Database Info

[Q] device admin app??

Is there a way (app?) to prevent others from installing apps on my phone? Like something that would require a password every time an app tries to install? Im running ICS on a G2X and it has a device admin section but i have no option to set it up. any ideas would be helpful. thanks.

Device admin is for certain options in an app, like turning the screen off. You have to enable it for that app, like a special permission, and disable it before you can uninstall the app. Only certain functions in certain apps require device administrator, and you must not have anything installed that uses it.
However if you could password protect the package installer using an app locking program then this would prevent others from installing apps. I don't know if any of those apps allow password protecting the package installer since I don't use them, but this would do it. You would need to password protect any means of uninstalling the app as well - settings, market, any uninstaller apps, your home replacement if it allows you to drag and drop to uninstall, etc. This would be a pain, and you'd be better off just password protecting the entire phone.

Thanks for the help. I'll try locking package installer and see how that goes. I'm just trying to keep my wife from installing apps that monitor my phone activity lol.

Securing adroid devices as much as possible.

Hey guys!
I'm given the task of securing 2 android devices (galaxy tab 7.0 and an S3). The friend of mine who has asked me to do this has been hacked (on an Iphone and on a windows PC) recently (for various sinister reasons) and After I secured her windows environment she bought these devices. A while after using the phone someone started to remotely control the phone and typed 'hell' in our language and she is really afraid. One of the pcs I secured has been stolen since it couldn't be reached remotely anymore, so I guess the threat is pretty serious. Now getting to the point, what would be the BEST way to do this ?
-Flashing custom roms on these (which is the most secure?)
-Seting up an antivirus + firewall on both devices (also I'd like to know which of these are the best NP if its paid)
-Setting up an anti theft app (and same here, I know Cerberus, but I'm wondering if there is a better solution)
The hard part of this is the fact the hackers are very likely experts (they hacked her Iphone back then making it taking photos and logging all keys like a regular keylogger).

What a story!
I strongly recommend avast! AntiVirus which comes with avast! Anti-Theft. Best Part: It's free!
McAfee is supposed to detect more malware but not as many as it would be worth its price.
Sent from my GT-I9100 using xda app-developers app

H3llwar said:
What a story!
I strongly recommend avast! AntiVirus which comes with avast! Anti-Theft. Best Part: It's free!
McAfee is supposed to detect Moore Malware but not as many as it would be worth its price.
Sent from my GT-I9100 using xda app-developers app
Click to expand...
Click to collapse
Thank you Buddy! Any additional professional suggestions? Anyone?

Anti-virus is only a curative solution, and can only detect malware after they have already breached your device. Android's security model makes it difficult for an attacker to remotely breach the device, unless they have a bad app installed on the device. When a user installs an app, they give that app certain permissions, and these permissions need to be checked to ensure they aren't being used as malicious apps (why would a camera app need to make phone calls on your behalf?) . The best suggestion would be to exercise good permission checking habits to ensure you aren't accidentally installing a bad app. Also, attackers may also send bad code through SMS, which may appear as a clickable link. I could keep going on possible ways to get compromised, but these are the most prominent.

syung said:
Anti-virus is only a curative solution, and can only detect malware after they have already breached your device. Android's security model makes it difficult for an attacker to remotely breach the device, unless they have a bad app installed on the device. When a user installs an app, they give that app certain permissions, and these permissions need to be checked to ensure they aren't being used as malicious apps (why would a camera app need to make phone calls on your behalf?) . The best suggestion would be to exercise good permission checking habits to ensure you aren't accidentally installing a bad app. Also, attackers may also send bad code through SMS, which may appear as a clickable link. I could keep going on possible ways to get compromised, but these are the most prominent.
Click to expand...
Click to collapse
Get a PermissionsManager like OpenPDroid or XPrivacy.
Sent from my GT-I9100 using xda app-developers app

[Q] Prevent uninstall of phone locator?

Hi,
I've installed AndroidLost on my phone, so I can track it if it gets stolen. The app is hidden from the main app drawer and can't be directly uninstalled.
However, if I go to Device Administrators in the settings, I can deselect the item (which is named Personal Notes in there). Once deselected, it obviously becomes completely useless, and can't administer the phone.
Obviously,doing all of this requires a degree of knowledge, but not all thieves are completely stupid, so would be able to do it.
Is there a way of password protecting the device administrators, so that the app can't be disabled without a pass code? If not, is there an alternative app that can control the phone from a website that can be 100% hidden from view?
Thanks for any suggestions!

