype) or are these encrypted? I presume that if I were stupid enough to let Ninesky's password manager "remember" my usernames and passwords for certain websites then that information would be easily accessible to them.
3. Can an app with such permissions also function as a keylogger?
4. I can understand why folks here would write some apps on their own and share them with the rest of us. I can understand why a developer or a company would write an app and make one version available for "free" or as an ad supported one and/or offer a premium version for $$$. At the end of the day developers need to eat and pay their bills just like the rest of us and companies are (for the most part) profit-seeking institutions (unless they are GE or MS that have money to burn). That said - why for the love of god would anybody, other than an enthusiast, develop a browser, for which they will not ask for any $$ or won't even display any ads in it? Where is the catch? Now, I know that Opera and Firefox get money from Google to use it as their default search engine, but would this really apply for a few random Chinese companies? Where is the catch?
Thank you.
Click to expand...
Click to collapse

Most secure apps for various purposes

Ive been through the entire security forum. Must say till a little raw but it will mature hopefully. Still a lot of noobs talking and no serious dev talk. Im not a developer but I have done some research esp on encryption systems and keep myself updated with the loopholes in various apps. Until such time when they do join in I think it would be a good idea (esp if the higher-level know-its) would share their list of apps they use for their everyday functioning and especially how you currently protect yourself best against unwarranted attacks to the types other forums are talking about.
My list is:
K-9 mail : for email. I use APG with that though im still not convinced its worth it cause the keys would be a easy to 'reverse engineer' as you can easily detect the device you use to send the mail and thus an estimate of the computing power essentially showing them the narrow range of prime numbers in which the key could have been generated. But you would need to be a dedicated target for that. Plus its open-source and very popular.
Xprivacy: its good for apps with too many unnecessary permissions but it wont protect you against intruder attacks.
network connections: just switched over to this from wire shark. Still undergoing testing. But it tell you the current internet connections and seem promising. You can block the suspicious IPs using xposed framework called peerblock (look into the xposed mod index). Needless to say but I think blacklisting google would be perhaps make you life considerably old-fashioned esp if your plugging the google 'backdoor' access they provide to 'he-who-shall-not-be-named' organizations.
Browser: im using the native AOSP browser. Firefox would be a better alternative in my opinion to chrome or others. I wish we had chromium for android.
Quickpic: using it instead of the native gallery after i found that it was connecting to the internet.
Calander: using the native AOSP calander but deleted the calander sync cause i try to avoid relying on google too much. selectively Denied internet permission.
ES file manager: a very complete tool. root explorer with checksum built-in. denied internet permissions.
TextSecure : Using this for standard texting because it seems to offer more encryption that any other texting app at the moment. Plus its going to be the default messaging app in Cyanogen ROMs in the future. Offers One-Time-Pad system encryption which is encryption theoretically secure (what that means for the common man is that this encryption is the only one that has stood the test of time to be unbreakable of used properly. All other encryption systems rely on the fact that the decrypting systems used to 'crack' the encryption lag behind the algorithms. Lets hope the devs did implement it properly)
Remove Google from CM10+ ROMs : http://www.xda-developers.com/android/remove-the-google-from-cyanogenmod-with-freecygn/
"Not every user particularly cares for Google’s proprietary bits and its tendency to put them everywhere. As such, XDA Senior Member MaR-V-iN has created a script to clear out Google proprietary binaries from all CM10+ ROMs. Freecyngn disassembles the CyanogenMod settings app and replaces Google Analytics library with the free NoAnalytics. The whole process doesn’t break the Settings app, and turns your device into one that is Google-free"
Click to expand...
Click to collapse
Thanks to @SecUpwN for the site: www.prism-break.org As you will see by visiting this site its not secure but just a list of more open-source projects.
I dont use a lot of google products like gmail or chrome or maps but i would like to minus the uneasiness that i have using it. And i dont use public wifi at all. The great things in life are hardly ever free!
Needless to say but i use CM 10.1 since its well developed and open-source. Looking forward to omniROM by chainfire and other great devs. I do believe we need some serious stenographic programs for android because encryption alone is not the way to go. Maybe they will take this more seriously. This remains a work in progress. As always hit thanks if it helps.

