How may I modify permissions for locked system apps? (device is rooted) - General Questions and Answers

I couldn't find my phone a few minutes ago. I called myself and ran to find it, fishing it out of the chair I was playing with my dog earlier I, of course, involuntarily hung up the call — I miss bezels — which prompted a message on-screen coming from the SIM services, it was something about sending a text or something along those lines to inform the alleged calling party I'm busy, my carrier seems not to be aware of the busy tone on landlines or that mobile and IP phones already do that when they end the call. Anyway, I got straight away to search how to disable these notifications.
As it turns out, you can't. It's one of these apps that has notifications perennially enabled and the toggled is grayed out so it can't be changed. This is a MIUI 12 Xiaomi device, BTW. Android 10...ish. I think. It is rooted with Magisk and TWRP. Actually the only reason why I haven't sought out another ROM is because' MIUI blocks unknown callers. Which is kind of a moot point now since every block will probably trigger that message.
I have not been able to install a single Magisk module though. Basically the most advanced thing I can do is disable apps, but I don't use Magisk or TDVCR or whatever but ADB and the CLI* — and it doesn't even require root. However, I gather I can just disable this one, so I want to change its (and several others') permissions which are at best obscenely egregious. Part of my reluctance to learn has been that I don't trust it in the first place, so I barely touch the device or treat it as personal. But I'm researching and finding things on my own, I just need a little hint to get me started. Would you—please?
If possible, I'd like to keep/not risk the root, it was so hard to make it stick after reverting back dozens of times. Thanks!
*: or since I have root access, with the FX file manager app (I attached a couple of screenshots). Maybe it's somehow helpful. The device is under MDM and I also have a taskless Tasker app; in about 5 years since I got it, I still don't know how it's used.
Click to expand...
Click to collapse

Related

Seek Droid Reviews?

