Database Info

[Q] Application specific password for google account in Lollipop

Howdy (and apologies ahead of time if this is a dup, I _did_ search, didn't find anything),
Is it just me or did application specific passwords break with Lollipop? Googled a bit and couldn't find any details. I just see postings stating that 2fa works now, but I don't see how that negates the need for app specific passwords.
I know 2fa is now supported but I'm a bit concerned to use my normal password as I'm not sure if it's stored in any way. Anyone know of any links that explain what exactly is stored and how the auth is persisted across reboots? Maybe I'm misunderstanding, but I thought that if my device was lost, with app passwords I could revoke the device without changing my main password.
The other issue is, since I'm using 2fa with the google auth app on this phone I wouldn't even be able to setup if I wiped this phone (which I will need to). At least prevously I could login to my google account on my PC, create the app specific password and sign on that way.
- TIA for any info

I have just upgraded my Nexus 5 from 4.4.4 into 5.0.1 (I didn't install 5.0.0). What I did:
1. Factory reset on 4.4.4
2. Install system update into 5.0.1
2. Factory reset on 5.0.1
3. Application specific password NOT accepted on initial account setup on Nexus 5. I had to use my master password and code list because you can't read sms before account is added on the phone.
Is this really broken? I haven't found any info on this either.

Wow, someone else who was using this feature. That makes 2 of us at least. I guess that's why they removed it...? Yeah, unless I'm missing something it appears it's indeed broken.
The best part is this isn't really part of Android, but part of gapps; no way to report bugs for that (at least that I've found). Someone opened a bug against AOSP but they closed it as this stuff isn't part of AOSP:
{scheme}code.google.com/p/android/issues/detail?id=57863&can=1&q=app%20specific%20password&colspec=ID%20Type%20Status%20Owner%20Summary%20Stars
They suggested using the "google mobile help forum"; I guess this page links to it: {scheme}googlemobile.blogspot.com/2008/11/got-questions-try-new-google-mobile.html - following the link just gives an error "no group mobile found" or something similar.
All I could see to do was to post a response to their help page on signing in with app specific password to Play pointing out the inaccuracy of the article. I can't find that article anymore, it looks like it might've been removed? I received no response to that.
I can't imagine this being a very difficult feature to support, so I'm a little surprised it was removed. But hey, at least they added all sorts of eye candy and other crap I don't really care about.
I think this is a deal breaker for me. Unless I'm misunderstanding here, if someone were to acquire my phone and extract the password the key or whatever it's storing, they would then be able to access my account settings and take full ownership. If it only had the app specific password, I don't think that'd allow them to modify security settings. If it's tieing the key to the device, that's great but I still can't revoke it (doesn't show up in the app specific password page). Unacceptable (again, unless I'm misunderstanding something?).
Maybe it's time to start looking for alternatives. Wonder if any Maemo derivatives can run on the M8? It was miles ahead of Android in all departments except eye candy anyways...
I'll reply here if I see any more info - please do the same.

This is totally broken.
My company uses App Specific Passwords and I just updated my Droid Turbo to Lollipop.
After the update, everything worked fine. However, I started getting google play service errors and had to wipe.
Now I need to log in using my authenticator password instead of my app specific password.
Not good

dragonash said:
This is totally broken.
My company uses App Specific Passwords and I just updated my Droid Turbo to Lollipop.
After the update, everything worked fine. However, I started getting google play service errors and had to wipe.
Now I need to log in using my authenticator password instead of my app specific password.
Not good
Click to expand...
Click to collapse
Agreed. Quite unfortunate, but I can't find anyone outside of this thread and a few random posts that seem to actually care.
Thanks for confirmation that this is still a problem, btw. I'm still not sure if there's anyplace to even raise this to Google...

i just spent an hour trying to understand why this smart feature wasn't working on my new mobile with a stock andorid lollipop! at least i feel less lonely now...
i sent a feedback to google even if i don't think they'll reply.. i opened a ticket on AOSP website (Issue 189310) if you want to check their reply.. sorry but i can't post outside links

