security with out root options - Security Discussion

Haveing personal security on a device without out root is not easy.
I am being given a lg g tab v522 for a Xmas with 2gb a month data over lte for 2 years.
But sadly from all the research I've done the tablet is not going to be rootable.
So I'm looking for ways to ensure my security without root.
And I will report back here with what I find and how I feel about it.
Please feel free to post any applications I should look at.
Like history wipe,app backup, or ways to reset the Android id and other tracking methods without root.
things I will be looking for
(Preferably with out internet access)
Secure contacts storage
Because using Android contact's is just silly
Secure calendar app
That's right I don't need Google sync
Secure online storage
Possibly ghost commander with a mega plugin
Firewall
Looking at the no root firewall
Bookmarks
There are a few apps that don't need sync
Web browser
Firefox? Pale moon? Other?
Notes
Using mininoteviewer now, have to look at other possible s
Video player
Music player
????? I like folder players over play lists but security will be most important
Forums application.
I use xda labs now.. But have to look at its permissions closely
Gps spoofer
Thank goodness that this can be done without root.

Ok this should be considered dead
After a nightmare of a time dealing with customer service trying to get the tablet shipped as a present to a different address they get it wrong three times
Now it is out of stock..
So they can stuff it.
Which means I will not be getting a non rootable tablet so I have no motivation to risk my information testing with out root.
Happy solstice.

Related

[GUIDE] 17-10-2013 Guide to Track Android Mobile | Antitheft | Secure your droid

​
"Hello Android buddies!". Sounds really cool, right??
Obviously, Android has created a new revolution in the mobile world because of its Open Source features. Though it is Open Source, we can see lot of advantages and disadvantages. I've seen many geeks in android also lot more noobs. More than 1 Billion android users are there in this world and the count is getting increased day by day. Even now many users are reading this blog in your android phones. If so, a Happy news in waiting for you guys.
We are spending huge bucks in buying a Android device but How you feel when it got stolen are Misplaced somewhere? Don't worry guys, you are at right place. Yeah, here we gonna see how to secure your device from thieves hand also how to track it effectively. You know what the word "Effectively" means and you really agree it once you are done with this cool method.
For Android geeks - Best method to track/protect your droid (Rooted devices)
For Noobs - Sorry for you guys, small loop hole is there (NON Rooted devices)
Before we customize our device for tracking, lets consider what a thief will do if he/she steals your mobile.
Power Off your mobile to prevent getting calls and sms or simply to get off from tracking.
If lockscreen protection is enabled, he/she tries to remove the phone battery (in case of removable battery mobiles).
Remove SIM card from your mobile. At this point all users will lose their hope in getting their mobile back.
Factory reset your mobile.
If he/she is a geeky, flashing new ROM is also possible(bit funny but its fact).
To overcome all these darkest part, we gonna use 3 different apps in our process.
STEP 1:
Enable Password protected lock-screen from settings and I hope all users know how to do it. Now your droid's data is protected securely.
STEP 2:
Install Smart Lockscreen protector app from Playstore and ON the Enable Lockscreen option under Power menu settings.
Now this app won't let you to Power Off your mobile from Lockscreen. Its one of the best app for devices with non-removable battery. Problem 1 is solved.
STEP 3:
Install AutomateIT app from Playstore or spend few bucks on AutomateIT PRO which unlocks all features. This app allows user to enable Data/WIFI/GPS using SMS commands. For devices running android version prior to GingerBread 2.3, GPS can be enabled by any third party apps however devices above GB 2.3, Google has blocked the access hence ROOT permission is required to enable this feature. Sorry for the users with non-rooted droids. Check the picture to create trigger and action if you are using the app for the first time. To enable the "Composite Action" in the Action column, you need to unlock the feature at the bottom of the list which asks you to create account. Just Go ahead.
Once you are done with the configuration, test it by sending the sms with specified format gpson from another number and see what happens. You'll receive an acknowledgment sms that the config has been applied and all the options which you've specified are enabled. So if you come to know that your mobile has been stolen, this sms commands let you to activate GPS remotely and we can track effectively compared to Network location. Big thanks to the developer of this awesome app.
STEP 4:
Now we are going to use 2 different steps to track the devices running android version 2.2 and above.
Using Android Device Manger
Using Cerberus Antitheft app
Android Device Manger:
Thanks to Google for allowing us to track our device associated with the Gmail account. To locate your device in ADM, you need to apply some settings. Open Google Settings app and enable the options in picture.
Goto Settings->Security->Phone administrator and Enable Android Device Manger. Now open Android Device Manager from the browser and you can track the device, also it allows you to remotely lock and wipe user data.
Though ADM allows you to locate your device, the features are very limited and I hope Google will update more features in near future.
Cerberus Anti-theft:
I'm sure you guys will surely attracted by this awesome app. Many have heard about this app but still I need to explain its features here but sadly I don't have time for it. Hope you know what I mean. It has hell lot of features which allows user to get device info remotely, call logs, sms logs, Send sms to specified number about the SIM change which is one of the best feature which solves problem 3.
Install Cerberus Antitheft app from Playstore. You'll get one week trail period after that you need to buy license to continue the service and its worth spending few bucks on this app. First installation allows you to create User account and enable the following options
You can register 3 mobile numbers to receive notification about the SIM change. Login to the Cerberus site and there you can see all the features provided by this app and I'm damn sure that you can surely locate your device using any one of the features.
STEP 5:
Catch the thief and show who you are..!! :good:
DEVICE NOW SECURED​​
Even though we considered so many things in mind to protect our device, you must be very careful from looters. I can't guarantee that this method will work 100% but surely I'll give 95% to rooted mobile and 90% to others. Also keep in mind that you've limited time period to track & recover your mobile as it decreases along with the device battery percentage.
Found this thread useful..??...Rate & Hit Thanks...:good:
Visit My Blog too..
Reserved for future....!!​​
****deleted****