Anyone use Seek Droid?
http://www.appbrain.com/app/seek-droid/org.gtmedia.seekdroid
How's it compare to lookout or prey?
Seems like it's pretty feature rich for $.99 and reviews are good, but it's always good to hear from real, live users directly.
Lifehacker liked it
http://lifehacker.com/5745207/seek-droid-is-the-simplest-way-to-find-your-lost-android-phone
I think its the best, but I'm one of the developers. PM me if you have any questions.
I'm sure you do, but I was going to get some real user reviews here.
Give it a shot, write a review. If you dont like it, email support and we'll make it right.
I'm not sure if we have many people that are on xda using the app (yet). We are a really small company, and unlike our competition, we dont a marketing department to get our name out. Just a few developers trying to put out a good lightweight product. We love to see reviews and suggestions, so let us know what you think.
I can gave you a brief snapshot [after finishing my write up I realized it wasn't so brief]. Note: I haven't lost my phone yet so I've only been able to test it. Also, I have not tested other Droid locator apps so I have no point of reference. I've tested this on a Droid X.
Setup is a breeze. The user is asked to enter a username and secret code. The app goes through a registration process. The main screen of the app (on the phone) is organized as follows: View Website; Your SeekDroid.com Login; View Help; Current Status [Registered]; Your Secret Code; Options for Enabling remote formmating of the phone and SD card; Option for retrieving call history settings; Terms of Service; and Contact Us.
At the Seek Droid website, you're asked to enter your username and secret code. A top line menu appears, as follows: Locate; Alarm; Calls; Hide; Lock; Wipe; Help; and Log Out. Locate does just what it suggests: the webpage sends out a search command and a Google map displays the location. The Alarm options prompts you to type a message to be sent to the phone. Once the message arrives, the message pops up on the phone's screen and it beeps and will continue to beep until the screen is touched. When the screen is touched, you're taken to the slide-to-unlock screen. If your phone is secured with a password, you'll be directed to the unlock screen (pattern or keypad). Calls displays a recent call list. Hide triggers your device to hide the Seek Droid app from you list of apps (in your app drawer). Reboot is required. With Lock, you're prompted to assign a new digit lock code (digits only, not a new pattern lock). Whether your device already has a lock code or pattern lock, the new code is applied. I, for example, have a pattern lock. I changed the lock code remotely with Seek Droid and it changed it to the new code I sent. With Wipe you are given a prompt to ensure that's what you want to do. I did not test this feature. I might backup my SD card and try the wipe feature for that...I'll report the results later if I do.
I've tested the app indoors and outside, with GPS on and off. It finds it every time, usually within 3 minutes. I keep Use Wireless Networks and Enable Assisted GPS activated in the Settings screen on my device. Also, I have an app protector app that locks apps on my phone (along the lines of App Protector). I have Settings locked (requires a password to access). Seek Droid is able to change the unlock code remotely with Settings protected and unprotected.
Naturally, Seek Droid does not find my phone when it's turned off or in flight mode. Seek Droid does not provide advanced user controls like deleting individual apps, turning off/on GPS, remotely turning on your phone, etc.
Locating my phone worked with Internet Explorer, Firefox and Chrome. Javascript must be enabled.
One final comment: I encountered an issue with one of my computers locating my phone. I contacted Seek Droid support and received a response within 1 hour. Very helpful and responsive...kudos to them. After some troubleshooting, I discovered the problem rested with my computer. Seek Droid worked well from every other computers I have access to (rather than troubleshoot the problem with the one computer, I simply won't use that one to log in to Seek Droid in an emergency). So, my advice is to test the app from various computers so you know which one to use if and when you actually lose your phone.
I recommend the app based on my limited testing. I also recommend that you use this in conjunction with a device password or pattern lock (or an app protector app to prevent removal of Seek Droid). You simply want to set up controls so another person can't easily uninstall the app or deregister the device.
Price has now gone up to $1.99 and a bit peeved as I left it until today to get it, losing out 62p in the process
Anyway, after taking an aggggggge (months on and off) trying to configure Tasker to do this unsuccessfully I've now binned that idea and got this instead; setting it up alongside Tasker to receive a specific SMS to switch all the location finding stuff on (I have mobile and wifi switched off by default).
Just liked to echo the above comment in that it is really easy to use and the location is nailed down much better than all my previous attempts with Tasker.
Well worth it.
Wow, didn't notice that. I still hadn't purchased yet either and was going to. I really don't need it, I just wanted to play around with it. I'll just pass @ $1.99 and use the free version of lookout without wipe functionality and spend the $1.99 on a game I wanted or something.
Oh well.
is there a secret code default because i donwloaded the app to my phone online but never set it up
Kicknik: After installing the app and opening for the first time, you will be prompted to enter a username and a secret code of your choosing. Then, it will go through a process of registering your device (I guess it syncs up with Seek Droid). The username and secret code are then used to login to the Seek Droid website in order to locate and lock your device remotely.