CM is now for profit. It's CyanogenMOD Inc. Anyway, this is a pretty naive approach, IMHO. You want to keep something secret you can't tell technology about it. Check out "Schneier on Security."

where did you download "network connections" from?

@aejazhaq: See www.prism-break.org!

runwithme said:
where did you download "network connections" from?
Click to expand...
Click to collapse
I downloaded it when the dev was giving the pro version free for a limited time to XDA members. How ever its available on the play store...https://play.google.com/store/apps/details?id=com.antispycell.connmonitor&hl=en

SecUpwN said:
@aejazhaq: See www.prism-break.org!
Click to expand...
Click to collapse
Yes i cam across that just a week ago. It seems to me as my knowledge progress' that the apps available are just to keep the selective data eg your mails private if you use APG with that. @pan.droid I think anything on your device is still as vulnerable as can be honestly and don't think, at least as of now that you can protect your data on you device with any satisfactory means, at least not yet. I'm interested in stenographic means more now than ever because I think encryption alone wont cut it esp keys generated on the phone; the prime numbers needed for a foreseeable future (3+ yrs) protection are elusive on the phone, perhaps the PC can do a better job, but again with its fallacies esp with emails being stored in the cloud permanently means that there's an expiration date on such material you choose to share. And given it lacks forward secrecy and anyone using PGP in emails is definitely shouting encrypted msgs being transmitted perhaps arousing more suspension and the subsequent package.
Thus I do agree the list is currently very naive but perhaps the best we can do at the moment. Thats why I'll leave people to share their opinions on this because this is perhaps an ongoing discussion.

I'm really interested in a contacts replacement. I hate the new style google version but I don't trust ANYTHING free from the app store. They all download your contacts!
You didn't mention AFWall+, the iptables firewall I consider instrumental in blocking most phone home attempts.

SecUpwN said:
@aejazhaq: See www.prism-break.org!
Click to expand...
Click to collapse
Actually, pretty great site!

pan.droid said:
Actually, pretty great site!
Click to expand...
Click to collapse
You're welcome. If you're interested in security projects, have a look!

I'd totally jump on board with that, but all I have is a WI-FI tablet, ATM. Great activist project for anyone serious about security.

pan.droid said:
I'd totally jump on board with that, but all I have is a WI-FI tablet, ATM. Great activist project for anyone serious about security.
Click to expand...
Click to collapse
Sadly, our project is missing real security enthusiasts and DEVELOPERS. Do you know anyone I should get in touch with?

I use "Keepass2Android Offline" to manage my passwords. This "offline" version removes Internet access permissions which I consider essential for security of my database.

Malicious ads

One of your ads just redirected me to a site that told me that my Samsung Galaxy tab 3 got infected by a virus!
I didn't even click on it, I think.
The message was in my native language (german)
Pls try to fix this!
Some users could fall victim too such scams.
I guess your possibilities might be limited but maybe you can talk to your ad delivery networks to ban such ads and use better techniques to prevent such ads from appearing on their networks. (other websites have these issues as well)
This definitely wasn't a nice experience.
Sometimes ad blockers have their advantages (blocks viruses/scam/phishing) so if you don't want to loose people and get no money for showing ads you should do something about this
Regards,
Djfe

Why on earth did you click on the adverts?
I'm fairly sure most users will be more suprised by the fact that there are still people who don't use an ad blocker, especially on a tech site.
XDA doesn't individually approve each ad. Those are generated by, ususally, Google Adsense, based on your own browsing history.
Not to mention, nobody here should ever fall for 'you Android device has a virus'. This is a website for developers by developers. The fact that Android can't be infected by a virus is common knowledge to everyone here. XDA users are too tech-savvy to be fooled by something that ridiculous.
Sent from my SM-N9005 using Tapatalk 2

