Database Info

security concerns migrating from iOs to Android

As title suggests, coming from a so called "clean" iOS environment to Android, my main concern how susceptible is my data to being stolen. I have no (current) plans to root my next phone and will be used mainly from business, but from what I have read in the past even google play store apps have been to known to have malicious content. Am I worrying too much ? I do carry sensitive work data on my iPhone.

applefag said:
As title suggests, coming from a so called "clean" iOS environment to Android, my main concern how susceptible is my data to being stolen. I have no (current) plans to root my next phone and will be used mainly from business, but from what I have read in the past even google play store apps have been to known to have malicious content. Am I worrying too much ? I do carry sensitive work data on my iPhone.
Click to expand...
Click to collapse
As long as the apps you install are from known sources (i.e. Play Store) you don't need to worry. Also every time you download an app check the permissions. If you think that the app shouldn't have those permissions then don't download it. Finally for safety reasons never install any apps from unknown sources (i.e. outside of Play Store) unless you trust the developer.
If you still find yourself worrying read this.

applefag said:
Am I worrying too much ?
Click to expand...
Click to collapse
Yep
I think you won't install any app outside Google Play so install apps that you know and you won't need to worry. FYI http://en.wikipedia.org/wiki/Security-Enhanced_Linux
kalpetros said:
Also every time you download an app check the permissions. If you think that the app shouldn't have those permissions then don't download it.
Click to expand...
Click to collapse
Well only if you are sure. Sometimes apps need permissions that aren't justified for some people.

for the open nature of the android ecosystem, it is somewhat normal that you will have to be careful though there are several different techniques, i use this the most.
Root your phone, install xposed framework and install xprivacy. here is a review of what it does http://www.xda-developers.com/android/manage-individual-app-permissions-with-xprivacy/ . I know the installation pprocess may seem daunting, but it is easier than you think this module wil allow you to block apps of certain permission. IE. you can block location service for all the apps on your phone so that no app can get your location. There are bunch of other permissions that you can block like access to contact, gallery etc
My question to others is : Is antivirus application on android worth it? I mean can it protect me from real time attaks and malwares??

SaffatBokul said:
My question to others is : Is antivirus application on android worth it? I mean can it protect me from real time attaks and malwares??
Click to expand...
Click to collapse
Not useful IMO. FYI I remember this article.

User sensibility is your best defense. Don't install apps not from the market. Only install apps with a lot of positive comments.
I would advise again rooting your phone. It's true that there are ways to block apps from accessing your private data on a rooted phone, but the additional vulnerability from unlocking your bootloader and rooting is not worth it. Just stick to apps from major developers.

snapper.fishes said:
User sensibility is your best defense. Don't install apps not from the market. Only install apps with a lot of positive comments.
I would advise again rooting your phone. It's true that there are ways to block apps from accessing your private data on a rooted phone, but the additional vulnerability from unlocking your bootloader and rooting is not worth it. Just stick to apps from major developers.
Click to expand...
Click to collapse
I agree, rooting your phone comprimises your security even if you do it to install security apps.

Primokorn said:
Yep
I think you won't install any app outside Google Play so install apps that you know and you won't need to worry.
Click to expand...
Click to collapse
Unfortunately, new apps in Google Play are rarely verified by Google staff, so there is still always a possibility of trojan or other malware.

Root Without Unlocking Bootloader

Hello All
How long does it usually take for root Without Unlocking the Bootloader to come out?
This is the only reason I have not purchased this phone yet.
So frustrated there will be no decent normal sized Nexus 6 and the Z3 loses camera features when unlocked ?