Parental lockdown

Over at Random Blame's Sero 7 Pro Jellytime thread http://forum.xda-developers.com/showthread.php?t=2474673&page=20 there was a brief discussion about creating a locked down kid-safe rom for kids with known internet-misuse issues. My basic idea was to turn the Sero into a glorified media player, with no access at all to communication capabilities, including browser, facebook and such, but still permitting youtube and some other niceties.
There are "apps for that" in the store, but at least the free apps have security holes in them bigger than the Titanic, post-iceberg. The largest hole is the easy workaround of accessing the play store through an ad, then simply uninstalling the PC software. If the kid remembers to put it back later, you might never know it was done.
Here's what I came up with, rolling with several of the ideas proposed in that thread. I'm no dev, and no ability to create a rom, all I did was butcher an existing one In theory, you could do this with any custom rom for any rooted device. It's a one-way trip, so make sure you save the original image someplace in case you want to return to full functionality.
As always, proceed at your own risk.
So for my Sero 7 Pro I did as follows:
1. Root and install XboxeXpert's custom rom, from post 3 here: http://forum.xda-developers.com/showthread.php?t=2297246
2. Install any apps you want on the device from Google Play. Do NOT install from Amazon, they won't work without the Amazon App store installed, which defeats the entire purpose. Trust me, I blew hours on this.
3. Install titanium backup and save everything thus far. Move the save files to a secure laptop so you can reinstall and update later, as needed.
4. Use an app manager like App Master and start stripping out everything related to communications. I blew away Messenger, Browser, Email services, and a number of others. Use your imagination.
5. Lastly, in direct opposition to almost everything XDA stands for, remove Play Store.
* App Master has a backup function, and you may be tempted to use this to preserve Play Store in case you want to install something else later. I found it does not restore correctly and Play Store was unusable, and had to re-flash and start all over again. You may have better luck with Titanium, but I did not try it.
Without a browser, the kid cannot get on any inappropriate sites. Without an app store, they cannot replace the stock browser / messenger or add Facebook / Snapchat to the tablet, even by clicking on an add. The free game apps I installed worked fine, but the ads went nowhere.
This is pretty efficient, about the only thing the kid can do at this point is install a new rom fresh, for which they would need access to a computer, which you would also control in your own house. Can it be beaten? Sure, some of these kids give the NSA night-sweats, but unless your kid is an aspiring dev, it's about as secure as you can hope for.
Best of Luck,
TM

Specific settings lockout on Asus Zenpad c 7.0 - possible?