Its not always good to use them
ShadowLea said:
Why on earth did you click on the adverts?
I'm fairly sure most users will be more suprised by the fact that there are still people who don't use an ad blocker, especially on a tech site.
XDA doesn't individually approve each ad. Those are generated by, ususally, Google Adsense, based on your own browsing history.
Not to mention, nobody here should ever fall for 'you Android device has a virus'. This is a website for developers by developers. The fact that Android can't be infected by a virus is common knowledge to everyone here. XDA users are too tech-savvy to be fooled by something that ridiculous.
Sent from my SM-N9005 using Tapatalk 2
Click to expand...
Click to collapse
upto some extend you are right but sometime you should allow some non-intrusive adds to get displayed. Well those people who are non rooted may face such problems. Well the websites like xda, facebook and countless more are working because of adds...i am not against the add blocker but its not always advised.

sachoosaini said:
upto some extend you are right but sometime you should allow some non-intrusive adds to get displayed. Well those people who are non rooted may face such problems. Well the websites like xda, facebook and countless more are working because of adds...i am not against the add blocker but its not always advised.
Click to expand...
Click to collapse
Most of us use Tapatalk or the XDA app when on our Android devices. Those don't show apps
I'm not rooted either. You don't need root to use Adblock Plus in Firefox, even on Android. It's just a plugin in the browser.
Most of us are more than willing to help XDA by paying (For instance for the XDA Forum app), but we refuse to have to deal with intrusive ads. (Ironic, since I'm in advertising.)
Facebook isn't working because of the ads. Facebook is working because they earn millions selling your data.

i won't go into details
ShadowLea said:
Most of us use Tapatalk or the XDA app when on our Android devices. Those don't show apps
I'm not rooted either. You don't need root to use Adblock Plus in Firefox, even on Android. It's just a plugin in the browser.
Most of us are more than willing to help XDA by paying (For instance for the XDA Forum app), but we refuse to have to deal with intrusive ads. (Ironic, since I'm in advertising.)
Facebook isn't working because of the ads. Facebook is working because they earn millions selling your data.
Click to expand...
Click to collapse
allow some advertisements. won't gonna debate what anybody i know what all websites to...:good:

Well If I have clicked on the adverts then that was accidentally
yes most users on here are technical, but some are also noobs trying to search for roms for their devices
Android can be infected by viruses but not without the users interaction (the play store is pretty safe so you would need to download apps from suspicious sites)
Android only cannot be infected by drive-by-downloads
and no website would be able to warn you about something like that
I know that xda cannot filter adverts, but Google adsense might be able to do that if you report malicious ads to them
I'm waiting for the last promised update for my device (Samsung Galaxy Tab 3 10.1 -> Kitkat)
then I will root it/switch to a custom rom
on my rooted smartphone I'm using an adblocker (that replaces the host file)
Firefox isn't really good, the performance is very bad and it is still very buggy on some unoptimized sites
else I would use it
Chrome works the best on my devices
FF might work better on high-end devices/current devices but I don't own one at the moment (my devices are from 2011 and 2013)

Alternatives to download official apps

Hi,
The vast majority of my apps come from F-droid and Github but a few ones can only be downloaded on the Google Play Store.
I don't have Google services on my device so I'm looking for a reliable tool/website to update those apps. I know Raccoon but a PC is required and I don't have one during the week.
I found APKpure a few weeks ago. Apparently all apps have to pass a signature verification so they guarantee safe downloads. It seems legit and I did compare the SHA1 of their apk and the one downloaded from Google Play. The apk hasn't been altered. One positive result doesn't mean that we can't have negative ones though
I don't like "mirror websites". The owner of apkpure, apkupdate and apkplz seems to be the same so it's more complicated for me to trust those sources. Why do they need all these websites? I didn't find any legal information BTW...
No paid apps can be downloaded on these websites so my only suspicion is that they could add malwares into some (famous) apps. Of course, original apps can also have malwares on Google Play.
For the record, I uploaded the few apks I downloaded to VirusToral and nothing has been detected.
Last but not least, Apkpure provides a dedicated app to install and update apps, which is great even if they suggest me new versions that aren't officially available yet. (probably related to a region restriction or a delay from Google to push the app update for all countries).
What do you think about these websites? Do you know a safer way?