MetalOllie said:
Hi,
I've installed AndroidLost on my phone, so I can track it if it gets stolen. The app is hidden from the main app drawer and can't be directly uninstalled.
However, if I go to Device Administrators in the settings, I can deselect the item (which is named Personal Notes in there). Once deselected, it obviously becomes completely useless, and can't administer the phone.
Obviously,doing all of this requires a degree of knowledge, but not all thieves are completely stupid, so would be able to do it.
Is there a way of password protecting the device administrators, so that the app can't be disabled without a pass code? If not, is there an alternative app that can control the phone from a website that can be 100% hidden from view?
Thanks for any suggestions!
Click to expand...
Click to collapse
You can use some 3rd party apps like audio manager or Avast anti virus to lock down the settings....
Android sometimes proves to be frustrating when it comes to security concerns......

eatsleep said:
You can use some 3rd party apps like audio manager or Avast anti virus to lock down the settings....
Android sometimes proves to be frustrating when it comes to security concerns......
Click to expand...
Click to collapse
Thanks.. I've tried Audio Manager, but that seems to be only capable of hiding the actual app, which the app does by itself. It's preventing someone from unchecking it under Security>Device Administrators that I'm trying to achieve, and unless I'm not using AM properly, I can't find any way of using that to hide it.

MetalOllie said:
Thanks.. I've tried Audio Manager, but that seems to be only capable of hiding the actual app, which the app does by itself. It's preventing someone from unchecking it under Security>Device Administrators that I'm trying to achieve, and unless I'm not using AM properly, I can't find any way of using that to hide it.
Click to expand...
Click to collapse
You didn't got the point...
Hide or lock the settings..... My friends use this technique.....

eatsleep said:
You didn't got the point...
Hide or lock the settings..... My friends use this technique.....
Click to expand...
Click to collapse
Thanks.. Audio Manager didn't really suit my needs, although it was more or less able to do what I wanted.. In the end I went with an app called AppLock, which puts a passcode on any app, including settings, but also has root capability, preventing it from being uninstalled, closed, etc. it also seems a little slicker.

Security App - Testers needed.

Dear All,
Our first security app ready, we are looking for testers to make sure the app is working as expected..
Based on Android security system research, we have strenuously tested all of the top security applications in the play store and confirmed that 99% of those applications do not detected the virus, spy apps. We are developing the app since 11+ months, we have been working on and finally created an application for Android security.
Don’t believe us? - Google it - “ Android spy application “ - install the app and see whether your antivirus detects any viruses. The result? It probably came up negative.
This application can detect 99% of viruses, spyware & junk that slows down your phone. And there are even more features suspicious apps, app lock, advance permission alert, advance junk cleaner, hidden apps, near by cell, app permission and so much more! We also support 20+ languages.
Key Features : Remote Lock, Wipe, Data, Locate, Alarm and Backup – Everything done thru one simple test message
The Application can find 99% of Spy applications in the market.
We’ve added 12+ algorithm, to detect the Spy application and application which can steel user data.
A tool designed to lock any apps
App lock – It will lock any application you want with pin or pattern.
A tool which allow you to lock and do what you want
v Remote Lock,
v Ram Cleaner,
v Remote Wipe,
v Remote Data,
v Remote Locate,
v Permission Manager,
v Alarm,
v Anti-Theft,
v Backup.
Advance permission alert – When you open the application, example Gmail – there will be a floating window popup and show the permission the application using right now, you can decide yourself if the app is safe or unsafe. Keep or uninstall ?
App history – you can see the list of application installed on your phone, developer name, rating, Security level, app size, updated date, etc.. you can also see what all applications you have installed other than on the play store. Did you really install them?
Suspicious App – We made the suspicious list dependent on the permissions the app is using. We are asking the application why you need this permission.
Example : Torch light app need only : Camera and Flash permission – why would they need your GPS or Account permission?
Hidden apps – MPSecurity will help you to find the hidden apps on your phone. Have a look yourself and decide if you installed the apps or not.
Junk Clear – it will clear junk automatically and does the real cleaning work.
The list of apps which are using internet right now.
Current process – shows you what is happening on your phone right now What processes are running? - we listed all the current process on your phone...
Connections and communications
Communication – WiFi, Bluetooth, check the history see if have you used them before ?
GSM & CDMA & Near by cells – Complete information about your network & same network list of users very close to you.
Aim to keep the Android phone Safe. Nowadays there are many spy apps for Android Devices, We wanted to solve the security issues in Android. Users may think that they are safe by only downloading from the play store but malicious apps are still out there, we’re here to give the user peace of mind ..
Example : While using the browser, sometimes an Android App will be automatically downloaded, its unsafe.
Identify the problem that the product is intended to solve ?
We wanted to solve the Security issue in Android phones. There are many Virus Scanner Application for Android but those applications can only Find viruses. But our application can find the spy applications installed on your device. Our application’s duty is to keep your Android Phones Safe and Secure...
Why you need MP Security App ?
The only App in Android which can find the Spy Apps installed on the phone. We keep your phone safe..
The Application lets you see what's happening to your phone. “ Monitor ”
See what's happening to your phone, What's happened recently and What's happening now, by looking at the different result and History.
“ Control “ - Easily control your phone & other connected devices all from your phone.
Customize Customize your phone based on the needs – what connections are trusted, what Bluetooth is trusted, What apps are trusted.
Many more to write...
Click Thanks button to support my work