I have a set of Zenpads that will have random users. I have hooked them all into a single Google account so I can use Find My Phone to track them and to make it a little easier to update apps. I initially locked out some apps and the settings but then realized my random users would not be able to connect to any wifi networks.
When the tablet gets checked back in, I can factory reset it and start over. I have rooted one so I know I can do that if it's necessary. None of the information I've found on multiple users in Lollipop (these run 5.0.2) applies to this tablet, it seems.
I have 25 of these critters to keep track of. They are pretty much open for the user to do whatever. That's fine. What I most need is to be able to keep them hooked up to my Google account and to keep that account from being nuked or accessed. If I can hide most of the settings but still allow access to the wifi networks option, that would be great!
Thanks for your help!
After a lot of rooting and booting, I've determined that what I really want to make happen with these tablets is geolocation more than anything else. Essentially, I want to use Google''s Find Device and keep it running, attached to my admin Google account, regardless of whatever other user logs in. I tried the multi-user account apps after root but they do not keep both users logged in so the Google account gets shut down as soon as the other user logs in.
The paid services/apps are really expensive and have way more than I need to do. I trialed a few of them and found they have a ton of useless features. Even pushing out apps is ridiculous. For example, if I want to push an app to one of my checked out devices, the user still has to log into the play store to download or update the app through their own account. Im basically suggesting to them that they get an app? That seems really goofy to me.
I have started working with Android Studio so I am happy to try coding something. I'm just not sure where to begin. Of course, if something already exists, I'd rather use that!

Looking for way to protect against theft.

Hi all, I work at a group home and one of the clients recently purchased an Amazon Fire tablet to facebook chat with his dad.
My issue is that thanks to the crapiness of humanity I know that there's a strong potential for the tablet to grow legs.
Without getting into details, the client cannot have the tablet always in their posession, and we can't conveniently lock it down anywhere, and ideally whoever is supporting him needs to have access to the tablet whenever possible.
I'm wondering if there is an app, or even better, a device, which can cause the tablet to alert my manager the moment the device leaves the property? Ideally something not easily accessed or removed.
I know getting a tablet just for facebook chat is overkill, I wasn't the one who purchased it for the client, I'm just trying to make do with what is available.
theseventensplit said:
Hi all, I work at a group home and one of the clients recently purchased an Amazon Fire tablet to facebook chat with his dad.
My issue is that thanks to the crapiness of humanity I know that there's a strong potential for the tablet to grow legs.
Without getting into details, the client cannot have the tablet always in their posession, and we can't conveniently lock it down anywhere, and ideally whoever is supporting him needs to have access to the tablet whenever possible.
I'm wondering if there is an app, or even better, a device, which can cause the tablet to alert my manager the moment the device leaves the property? Ideally something not easily accessed or removed.
I know getting a tablet just for facebook chat is overkill, I wasn't the one who purchased it for the client, I'm just trying to make do with what is available.
Click to expand...
Click to collapse
It's an Android right?
I had a look at the Amazon store for anti-theft apps but there were none that I recognised from sources I trust (nit that I have researched them, but maybe you can find a reliable review) You have to be certain it's from a trusted source as these type of apps require special permissions eg admin in order to do their job, and could be abused by a malicious app.
I would recommend Cerberus Anti Theft, I used them for years & they have a good reputation, even though Google removed the app form play store. This is because they had to link the Google app to additional downloads in order to maintain the functionality of the app that made it the best, after Google changed what permissions apps could be granted for apps downloaded from Google store.
You can download for Android devices from their website
https://www.cerberusapp.com/
However there is a potential problem with all antitheft apps, ie. Turning off wifi/data means you can't communicate with it(but Cerberus could be activated via SMS), also a factory reset will remove them, so if a knowledgeable person steals a phone/tablet they can remove the antitheft app, so possibly you would have limited time to activate it. Which is why I used to root & install as a system app, which meant only reinstalling the full factory Android operating system to remove it.
There should be the basic "fined my device" on Android built in (I'm not familiar with Amazon variants) but its not very powerful.
I'll look into it, thanks. It does have tracking but unfortunately that wouldn't alert in time to be able to accurately determine who took it.
If Cerberus can do sms then my manager might be able to get immediate notification if it walks away, once it disconnects from wifi
What I don't get is why isn't there a hardware based solution, something that you have connected to your wifi that alerts you if devices in connected to that wifi signal get disconnected. Or even simpler, bluetooth based.
The problem is that tablets don't all have data, and if turned off they lose the anti theft features. So there needs to be something outside of the device itself that can alert the owner. Maybe it's just to specific a problem unfortunately.
theseventensplit said:
What I don't get is why isn't there a hardware based solution, something that you have connected to your wifi that alerts you if devices in connected to that wifi signal get disconnected. Or even simpler, bluetooth based.
The problem is that tablets don't all have data, and if turned off they lose the anti theft features. So there needs to be something outside of the device itself that can alert the owner. Maybe it's just to specific a problem unfortunately.
Click to expand...
Click to collapse
PS. You could use Tasker app (or other automation app) on your phone to set up an alert when the tablet losses connection, if you use your phone as a hotspot, I think.