I don't have google apps also, using apk pure for now, everything is well.

BlankStore should work for most free apps.
http://forum.xda-developers.com/showthread.php?t=1715375

Wakamatsu said:
BlankStore should work for most free apps.
http://forum.xda-developers.com/showthread.php?t=1715375
Click to expand...
Click to collapse
Yes, I know but it uses Gmail IDs (with a connection to Google servers). Last but not least, the project is discontinued for several months.
I was going to give a try to Blankstore this weekend and it doesn't seem to be a reliable alternative in the medium term.

Primokorn said:
Yes, I know but it uses Gmail IDs (with a connection to Google servers). Last but not least, the project is discontinued for several months.
I was going to give a try to Blankstore this weekend and it doesn't seem to be a reliable alternative in the medium term.
Click to expand...
Click to collapse
@Primokorn ,
what about its alternative.
http://forum.xda-developers.com/showthread.php?t=3217616
would really be interested in your opinion (if you look into it and dont mind ).
"err on the side of kindness"

Primokorn said:
Yes, I know but it uses Gmail IDs (with a connection to Google servers).
Click to expand...
Click to collapse
I created a throwaway gmail account for this but I get your point.
Primokorn said:
Last but not least, the project is discontinued for several months.
I was going to give a try to Blankstore this weekend and it doesn't seem to be a reliable alternative in the medium term.
Click to expand...
Click to collapse
It's discontinued in the sense that he will not move further with that particular project in favour of another but he will still make fixes when a Google update breaks BlankStore function. It's been "discontinued" since version 0.7.1.

I have a old device just for this purpose.
It has no info on it
Everything possible has been removed that's not needed
(Like calender and contacts etc)
All it does is connect to Wi-Fi to get apps from Google play
Even paid apps.
And I harp non stop to developers and leave feedback on apps that don't support offline use.
(Is in app purchases, online verification, etc things that can be stored on device over getting from internet every time)
I don't see the point of getting apps elsewhere when they will do the same thing to you as Google..But with less oversight.
Virus checkers are pointless when apps are Trojans..
Or have them built in.
I consider any software that mines any thing from your device, without declaring exactly what it is doing every time, nothing other than a Trojan.
Google and it's partners will always push for a proprietary distribution system claiming it will keep you secure
When I'm truth what it does is you your money going to them
When I've had to I've gotten my apks from some very unusual places.
But then you can get some very bad software from very official places.

mrrocketdog said:
@Primokorn ,
what about its alternative.
http://forum.xda-developers.com/showthread.php?t=3217616
would really be interested in your opinion (if you look into it and dont mind ).
"err on the side of kindness"
Click to expand...
Click to collapse
I use microG framework for several weeks now
Wakamatsu said:
It's discontinued in the sense that he will not move further with that particular project in favour of another but he will still make fixes when a Google update breaks BlankStore function. It's been "discontinued" since version 0.7.1.
Click to expand...
Click to collapse
I didn't know that. Thanks for the heads-up! I wanted to give a try this weekend but I had serious with my laptop I keep that in mind for the next time.
nutpants said:
I have a old device just for this purpose.
Click to expand...
Click to collapse
What an expensive alternative! I'm used to sell my current device to buy a new one and that's not handy IMHO.
nutpants said:
And I harp non stop to developers and leave feedback on apps that don't support offline use.
(Is in app purchases, online verification, etc things that can be stored on device over getting from internet every time)
Click to expand...
Click to collapse
Solutions exist for devs to not use Google Play online verification but they want to use it to punish users who download warez. Even if I can understand this point of view, we wouldn't have warez with FLOSS softwares.
nutpants said:
Google and it's partners will always push for a proprietary distribution system claiming it will keep you secure
When I'm truth what it does is you your money going to them
Click to expand...
Click to collapse
I have done some fruitful research to prepare an article about GAFAM and other big companies. In addition, Google doesn't protect our freedom of speech (I noticed this many times with 'ordinary people').
Now that I clearly know what they did/do/will do, how could I still use their services?!? My next Android work will be published under GPL v3, I already stopped any operations on Google Play and I try to push devs to offer free/libre softwares. Marcel (M66B on XDA) is the perfect example of an awesome developer :good:

Primokorn said:
I use microG framework for several weeks now
What an expensive alternative! I'm used to sell my current device to buy a new one and that's not handy IMHO.
Solutions exist for devs to not use Google Play online verification but they want to use it to punish users who download warez. Even if I can understand this point of view, we wouldn't have warez with FLOSS softwares.
Click to expand...
Click to collapse
I rarely sell my devices, (i have 6 of 9 that I play with somewhat regularly sadly)honestly i keep the last one as a back up in case the new one has issues or a failure. And when I do think of it, it not worth the money to make it worth the time..
I still have my Windows mobile 2003 Siemens sx66
(Not that is have been turned on in years)
But really it's an investment in my security.
(And I no longer get the hottest newest devices asap anymore, that's a zero sum game that has few benefits beyond bragging rights)
My tablet dual boots between Google play only rom and everything else internet rom also.
I have yet to hear of a protection scheme that had not been broken in hours. I think bluray was the last major public disaster. If the time spent on protection was spent on quality assurance I think it would be a different landscape in the digital world.
Even with floss you have warez.. just in different forms. Mods,hacks, cracks, custom roms It all just words that describe one developer modifying others work without permission for features that are not present, either added or removed.
It's point of view.like anything.
Myself, I stand back and promote security,offline abilities and operation and open source.
It's where my money goes, my time and my vote. Every chance I get.

XDA: Focus on making independence accessible to android users!
@Primokorn: Thanks a zillion for starting this crucial discussion. I don't know how often i pointed out these issues.
Of course, i also have some aesthetic preferences. But diving through endless reefs of startup animation replacements, battery monitor alternatives and half-baked theme studies is not what i expected xda-developers.com to end up, 12 years after i started being around.
In my eyes, the whole aftermarket ado should be concentrated on maintaining the independency of the most popular mobile operating system of the universe by it's users. Crucial topics be
Liberating the app distribution architecture
Optimizing the permission restriction system
There are great approaches like the Aroma Installer, that have been employed to supply user friendly means for debloating and debranding. Have a look at the Screenshots of stockymod.
@nutpants:
And I harp non stop to developers and leave feedback on apps that don't support offline use.
Click to expand...
Click to collapse
I do the same thing to official institutions when they release apps. If i wasn't in that hyper-busy age around 40, i'd start a little riot about publicly funded software that ends up being published behind the wellknown golden cages exclusively. The necessity to change this in a grassroot movement is obvious.

Apkmirror.com

Did not know these existed, going to check this out!

[IDEA] App store for HD2/Windows Mobile.

Okay, first, I do not know where I should put this thread, it is for the HD2 specifically, but might one day be useful for other devices.
So, I have an idea, I would like to create an app store for Windows Mobile, specifically Windows Mobile 6.5, NOT Windows Phone, NOT Windows Phone 8/10, NOT Android, NOT Ubuntu or Meego or Firefox OS.
This app store would be updated, it would contain apps that are compatible with WM6.5, also, you would be able to select your device resolution, and get apps that work with your resolution, it could have a tweaks section, so any tweaks could be installed with just a few clicks.
Also, developers would be able to submit their own apps, and people should be able to submit older apps that work on WM 6.5.
So, what do you guys think, would you support such a project.
P.S. What would you think about me trying to get a HTML5 render engine running on WM6.5, so it could use some new mobile-web apps?
P.P.S. Recently, someone with an Android phone, was able to de-solder the NAND chip(with some equipment), and upgrade the internal flash storage, does anyone think this would be possible with the HD2?, maybe we could get 4GB of internal flash instead of 1GB?

Not bad idea.
My company done more basic idea with a repository of apps with description for our WM6.5 users.
Was some quality software for WM, when compare to junk apps you get on android it really night & day, shame Microsoft didn't see potential & develop it more back in late 2000's as it was far better code than android & was the birth of the smart phone & many parts of it copied by iphone & android .

