Related
If you are going to use your phone for payments - which NFC payments is soon coming to UK in the next year and I'm sure other countries will follow - will you use other ROMs than what's on your phone when you bought it?
I prefer a beeter rom than nfc payments , for me phone is not a credit card
Nope, but I don't like the idea of using a phone to make payments anyway.
No
I wouldn't use the phone as a payment method, to me its just asking for trouble. Even if you were to use a stock ROM there's always a chance of people gaining aces through apps.
as i understand, payments will be limited to 10GBP at a time, so that may translate to $10 etc. Useful for travel cards too.
And no, I don't think apps would be able to get access at all - though, it's always up to you as the user to check the permissions the app asks for.
Of course apps will be able to access it. It's software (The NFC), and software is very dynamic. Any sort of software can be changed (via other software, which we classify as malware) to be unsafe.
Kailkti said:
Of course apps will be able to access it. It's software (The NFC), and software is very dynamic. Any sort of software can be changed (via other software, which we classify as malware) to be unsafe.
Click to expand...
Click to collapse
Well, actually, the NFC is hardware
And as the SIM Card is set to be used in the payment process, I'd imagine control would be tied down.
i dont like the idea of phones making payments either, more reason to worry and track unauthorized spending.
It seems I didn't really bring my point across clearly. Of course you know that hardware without software is junk right? What operates the hardware is the software, of course you know also. So what I'm saying is, any app, which is software, and may be malware, can affect the software managing the NFC. So in any case, it's not safe since android is so open. iOS/WP7 puts the NFC in a more ideal context.
Of course apps will be able to access it
Kailkti said:
It seems I didn't really bring my point across clearly. Of course you know that hardware without software is junk right? What operates the hardware is the software, of course you know also. So what I'm saying is, any app, which is software, and may be malware, can affect the software managing the NFC. So in any case, it's not safe since android is so open. iOS/WP7 puts the NFC in a more ideal context.
Click to expand...
Click to collapse
As to that last part... thats the old debate of security by obscurity there. I'm willing to bet its not so clear cut and I'd lean more towards an open platform myself.
At any rate, I'm uncomfortable about using my phone as a payment method as well but to humor the thread I'd say...depends on the rom. I'd use a custom rom as long as the community vouches for it.
Using Nefarious Fiat Currency worries me. I don't Think that I am going to opt-in to that service until I have too. Cash is King
Meh, it's a good concept although it doesn't take me longer than 4 seconds to get a credit card out to pay for whatever I'm buying; just because I have my phone in the opposite pocket doesn't give me a reason to use that.
I'm still going to have to carry a wallet around with me, the phone isn't really cutting anything down in terms of what I have to carry around with me.
On top of that, there's a higher chance of my phone being lost or stolen because i take that out of my pocket, put it down, and it could slip out of my pocket depending on what pants I'm wearing.
I don't think I'll ever use NFC. That is, until I can embed my driver's licence in my phone (which is the main reason why I carry a wallet).
I didn't even bother setting up a google account or the majority of Gapps (other than maps) so you already know how I feel about this subject.
naomispoon said:
I wouldn't use the phone as a payment method, to me its just asking for trouble. Even if you were to use a stock ROM there's always a chance of people gaining aces through apps.
Click to expand...
Click to collapse
What do you think about SQUARE credit card mag stripe reader accessory -- and their new payment network. From twitter founder Jack Dorsey, he intends it to be the next payment network.
i would never consider making payments with my phone, unless theres a slot somewhere where i can punch in my card number ... on the long run, to impose that as a reason for not alowing custom roms would be unreasonable, as its not really necesary to use THE PHONE to DIRECTLY buy stuff with it. after that,imo, iOS stands for one thing, wp7 for another, and android for nothing similar to them, or much more ( innovation wise ) than the other 2 os's.
I will never use my phone to pay for something.
Sent from my Incredible with the XDA Premium App.
I don't know if this is just an advertising scheme of AVG Mobile Solutions through their Facebook page, but when the banning of banking connections (PayPal, online banking, etc.) on rooted devices is pushed through, DAMN IT WE'RE REALLY F*****!
Read more on AVG Blogs HERE
Definitively a marketing scheme... for the clueless...
"Google is blocking access to some services on rooted devices."
Well.. they did get that spot on..
narflynn619 said:
I don't know if this is just an advertising scheme of AVG Mobile Solutions through their Facebook page, but when the banning of banking connections (PayPal, online banking, etc.) on rooted devices is pushed through, DAMN IT WE'RE REALLY F*****!
Read more on AVG Blogs HERE
Click to expand...
Click to collapse
Don't worry, there is no way for a website to detect if you are rooted or not. There's also no reason for financial companies to do that - they would piss off users for zero gain in security.
Rooted devices are currently unsupported by Google due to requirements related to copyright protection.
Click to expand...
Click to collapse
Uh, what? Google has *only* shipped devices with root capability so far, what is this "unsupported" crap?
kllrnohj said:
Don't worry, there is no way for a website to detect if you are rooted or not. There's also no reason for financial companies to do that - they would piss off users for zero gain in security.
Uh, what? Google has *only* shipped devices with root capability so far, what is this "unsupported" crap?
Click to expand...
Click to collapse
I'm sure they're referring to video rentals from the new market being blocked for people on rooted devices.
Well the security increases a litle on non-rooted devices. Or so they claim.
On a rooted device you tend to screw around a litle more and install some infected software that might steal more info then what you know.
They so call wanna protect you against that by not allowing rooted devices.
But as the past already showed us you can aswell get infected apps from market if it passes google filters.
So this is just marketing for AVG. Besides i think AVG is more insane then a virus uninstalling it from your device is not always working perfect.
Also it would become possible to detect if a phone is rooted or not. If google adds a tag when you are using a rooted phone and allows android to send that tag to sites/apps and those sites/apps read those tags and according to them give access or not well then we are screwed.
I don't think they will push it that far thought with the block rooted access.
They just did it now in an attempt to block pirating of their new movie service.
I also remember Google saying once in an article that rooting isn't forbidden and they won't block it as it is just a way to tweak your phone.
It just voids your warranty
its always somethin isnt it..
Sorry if I sound dumb, but what exactly have Google blocked on rooted devices aside from video rentals?
Atomix86 said:
Sorry if I sound dumb, but what exactly have Google blocked on rooted devices aside from video rentals?
Click to expand...
