Hi there,
I am wondering how exactly Androids new permission system works when running apps that do not target API level 23 and above. In that case, one has to agree to all requested permissions when the app is installed, but can revoke permissions afterwards in the settings of that app.
I had expected that revoking a permission adds an entry to some sort of "blacklist", so whenever the app tries to do something that would require a revoked permission, this attempt would be blocked. It seems however that reality is more complicated, because I stumbled upon an app where revoking a permission fails.
I installed the latest version of the DJI Go app, which requests tons of permissions upon installation. I especially wanted to revoke the "phone" permission, as I don't see why the app should be able to dial phone numbers or redirect calls. Whenever I tap the appropriate slider of the phone permission group in the app's permission setting, the slider turns to the "off"-position, but as soon as I leave the settings and go back afterwards, the slider is automatically set back to "on" again.
It is the only permission of the DJI Go app where revocation fails, all other permissions can be permanently revoked without problems (apart from the app crashing after startup when launched with all permissions revoked ).
Does someone have an idea what might be going wrong there? I tried to figure out how revocation of permissions actually works, but found nothing that could explain this odd behavior.
I'm running Android 7.0 on a Nexus 6.
I'm not sure if I chose the right forum for this question. If not, perhaps someone could move it to a more appropriate one.
Related
This post is regarding the Xfinity Mobile app: https://market.android.com/details?id=net.comcast.ottclient
My system log shows <userName>[email protected]</userName> and <password>MYPASSWORD</password> on a line that starts with "D/HTTPManager". I read the log using aLogcat (app available in the market). Open aLogcat, press menu and filter for "password". After I clear my log (using aLogcat) that line reappears even when I haven't used the Xfinity app. I don't use my comcast credentials in any other app.
To try and resolve this I cleared data and cache for the Xfinity app, then cleared the system log in aLogcat, and restarted the phone for good measure. I opened the Xfinity app, logged in without checking "remember me" and unfortunately my username and password immediately reappeared in the system log.
I posted this issue here: http://forums.comcast.net/t5/Mobile-Apps-and-Web/Password-revealed-in-android-system-log/td-p/872295. A Comcast employee responded to say they will investigate this issue and fix it within a few weeks. In the mean time, you may want to uninstall the Xfinity Mobile app and change your Comcast password, or at least do not share your system log with anyone (in bug reports for example) if you have Xfinity Mobile installed.
This may not be the only app that exposes sensitive information in the system log, but this is the only password I have found exposed.
I have a Motorola Droid running stock Android 2.2.
UPDATE - As squiddy20 pointed out, Comcast has updated their app to 2.0.2. They include instructions to clear the app data as part of the upgrade, but that may be unrelated to this issue. In any case, I cleared the app data and installed the update, and my credentials no longer show up in the log. As far as I can tell, they have completely resolved this issue. If the problem persists for anyone else, be sure to post that here and on the Comcast forum.
Wow Comcast.
Thanks for the heads up
I checked this out for myself and the only way I could get it to show up was by logging out and then back in. I then did a reboot, let it sit for well over 5 minutes after it was fully booted, and then tried it and still no entry under "password". I dont get any of the sporadic, random popups you seem to have gotten. Oddly though, I have it set to not login automatically, yet after the reboot, it took me right to my email messages without me actually typing in my login info. That in itself is room for concern, let alone the possibility that login info is contained in the logcat in plain text.
Samsung Moment 2.1 running TiX 1.6 rom.
Interesting I to have the same issue squiddy20. Very concerning not a good thing Comcast
I was not able to see my password
I use an EVO with 2.3 and checked the same on my logs after logging in .. and only saw my username the password was nowhere to be found. I guess it would only happen when you first try to login.
squiddy20 said:
I checked this out for myself and the only way I could get it to show up was by logging out and then back in. I then did a reboot, let it sit for well over 5 minutes after it was fully booted, and then tried it and still no entry under "password". I dont get any of the sporadic, random popups you seem to have gotten. Oddly though, I have it set to not login automatically, yet after the reboot, it took me right to my email messages without me actually typing in my login info. That in itself is room for concern, let alone the possibility that login info is contained in the logcat in plain text.
Samsung Moment 2.1 running TiX 1.6 rom.
Click to expand...
Click to collapse
Now that I have unchecked "remember me" my credentials only show up in my log when I log out and back in. Not sporadic any more.