No ETA pls
Let's wait

funkyblue04 said:
Hello All
How long does it usually take for root Without Unlocking the Bootloader to come out?
This is the only reason I have not purchased this phone yet.
So frustrated there will be no decent normal sized Nexus 6 and the Z3 loses camera features when unlocked ?
Click to expand...
Click to collapse
There is no "usual" number. Some phones got root before they were even out officially. Some took a few days. Some took over a month. And some end up retired without a safe root option.
First rule of xda: don't ask for eta

I know that. Just another frustration with android. We need more Nexus phones!

funkyblue04 said:
I know that. Just another frustration with android. We need more Nexus phones!
Click to expand...
Click to collapse
I never thought I could use this phone without root but it turns out I'm wrong. Not really seeing any need for it at the present moment

I like to be about to restore all my data and apps with Titanium Backup. So much easier.

wolf0491 said:
I have nothing but force closes when restoring with titanium unless the ROM is very similar anyway. Like I was using AOSP on my Z before so I just came in fresh. Less issues down the road
Click to expand...
Click to collapse
I've never had an issue switching ROM's being careful to avoid system apps and only restoring the call logs and SMS database, as well as non-system apps.

Everyone is different ☺ I also do nightly backups and sync with Dropbox.

Shudder123 said:
I never thought I could use this phone without root but it turns out I'm wrong. Not really seeing any need for it at the present moment
Click to expand...
Click to collapse
Never thought of using adblockers like AdAway, preventing a total waste of mobile data for loading unwanted ads which easily consume ten times the data needed ?
Never thought of kicking out bloatware also wasting your ressources ?

Would love to see root but for now I can manage quite fine without it... There is less bloatware then with certain other brands and you can uninstall or disable quite a bit.
The few things I WOULD like:
* Completely remove unused system apps
* Change LCD Density (it's all soooo big now)
* Full SDCard read/write access for all apps. (I love quickpic as a gallery, but because I save my pics/vids to sdcard it can not remove anything now)
* Titanium backup. Have never ever had issues with this (only user apps+data for me most of the time) and that's with switching between different roms, brands, aosp/stock, etc... Never failed me

Chefproll said:
Never thought of using adblockers like AdAway, preventing a total waste of mobile data for loading unwanted ads which easily consume ten times the data needed ?
Never thought of kicking out bloatware also wasting your ressources ?
Click to expand...
Click to collapse
ABP doesn't require root and all of the bloat apps can be uninstalled or disabled / blocked using package manager.

cschmitt said:
ABP doesn't require root and all of the bloat apps can be uninstalled or disabled / blocked using package manager.
Click to expand...
Click to collapse
Not to mention Xposed and everything it offers.
Sent from my SAMSUNG-SGH-I317 using xda app-developers app

cschmitt said:
ABP doesn't require root and all of the bloat apps can be uninstalled or disabled / blocked using package manager.
Click to expand...
Click to collapse
ABP (please call it "Adblock Plus" so every readers knows what's meant) does not require root, but it's not too capable running under Android. It does a brilliant job with FireFox and Windows, but the Android implementation only captures a fracture of annoying ads. And: No plugin for defining your own black lists under Android.
AdAway additionally removes annoying ads from a wealth of apps. Just doesn't work without root.
Ok, I can hear you: "If everybody uses that means, app developers won't get paid."
Yes, that's correct.
But:
a) If I really like an app, I'll buy it. Example: Poweramp. NO ads, no annoyance. It just stops working after some time. I regard that as ok. I do NOT like apps getting on my nerves all the time.
My formula is simple: Annoying ads = deinstall, no purchase.
b) A majority of free app developers uses that "evil" ads, appearing at places previously occupied by regular buttons - so you tap on them although you just don't want to.
If that bad behavior gets to a stop, I'll think about disabling AdAway again. Fair play - but on BOTH sides.

cyanogenmod security and google spyware?

What is different in security for cyanogenmod and normal android?
Is cyanogenmod has google spyware?
Thank you

arexium said:
What is different in security for cyanogenmod and normal android?
Is cyanogenmod has google spyware?
Thank you
Click to expand...
Click to collapse
No, cyanogenmod does not have google apps. For more info: http://wiki.cyanogenmod.org/w/Google_Apps
Even if they don't use google apps, they have their own spyware. For more how to secure your device see this: http://forum.xda-developers.com/general/security/tuto-how-to-secure-phone-t2960077

setmov said:
No, cyanogenmod does not have google apps. For more info: http://wiki.cyanogenmod.org/w/Google_Apps
Even if they don't use google apps, they have their own spyware. For more how to secure your device see this: http://forum.xda-developers.com/general/security/tuto-how-to-secure-phone-t2960077
Click to expand...
Click to collapse
This hard for apply and may be not work for my phone
You know easy way?
You thinks not use smart phone and also not use android better?
Only normal phone and for internet only use computer?
Different idea, if you have only text secure app on phone and cyanogenmod how they spy and see message?
Thank you