Click to collapse
Well except the movies they havn't blocked rooted phones from anything else yet
For now i don't mind the block that much since i don't plan to view movies on my phone but i understand allot of other users that are pissed at this.
I mean my phone also has to Voodoo sound control app installed so yeah it needs root for that.
Things like this remind me of the phrase I say that "a phone is only as good as it is unrooted" in case one day our rooted phones are cut off from the world.
I am not, but if I had to guess I'd say: If Google decides to block more/too many services on rooted phones we are going to see an "root cloaking app" or something like that, pretending the phone was not rooted while it is.
On Topic, as a computer science student with focus on security: Yes, rooted phones are more vulnerable, because malicous apps could gain root from a stupid user or a dumb user install warez/cracks/stolen stuff with virii in them. Thinking about prices for most apps it's such a users own fault if his data is in trouble.
A bigger problem are the actual security holes in the system. I know from my old iPhone that those are the biggest problem. Especially if those can be triggered from a website, like the pdf or tiff exploit (the later still present on iPhone 3G as firmware is no longer updated).
Oh, on that note, I have a nice topic, but I think I should start a new one instead...
kllrnohj said:
Don't worry, there is no way for a website to detect if you are rooted or not. There's also no reason for financial companies to do that - they would piss off users for zero gain in security.
Uh, what? Google has *only* shipped devices with root capability so far, what is this "unsupported" crap?
Click to expand...
Click to collapse
Not really. From what I understand, to gain root in a device, you have to find a way to exploit it. There is no bonafide root access from Google. The Evo 4G, for example, the exploit was found in the Flash Lite app.
http://forum.xda-developers.com/showpost.php?p=15664846&postcount=3
im rooted
Root is nothing more than admin privileges. Look at your desk top is it "rooted" and do you think they will deny your money from and an admin account on your desktop? Take a deep breath and calm down.
root or not, security problem always occur
I don't know
JDenson77 said:
Root is nothing more than admin privileges. Look at your desk top is it "rooted" and do you think they will deny your money from and an admin account on your desktop? Take a deep breath and calm down.
Click to expand...
Click to collapse
i am rooted too.. and it's for the same reason i wouldn't like using a computer as a pathetic "user"..
Those 'Security Experts' are government agents that don't know sh#t about high tech rooted devices!
Better Security
I am running the MIUI ROM and I think the security features are much better than the non rooted ROM. It actually asked me if I wanted the XBMC app to intercept SMS's.
So loving my note 3. I haven't rooted it yet or anything. As I want to see how the stock rom is for a month or so.
Something has been bugging me ever since I have started caring about my privacy and security. as every App I want to install wants to read my call log, control SMS's record conversations ect. when the app doesn't need to. for instance my favorite radio station. Thinks it needs the permission to know who I've called! What the hell for?
It's the reason I've begin to fall in love with Paranoid android ROM. I had it on my note 2. granted I couldn't use the S-pen at all as it didn't use touchwiz. but I found the ability to edit each apps security settings. worth the sacrifice!. (if anyone reads this. is there a way to put that into any ROM? the permissions editor?) I'd love to install it. but onto the pressing issue.
Samsung includes this magical service with the note 3 called Knox. now it's supposed to give you enterprise security.
When all it does. is constantly give me notifications that it's stopped certain programs from running.
when this morning I clicked the right button which too me to the permissions that Knox gets here they are
read phone status and identity
read, edit SMS's
full network access, ability to change network conns
retrieve running apps
prevent phone from sleeping
directly call phone numbers
Take pictures and video
Record audio
approximate location. Pinpoint location
Modify call contacts. read call log
add read or modify calendar events
read all web history, bookmarks ect
Modify or delete usb storage
Disable screen security
complete account control
Read dictionary terms
pair with any bluetooth
there is also lots of other non essential stuff. This is Freaking Alarming at the minimum. if no one is worried about this then its very sad! This screams NSA back door!
jjbk said:
This is Freaking Alarming at the minimum. if no one is worried about this then its very sad! This screams NSA back door!
Click to expand...
Click to collapse
I know a couple of CIO's that are wetting themselves over KNOX and they (and the DOD, CIA, and NSA for internal use) are the primary audiences. I'd like to assume that people in charge of protecting corporate data are smart enough to investigate the tools they are using to do that pretty thoroughly. My assumption is that the boatload of permissions KNOX requires are all tied to administering, monitoring, protecting, archiving, and deleting data off of devices being policed with MDM. Based on Huawei and Lenovo being cut out of acquisition opportunities and lucrative Western networking contracts because of their ties to the Chinese and "spying" I'd say the quickest way for Samsung to put themselves out of business and take Korea with them is to do what you're suggesting.
The KNOX is truly crap!
I had disable all KNOX after ROOT.
Samsung doing this KNOX thingy is full to crap! extremely useless!
jjbk said:
It's the reason I've begin to fall in love with Paranoid android ROM. I had it on my note 2. granted I couldn't use the S-pen at all as it didn't use touchwiz. but I found the ability to edit each apps security settings. worth the sacrifice!. (if anyone reads this. is there a way to put that into any ROM? the permissions editor?) I'd love to install it. but onto the pressing issue.
Click to expand...
Click to collapse
You can do this now with an unrooted Note 3. It's a sort of hidden feature of Android 4.3, but you just need access to an 'activity' called App Ops. There is a handy app in the Play store that creates this link for you:
https://play.google.com/store/apps/details?id=com.appaholics.applauncher
Knox is also a device administrator and to work correctly it needs pretty much all permissions.
That's normal.
Sent from my SM-N9005 using XDA Premium 4 mobile app
jeromepearce said:
You can do this now with an unrooted Note 3. It's a sort of hidden feature of Android 4.3, but you just need access to an 'activity' called App Ops. There is a handy app in the Play store that creates this link for you:
https://play.google.com/store/apps/details?id=com.appaholics.applauncher
Click to expand...
Click to collapse
Thanks. I got it. and started using it can't wait till paranoid brings out a good ROM. or something with full S pen funtionality. and then just install this on Thanks Once again
All this knox talk is funny. What are you really scared of?
NSA? No problem unless you're trying to hide something you should not be doing. If they want to see my search history or see my pics and read my emails, then go for it.
I just simply rooted and removed Knox, lots written about it - the secret agenda is nonsense.
jjbk said:
here is also lots of other non essential stuff. This is Freaking Alarming at the minimum. if no one is worried about this then its very sad! This screams NSA back door!
Click to expand...