Check your Xfinity Mobile -> Settings -> Log Out setting. If it is set to "Never", then you wouldn't have to log in again after a reboot. If it is set to "On Exit" then you should have to log in again after exiting the app or after a reboot... but that may be buggy.
Thanks for the tip, but I honestly don't access my email through the app very much. To me, less things logged into and running in the background, means more memory for other things and slightly more battery life.
Also slightly less security problems!
Well, they've updated the app and I assume they've fixed the logcat problem (haven't checked for myself yet). They do have a note: "This Update will require you to log in to the application" plus the usual updates, improvements, and fixes.
Edit: just ran 2 checks with aLogcat and can confirm that the username and password info does not show up when searching for keyword "password". On a slight side note, I've noticed that hitting the home button on my Samsung Moment exits the app, but doesn't sign out. While hitting the back button from the main screen exits the app AND signs out. Settings also seem to be staying the same, even after reboots. Mine would reset occasionally, turning notifications on and other things.
I have had some concerns as well. I have lost most of my channels in the TV listings area. It goes from 2-29 and then 75-99 but that is it. I have uninstalled and reinstalled the app several times, cleared data in applications, etc. As I reinstall the app, it is going right into my system without asking for a password which I find a bit alarming.
I assume that the program has reverted to a selection that is not the full digital programming which shows up when you first do an initial install. I cannot find a way to get back to that area to reset my configuration and add all my channels back. I have emailed Comcast and those idiots responded that they do not have an app that works with Android yet, only iPads and iPhones. Quite comical.
Any help would be greatly appreciated.
I have tried all of the methods mentioned above and when I log in using username and password, and filter alogcat only my username appears in the log. Also tried brief and long settings in alogcat preferences.
Edit: This is using the 2.0.2 version.
Hi Squiddy ,
Pressing the backbutton will exit the app and pressing the home screen actually puts the app in the background so that at later point of time we can launch the app from the page where we left .
I dont think this is an Issue.
Hi Dawgman25,
There is a settings for the program area where you can change the zipcode of yours and select the proper digital option.
After logging in tap on the settings on the lower right corner.
There will be an option program area under TV Listings.
There you can enter your zipcode and give the correct Headend (Digital) option
I think the forums.comcast.net will respond quicker and properly .
you can also directly send mail to [email protected] to get lightning response !!
I tried this and he responded immediately
Ever since I switched back to my Android phone, Push notifications for mentions never worked on my account anymore. Every time I go to enable it and push back, then go back to see if its still enabled, it automatically disables itself. Now I thought to my self that the app could be just broken, but I have 2 Twitter accounts, and my secondary account I use gets notifications just fine, buy my main one doesn't want to keep them enabled. So I thought it was my phone so I tried logging in on another Android device I have, same problem. Now with the new update that they released today, me thinking it would fix the problem, I go to turn on notifications, then I get "Updating Notification Settings" ......... "There was a problem updating notification setting". I have tried Googling this but can't find a fix anywhere. Any ideas?
Abdelati786 said:
Ever since I switched back to my Android phone, Push notifications for mentions never worked on my account anymore. Every time I go to enable it and push back, then go back to see if its still enabled, it automatically disables itself. Now I thought to my self that the app could be just broken, but I have 2 Twitter accounts, and my secondary account I use gets notifications just fine, buy my main one doesn't want to keep them enabled. So I thought it was my phone so I tried logging in on another Android device I have, same problem. Now with the new update that they released today, me thinking it would fix the problem, I go to turn on notifications, then I get "Updating Notification Settings" ......... "There was a problem updating notification setting". I have tried Googling this but can't find a fix anywhere. Any ideas?
Click to expand...
Click to collapse
Having the exact same problem.. tried deleting the data, removing the account. Uninstalling and reinstalling the app.. try checking if just 'Tweets' works.. that one works for me. But I don't want that.. lol
I'm having the same issue, I even tried resetting my phone from scratch with no data whatsoever, I even formatted it and wiped everything, I'm using CM9 on a Samsung Galaxy S2
RUnning the new v3.2.0, trying to set notification preferences, when I exit back to acct prefs, I get a toast saying "There was a problem updating notification settings." Is that what you're seeing as well?
