Database Info

HtcLoggers.apk and other eavesdroppers

By now, some you have seen reports about the latest bit of under-the-covers eavesdropping, this time by HtcLoggers.apk. In case you haven't, this post on Android Police details the whole thing pretty well.
One thing that really caught my attention was the graphic showing all the different ways various bits of Android snoop on you:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Those of us not running HTC software don't have to worry about most of these. The one that remains for all of us, at least according to the research so far, is Google Checkin, part of GoogleServicesFramework.apk. You can see in the graphic what kind of information Checkin collects and where it puts it. I've seen /data/system/dropbox before, occasionally I clear it out because it collects a huge number of files. I hadn't really paid much attention to /data/system/usagestats.
Using Root Explorer, I see that the permissions on both these directories is rwx------. As an experiment, to see if I can block whatever Checkin is collecting, I deleted their contents and then removed all permissions on these directories (and rebooted for good measure). I did this about an hour ago. So far, the directories have remained empty.
My G2 (running ILWT CM7 build 216) appears to be functioning normally, including the Market. If anything malfunctions, I'll report here.
Update. More directories to block: /data/anr, /data/tombstones, /data/dontpanic. File to block: /data/system/userbehavior.db (I first used SQLite Editor to empty the file).
Do not attempt this procedure on /data/system/throttle -- this caused my phone to enter a boot loop, which I had to repair by booting into recovery and then reverting my permissions change through ADB.

Quick follow-up... Looks like removing all permissions on the two directories has no effect on the phone's behavior. I've seen no breakage and the directories remain empty. So if you want to thwart some data collection, this looks like a decent approach.

So now that some time has passed, what is veridict? Were there any averse affects on the phone? Does everything still work?

Still seeing no problems. I did the same thing to my Nook Color, and it's also behaving normally.

This is very interesting, I'll try changing the permissions too.

Updated original post: added a few more directories to block based on additional information reported by the Carrier IQ Logging Test App.

I also gave this a try...
And so far so good! Thanks!

Chrome: download manager mess up and help disabling link disambiguation popups

Hello.
About the “download manager mess up” take a look here (grossness warning!): Can't STOP a built-in manager download in an acceptable way… :-/ (v56, v57-Beta) @ Google forums
Briefing for documenting purposes: built-in download manager intercepts certain download links' files, I guess because of file extension (apk files not captured, for example). However, built-in download manager is deprived from file download cancelling ability. Had to delete all of the application data to stop the mess.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
In essence, a dodgy issue. Not overly critical in most situations, of course, but certainly dodgy. Better do not tap/click on overkill sized files, or you'll regret it.
With regards to the link disambiguation popups, this is something I've wished to get a solution for some time already, to no avail. So let me explain:
There are sites on which no popups are seen. Example: this very forum. You can tap where you want or need without popups. If something's a little cramped, just a little bit of zoom is all you may ever need. I use “force enable zoom” and you should also if not, as you may guess.
There are certain sites, though, where this is stuff gets in the way. Notorious example: eBay desktop mode (I've included the desktop site redirection to make your life easier in case you are using the @#$% mobile user agent).
It is obvious that there's something in these damned sites' coding which forces Chrome to go into “link disambiguation popup” disgusting mode. So, if any of you may know some sort of way to prevent the browser going disgusting mode, God would be grateful. Maybe some sort of mod and/or app? Any feedback/contribution welcome.
Mostly wrote this because I've recently revisited the Firefox browser, and I've been on the verge of switching to it. Too bad Firefox has 0 bookmark management capabilities.
Have a good time fellows.
Cheers

AdZHosts - Clean and pure Internet

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
AdZHosts
This HOSTS file is available on all operating systems. It has been used worldwide since 2009. It has already proven itself and is used as a source by many other projects. It is even by default in Blokada.
Its goal is to offer you a very precise and effective advertising block. Plus it helps preserve your privacy by blocking spy trackers and unhealthy addresses. It's all in one.
Website | Telegram | XDA-Labs
In addition to offering a HOSTS file for your Android, Windows, MAC and Linux, AdZHosts also comes in pre-settings for your browser extensions. NandoAdblocker and uBlolck.
There are also presets for AdGuard and DNS66 extensions.
Blokada already offering AdZHosts by default.​

Very good. ?

Hi! May I use your work for add it into keweonDNS?

working good with adaway+adzhost+magisk adsblock.

