Database Info

This is not safe to do is it ???

Hello xdadevelopers,
I've been having a heck of a time accessing the market to get U.S. apps that I'm otherwise entitled to owning. Being outside the country doesn't allow me to download these.
I then came across:
http://www.abtevrythng.com/2010/10/how-to-download-android-apps-which-are.html
As you can read from the instructions, it states that you must hand over your Google username and password.
Humm.... Isn't that exactly what one should not do????

I have not used AppBrain myself, but it is a huge and very popular portal.
I doubt it will misuse your google credentials and i probably would have heard of something like that happening.
But i can understand your worries and it is good to ask before just entering ones passwords and account into random sites.
Lets wait for another answer, maybe from someone using appbrain, as i don't plan on signing up there .

try VPN,pls.

I don't use appbrain myself, but I know people who do. Very good app, from what I've heard.

GhostElves said:
try VPN,pls.
Click to expand...
Click to collapse
What? Spam?

Android Rom and Banking Fraud?

Hello to all,
first of all forgive me if i am in the wrong forum. Second I am not an authority with ROMs and developing. I can flash a new ROM and follow guidance easily but that's it. Up to that.
I will tell you my scary experience with a specific rom which i installed a couple of days ago on my S3. First off all this post is not suppose to be rude to anyone or anything. I am telling you my story and I would appreciate your input as you are the experts.
3 days ago I installed the MIUI (http://miuiandroid.com/community) ROM on my S3.
As soon as I turned the phone on to run it for the first time I went to the typical set ups but then I noticed something.
On he top right corner of the status bar the a green phone icon appeared meaning that the phone was automatically set on "Call-diverting" .I dint pay any attention for about 30 mins as I was setting up the phone.
When I decided to see what the icon does to my sock and horror I realised that my phone was pre setted to call diverting automatically to a specific mobile number in the UK.
I quickly disabled the call diverting and dint think anything more. All of that happened around 12:30 in the afternoon (pay real attention to the times here).
about 10 minutes later I was at the office. around 2 hours after that I got a text message from my Bank to call them about a suspicious money transfer.
I called the bank and the told me that a few minutes earlier someone attempted to transfer 2000 pounds from my account. Of course my on-line banking was frozen and I was lucky not to loose the money.
Now, during these two hours my phone never rang just the text message from my bank. The bank security employee told me that it looked suspicious to them because whoever was trying to transfer the money asked for the 4 digit number via the automated bank security system to be diverted to another mobile number. The bank advised me to call my mobile carrier as I did.
The mobile carrier , when i talked to him, confirmed that someone called them and accessed my account by giving them all the right info, and requested that every time my phone was out of coverage all calls to be directed to another mobile!
have you guess what was the other mobile?? It was exactly the same mobile number as the pre-set on the ROM which I had installed 3 hours earlier!
And my bank confirmed that the same mobile was used in order to get the 4 digit pin.
I was shocked to say the least!!
When after a few minutes I managed to talk to my girlfriend , she told me that she was calling me earlier for about an hour. These phone calls never made it to my phone. As the phone was pre-setted to call diverting it was ringing to the diverted phone and not mine.
It is obvious that as I do mobile on-line banking and I access my accounts from my mobile (as many do), somehow they managed to get all the information about me and I am suspecting dodgy applications on my phone. I hope I am wrong but this experience has really shocked me.
I love android phones I love what you developers do but I am after you opinion in this one.
I am not here to offend any developers but to have a genuine answer and a sensible discussion about this issue. I am not a kid I am professional and this experience has really made me think twice about smart phones.

nice.! install only trusted ROMs with a lot of feed back
Sent from my GT-I9100 using Tapatalk 2

jowett69 said:
nice.! install only trusted ROMs with a lot of feed back
Click to expand...
Click to collapse
the miui-rom made by miuiandroid.com is a "trusted rom with a lot of feedback" and has a long history and a community with over 50.000 members.
mtdgr said:
I am suspecting dodgy applications on my phone.
Click to expand...
Click to collapse
i think you're right, it wasn't the rom but some malware-/spyware-app.
assuming your phone was rooted, it would be easy for an app to do all kind of bad stuff once it got root-privileges, eg hiding on your sdcard and spying your data and after that establishing the call-divert to catch the 4digit-pin and the rest would be history.
only thing you could do is think what questionable apps with root privileges you installed in the last days before this happened, try to get a copy of it and have a closer look on it, maybe installing it without a simcard inserted or with a simcard without charge on it, to see what happens...
a big piece of luck would be some kind of log from about 1230h to see what established the call-divert, but if i would do such app i would ensure to delete all logs with traces afterwards, but who knows?
though, all of that are just the ideas that came to my mind as i read your post...
good luck for the investigation, would be interesting to know if you could get any information about what happened, so keep us updated, ok?
greetz,
sUsH