Mister B said:
Not bad idea.
My company done more basic idea with a repository of apps with description for our WM6.5 users.
Was some quality software for WM, when compare to junk apps you get on android it really night & day, shame Microsoft didn't see potential & develop it more back in late 2000's as it was far better code than android & was the birth of the smart phone & many parts of it copied by iphone & android .
Click to expand...
Click to collapse
So, do you think that it would be feasible to make an app store, like this? And what do you think would be a good name for an app store?
I could easily set up a website, however, I do not know how hard it would be to make an installable cab for it.
I could have a basic website, set-up in just a few minutes(without SQL server, which would be needed for an app store).
The main problem though, is getting permission from app developers to put their old apps on the app store, some of the companies don't even exist anymore. And we would need to get NEW developers to make apps and put them in the app store.

You not likely get much support for new apps as just such minority of WM6.x.x devices in use .
Problem 2 is like you say most old apps dropped by developers, many recent apps I got hold of are technically warez but that only way get them & activate them as devs dropped them & purchase option from websites. IM+ was example of this, I wanted purchase a licence but they dropped WM & wouldn't help me out so I had do work around making it a non expiring trial using mortscript to launch app .
If you do any sort of app store and want worthwhile apps then it not going be possible do it 100% legal unfortunately.
Our work web repository is not exactly legal but it keeps WM6 alive & we got about 30 WM6 users who happy
Personally I would do just a good designed web repository with app sections & details & downloads linked to account logins.
If you can build a software app to act as store it would be good, building cab is the easy part .

Mister B said:
You not likely get much support for new apps as just such minority of WM6.x.x devices in use .
Problem 2 is like you say most old apps dropped by developers, many recent apps I got hold of are technically warez but that only way get them & activate them as devs dropped them & purchase option from websites. IM+ was example of this, I wanted purchase a licence but they dropped WM & wouldn't help me out so I had do work around making it a non expiring trial using mortscript to launch app .
If you do any sort of app store and want worthwhile apps then it not going be possible do it 100% legal unfortunately.
Our work web repository is not exactly legal but it keeps WM6 alive & we got about 30 WM6 users who happy
Personally I would do just a good designed web repository with app sections & details & downloads linked to account logins.
If you can build a software app to act as store it would be good, building cab is the easy part .
Click to expand...
Click to collapse
So, it looks like, my website host will not work then, I just made a new account with them too(it is free tho ), my web host says ABSOLUTELY NO warez , however there is this site called "umnet", they have a lot of stuff for lots of devices, including Windows Mobile CAB's. It is not very easy to browse umnet, and there is a lot of garbage, and it is not very easy to sort out what you DO want from what you DONT want. Back on-topic, if I am to make a app-store, I will need to find another host, or something like that.
P.S Is your work app repository, publicly available, or no?

No it on our own server & requires account.

Mister B said:
No it on our own server & requires account.
Click to expand...
Click to collapse
Okay, too bad.
Now, about the app store, I have identified all of the main challenges:
1. Getting a server and/or host.
2. Getting all of the apps.
3. Getting permission from developers to put their paid/non-distributable apps on the server.
4. Setting up a search/description system(will probably be SQL based).
5. Getting the .CAB set up.
6. Getting people to use it.
I have an idea for, convincing developers to make new software for WM6.5, a development fund/bounty. Right now, many people who were once WM6.5 die-hards have stopped developing programs for WM6.5, maybe we can get some new developers, AND get some old developers back, by giving them an incentive to develop for WM6.5. This could be a bitcoin fund/bounty, when a developer wants to make an app, he/she can ask for some bitcoins from the bounty and that could help fund development if his/her app.
Also, ROM's, many ROM's are inactive, my next idea is to, create new ROM's with WEH builds, they will have ALL of the same features and apps and drivers, and versions(6.5.5, the best), but be based on WEH, because WEH has some new under-the-hood stuff like newer security standards, WiFi encryption standards, etc...
Possibly, we could even create new/improved drivers, via reverse engineering or something like that, AND possibly, dig up enough information to implement some of the features of Photon(what WM7 was supposed to be as of 2008), like an unofficial WM7(NOT WP7).