arexium said:
This hard for apply and may be not work for my phone
You know easy way?
You thinks not use smart phone and also not use android better?
Only normal phone and for internet only use computer?
Different idea, if you have only text secure app on phone and cyanogenmod how they spy and see message?
Thank you
Click to expand...
Click to collapse
I suggest you take a look here: http://forum.xda-developers.com/showthread.php?t=2550769

setmov said:
I suggest you take a look here: http://forum.xda-developers.com/showthread.php?t=2550769
Click to expand...
Click to collapse
This good, I check it
What you think this one please, Replicant OS?

arexium said:
This good, I check it
What you think this one please, Replicant OS?
Click to expand...
Click to collapse
What phone do you have?

setmov said:
What phone do you have?
Click to expand...
Click to collapse
This lenovo a5000
What you think Replicant OS, good one? I changes phone if this good one

arexium said:
This lenovo a5000
What you think Replicant OS, good one? I changes phone if this good one
Click to expand...
Click to collapse
Honestly I haven't tried it, so I don't know. But, what are you looking for? A secure rom, or just a rom without google apps?

setmov said:
Honestly I haven't tried it, so I don't know. But, what are you looking for? A secure rom, or just a rom without google apps?
Click to expand...
Click to collapse
Yes I want secure ROM even if not work on my phone, I can change phone

arexium said:
Yes I want secure ROM even if not work on my phone, I can change phone
Click to expand...
Click to collapse
Then, I suggest you to be patient. There will be some news soon.

try AFWall Donate version, XPrivacy, AppOps, MyAndroidTools Pro, ChatSecure, Orbot, Network Connections or Network Log App in playstore, override DNS app, SD Maid, Firefox browser...these are all good apps known for supporting end-user privacy or for strong root level management of your system. It really depends on what type of "secure" youre interested in. Android is relatively secure security-wise, but privacy-wise, not so much... actually in its default state, not at all, especially with google inside. Knowing your settings, and config, almost any ROM can be secure.

arexium said:
Yes I want secure ROM even if not work on my phone, I can change phone
Click to expand...
Click to collapse
If you are willing to switch to a Nexus 5 we (Graphite Software) have posted a ROM (Secure Spaces) that allows you to create a separate space (virtual phone) where you can easily configure the settings (enable and disable a number of attributes - bluetooth , networking, adb, etc). Also you can remove the Google Play apps in this personal or hidden space, but allow the owner space to still have Google Apps if you want. This new space is encrypted using ecryptfs and also has pid namespaces enabled in the kernel, plus some additional security features. You can push apps into this space to limit their access to the owner space , or you can think of this space as a private space where maybe you launch only a banking app for example.

ElwOOd_CbGp said:
try AFWall Donate version, XPrivacy, AppOps, MyAndroidTools Pro, ChatSecure, Orbot, Network Connections or Network Log App in playstore, override DNS app, SD Maid, Firefox browser...these are all good apps known for supporting end-user privacy or for strong root level management of your system. It really depends on what type of "secure" youre interested in. Android is relatively secure security-wise, but privacy-wise, not so much... actually in its default state, not at all, especially with google inside. Knowing your settings, and config, almost any ROM can be secure.
Click to expand...
Click to collapse
Sounds like a good start to helping secure my android, but how do you use the apps effectively?
Thanks

talkcc144 said:
Sounds like a good start to helping secure my android, but how do you use the apps effectively?
Thanks
Click to expand...
Click to collapse
All I can say is do what I did. Check them out. Read, follow instructions, experiment. Android may come shipped with some functionalities disabled but the capability is there...in a major way. You just have to take the time to learn. Familiarize yourself with settings, apps, services, device signals.

Rooted Android Security Measures. What are they?