Click to collapse
Of course Knox needs all these permissions - it is, essentially, a virtualised phone OS within a real phone OS.
Without those permissions, it simply wouldn't work!
Regards,
Dave
There is always this conspiracy theory :laugh:
Ppl need to cool down and chill.
foxmeister said:
Of course Knox needs all these permissions - it is, essentially, a virtualised phone OS within a real phone OS.
Without those permissions, it simply wouldn't work!
Regards,
Dave
Click to expand...
Click to collapse
There's no question KNOX is a nightmare for enthusiasts. But enthusiasts make up 5% of the market. XDA being the biggest enthusiast site on the web has 5M members; Samsung will sell 250M smart devices this year. The corporate market is probably 25-30% of annual smartphone sales. That's who KNOX is for and so far it's been extremely well received. I know of one company that's issued a mandate that all employees must use Samsung phones equipped with KNOX whether supplied by the company or via BYOD. If that happens enough Samsung's hit a home run with KNOX even if all 5M XDA members buy other phones. KNOX has been so successful LG's doing something similar.
http://www.engadget.com/2013/10/01/lg-gate-enterprise-security/
So ladies and gentlemen, KNOX and its ilk are here to stay.
weedahoe said:
All this knox talk is funny. What are you really scared of?
NSA? No problem unless you're trying to hide something you should not be doing. If they want to see my search history or see my pics and read my emails, then go for it.
Click to expand...
Click to collapse
Your mentality sucks. Surely i can expect some kind of privacy on a personal device. Wether im doing something i shouldnt be or not.
BarryH_GEG - is completely right its aimed at Corp users and its very useful. - those that slag it off has no idea what it is and what its used for.
KNOX - is Samsung's version SELinux, since its now standard in Linux Kernel, all variations of Linux will have this feature and Andriod is an variation of Linux.
So if you dont like SELinux you better switch from Andriod smartphones as this will be standard soon no matter which OEM you choose.
weedahoe said:
All this knox talk is funny. What are you really scared of?
NSA? No problem unless you're trying to hide something you should not be doing. If they want to see my search history or see my pics and read my emails, then go for it.
Click to expand...
Click to collapse
Putting KNOX aside, I want to understand your perspective on privacy.
Here's my perspective:
I have nothing to hide nor am I working in politics.
But with this backdoor technology, it IS a serious concern for journalists and honest politicians running against the current corrupted elite establishment.
Who (in the sex obsessed American public eye) will take their cause seriously after the establishment (with the help of NSA DB) releases a phone-sex tape or pictures of drunken high school pics?
In 2008, NSA workers told ABC News that they routinely eavesdropped on phone sex between troops serving overseas and their loved ones in America.
Click to expand...
Click to collapse
Who's to be the honest watchdog of the establishment if all journalists can be blackmailed with their personal info before they release their reports of establishment corruption?
This is not about something to HIDE.
It's about freedom and democracy.
Do you want your children to inherent a world where they can MAKE A DIFFERENCE or one where THEY CAN NOT??
You do know that Samsung is a Korean company - and a strongly nationalist one to the extent of a General Electric or. General Motors - right?
perosredo said:
You do know that Samsung is a Korean company - and a strongly nationalist one to the extent of a General Electric or. General Motors - right?
Click to expand...
Click to collapse
What does that have to do with whether it will comply with the laws in the country it wants to do business in?
Google a US COMPANY had to comply and censor results in many countries at the request of the foreign gov.
Twitter had to censor the posts of Arab Spring supporters at the request of their govs
BlackBerry a CANADIAN COMPANY had been pressured into releasing encryption keys to the Indian gov to spy on comms.
Samsung wants to do business in your country, does it not?
weedahoe said:
All this knox talk is funny. What are you really scared of?
NSA? No problem unless you're trying to hide something you should not be doing. If they want to see my search history or see my pics and read my emails, then go for it.
Click to expand...
Click to collapse
Agreed........... I deliberately take regular photos of my untrimmed white bits just for them.... :laugh:
jonlewi5 said:
Your mentality sucks. Surely i can expect some kind of privacy on a personal device. Wether im doing something i shouldnt be or not.
Click to expand...
Click to collapse
You better get off the internet now and any social site you might have ever been on. Lots of engines index everything you put out there so even though you think you delete it, its still there......somewhere
klau1 said:
I want to understand your perspective on privacy.
Click to expand...
Click to collapse
Anyone here's perspective on privacy really doesn't belong on XDA. It's one thing to talk about the impact of KNOX on device development, how to use (or not use) its functionality, and what its impact is to privacy and another to have general privacy discussions that belong on Reddit.
OP's question was asked and answered. KNOX's sweeping permissions are required for it to function. If people feel that KNOX could impact their privacy disable it or send Samsung a message by not buying their products. Just like Samsung's reaction to the negative coverage of Region Lock was to ignore it you can pretty much assume that'll be their position on KNOX too. I use KNOX so if there's some sort of nefarious activity it performs or my data gets compromised I'll report back. That's assuming I'm not captured by the CIA and renditioned to a foreign country and water boarded.
klau1 said:
But with this backdoor technology, it IS a serious concern for journalists and honest politicians running against the current corrupted elite establishment.
Click to expand...
Click to collapse
What backdoor technology? KNOX?
Unless you are running your own version of a mobile OS, compiled from source and having reviewed all the code to remove any backdoors, you are potentially vulnerable to all sorts of backdoors that Google, Samsung, HTC, Microsoft, Apple, or any other company may have inserted the ROM build you are running. KNOX changes none of this.
Privacy is an illusion, and always has been!
Regards,
Dave
I don't know if this is general knowledge here, but I figured I'd relate my experience here in case it's informative for others. I've been having a ton of trouble with dropped calls on Verizon at my home. It's always been a marginal signal, but the last couple of months it's been impossible to use my phone at all. So I finally called Verizon and quickly was transferred to Level 2 support. The Level 2 support immediately jumped down my throat about having a rooted phone. When I asked them how they determine that I have a rooted phone the agent proceeded to list every app installed on my phone and explained that some of them only work on rooted phones. He was adamant that the reason for dropped calls was having a rooted phone and refused to provide any support.
It was news to me that our Verizon phones phone home and keep them informed as to what apps are installed on our phones, and that now Verizon is refusing to provide support to people that even have apps that require root privileges.
Depends on the state that you live in. The warranty is to protect against hardware defects and in some states Verizon will have to show that rooting or one of your installed apps is the cause of your issues.