My impressions:
Bought and installed a couple days ago on my Lg Optimus One. I am very satisfied.
The program installs very easily, once installed it asks you to choose a login name and a password and to set a few options: there's a few boxes to check, like the possibility to enable or disable the remote wipe of your smartphone.
Once you are done setting up you can access the seek droid website from your phone or from any device with internet access and once you are logged in you can monitor your device position (you can remotely enable gps if gps is disabled), check the last calls that were made from your device, lock your phone or wipe it to factory settings formatting internal memory and sd (of course it asks you for confirmation on the website if you click on the wipe button).
Another useful feature that can be accessed from seek droid website is the "hide" button. Once you press it the seek droid app on your phone becomes invisible (requires reboot) thus becoming even harder to uninstall (anyway even wehn visible the program requires your password to uninstall).
I tried every feature except for the wipe one and i can say it does what it says. Position through gps is accurate and is shown on a mini google map on the seek droid site. I monitored battery consumption and it seems almost unexistent.
In conclusion i think every smart needs a security program like this, and seek droid does better than other similar apps that i had tried before.
First I was using Lookout, but I rly didn't liked that story with the chinese developer that got misunderstood with his wallpaper app because of what Lookout said. Every website was telling ppl to uninstall his app. Lookout got a lot of attention, everyone installed their app and uninstalled the poor chinese app. That wasn't nice :T
Then I went to WaveSecure, from McAfee. I think it's $20 per year.
Never worked on my phone. Tryed the support, even installed a "debug version", but couldn't make it work properly on my HTC Desire. Gave up.
I was looking for another app to replace it and then I met Seek Droid. Was very cheap, no monthly fees and such, decided to give it a try.
Dude, I'm VERY satisfied. It's easy to install, got it WORKING on 5 minutes. McAfee WaveSecure didn't worked for me, but I had no issue with Seek Droid. If I had met it before, could save the $20 I paid to get WaveSecure (I should have tested it first, but saw "McAfee" on it, guessed it works.)
Didn't noticed any abnormal battery drain, I could retrieve the latest phone calls made and received, I could lock and unlock from the website, located very fast (I was using wifi when I tested).
I think that it could report the number of the SIM card and keep the alarm message on the screen, I mean, If I just lose it, I would like to keep on screen instructions to contact me :S
Currently If you "click" on the message, it will go away.
Anyway, I'm another happy customer.
It's very cheap, everyone should give it a try!
seijimaddog said:
Anyway, I'm another happy customer.
It's very cheap, everyone should give it a try!
Click to expand...
Click to collapse
Glad to hear you like it. Dont forget to review us in the Android Market.
I bought it for me (EVO) and my wife (LG Optimus S). Very reasonable price. Easy install and configuration and website control.
We also were using the new Sprint/Assurian TEP app. That has additional features--which I don't want or need (i.e., contacts backup). And, even though my wife's phone also has TEP, their app now says that the subscription has expired--which it hasn't.
I was about to cancel the TEP for her phone anyhow, and this is a nice reminder of why it's a waste for her cheap phone anyhow.
We're happy with Seekdroid and the $.99 price.
sycko,
I have Seek Droid on my Droid and my wife's Droid 2. Love the application. I was wondering if there was a way to get to get Seek Droid to work on my rooted Nook Color? There can be a general location using the WiFi instead of GPS I believe.
Thank you for your time.
How does one set this up? I bought it a while back and never got around to setting it up until today. I launch it on my EVO and it pops up a screen asking for a name and password, and anything I put in it says it's username or secret code is incorrect (obviously, since I've never set up a seekdroid account). I go to the website and it does the same thing. HOW DO I SET UP AN ACCOUNT IN THE FIRST PLACE?
Thanks.
Nevermind. Got it. (Uninstalled and reinstalled and the create account screen popped up.)
Does this work with Google Voice? I don't have text messaging, so thats the issue I have with location/alarm apps
I want to know, what if my phone got stolen and the guy instantly decides to wipe my device clean of any trackers .. will this device still be able to track after such an activity ?
Also, what if the robber doesn't wipe the device clean, but modifies/disables the internet connection on the device ? Or switches to another SIM which does NOT have internet on it ? Will this program still be helpful in any sense ?
Free today on Amazon. Don't know if this is current version, but thought I would pass that along. Clean interface, but I haven't put it through its paces yet.
Great app
I love the app. Very easy to use. I've used it to locate my phone twice.
I just installed mohan's latest ROM for the skyrocket and I am getting a message that seekdroid is not working. Any tips on how to debug. Is there a log of the failure?
I like the ROM, but consider this a must have app.
need a bit of help
sycko said:
I think its the best, but I'm one of the developers. PM me if you have any questions.
Click to expand...
Click to collapse
If seekdroid or something like that was installed on my phone. By my psycho gf. How would I totally remove it????