I've never rooted an Android. One of the warnings I see over and over is that rooted devices are more vulnerable to malware. I don't see any solutions for this though.
What extra measures will I need to take to keep my Android safe?
I use Norton 360 on my PC and Androids. Will this be of any help?
Are there any apps I can install to help with this issue?
Are there any system settings I should use for this particular problem?
Thank you

With stock or rooted the biggest threat is the user themselves. Most either install or download the malware themselves. A fully updated stock Android isn't invulnerable; there's no saving dumb bunnies...
Side loaded apps are high risk; at the least scan with online Virustotal and consider the results before installing. Keep email in the cloud and be careful if you choose to download anything.
All downloads stay in the download folder until vetted. Jpeg's and png's are suspect; open them there first before moving them and watch for strange behavior in that folder. Check the download folder daily for anything you didn't download, if found do not open, delete.
Keep thrash social media apps off the phone, all of them. They are targets and vectors for malware of all types.
Use a good firewall and police what apps are doing. Revoke internet access to all apps that don't need it. Know what apps have run at start permissions; do they need it? Updates and upgrades can cause more lost time then malware trying to find work arounds. Lock auto updates down, and download them only if needed. Updates and firmware upgrades can and do break things...
Most importantly cover your six and be prepared.
Critical data can not be lost, protect it!
Redundantly backup all critical data to at least 2 hdds that are physically and electronically isolated from each other and the PC. Be ready to do a full reload if needed.
If malware is found or suspected, isolate the phone and if it can't be completely deleted in an hour or two, nuke that load. Be ready to change passwords and secure accounts.
Never trust antivirus apps to detect malware or save you, mostly they just waste resources on an Android.

Thank you!
I'm already doing a lot of those things, especially social media apps.
One of the reasons I want to root my phone is that I can't uninstall, force stop, disable or take away permissions for some apps, like Facebook, Facebook App installer, FB app manager Google, ad nauseum. The same goes for the millions of preinstalled Samsung bloatware apps. They dont stay disabled and routinely restore permissions. Im sick of having to routinely check them all. I'll never buy another Saamsung again.

You're welcome. Welcome to XDA
I run 2 stock N10+'s, one on Pie, the other on 10.
I use package disabler to kill bloatware and services I don't want to run at bootup. You can also use a adb editing app to disable apks. Don't go too nuts; be wary of disabling any Samsung system apps. Most of these apps just sit unless needed. Dependencies... actions have consequences; understand what the app does and what other apps, services or UI functions are dependent on it!
Google play Services can be disabled when not needed; disable find my device as System Administrator first.
On Pie Karma Firewall is fully functional but not on Android 10 and up, although it will still block access. It uses virtually no battery.
Once you sort it out (learning curve ahead) stock Samsung's especially older ones like the N10+ are easy to run. They are the most customizable stock Android on the planet with an excellent UI. The current load on this one will be 2 yo this June; still fast, stable and fulfilling its mission. Security is simply not an issue.

blackhawk said:
You're welcome. Welcome to XDA
I run 2 stock N10+'s, one on Pie, the other on 10.
I use package disabler to kill bloatware and services I don't want to run at bootup. You can also use a adb editing app to disable apks. Don't go too nuts; be wary of disabling any Samsung system apps. Most of these apps just sit unless needed. Dependencies... actions have consequences; understand what the app does and what other apps, services or UI functions are dependent on it!
Google play Services can be disabled when not needed; disable find my device as System Administrator first.
On Pie Karma Firewall is fully functional but not on Android 10 and up, although it will still block access. It uses virtually no battery.
Once you sort it out (learning curve ahead) stock Samsung's especially older ones like the N10+ are easy to run. They are the most customizable stock Android on the planet with an excellent UI. The current load on this one will be 2 yo this June; still fast, stable and fulfilling its mission. Security is simply not an issue.
Click to expand...
Click to collapse
The more annoying Samsung apps I was referring to are the Bixby apps, AR doodle, Smarter things... those kind of apps. If they didn't re-enable themselves restore permissions, I wouldn't mind them so much. But they DO.
I won't be using that phone much longer anyway. I'm going back to Motorola.
I always buy factory or globally unlocked phones. That helps some. But Motorola recently started forcing FB. I can uninstall it, however I have to review updates to make sure it doesn't end up on my phone again. But then I review all updates before installing them anyway..
I always look up the system apps before making any changes. Like Google Easter Egg. Everything I could find says it's unnecessary.