Thread closed.
This is a security discussion forum, not a forum for advertisements, or pushing FUD.
jacksparao said:
Dear All,
Our first security app ready, we are looking for testers to make sure the app is working as expected..
Based on Android security system research, we have strenuously tested all of the top security applications in the play store and confirmed that 99% of those applications do not detected the virus, spy apps. We are developing the app since 11+ months, we have been working on and finally created an application for Android security.
Don’t believe us? - Google it - “ Android spy application “ - install the app and see whether your antivirus detects any viruses. The result? It probably came up negative.
This application can detect 99% of viruses, spyware & junk that slows down your phone. And there are even more features suspicious apps, app lock, advance permission alert, advance junk cleaner, hidden apps, near by cell, app permission and so much more! We also support 20+ languages.
Key Features : Remote Lock, Wipe, Data, Locate, Alarm and Backup – Everything done thru one simple test message
The Application can find 99% of Spy applications in the market.
We’ve added 12+ algorithm, to detect the Spy application and application which can steel user data.
A tool designed to lock any apps
App lock – It will lock any application you want with pin or pattern.
A tool which allow you to lock and do what you want
v Remote Lock,
v Ram Cleaner,
v Remote Wipe,
v Remote Data,
v Remote Locate,
v Permission Manager,
v Alarm,
v Anti-Theft,
v Backup.
Advance permission alert – When you open the application, example Gmail – there will be a floating window popup and show the permission the application using right now, you can decide yourself if the app is safe or unsafe. Keep or uninstall ?
App history – you can see the list of application installed on your phone, developer name, rating, Security level, app size, updated date, etc.. you can also see what all applications you have installed other than on the play store. Did you really install them?
Suspicious App – We made the suspicious list dependent on the permissions the app is using. We are asking the application why you need this permission.
Example : Torch light app need only : Camera and Flash permission – why would they need your GPS or Account permission?
Hidden apps – MPSecurity will help you to find the hidden apps on your phone. Have a look yourself and decide if you installed the apps or not.
Junk Clear – it will clear junk automatically and does the real cleaning work.
The list of apps which are using internet right now.
Current process – shows you what is happening on your phone right now What processes are running? - we listed all the current process on your phone...
Connections and communications
Communication – WiFi, Bluetooth, check the history see if have you used them before ?
GSM & CDMA & Near by cells – Complete information about your network & same network list of users very close to you.
Aim to keep the Android phone Safe. Nowadays there are many spy apps for Android Devices, We wanted to solve the security issues in Android. Users may think that they are safe by only downloading from the play store but malicious apps are still out there, we’re here to give the user peace of mind ..
Example : While using the browser, sometimes an Android App will be automatically downloaded, its unsafe.
Identify the problem that the product is intended to solve ?
We wanted to solve the Security issue in Android phones. There are many Virus Scanner Application for Android but those applications can only Find viruses. But our application can find the spy applications installed on your device. Our application’s duty is to keep your Android Phones Safe and Secure...
Why you need MP Security App ?
The only App in Android which can find the Spy Apps installed on the phone. We keep your phone safe..
The Application lets you see what's happening to your phone. “ Monitor ”
See what's happening to your phone, What's happened recently and What's happening now, by looking at the different result and History.
“ Control “ - Easily control your phone & other connected devices all from your phone.
Customize Customize your phone based on the needs – what connections are trusted, what Bluetooth is trusted, What apps are trusted.
Many more to write...
Click Thanks button to support my work
Click to expand...
Click to collapse