Some questions regarding rooting my Samsung S7 G930A

Ok so to start off my ultimate goal is to be able to install chainfires systemless root to be able to install xposed systemless framework to then install the hide mock location program.
All of this is (most probably already know) in an attempt to be able to gps spoof in pokemon go without being banned. The only reason I am doing it is because I live in an extremely rural area with literally no pokemon around. I don't plan on taking over any random stuff gyms or doing anything else to infringe on any other players. Just find some pokemon and collect from some stops.
I have already attempted this only using a gps spoofing app but as expected I have been soft banned many times.
Basically, I'm just trying to find out if it is safe to root my S7 G930A. I have already looked at this thread:
http://forum.xda-developers.com/att-galaxy-s7/how-to/root-s7-att-g930a-g935a-t3410538
Will this method (that seems like the only working method for the AT&T) erase everything on my phone? Is there an increased risk of bricking my phone using this method than anyone using the normal chainfire method?
With all that being said if there was an easier way to not be soft banned or to not have to cheat at all outside of driving a couple of hours to a decent location I would love to hear it. As far as the gps spoofing goes I don't see much of an issue with it as long as I'm not taking over gyms, which I don't plan to. I'm pretty sure that I am being soft banned because they are detecting that my ip address is clearly not an ip address anywhere near where I am changing my gps. I have looked into vpns to attempt to bypass this but I haven't found much luck.
Anyone have any ideas or suggestions. I know I shouldn't cheat but I feel like this is my only option at the moment. Oh and if this is just completely not the place for this kind of question you can tell me that too haha

Security Certificates & Root Access

Hey anybody reading,
Upon getting super bored & frustrated trying to root a Motorola Moto xt830c, I started searching thru System security settings, specifically the Certificatates preinstalled onto the device.
Im curious as to how some of these (sketchy sounding) certificates work & what exactly they grant referring to permissions & all that? Any help would be appreciated xD.

LilAnt530 said:
Hey anybody reading,
Upon getting super bored & frustrated trying to root a Motorola Moto xt830c, I started searching thru System security settings, specifically the Certificatates preinstalled onto the device.
Im curious as to how some of these (sketchy sounding) certificates work & what exactly they grant referring to permissions & all that? Any help would be appreciated xD.
Click to expand...
Click to collapse
They are there to allow your device to confirm it's connected to a secure server so that your connection is private & secure. (in theory at least) They don't have any permissions. You can go to trusted credentials in security settings and deactivate any you don't trust in recent Android ver, which I've done with about half of mine, especially those with bad records like wosign.

IronRoo said:
They are there to allow your device to confirm it's connected to a secure server so that your connection is private & secure. (in theory at least) They don't have any permissions. You can go to trusted credentials in security settings and deactivate any you don't trust in recent Android ver, which I've done with about half of mine, especially those with bad records like wosign.
Click to expand...
Click to collapse
Thank you, I was wondering why Wells Fargo, Visa, chinese govt information networks & a lot of Turkish stuff wanted to do with SSL certs & if there was some sort of malware at the root of this, thanks again I'm pretty surprised it got answered hehe

Please help! Phone being remotely accessed and controlled by unauthorized 3rd party..

Thank you in advance. First of all I am still a beginner in knowledge here. My Alcatel fierce 4 TCL 5056N seems to have been hacked and is now being remotely accessed and controlled by an unauthorized 3rd party. I may be way off base but I think my phone may have been exposed to a R.A.T.. Temporarily rooted long enough for someone to modify the kernel and other system coding, which I cannot access myself with an unrooted phone, installing some sort of sub-OS with limited user setting options and a completely different named storage platform,( I.e. emulated, bdef55, self), and not even factory resetting my device helps because it reboots into the sub-OS they installed. They are screen overlaying buttons, and toggles are being reversed in real time before my eyes, settings and options are disappearing from one minute to the next and I've somehow found myself poking around in some windows software on a PC that is used to develop Android software, maybe sdk, not sure but was Linux coding and looked like it was meant for me. I was on the other end of this hack for a few minutes tho but my lack of knowledge made this useless to me. I have downloaded many an app trying to combat this issue but to no avail. Although unsuccessful I have seen a few thing I don't understand but could possibly be helpful for you to identify exactly what my issue is. One thing is an app I downloaded said that a trust cert has enabled a malicious trust agent and my system is being remotely accessed by a third party. The rest is beyond my understanding but I'm going to list a few tidbits you may recognize. LIB, Kinguser, kingroot, persist, unremovable/???/xxx, code Aurora, bootstrap something, libnfc, system/framework/Apache/xml, bin, user value=0 or 1/2, managed provisioning, also a .base ext. on a bunch of sytem apps below the same app without and a few of others. I don't know if that's helpful but it's all I can remember. Symptoms are apps closing on their own, microphone and camera being remotely enabled, unable to update Google play services or store and being forced to use an obviously older and modified version with possible replica apps with restrictions, unexpected reboots, in settings/apps/permissions apps like gallery, when you click battery and then the little i button for info, it says it's a system app and all of the sudden the disable and force close buttons become un-highlighted and unusable and so on and so forth. Lastly, my home wifi is infected I think as well because my roommate is having the same issues. I've tried(unsuccessfully) to root my phone so I could manually remove some of these apps and extra coding and such but it seems impossible because of a locked bootloader. Tried about 10 different ways without success so I've just about given up and smashed the damn thing but then you geniuses popped into my head so I beg of you, please help me or if nothing else, tell me to proceed with the smashing...lol! Thank you very much for your time. P. s. I'm new to XDA dev website so maybe drop me a line at [email protected] with directions back to this thread. Had a bit if trouble navigating here. Thanks again and have a great day! -Spencer