It would be difficult for me to know which custom ROM is safe and which one is not! I am not an expert you see. And the same goes with apps. I don't think anyone can state with certainty that any are safe.
It is just shocking to know how easy it is for your details to "escape" !
I will keep you informed about how this goes.
jowett69 If you can tell me how to get that log you are talking about, that would be great.
In the meantime can anyone advise on a descent mobile data protection application? something which will prevent any sensitive data from leaking from my phone? Payware or freeware I don't mind.

some ideas
mtdgr said:
It would be difficult for me to know which custom ROM is safe and which one is not! I am not an expert you see. And the same goes with apps. I don't think anyone can state with certainty that any are safe.
It is just shocking to know how easy it is for your details to "escape" !
I will keep you informed about how this goes.
jowett69 If you can tell me how to get that log you are talking about, that would be great.
In the meantime can anyone advise on a descent mobile data protection application? something which will prevent any sensitive data from leaking from my phone? Payware or freeware I don't mind.
Click to expand...
Click to collapse
A start might be to check the Superuser app and click on Log and see what apps received su permissions.
Also, from a cmd prompt you can enumerate all the running processes by running:
Code:
adb shell "busybox ps -A > /mnt/sdcard/process.log"
adb pull /mnt/sdcard/process.log
View process.log for anything suspicious, or post it up and I'll have a look.
fluxist

fluxist said:
A start might be to check the Superuser app and click on Log and see what apps received su permissions.
Also, from a cmd prompt you can enumerate all the running processes by running:
Code:
adb shell "busybox ps -A > /mnt/sdcard/process.log"
adb pull /mnt/sdcard/process.log
View process.log for anything suspicious, or post it up and I'll have a look.
fluxist
Click to expand...
Click to collapse
I don't think I could do that my friend. As soon as I suspected that something with that ROM was wrong I performed a full wipe and installed omega 9.1 rom.
My question is this. By performing a full wipe should really erase any malware from the previous installation right? Can anyone advise on a descent antivirus/firewall application which will help me (and others like me) monitor and "block" unusual application behavior?

oh and one more question for my information...sensitive personal data can only be leaked when the device is rooted ? if it is not rooted am I safe?

mtdgr said:
I don't think I could do that my friend. As soon as I suspected that something with that ROM was wrong I performed a full wipe and installed omega 9.1 rom.
My question is this. By performing a full wipe should really erase any malware from the previous installation right? Can anyone advise on a descent antivirus/firewall application which will help me (and others like me) monitor and "block" unusual application behavior?
Click to expand...
Click to collapse
did you wipe your internal and external sdcards too? how did you wipe? cause it depends where the malware was hiding, if it is erased now or not.
a simple, yet powerful firewall is droidwall. you can find it in the market. put it in whitelist-mode and allow only the stuff you know. but droidwall controlls "only" internet-connections (wifi and 3g or such). for full controll over every permission of every app and connection of your phone you sohuld use pdroid, but i don't know if that's really necessary, though i understand your fear. but if someone really wants to harm you and has some knowledge, there are always ways, i think...
mtdgr said:
oh and one more question for my information...sensitive personal data can only be leaked when the device is rooted ? if it is not rooted am I safe?
Click to expand...
Click to collapse
not really, think of those apps you can use to root your device. think a bit further and one could make an app that roots your device and afterwards does the stuff it wants. but seriously, though it is possible, who would do that to you? that's what you should think about...
greetz,
sUsH
ps: cause you did a wipe, there's no possibilty of going through some logs, sry. (though this too depends on the way you wiped and what exactly you wiped...)

I did a full wipe to install the new rom...wipe cache data ...devlink and one more but cant remember it
Sent from my GT-I9300 using xda app-developers app

mtdgr said:
I did a full wipe to install the new rom...wipe cache data ...devlink and one more but cant remember it
Sent from my GT-I9300 using xda app-developers app
Click to expand...
Click to collapse
sry, then your try to get rid of the problem also got rid of possible evidence. just try to forget it and be more careful in future with suspicious apps from questionable sources and similar.
greetz,
sUsH

[Q] Vpn L2tp Psec google warning

It may be that I am not entering the right keywords, but I can't find the answer on the forums here. It's not a big deal, but I'm curious. When I connect via VPN on 2.3.6 through L2TP ipsec, I get a warning in Gmail saying that someone from a different IP was trying to sign into my account and google prevented it. (Because suddenly a different ip address from hundreds of miles away is attempting to sign in). I don't care that it's not letting it sign in (this isn't my daily driver, I just use it as a media player basically), but the choices I get are to click " No it's not me, change password" or " yes it's me" ( which I don't really want to say either). So is there some simple solution that I am totally missing? Or do I just ignore this everytime I connect to vpn?
Thanks

The simple solution is, if it's you, tell it that it's you. Why wouldn't you want to say it's you if it is?