You can always flash back to full stock and see if you still have drops. If so, call them up again...
I *am* full stock. I have literally changed nothing except to root the phone. Everything is pure stock ... even the Verizon apps and recovery are all still there.
GNRDuncan said:
I *am* full stock. I have literally changed nothing except to root the phone. Everything is pure stock ... even the Verizon apps and recovery are all still there.
Click to expand...
Click to collapse
It is not uncommon for carriers to refuse to support anything other then fully stock devices. You have to remember that root is a security risk as well and most will not support this.
Thanks. I get that. What surprised me wasn't that they wouldn't support a rooted phone, but that Verizon had a list of apps I'd installed (even apps installed directly by ADB). I wasn't aware that they had spyware on my phone that was monitoring what I do on the phone.
GNRDuncan said:
Thanks. I get that. What surprised me wasn't that they wouldn't support a rooted phone, but that Verizon had a list of apps I'd installed (even apps installed directly by ADB). I wasn't aware that they had spyware on my phone that was monitoring what I do on the phone.
Click to expand...
Click to collapse
That is part of the info that is sent to all carriers when they collect info for troubleshooting and stats. Some of that info is they grab a list of apps in the system and data/app partitions.
I wasn't aware they could read anything on my phone without my permission. I wonder what other information they can grab at will without me knowing?
It's legal in the US for providers to look at what their customers are using and installing on their phone?
Bloody hell... Over here a provider isn't even allowed to see which apps use up your data, all they can report is how much you used in total. The very idea that they'd be allowed to look inside your phone is... inconceivable in Europe.
GNRDuncan said:
I wasn't aware they could read anything on my phone without my permission. I wonder what other information they can grab at will without me knowing?
Click to expand...
Click to collapse
Thats the thing is you give them permission. No one ever reads it but it is in the TOS. You even agree to it when you first sign in to an android device about it collecting data from your device. As for other info they can get. Pretty much any and every website you go to, and things like that. Your contacts and stuff are pretty safe. If you consider storing them on google safe.
ShadowLea said:
It's legal in the US for providers to look at what their customers are using and installing on their phone?
Bloody hell... Over here a provider isn't even allowed to see which apps use up your data, all they can report is how much you used in total. The very idea that they'd be allowed to look inside your phone is... inconceivable in Europe.
Click to expand...
Click to collapse
You might not have noticed but you agree to it on every android device. ITs all part of troubleshooting system issues. Heck Google can even remotely remove apps from your device. Carriers in the US have far more control over the device because you dont tech own the device until you pay off your contract or unless you buy the device at full retail price.
An agreement that says "we may collect data about your phone" is not the same thing as "You give us permission to enter your phone at any time for any reason and collect whatever we want from your phone."
What app allows this one the phone? I will happily remove it.
GNRDuncan said:
An agreement that says "we may collect data about your phone" is not the same thing as "You give us permission to enter your phone at any time for any reason and collect whatever we want from your phone."
What app allows this one the phone? I will happily remove it.
Click to expand...
Click to collapse
Thats the thing. It does. Collecting data about the device, pretty much says that you give them the right to collect data about the device. This does include apps installed. IT is not as simple as an app. IT is built into the OS.
zelendel said:
You might not have noticed but you agree to it on every android device. ITs all part of troubleshooting system issues. Heck Google can even remotely remove apps from your device. Carriers in the US have far more control over the device because you dont tech own the device until you pay off your contract or unless you buy the device at full retail price.
Click to expand...
Click to collapse
Google is not the same thing as a Telecom provider.
Google makes your OS, a Telco just provides you with access to the network. There's a very large difference.
It's like the Ministry of Infrastructure being able to see your car's logs. The manufacturer can read out the car's system for troubleshooting, as they should, but the government branch that pours asphalt on roads has no business seeing what kind on music I listen to in my car!
Who am I kidding, the US Ministry of Infrastructure probably has recordings from how awful people sing in their cars synced to the exact GPS coordinate for every word.
Maybe I should explain that European devices are not truly Branded? The only branding they have are logos, tunes and a few apps that you can freely remove or add through the online appstores as well.
A lot of users have a SIMonly contract (just a SIM) and buy their devices, without any connection to their provider, in an independent store.
The whole system US providers have with their own privately locked devices that don't even allow eachother's 4G network, that's illegal here.
zelendel said:
Thats the thing. It does. Collecting data about the device, pretty much says that you give them the right to collect data about the device. This does include apps installed. IT is not as simple as an app. IT is built into the OS.
Click to expand...
Click to collapse
Your laws are very, very terrifying. No wonder the USA is such a bloody mess....
I thought the spying on citizens for money, corruption and dirty business practises wasn't that bad, but it seems I've had a very naive view of the USA. I'm utterly grateful I never followed my childhood dream of emigrating to the USA. They're one step away from a totalitarian corporate government... I'm starting to see why so many people keep referencing Skynet... The plot in Continuum (the TV show) is far more present-day and far less futuristic, it seems...
Over here "we may collect data about your phone" does not mean "We have the complete legal right to read everything you do, watch, install and write on your phone".
They must specify exactly what data, how they collect it and what they use it for, and any deviation from those specifications results in a hefty fine or even a suspension of business rights.
They're only allowed to look at your phone, not in it. They can't even connect your dialed numbers to your in-phone contacts on the bill. Even in their own app, you have to give explicit permission for that link.
zelendel said:
Thats the thing. It does. Collecting data about the device, pretty much says that you give them the right to collect data about the device. This does include apps installed. IT is not as simple as an app. IT is built into the OS.
Click to expand...
Click to collapse
Your interpretation of the term differs radically from my own.
Luckily we have AOSP, so if we know where the code that allows this is located we can remove it. Any ideas where to start looking? I'm new to all of this, but it would be worth getting into it if we really have to waste our time protecting ourselves from the businesses we have to patronize in order to function in a modern society.
ShadowLea said:
Google is not the same thing as a Telecom provider.
Google makes your OS, a Telco just provides you with access to the network. There's a very large difference.
It's like the Ministry of Infrastructure being able to see your car's logs. The manufacturer can read out the car's system for troubleshooting, as they should, but the government branch that pours asphalt on roads has no business seeing what kind on music I listen to in my car!
Who am I kidding, the US Ministry of Infrastructure probably has recordings from how awful people sing in their cars synced to the exact GPS coordinate for every word.
Maybe I should explain that European devices are not truly Branded? The only branding they have are logos, tunes and a few apps that you can freely remove or add through the online appstores as well.