Microsoft Company Portal app in a separate profile? (S7 Oreo, no root)

Hi,
Here's the problem: my company introduced mandatory installation of Microsoft Company Portal application for devices that want to access company mail etc.
I have a private SGS7, and up until now I used Outlook in Secure Folder - this way I could give company Admin rights, but only to the container. Now usage of MS Company Portal app is mandatory, and the damn app detects: a) if device is rooted (it's not, because I like KNOX) b) if it's run from Secure Folder. If either happens, it will refuse to start.
A friend of mine has Xiaomi phone and he used multi-user profiles so that his private stuff can still be private (without company admin over them), but the feature is disabled in SGS7, and to reenable you need root (so, no-go for me).
Do you have any idea how to keep going? Maybe there's some modification that can be made to Company Portal app to disable Secure Folder check? Or some other way to NOT give the company admin rights over entire phone, but still run Company Portal?

Stasheck said:
Hi,
Here's the problem: my company introduced mandatory installation of Microsoft Company Portal application for devices that want to access company mail etc.
I have a private SGS7, and up until now I used Outlook in Secure Folder - this way I could give company Admin rights, but only to the container. Now usage of MS Company Portal app is mandatory, and the damn app detects: a) if device is rooted (it's not, because I like KNOX) b) if it's run from Secure Folder. If either happens, it will refuse to start.
A friend of mine has Xiaomi phone and he used multi-user profiles so that his private stuff can still be private (without company admin over them), but the feature is disabled in SGS7, and to reenable you need root (so, no-go for me).
Do you have any idea how to keep going? Maybe there's some modification that can be made to Company Portal app to disable Secure Folder check? Or some other way to NOT give the company admin rights over entire phone, but still run Company Portal?
Click to expand...
Click to collapse
https://www.theandroidsoul.com/add-multi-user-galaxy-s7-s7-edge-note-7/

Correct me if I'm wrong, but won't installing TWRP trip Knox?

Stasheck said:
Hi,
Here's the problem: my company introduced mandatory installation of Microsoft Company Portal application for devices that want to access company mail etc.
I have a private SGS7, and up until now I used Outlook in Secure Folder - this way I could give company Admin rights, but only to the container. Now usage of MSCompany Portall app is mandatory, and the damn app detects: a) if device is rooted (it's not, because I like KNOX) b) if it's run from Secure Folder. If either happens, it will refuse to start.
A friend of mine has Xiaomi phone and he used multi-user profiles so that his private stuff can still be private (without company admin over them), but the feature is disabled in SGS7, and to reenable you need root (so, no-go for me).
Do you have any idea how to keep going? Maybe there's some modification that can be made to Company Portal app to disable Secure Folder check? Or some other way to NOT give the company admin rights over entire phone, but still run Company Portal?
Click to expand...
Click to collapse
You can try this app: https://play.google.com/store/apps/details?id=com.oasisfeng.island&hl=en_US
And install the MSCompany Portall app inside Island.

Ex novo said:
You can try this app: https://play.google.com/store/apps/details?id=com.oasisfeng.island&hl=en_US
And install the MSCompany Portall app inside Island.
Click to expand...
Click to collapse
This may not work, I don't have anything M$ on any system I own.
However, you could try using Magisk to root the device and then hide magisk/root from the portal using magisk hide feature. I use it on my system and it roots and hides root etc., from my banking and other apps very well.
I take no responsibility for what happens if you do try.
For more info search XDA.

Hi,
I tried with Island, and initally it was quite promising - allowed to install MSCompany Portal, which run and connected to servers. Unfortunately, the app was unable to send proper device information to Intune (serial, phone number etc.), so it's impossible to check device compliance and authorize. This is despite making Island and Company Portal inside Island as device admins
As for Magisk, using Magisk = KNOW blown, so this is not an option.