Theraze said:
The simple solution is, if it's you, tell it that it's you. Why wouldn't you want to say it's you if it is?
Click to expand...
Click to collapse
Point taken. I suppose my first impression is that since Google services pretty much thrives on its users data, I don't necessarily want to admit that I'm encrypting it. I mean it's obviously legal, but I somehow feel that there will be a red check mark next to my account now. Or.... Maybe I should just take off the tin foil hat.
I put this out there to see if I'd get a response from anyone else who came across the same thing in the past.
Sent from my SGH-T889 using xda app-developers app

Well, if you want it to work, tell it that it's okay to work. If you don't want it to work, then you can keep telling it not to work. But if you tell it not to work and it does... that's a bug or security flaw.

[Q] How to know if im affected by mobilespy android keylogger?

Im having a doubt that my smartphone is being keylogged by this thing called mobilespy android keylogger. Everyone is watching everything I do with my smartphone including the photos I take and save, facebook and whatsapp messages( both incoming and outgoing) and even the music I hear. My friends are responding to whatever I do by uploading photos in fb, whatsapp and through status updates in both. I dont want to get rid of this keylogging. I just want to get the details of this keylogging like whoever it is senting to and any proof to show them. Because I want to catch them red-handed. Please help!!
I posted about this issue in xda several months ago, but this thing called mobilespy never came to my mind. Thats why Im asking. Also, I want to know this thing works in safe mode too? Please help!
Help me!

It is hard to tell since some mobile spy app like mobile spy, spyfone app and iKeyMonitor are totally invisible. But you can restore your phone to get rid of such apps if you suspect it.

dreamer04 said:
Im having a doubt that my smartphone is being keylogged by this thing called mobilespy android keylogger. Everyone is watching everything I do with my smartphone including the photos I take and save, facebook and whatsapp messages( both incoming and outgoing) and even the music I hear. My friends are responding to whatever I do by uploading photos in fb, whatsapp and through status updates in both. I dont want to get rid of this keylogging. I just want to get the details of this keylogging like whoever it is senting to and any proof to show them. Because I want to catch them red-handed. Please help!!
I posted about this issue in xda several months ago, but this thing called mobilespy never came to my mind. Thats why Im asking. Also, I want to know this thing works in safe mode too? Please help!
Help me![/QUOTE
Here is my professional advice based on several facts:
You joined XDA in October 2014; posted four messages about being spied on and keylogged on Android; have had and continue to have numerous issues being hacked/taken over; you use firewall and other android apps to no avail; all other non android equipment works fine for you. So, Android is "definitely" the culprit.
Here is the advice: ask for a raise from Mr. Cook or better have him make you the chief of Apple's propaganda department...
Click to expand...
Click to collapse

Dont let your afraidness take you over!
Go and make a factory reset of your phone.
Next time buy a blackphone and you and your mind have peace...
All the best!

What am i looking at?!?! H E L P ! ! !

I continously find weird and new folders on my phone whose content seem fishy to say the least. I feel like my husband has hacked my phone just from looking at some of the files content. Please help me decode. Thank you.
the attached file is from a bug report.

also, I forgot to mention I dont use Microsoft at all on my phone yet these 'logs' continue to pop up from time to time.
I'm using a Samsung a11.

has your husband joined up recently too ?

fb is facebook and it's likely for ads.
Do a quick search on fb.bin

bdani28 said:
also, I forgot to mention I dont use Microsoft at all on my phone yet these 'logs' continue to pop up from time to time.
I'm using a Samsung a11.
Click to expand...
Click to collapse
yea logs are your systems way of checking how your system is doing.
If you open one up it'll probably list the time, and what you did on that time frame.

That's content of fb.bin provided
Code:
c5dfe56f-f99e-4dbe-838d-1647632d1e20

bdani28 said:
I continously find weird and new folders on my phone whose content seem fishy to say the least. I feel like my husband has hacked my phone just from looking at some of the files content. Please help me decode. Thank you.
Click to expand...
Click to collapse

Apparently the other files I attached didnt go through. Those are the ones I'm really taking about. They are for Microsoft sky something.

hellofriendlymanveriosns said:
yea logs are your systems way of checking how your system is doing.
If you open one up it'll probably list the time, and what you did on that time frame.
Click to expand...
Click to collapse
Yes I am aware of that. But how are logs for microsoft sky accounts and/or sent data on my phone when I dont use any thing Microsoft on my phone.

3mel said:
has your husband joined up recently too ?
Click to expand...
Click to collapse
No. He dont use fb. Just messenger

If you are worried about your phone being hacked, you may scan your phone with some security app such as Malwarebytes, McAfee Mobile Security, etc.

bdani28 said:
No. He dont use fb. Just messenger
Click to expand...
Click to collapse
I meant joined up here on xda. someone made a post about malware a couple of days ago and said his wife had an A11 and was worried about files on her phone.