A lot of users have a SIMonly contract (just a SIM) and buy their devices, without any connection to their provider, in an independent store.
The whole system US providers have with their own privately locked devices that don't even allow eachother's 4G network, that's illegal here.
Click to expand...
Click to collapse
Oh I know. I generally dont buy US based devices even though I live here. Also our carriers here put their own version of the OS on the device. Loaded down with bloat ware and added code.
GNRDuncan said:
Your interpretation of the term differs radically from my own.
Luckily we have AOSP, so if we know where the code that allows this is located we can remove it. Any ideas where to start looking? I'm new to all of this, but it would be worth getting into it if we really have to waste our time protecting ourselves from the businesses we have to patronize in order to function in a modern society.
Click to expand...
Click to collapse
Not that simple. AOSP is alot different then what comes on carrier devices. Carrier roms are closed sourced just like OEM roms like touchwiz, HTC sense and all the others.
Why do you think Verizon goes through such great pains to lock the bootloader. There is no way that I am aware of as they would just get the info from google as they collect the same info.
zelendel said:
Not that simple. AOSP is alot different then what comes on carrier devices. Carrier roms are closed sourced just like OEM roms like touchwiz, HTC sense and all the others.
Why do you think Verizon goes through such great pains to lock the bootloader. There is no way that I am aware of as they would just get the info from google as they collect the same info.
Click to expand...
Click to collapse
Google can't collect the data if the code that collects the data is removed.
GNRDuncan said:
Google can't collect the data if the code that collects the data is removed.
Click to expand...
Click to collapse
You could try but buy doing so you would lose all access to Google Apps. There is one project that I know of that is working to remove all Google stuff from Android. CM has the same plan but like I said you would lose all access to Google Apps in doing so. It's all part of just about every OS on the planet.
zelendel said:
Oh I know. I generally dont buy US based devices even though I live here. Also our carriers here put their own version of the OS on the device. Loaded down with bloat ware and added code.
Click to expand...
Click to collapse
Wise move!
They do add bloatware here, but all of it is just pre-installed apps that you can add and remove at your leisure. They're all apps that you can find on the Play Store (or Windows Marketplace, or Apple Store) and can install as a customer from another provider as well. The only code they're allowed to add is network optimisations.
They can't alter any of the system functions. Take the TNL firmware (T-Mobile NL), all it has is the My T-Mobile app and the T-Mobile logo+tune at boot. That's the entire branding. It's hardly worth the word 'Branding', all they did was slap a sticker on it and insert a businesscard, so to speak.
And you're free to just flash any other firmware, as flashing, rooting and using CustomROMS can't void the warranty due to the EU laws. Even KNOX 0x1 doesn't matter.
I do Samsung-based tech support for T-Mobile NL (which is why I know what they can and can't do here), and half my day consists of helping users flash the Unbranded firmware over the Branded one, through the official contact channels. Samsung will even do it for you if you take the device to a Service Center. Managed to wipe your IMEI? Take it to a Service Center with proof of purchase and they'll fix it for you in minutes. Sending in a device with a broken screen that has Cyanogenmod on it gets a new screen and returned to the customer under warranty.
The other half of my day is sometimes spend explaining to users why, due to privacy laws, a provider can't block an app or service from using up your data, and can't block malicious sms subscription services.
The EU council is filled with idiots, but they do have their moments. :laugh:
ShadowLea said:
Wise move!
They do add bloatware here, but all of it is just pre-installed apps that you can add and remove at your leisure. They're all apps that you can find on the Play Store (or Windows Marketplace, or Apple Store) and can install as a customer from another provider as well. The only code they're allowed to add is network optimisations.
They can't alter any of the system functions. Take the TNL firmware (T-Mobile NL), all it has is the My T-Mobile app and the T-Mobile logo+tune at boot. That's the entire branding. It's hardly worth the word 'Branding', all they did was slap a sticker on it and insert a businesscard, so to speak.
And you're free to just flash any other firmware, as flashing, rooting and using CustomROMS can't void the warranty due to the EU laws. Even KNOX 0x1 doesn't matter.
I do Samsung-based tech support for T-Mobile NL (which is why I know what they can and can't do here), and half my day consists of helping users flash the Unbranded firmware over the Branded one, through the official contact channels. Samsung will even do it for you if you take the device to a Service Center. Managed to wipe your IMEI? Take it to a Service Center with proof of purchase and they'll fix it for you in minutes. Sending in a device with a broken screen that has Cyanogenmod on it gets a new screen and returned to the customer under warranty.
The other half of my day is sometimes spend explaining to users why, due to privacy laws, a provider can't block an app or service from using up your data, and can't block malicious sms subscription services.
The EU council is filled with idiots, but they do have their moments. :laugh:
Click to expand...
Click to collapse
Yeah here that is not even close to being an option, I spent years working for Verizon Tech support. They try to void your warranty anyway possible. That is mostly due to the fact of the subsidized pricing for phones. Here you dont even really own the phone completely for almost 2 years after you get the device.
Service centers here are few and far between. All warranties go through the carrier. Carriers here love blocking apps. But then Like I said they have too much control over the devices.
zelendel said:
Yeah here that is not even close to being an option, I spent years working for Verizon Tech support. They try to void your warranty anyway possible. That is mostly due to the fact of the subsidized pricing for phones. Here you dont even really own the phone completely for almost 2 years after you get the device.
Service centers here are few and far between. All warranties go through the carrier. Carriers here love blocking apps. But then Like I said they have too much control over the devices.
Click to expand...
Click to collapse
The law changed here recently, nowadays the phone you buy with a subscription has to be charged separately. You basically buy the phone and split the payments over 2 years. You own it straight away, you can even sell it if you want, but you have to continue paying for it, even if you sell it, until you've paid it off. If you end the contract prematurely, you have to pay the remaining sum of the phone.
Warranty-based repairs here go through the shop you purchased it from. If you bought it directly from the provider, they handle the warranty. If you bought it from an independent shop or online store, (both of which also sell subscriptions with phones for the providers) they send it to Samsung. Even if you buy it with a subscription.
There are 12 Service Centers in the Amsterdam area alone. (They're not Samsung stores, we only have 2 of those (which is probably still quite a lot compared to the US, considering we only have 17 million inhabitants), but they're service points inside another store, often the stores of various providers. You can go there regardless of who you pay each months.)
(Sorry for the walls of text, I find these things very interesting xD)
Hi
I know that this will sound like another hacked story but I know what to do.