Internet Security apps

Hey !!
Do Andriod phones need antivirus or internet security as a must? If so provide me some links..
Thankxxxx in advance
The Answer Has been moved to a thread dedicated to security question and other advices to modify safely our Android Devices
Here is the post
Raiz said:
It absolutely doesn't, please don't download them, those are mostly commercial sh*t apps full of ads that plays with the fears of users.
Android Security advice :
• Just don't install apps that you don't trust (apk files and weird looking Google play apps)
• Never share your passwords with somebody not trusted, use a different one for each of you accounts.
Find more here :
https://forum.xda-developers.com/general/security
General security and privacy:
• a VPN isn't a magic app that allows you to go completely invisible, even I can find who you are simply by using your latest Instagram post, the government doesn't have money to spend spying on you anyway
• Public WiFi internet browsing is like taking a bath naked around other people, everybody can see what you're doing and can interact with your browsing by sending you pop up messages on your browser. In that case the VPN is useful. But please don't use anything other than your WiFi network to pay online.
• Change password at least once a year
• For God sake be careful on what you share on social medias !
• If someone blackmails you, just ignore him even if he show you he has your real password/footage of you doing nasty things, most of the time they haven't and tries to scare you. But take action on your account, just don't answer them.
• Not having any of your IRL infos online is a good idea, but it tends to be more and more difficult because of Google assistant, and other Google services that are super intrusive (I mean even with your YouTube Google know your tastes better than your buds). But don't panic, if you're not a terrorist or a criminal you're not risking your life.
Keep in mind that your security is fine most of the time if you have solid password, and you don't give them away, but your privacy is not if you have a social media account of any type. If you post something on the internet, remember it'll stay forever out there, whatever you do !
App that I use to keep my Android phone in good health (install them sometimes to clean up/check on my phone's state then I uninstall them):
Google File Go (cleans files)
AccuBattery (check the battery health)
CPU-Z(has everything you want to know about your device)
When I need to backup an app's data or the entire app:
Titanium Backup
Here you go, I gave you very few the security advises, there are plenty more, don't hesitate to check the internet out for more !
Have a nice day
Click to expand...
Click to collapse
I have 2 edits to your suggestions
1. Change your passwords monthly, preferably using a password manager that suggests really hard random passwords
2. Swift backup is much newer and more efficient than titanium backup ever was.
Sent from my OnePlus7Pro using XDA Labs
spart0n said:
I have 2 edits to your suggestions
1. Change your passwords monthly, preferably using a password manager that suggests really hard random passwords
2. Swift backup is much newer and more efficient than titanium backup ever was.
Click to expand...
Click to collapse
I'll update my first post continuously with every recommendation that'll follow on this thread to create the sort of "Index of Android Security". I created a new thread for security questions
Didn't knew about swift backup, what a great app!
patricia123 said:
Hey !!
Do Andriod phones need antivirus or internet security as a must? If so provide me some links..
Thankxxxx in advance
Click to expand...
Click to collapse
Viruses don't really exist in android. You can be targeted with malicious code but that is only if you open, tap on or accept something without knowing what it is.
For instance, someone could send you a link or a photo that has malicious code embedded in it, when you open it or accept it, then the malicious code has access to your device and your data.
As long as you know that you are dealing with a trusted source, you should be fine. But, if you are the kind of user that goes all over the internet opening things without knowing what it is, you will quickly find yourself targeted by malicious code.
Become a responsible, informed user that is aware of the dangers and what kinds of things can be a problem and you should be fine.
Sent from my SM-S767VL using Tapatalk

Categories

Resources