AdZHosts is down I'm sad.

Yeah, their main site says they are shutting down did anyone by chance make a backup of their android-hosts.txt? PM or post it. I would really appreciate it.
update: Energized Basic is identical
update 2: Energized is blocking my cable company login on ther History APP, when I disable blokada, I'm logged in, when I enable blockada, I'm logged out. Adzhosts seemed to have a fine balance. Anyone have a backup list?
update 3: whitelisting sp.auth.adobe.com getting some success

kodiportalgabe said:
Yeah, their main site says they are shutting down did anyone by chance make a backup of their android-hosts.txt? PM or post it. I would really appreciate it.
update: Energized Basic is identical
update 2: Energized is blocking my cable company login on ther History APP, when I disable blokada, I'm logged in, when I enable blockada, I'm logged out. Adzhosts seemed to have a fine balance. Anyone have a backup list?
update 3: whitelisting sp.auth.adobe.com getting some success
Click to expand...
Click to collapse
You can ask the dev on telegram from energized

Enabling mirrorlink option

Greetings XDA members.
All the progress I've made so far is based on Q&A from your site, so thank you right from the begining.
So here's what I've managed to do so far, starting with the device details:
LG G8S stock ROM (not rooted and boot loader still locked)
Downloaded Total Commander and accessed the root directory
Found two apk files named MirrorLinkServer,apk (the first in /product/app/mirrorlinkserver/ and the second in /system,/product/app/mirrorlinkserver/) - I'm Adding a screenshot of the search results down below
Installed both apk files (each after a factory reset to avoid duality or any other kind of interference)
Got the same result in both cases - When connecting phone to the cars USB outlet, the USB indicator at the notifications bar start flashing but nothing happens (phone screen or car screen)
When disconnecting - a mirrorlink menu appears showing the apps installed but saying they're not authenticated - I'm Adding a screenshot down below
If I'm trying to hit the back button the phone goes to settings but the mirrorlink menu doesn't show there
If I'm plugging the phone back to the car USB socket the "Connect via USB cable" option is trying to switch on automaticlly but goes back off and on again in an endless loop
Hitting the apps trying to authenticate them is doing nothing at all.
when I'm checking the mirrorlink server app in phones settings - It says under Permissions: "No permissions requested"
I believe that here lies the problem - meaning that if i could grant the mirrolink server the necessary permissions (internet access for authenticating the apps and later on for downloading data for the apps themselves; and location for navigation; and so on) then I think it would've worked.
So my main question is - How can I grant the mirrorlink server app permissions, even though none was requested?
However - If you think that I'm wrong or that I've made a mistake along the way - for instance that the mirrorlink server apk must get system app priviliges and therefore must be in /system/app/ folder - Please let me know
thanks,
Jacob
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Question how to bye pass organisation know security

Got this brand new A 32 5g phone. when i try to set it up it says that my organisation can control my device with knox cloud security, it does allow only limited apps via the google play store.
Is there any way to disable this and use your own Samsung account to sign and to restore this from an old backup.
many thanks
PS Just reading about Samsung Frp2020 , will this app help me to bypass

After seeing a youtube video, i have tried the Samsung Frp and use addrom, it allows me to restore from an old back up.
but when i go back it again takes me to the Knox page and asks me to enter my work email address and use ADFS seetings.
can some one help me please.
this is a new phone with no passwords setup currently.
I have done this 3 times and when i dont enter any details in the Knox and keep pressing the back up it gives the option to reset the phone and when i reset the phone i am back at square one.

i have just seen that it has intune security embedded into the phone. it activates when i am setting up the phone from scratch and wants me to add wifi to complete the setup
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Microsoft Intune to Bypass MFA

then it takes to the device setup methods which states EMM provider (enterprise mobility management (EMM) provider).
here are some pics for you to have a look.
after taking you the organisation sign in page if you dont put the correct credentials and put any other account detials it doesnot accept this and i have the option to restore the device which sets it back to factory reset.

Hey.
Did you ever find a solution to this?
I have pretty much exactly the same problem with a Samsung Tab S6 Lite and have yet to find a solution that works. Used Odin to flash new firmware and made no difference at all. The Microsoft sign in requirement via Knox Cloud Enrolment is still very much there.
All the articles and software I've found online seem only to relate to bypassing FRP (factory reset prevention) for a Google account.
???