My phone got hacked couple of months back.i didnt know it was untill the hacker started to leave clues. It was then that i started really payibg attention to everything going on. but keeping quiet abort it so that he or she thinks i didn't know
I know of 3 incidents that may have conpronised my security coupled by the fact that I did not practice password hygiene or unique ones for all accounts. I know that its totally my fault and i am not goings to blane Android os. So please dont think of this as one of tjose posts
What i now need is help in understanding what tondo next.
Little details on what happens, lets say i get search for some one on Facebook. The same is Charles smith, I Finish off my search and open Instagram boom i see a pictures where recommended shows a google search page where Charles is written and the Google auto complete is giving options .
Happened twice
I tumlr and I don't really post anything in fact My blog is totally blank. Suddenly i have people followings me and they tend of hame my nick name as their user id .the id displays my WhatsApp status updates.
These and just two examples i have more but i think everyone gets whats going on.
things i have done to prevent such occurences factory formatting the phones mac abd router. Gotten new routers and ready to flash a custom firmware for them.
Password changes .everything.wps2 aes wifi password with random numbers upper case lower case n symbols
Passwords are written on paper without a electronic backup and under lock and key.
I thought that maybe its a key logger but i took my moto x2 n moto e2 to the service center and got them to re load official software.
Two days later bam the same thing.
Any suggestion on where the weakness is ?
The problem is that I am kind of tired if thi
Sent from my XT1092 using XDA Forums
Check account sync settings if it is on more applications can use various private data.
Sent from my A0001 using XDA Free mobile app
i dont understand?
can u explain , i have sync on should I not have it
on different note does anyone suggest rooting and installing something that can isolate and restrict data from being accessed. now i know that exposed does that and marshmallow will work that out. but any other guidance ?
Did you use a virus or malware scanner?
Are there any apps you didn't install on your phone?
If i were you, i would start with doing the following steps by their exact order to get rid of the hacker and operate on a "safe" system.
1- Backup personal files to pc and deep scan them with virus scanner, make sure they're clean.
2- Unlock the bootloader of device and flash every image manually with fastboot from stock factory image.
3- After flashing the images, go to stock recovery and wipe data / factory reset and wipe cache for a complete, untouched system.
4- Change account passwords with stuff that are unrelated to you. I mean if you made a google search for firedance, don't include dance or fire in any your passwords.
* also change the " forgot my password " questions and their answers.
5- Once you boot the system, download any ota packages from the manufacturer to be sure you'd be on a safer and patched software for security.
For future securtity, be sure to check apps permissions before installing anything from google play or external places. Don't root your device and don't enable USB Debugging in developer options. Hope it helps.
Semseddin said:
If i were you, i would start with doing the following steps by their exact order to get rid of the hacker and operate on a "safe" system.
1- Backup personal files to pc and deep scan them with virus scanner, make sure they're clean.
2- Unlock the bootloader of device and flash every image manually with fastboot from stock factory image.
3- After flashing the images, go to stock recovery and wipe data / factory reset and wipe cache for a complete, untouched system.
4- Change account passwords with stuff that are unrelated to you. I mean if you made a google search for firedance, don't include dance or fire in any your passwords.
* also change the " forgot my password " questions and their answers.
5- Once you boot the system, download any ota packages from the manufacturer to be sure you'd be on a safer and patched software for security.
For future securtity, be sure to check apps permissions before installing anything from google play or external places. Don't root your device and don't enable USB Debugging in developer options. Hope it helps.
Click to expand...
Click to collapse
Don't Root your device? Don't check USB debugging? Seriously? That is your answer? Wow, do you work for Verizon or AT&T by some chance? Sorry, but with Root and some nicely placed Xposed modules, this persons phone or tablet would be more safe than anything g Verizon or AT &THE could conjure up. You are a dope! Lol! Seriously, go away. Bother another community. ?
Sent from my SM-N910V using Tapatalk
Jaytronics said:
Don't Root your device? Don't check USB debugging? Seriously? That is your answer? Wow, do you work for Verizon or AT&T by some chance? Sorry, but with Root and some nicely placed Xposed modules, this persons phone or tablet would be more safe than anything g Verizon or AT &THE could conjure up. You are a dope! Lol! Seriously, go away. Bother another community. ?
Sent from my SM-N910V using Tapatalk
Click to expand...
Click to collapse
Pardon me but where does that come from ? Made me laugh. Since this is security forum, the first priority is security not your "nicely put xposed modules whatever that means". It is said many times by security experts rooting an android device removes a big portion of layer of security. I unfortunately don't work for AT&T or Verizon but i wish i worked for them for a nice salary.
This one is coming from the recognized developer and moderator of XDA Android Security forum. Someone who have exploited devices and found vulrenabiliies that you can't even dream of. Lets say i am a "dope" and you're the smart guy. Are jcase, steve kondik dopes as well ?
http://securitywatch.pcmag.com/secu...-have-android-settings-from-a-security-expert
http://www.dailytech.com/CyanogenMod+Creator+Tells+Android+Users+to+Rethink+Rooting/article33058.htm ( yeah, even steve kondik doesn't approve rooting for general users.
https://blog.kaspersky.com/rooting-and-jailbreaking/1979/ " Kasperksky a security platform well known for years are also against rooting.
Think again if you can who is the dope, now, go bother in your nicely put xposed modules forums for the sake of security. :good:
Semseddin said:
Pardon me but where does that come from ? Made me laugh. Since this is security forum, the first priority is security not your "nicely put xposed modules whatever that means". It is said many times by security experts rooting an android device removes a big portion of layer of security. I unfortunately don't work for AT&T or Verizon but i wish i worked for them for a nice salary.
This one is coming from the recognized developer and moderator of XDA Android Security forum. Someone who have exploited devices and found vulrenabiliies that you can't even dream of. Lets say i am a "dope" and you're the smart guy. Are jcase, steve kondik dopes as well ?
http://securitywatch.pcmag.com/secu...-have-android-settings-from-a-security-expert
http://www.dailytech.com/CyanogenMod+Creator+Tells+Android+Users+to+Rethink+Rooting/article33058.htm ( yeah, even steve kondik doesn't approve rooting for general users.
https://blog.kaspersky.com/rooting-and-jailbreaking/1979/ " Kasperksky a security platform well known for years are also against rooting.
Think again if you can who is the dope, now, go bother in your nicely put xposed modules forums for the sake of security. :good:
Click to expand...