OnePlus (Android) log report?

[SOLVED]​
Hey XDA community,
I was wondering, if OnePlus (or Android in general) have some sort of log of apps running in system. I mean, not only apps but whole proccesses, errors and everything that's running in background. This question came to my mind because of being unable to connect to my OpenVPN server (see my post here https://forums.openvpn.net/viewtopic.php?t=34624). Now, I was able to connect to OpenVPN server before rooting my device. After rooting, i can only connect to Blokada 5 which acts as adblock on non-rooted devices (via VPN). The thing is, i can only see one VPN service in system settings-VPN (before rooting, there was Blokada 5 and OpenVPN). The exact issue of what is going on is captured via screen recording and it's posted in topic mentioned in the link.
I understand that this forum (and OnePlus 8T specific) isn't aimed for solving such an exact issue, so my question is if Android systems have built-in logging mechanism which i can access in realtime or as an exported file. I am rooted so there should be some hope for understanding of what is going on.
I hope I made myself clear, my English isn't best and I partially use the DeepL translator to choose the right words. But if you check that topic I've made, you will understand what's my point that I'm trying to solve.

CaptainFedora said:
Hey XDA community,
I was wondering, if OnePlus (or Android in general) have some sort of log of apps running in system. I mean, not only apps but whole proccesses, errors and everything that's running in background. This question came to my mind because of being unable to connect to my OpenVPN server (see my post here https://forums.openvpn.net/viewtopic.php?t=34624). Now, I was able to connect to OpenVPN server before rooting my device. After rooting, i can only connect to Blokada 5 which acts as adblock on non-rooted devices (via VPN). The thing is, i can only see one VPN service in system settings-VPN (before rooting, there was Blokada 5 and OpenVPN). The exact issue of what is going on is captured via screen recording and it's posted in topic mentioned in the link.
I understand that this forum (and OnePlus 8T specific) isn't aimed for solving such an exact issue, so my question is if Android systems have built-in logging mechanism which i can access in realtime or as an exported file. I am rooted so there should be some hope for understanding of what is going on.
I hope I made myself clear, my English isn't best and I partially use the DeepL translator to choose the right words. But if you check that topic I've made, you will understand what's my point that I'm trying to solve.
Click to expand...
Click to collapse
I don't know the exact cause of the problem in your case, but it may be a conflict of Blokada5 and OpenVPN apps as they both use vpn or OOS12 issue.
If you have root you can view android logs with Logcat. Maybe it'll help you to resolve your issue.

Thank you for the tip with Logcat. I would say it didn't help me, although i saw some errors . By the way, I tried what seemed like most logical solution, and that was uninstalling Blokada 5 (and also OpenVPN) and then installing only OpenVPN. Finally, after reading instruction message, the system asked me about allowing to create VPN profile which I did and after that i installed Blokada 5 again and now both apps works together. I can switch between one and another without any problems. So i solved this problem by myself i guess. To be fair, without your point of view I wouldn't try to uninstall in the first place, so... Thank you