---------- Post added at 03:18 AM ---------- Previous post was at 03:17 AM ----------
Abdelati786 said:
Ever since I switched back to my Android phone, Push notifications for mentions never worked on my account anymore. Every time I go to enable it and push back, then go back to see if its still enabled, it automatically disables itself. Now I thought to my self that the app could be just broken, but I have 2 Twitter accounts, and my secondary account I use gets notifications just fine, buy my main one doesn't want to keep them enabled. So I thought it was my phone so I tried logging in on another Android device I have, same problem. Now with the new update that they released today, me thinking it would fix the problem, I go to turn on notifications, then I get "Updating Notification Settings" ......... "There was a problem updating notification setting". I have tried Googling this but can't find a fix anywhere. Any ideas?
Click to expand...
Click to collapse
Dan, I should have finished reading your post, lol
Yeah i guess its not just me, but im wondering why it does that for specific accounts? Like my second Twitter account works fine. I downloaded the Twitter 3.0 apk from 4shared, and that worked fine. I guess They keep breaking their own app.
3.0 works for you? Sweet. I'm gonna give it a go
Sent from my Nexus S using XDA
Trying to revoke all apps on twitter web on pc. Setting > Apps > Revoke all apps.
Work for me
Sorry for my bad english
GXXZE said:
Trying to revoke all apps on twitter web on pc. Setting > Apps > Revoke all apps.
Work for me
Sorry for my bad english
Click to expand...
Click to collapse
Thank you very much! This actually worked
Worked for me too, just had to remove my account from the phone and sign in again afterwards.
I Am Also Face This Problem
i am also face same problem with my twitter notifications.
why ...
anybody know how can solve that problem???
GXXZE said:
Trying to revoke all apps on twitter web on pc. Setting > Apps > Revoke all apps.
Work for me
Sorry for my bad english
Click to expand...
Click to collapse
Thanks a lot, worked for me as well
Cheers
My notifications work well but there's no sound. Does anyone else got this problem?
GXXZE said:
Trying to revoke all apps on twitter web on pc. Setting > Apps > Revoke all apps.
Work for me
Sorry for my bad english
Click to expand...
Click to collapse
Works for me too, thank you. Really i cant belive all apps i granted acces to my TW account, even my ATARI 2600 had acces to my TW XDDD
GXXZE said:
Trying to revoke all apps on twitter web on pc. Setting > Apps > Revoke all apps.
Work for me
Sorry for my bad english
Click to expand...
Click to collapse
This worked perfectly! Thanks
Im on a samsung galaxy s 2 and having the same trouble, where do I find revoke applications?? Thanks guys
This happens when you have multiple mobile (android and ios) devices all signed in to one twitter account. Somewhere along the line, in between flashing ROMs with different build id's and or having two devices will confuse Twitter in a sense, so sign out and uninstall twitter from the other devices, go the desktop twitter site, and in settings, revoke twitter permissions you've granted and sign back in on your device. Everything will work fine. You'll be surprised that every twitter app you've ever tried is still in there, with access. Kill em' all....
Using the browser this link http://mobile.twitter.com/settings/change_ui will take you to the desktop version. Its a pain otherwise.
Settings>Apps you'll see it from there..
Sent from My Beast™
GTP7310
I did not have to remove all app access on twitter website - just removed any linked to mobile apps
revoke all apps! worked for me to!!
Thanks man!
Abdelati786 said:
Ever since I switched back to my Android phone, Push notifications for mentions never worked on my account anymore. Every time I go to enable it and push back, then go back to see if its still enabled, it automatically disables itself. Now I thought to my self that the app could be just broken, but I have 2 Twitter accounts, and my secondary account I use gets notifications just fine, buy my main one doesn't want to keep them enabled. So I thought it was my phone so I tried logging in on another Android device I have, same problem. Now with the new update that they released today, me thinking it would fix the problem, I go to turn on notifications, then I get "Updating Notification Settings" ......... "There was a problem updating notification setting". I have tried Googling this but can't find a fix anywhere. Any ideas?
Click to expand...
Click to collapse
Not getting push notifications on my Samsung galaxy note 2 4.1.2 .twitter ver 4.1.2 .have tried revoking access .signing out of device app.deleteing the app reinstalling then signing bk in .activating master sync and twitter sync.still not getting and notifications. able to get whatsapp Facebook gtalk and other notifications without any problem.