Click to collapse
For a dope, I suppose that Root is a security risk. But, just because a device is not Rooted, does not mean it is secure by any stretch of the imagination. Truthfully, they are more unsecured if locked out from the user. That is, if the person is not a dope. What I am saying is that your advice, for the OP to take every update and not Root, was not really that helpful. If the OP installed an app that was a risk, then all the updates and non Root, will not help them. Now, if you were to show them, that if they were to Root, and use certain apps and modules on their device. Then they could keep a better eye out for potential problems. But, even if they did as I just said. If the OP is being a dope, and installing apps that, let's say, they obtained from a torrent site. Then, well, dope would be a fitting title for them as well.
And, if those recognized developers stated that Root was not good at all. Then yes, dope would be a fitting application of the word. Root is only bad for those that are dopes.
I believe that you inadvertently called the OP a dope. You did not help them all that well. What you did was help them to get rid of the problem temporarily. Do we know who apps are on their device? It would be a good idea to know these things. Also, where did they get these apps from? Kind of a big deal there.
But, if you were wondering what it is that I am talking about in regards to xposed. Look it up.
http://repo.xposed.info/module/de.robv.android.xposed.installer
I suggest the OP do the same. As well as anyone else who is having g issues. Now, knowing about xposed and the modules that can accompany it. Will not fully protect anyone from blatant stupidity. Read, read, read. And practice safe device use. There are so many avenues to protecting g ones self. But a big one that anyone can do. Don't download from shady places. Though, it is even very possible to get in trouble from apps from the Play store. Knowing what apps are asking for what permissions is important. What bothered me about your post is that you in the same post, stated for them to unlock the bootloader and then, to not root. Verizon and AT&T are advocates of the no Root behavior. And that sickens me. As well as many others. Instead of helping g people to see the dangers. They are told to do the most simplest of tasks, not to Root. And that they would be fine. Absolutely and completely false and misleading. Now, and again, for a dope. I suppose this would be fine. Though, it is not helpful. Education into matters are. One needs to seek out the underlying issue first. Then attempt to educate. As far as calling you a dope, I do humbly apologize for my Choi e of words. You did not deserve that. It would have been just fine for me to build onto what you suggested. Which was good advice. So, I am sorry. And yes, I am very much a dope at times .
Sent from my SM-N910V using Tapatalk
Jaytronics said:
For a dope, I suppose that Root is a security risk. But, just because a device is not Rooted, does not mean it is secure by any stretch of the imagination. Truthfully, they are more unsecured if locked out from the user. That is, if the person is not a dope. What I am saying is that your advice, for the OP to take every update and not Root, was not really that helpful. If the OP installed an app that was a risk, then all the updates and non Root, will not help them. Now, if you were to show them, that if they were to Root, and use certain apps and modules on their device. Then they could keep a better eye out for potential problems. But, even if they did as I just said. If the OP is being a dope, and installing apps that, let's say, they obtained from a torrent site. Then, well, dope would be a fitting title for them as well.
And, if those recognized developers stated that Root was not good at all. Then yes, dope would be a fitting application of the word. Root is only bad for those that are dopes.
I believe that you inadvertently called the OP a dope. You did not help them all that well. What you did was help them to get rid of the problem temporarily. Do we know who apps are on their device? It would be a good idea to know these things. Also, where did they get these apps from? Kind of a big deal there.
But, if you were wondering what it is that I am talking about in regards to xposed. Look it up.
http://repo.xposed.info/module/de.robv.android.xposed.installer
I suggest the OP do the same. As well as anyone else who is having g issues. Now, knowing about xposed and the modules that can accompany it. Will not fully protect anyone from blatant stupidity. Read, read, read. And practice safe device use. There are so many avenues to protecting g ones self. But a big one that anyone can do. Don't download from shady places. Though, it is even very possible to get in trouble from apps from the Play store. Knowing what apps are asking for what permissions is important. What bothered me about your post is that you in the same post, stated for them to unlock the bootloader and then, to not root. Verizon and AT&T are advocates of the no Root behavior. And that sickens me. As well as many others. Instead of helping g people to see the dangers. They are told to do the most simplest of tasks, not to Root. And that they would be fine. Absolutely and completely false and misleading. Now, and again, for a dope. I suppose this would be fine. Though, it is not helpful. Education into matters are. One needs to seek out the underlying issue first. Then attempt to educate. As far as calling you a dope, I do humbly apologize for my Choi e of words. You did not deserve that. It would have been just fine for me to build onto what you suggested. Which was good advice. So, I am sorry. And yes, I am very much a dope at times .
Sent from my SM-N910V using Tapatalk
Click to expand...
Click to collapse
Humble apology accepted.
You may not like AT&T and Verizon for their tight stance against rooting.I don't like that as well. They're filling their devices with their bloatware and excluding some very useful features from their customers like hotspot for free. However, Anyone who owns an operator variant of a specific device have already signed a contract with his operator already accepted their terms and that's why they get their bloated and controlled devices for cheaper prices in long term instead of paying full in cash. That said, i see nothing wrong with AT&T or Verizon's policy of keeping their devices locked to death since rooting would take a stake from their business and that was not their agreement with their customers. This is not the subject of this thread for sure. Should add, i see nothing wrong if a contracted owner a device wants to take full potencial out of it by rooting since it is the only way for them to get rid of bs in their devices. This is another discussion, not related to this thread.
I will use the word " regular user " instead of "dope" since nobody have to be knowledgeful about android security. Being someone without a clue of android security wouldn't make them a "dope". I currently sport a Moto Maxx, a bootloader unlockable variant of Verizon Droid Turbo sold in Brazil. I paid about 150$ more just to be free of Verizon Bloatware for the exact same hardware. I could have paid 150$ less and bought a Verizon Droid Turbo but i didn't just because i knew i would have Verizons' bs running in my phone every second. There used to be a time for me when rooting was a must with android because i used to own devices bloated with Motoblur, having low amount of ram and storage as well as unavailbility of disabling/deleting of unwanted apps. Now, i have 3gb of ram and 64gb storage with near Vanilla Android experience with my phone. I asked myself, what the heck do i need rooting for ? The answer was easy : nothing.