All those mentioned apps can be safely disabled.
Bixby Vision is used for barcode scanning though.
Try the free Galaxy store icon packs, themes and the Good Lock family of apps including One Handed Operation plus.
Chose theme>icon pack>whatever wallpaper you want. The native high contrast theme looks good.
Play with it...

blackhawk said:
All those mentioned apps can be safely disabled.
Bixby Vision is used for barcode scanning though.
Try the free Galaxy store icon packs, themes and the Good Lock family of apps including One Handed Operation plus.
Chose theme>icon pack>whatever wallpaper you want. The native high contrast theme looks good.
Play with it...
Click to expand...
Click to collapse
I actually already ordered a new Moto. It will be here tomorrow. Well, it's after 1am, so I guess it'll be here later today.
I've disabled multiple Samsung apps, restricted data and battery, taken away permissions, not just in app settings, but in permissions setting, special access permissions... And all the other weird ways I keep finding out about that you wouldn't think would be a place to remove permissions. When my phone starts to slow down, or the battery isn't lasting very long, sure enough, Samsung has gone behind my back and reset my preferences again. I never had issues like this any of the Motorola phones I've had.

Question (solved) play store auto installing apps on all devices

play store auto installing apps on all devices
Whenever I install something on my s22, it will install it on my galaxy tablet.
How can I prevent this.

In Playstore settings change to update by wifi only and disable wifi. I normally keep Playwhore package blocked and firewall blocked unless needed. Once a Playstore paid for app is activated I firewall block it as well if it doesn't need internet access. I avoid Playstore as much as possible and create installable backups for all the apps from Playstore so I never need to use Playstore again when reloading except for paid apps. It streamlines reloads and they go much faster.
I also use more Playstore alternatives now but always scan them first with Virustotal. A Playstore app may be clean when installed only to download it's payload latter as an "update". Another reason I don't allow updates or an internet connect if not needed. Playstore updates can and do ruin once working apps. Tired of that bs.

Thanks for your thoughts.
But this did not ever happen before.
I've always had a Samsung mobile and Samsung tablet and the mobile app never auto-installed on the tablet till now.
I don't want to turn off auto-update because thats not a real fix.
Need to find out why its auto-installing.
I checked playstore on mobile and on tablet and on browser - but theres no mention of auto-install on all devices.

CorruptedSanity said:
Thanks for your thoughts.
But this did not ever happen before.
I've always had a Samsung mobile and Samsung tablet and the mobile app never auto-installed on the tablet till now.
I don't want to turn off auto-update because thats not a real fix.
Need to find out why its auto-installing.
I checked playstore on mobile and on tablet and on browser - but theres no mention of auto-install on all devices.
Click to expand...
Click to collapse
You can manually install updates from Playstore which is a wiser way to do it. One of the reasons I can run Pie securely is I use vetted apps, some are 6 yo and I firewall block them. Updates bring trouble far too often. Once a system is running fast, stable and fulfilling its mission updates serve no purpose most of the time. Auto updates bring rude surprises and make troubleshooting much harder in tracking down the offender.
In 2.5 years (that's how old this current load is) I've had no malware but spent a lot of time undoing damage updates have caused including a firmware "upgrade" for my Buds+ that trashed the sound. That pair now needs to be reflashed and it's a pain to do. meh.

If you try unmark one or more of your devices before instalation on the app, did it help?
See the pictures.

Same, annoying feature, as on iPhone. On the other device go to settings/network preferences and disable auto update.
Simply manually periodically check for updates on tablet and it will check and update any apps installed if necessary

Monipeev said:
If you try unmark one or more of your devices before instalation on the app, did it help?
See the pictures.
Click to expand...
Click to collapse
that was exactly it!
both devices were checked
many thanks to you!!
raul6 said:
Same, annoying feature, as on iPhone. On the other device go to settings/network preferences and disable auto update.
Simply manually periodically check for updates on tablet and it will check and update any apps installed if necessary
Click to expand...
Click to collapse
see above solution