Just go to twitter.com / Settings / App / Then revoke Twitter for Android.
After doing it, Log in to Twitter for Android, put you password, and notifications should work!
I recently moved to rooted android 11 (pixel 4A) from jailbroken iOS so I'm very new to Android.
I've read through googling that disabling RECEIVE_BOOT_COMPLETED permissions will stop the apps from autostarting but whilst this stops a good proportion of apps, a number of apps such as Termux are still getting through. Some apps don't even have RECEIVE_BOOT_COMPLETED but they're still able to start. I have disabled app syncing on my device. I've tried multiple apps such as Task Manager and SD maid and this small proportion of apps are still autostarting.
Does anyone have any clues as to how to fix it?
If an app doesn't listen to BOOT_COMPLETED broadcast then it doesn't care about this event.
jwoegerbauer said:
If an app doesn't listen to BOOT_COMPLETED broadcast then it doesn't care about this event.
Click to expand...
Click to collapse
Hmm, so maybe there's some kind of service running after the boot that starts it? Or some kind of delayed boot? I thought it might have been due to sync reopening apps or something but when I disabled that it still kept showing up. And those apps aren't listed in the Services part of the Developer Services either...
ok I figured it out, my pixel remembers what apps I have open before a reboot and reloads them afterwards. so remove all apps from the memory before rebooting and nothing will be remembered
Hi!
I can't believe how much time I wasted because Google messed something up with voice typing. I suddenly had a new version with a blue microphone circle instead of a mint green one and ever since the voice recognition is so bad it's unusable.
I reverted back to an 11. version and it works again, but Google keeps updating this app despite me having auto-updates disabled everywhere.
How can I prevent this auto-updating.
I have tried creating the directories com.google.android.googlequicksearchbox-1.apk and -2.apk in the data directory, but that hasn't helped.
I have xposed of course. Any other ideas? Titanium Backup isn't any help, for some reason it can't restore an older version and doesn't even report any errors...
If you are rooted, just flash the Magisk module : Detach , it will automatically remove all listed app from auto update
Unfortunately that, too, didn't work. I installed Detach and uncommented Google App and a day later it had auto-updated again.
It's really annoying, because Titanium Backup apparently cannot restore an older version of Google App. So I have to uninstall it first. But after a restore I then have to go into settings, activate Google voice keyboard, grant the app permission to the mic and set the rights in Xprivacy. On a "real" OS I could just write a script for all that. Grrr.
I'm trying to resolve an issue with the Android Lost app, and unfortunately the developer's forum page is closed. It does no good to contact him via email, as I always receive a canned response due to the many emails he receives. I'm hoping someone here may be able to help me troubleshoot.
I have uninstalled and reinstalled, cleared cache and data, but every time I reinstall Android Lost v3.26 on my wife's Google Pixel 3a running Android 12, I get the same following issues:
First, it opens and says Personal Notes, PIN code required. It will only take the old PIN.
How is it remembering the old PIN if I have completely uninstalled, deleted its data, rebooted the phone, etc? (Yes, I removed the Administrator permissions)
After entering the correct PIN, I get a popup, "Use Your Location", which I click OK.
It then instantly pops up the next window:
"Some Permissions are missing. For this app to work as expected you must accept the permissions. Let us go through them one by one."
I click OK. (It does NOT go through any permissions for me to select.)
Once again, instantly, another window pops up:
"Not all permissions were accepted. Most likely you have clicked deny and never ask again. To allow permissions you must go to your phone's settings menu and set it manually."
I click OK.
So I go to my phone's settings, and allow all permissions for the Android Lost app, YET, when I run the troubleshooter from the app, I get the results shown on the attached pic, Test12-Missiing Permissions.png.
I have also attached the log file generated by the Android Lost app.
Mike
Have you tried to reset your app launcher? I've had this problem and by clearing data in my launcher it reset my screen and all the apps pop back up.
Just tried by clearing the data and cache for the Pixel Launcher, but it made no difference.
One of the options for troubleshooting is to start from scratch and register your email again by clicking the button, Re-register at Google. Yet, when I click it, it says "Please Wait...", then 3 seconds later it says "No Google account found on phone - This app was NOT registered."
I can confirm, my wife's Google email is on this phone, so I'm not sure why it is saying that.