Lets say, android is an apartment, the root is the key to its door, xposed is the "watchdog" and hacker is the "thief". Would you keep the door unlocked and rely on a dog for its security ? I personally wouldn't do that cause the dogs can be fooled easily by a piece of meat and most importantly they have no responsibility at all. After all, It is just a dog serving for free without any responsibility. I couldn't ask for insurance as well cause i was the one who kept the door unlocked. I am also aware that any door can be opened without a key and the dog can be bypassed easily and the hacker can get whatever he wants. Things will happen if they're destined to be happen, we can't avoid some. Still, it is always our responsibility to keep the door locked in the first place and take counter measurements against. That was what i was pointing in my post.
Disabling USB debugging is the first thing one should do if there're concerns about security and this is not coming from a "dope" but security experts of android. :good:
Semseddin said:
Lets say, android is an apartment, the root is the key to its door, xposed is the "watchdog" and hacker is the "thief". Would you keep the door unlocked and rely on a dog for its security ? I personally wouldn't do that cause the dogs can be fooled easily by a piece of meat and most importantly they have no responsibility at all. After all, It is just a dog serving for free without any responsibility. I couldn't ask for insurance as well cause i was the one who kept the door unlocked. I am also aware that any door can be opened without a key and the dog can be bypassed easily and the hacker can get whatever he wants. Things will happen if they're destined to be happen, we can't avoid some. Still, it is always our responsibility to keep the door locked in the first place and take counter measurements against. That was what i was pointing in my post.
Disabling USB debugging is the first thing one should do if there're concerns about security and this is not coming from a "dope" but security experts of android. :good:
Click to expand...
Click to collapse
To show how ridiculously and persistently wrong you are, I am going to use your above example. If root is your key, then what you are doing is giving that key to Google and device manufacturer, while throwing your own copy away. In your own apartment, you are only allowed to go where google and verizon let you. This makes no sense whatsoever, unless the apartment owner is a real dope (no personal offence meant).
Disabling usb debugging also sounds like an aria from the same opera. If the device is on your person, this provides no additional security at all, as usb debugging is only relevant when your phone is connected to computer. If someone physically takes your device, it would take 10 seconds to enable debugging.
Root provides you an opportunity to control your device and restrict system apps, thereby reducing possibilities for hackers to take over your phone... As I have already mentioned before, every operating system provides root access to users. The only reason it is not done on smart phones is becase manufacturers, carriers and OS providers want to turn users into walking advertising beacon-dopes. Again, no offence meant...
optimumpro said:
To show how ridiculously and persistently wrong you are, I am going to use your above example. If root is your key, then what you are doing is giving that key to Google and device manufacturer, while throwing your own copy away. In your own apartment, you are only allowed to go where google and verizon let you. This makes no sense whatsoever, unless the apartment owner is a real dope (no personal offence meant).
Disabling usb debugging also sounds like an aria from the same opera. If the device is on your person, this provides no additional security at all, as usb debugging is only relevant when your phone is connected to computer. If someone physically takes your device, it would take 10 seconds to enable debugging.
Root provides you an opportunity to control your device and restrict system apps, thereby reducing possibilities for hackers to take over your phone... As I have already mentioned before, every operating system provides root access to users. The only reason it is not done on smart phones is becase manufacturers, carriers and OS providers want to turn users into walking advertising beacon-dopes. Again, no offence meant...
Click to expand...
Click to collapse
I see your point, respect it but disagree. Your example doesn't really work with my logic since you're putting players like Google/Verizon in the same league with an hacker. Yes, they for sure have control over their software since they're the one who created Android and offered the hardware along with an oem in the first place. These big companies are not like 3rd party devs who are irresponsible for any their actions.. If you happen to have sensetive privacy trust issues with Google, leave any android device out, you wouldn't even use google search in your pc.
A hacker having pyshical access to a device who would enable USB debugging in 5 seconds. is this what we're really talking about ? Anyone who have a device in hand doesn't need to be a hacker to get data from it. Have a coffee with the target sitting next to to him, memorize his passcode Done. Another way is to flash twrp and give some adb shell commands to bypass any lockscreen code. Done. USB debugging ON help with apk rooters and computer based root exploits as well.They rely on usb debugging to be on. You're hacked in no time.
I just can't trust any 3rd party dev more than my device manufacturer / operating system provider and network provider. I think the same for you like you're persistently and ridiciolusly wrong by giving too much credit to some unknown sources instead of those who have an actual business address. :good:
Just kiss each other already or dont say anything.
This thread is made by someone who needs help and you two both are taking it off topic instead of helping him. Now out of respect for that user, stop this endless conversation.
Semseddin said:
I see your point, respect it but disagree. Your example doesn't really work with my logic since you're putting players like Google/Verizon in the same league with an hacker. Yes, they for sure have control over their software since they're the one who created Android and offered the hardware along with an oem in the first place. These big companies are not like 3rd party devs who are irresponsible for any their actions.. If you happen to have sensetive privacy trust issues with Google, leave any android device out, you wouldn't even use google search in your pc.
A hacker having pyshical access to a device who would enable USB debugging in 5 seconds. is this what we're really talking about ? Anyone who have a device in hand doesn't need to be a hacker to get data from it. Have a coffee with the target sitting next to to him, memorize his passcode Done. Another way is to flash twrp and give some adb shell commands to bypass any lockscreen code. Done. USB debugging ON help with apk rooters and computer based root exploits as well.They rely on usb debugging to be on. You're hacked in no time.
I just can't trust any 3rd party dev more than my device manufacturer / operating system provider and network provider. I think the same for you like you're persistently and ridiciolusly wrong by giving too much credit to some unknown sources instead of those who have an actual business address. :good:
Click to expand...
Click to collapse
This is not about respect, disrespect or disagreements. The facts (not opinions) remain: every operating system on Earth provides root or administrative privileges to users. However, it is not given to the same user when he turns to a smartphone. There is no security reason whatsoever why a user has root on computer and no root on a smartphone.
As I have already said, there are plenty of non-security reasons for the above: the main one being to prevent the user from removing advertising junk and spying malware inserted there by manufacturers, carriers and software providers. Kids love it (above three) and Mother (NSA) approves...
Every argument against root invalidates itself when applied to computer OS: remember the user is the same.
@its the peanut
Please stop patronizing. This is a security discussion thread and we discuss security, which is beneficial to the poor guy, the OP... :silly:
Semseddin, what do you do to stop fastboot?
rooting and knowledge go hand in hand, the OP states device is rooted, but sounds like hasn't got the interest to know what's behind the process. that is why we don't have the slightest piece of evidence that his device has been compromised. just the users opinion that it has.
having su and adb debugging at least allows them to logcat.