[App Idea] Plan B for data recovery on broken stock phones.

I feel this idea could be useful for a lot of us, not on our phones since we are likely rooted but on our family members and non tech friends stock phones. Which we usually end up fixing.
My idea if it is possible would be be for a "Plan B" type app for use after a broken screen, were the completely stock phone without ADB enabled needs data extracted.
My hope is that someone could make a app that is remotely installed from play.google.com that automatically turns on ADB debugging (if possible without root)
After that most data can be extracted with "adb backup" or adb pulls.
I can't count how many times this would of helped me in the past if it existed. Any dev up for the job? I am sure it would be appreciated by people.
Guess no one was interested in this idea.
shadowofdarkness said:
Guess no one was interested in this idea.
Click to expand...
Click to collapse
I think many of us are interested but one (so far) can help.
would be a good idea.... who ever was in need for something like that will be likely to pay for that... :laugh:
I could see this being a massive security risk. Sure the app could be handy, but it would also make stealing info from a phone very very easy.
So on that note, I don't think it will ever make it through, though I am sure there are ways.
Just install something like SMSBackup+: https://play.google.com/store/apps/details?id=com.zegoggles.smssync
Set it to automatically back up to their gmail, every so often, and then when it comes time to have to do repairs, you can get all of their calling/sms stuff back, since Google automatically deals with the contact infos.
it wouldn't be a security risk since the only way to install it would be from play.google.com which no one can do without your password. also pour planning with other software is not the point of this since I have been asked to recover data from devices by people that I honestly had no clue they owned the device before they broke it.usually family I don't see on s normal occurrence.
I've always been taught to keep a back up of anything you consider important.
Either way...
There are ADB backup solutions out there, there are recovery apps in the Playstore that will scan for missing or deleted files.
If you have access to the Playstore you have access to all the already available recovery apps. Why the need for an app that will basically root and unlock the device from behind their 'lock screen'?
If you have no direct GUI access, you want an app that you run on your computer that forces the phone connected via USB, to unlock and let you access whatever you want before you restore the phone. This is a massive security problem, because anyone could download that app, and use it to break into phones.
Sound like the 'prior planning' apps, are the best way to go.
I think you are missing my point. I know that prior planning is the best but it it not always possible when dealing with people so tech illiterate that even thought they own the device they barely understand it is not a iPhone because that is what a smartphone is to them.
My intended use is for physicaly broken phones (mainly screen) where I can't control any apps with the screen or turn on ADB from settings.
You thought on the security risk is wrong since out of the ways I can think of to install it via play store on the phone is would not be used since that would mean the attacker could just go into settings and do it the normal way. sideloading is impossible since it would be redundent due to that already needing ADB on.
The intended way via the web is safe enough since the attacker would need your email, password.
Do you hate the "Plan B" app that gps tracks your lost or stolen phone that is already in the play store and gave me this idea. It shows in the store as having between half a million and a million installs. Do you think those people should of went without such a app and lost their phone since they should of just pre planned since it is better.

Unknown activity HTC ONE M9

I have unknown activity on my phone.
Along with numerous "unknown" outgoing calls with no number shown on my device (and 2 other M9 phones on the same plan) or any number registering on my carrier's system (when I called R, they said their system did show connected calls lasting various amounts of time, the could not determine what number the calls were going to), there's also a call in the log going to "(unknown)" "***,144***"
Anybody have any clue what's going on? R gave the bs answer that all 3 of us were calling our VM, even while we were sleeping. However, the times we did check our VM, the number did register on the phones and with the carrier's system.
Thanks!
Im adding a question. My M9 was unlocked without my knowledge. I'm guessing that ***,144*** might be the secret unlock code. IS there a way I can determine if it's been rooted as well?
--
squidstings said:
I have unknown activity on my phone.
Along with numerous "unknown" outgoing calls with no number shown on my device (and 2 other M9 phones on the same plan) or any number registering on my carrier's system (when I called R, they said their system did show connected calls lasting various amounts of time, the could not determine what number the calls were going to), there's also a call in the log going to "(unknown)" "***,144***"
Anybody have any clue what's going on? R gave the bs answer that all 3 of us were calling our VM, even while we were sleeping. However, the times we did check our VM, the number did register on the phones and with the carrier's system.
Thanks!
Click to expand...
Click to collapse
Interesting issue. I am not sure about the rooting. You are probably going to need to ask experts around here. Hopefully, they can help you with that. As for security, you could try checking if you have any suspicious apps running in the background or installed (You might be using same GPS or another app for example). It could be that one of the malicious apps had access to your calls which lead to them outputting calls to somewhere. You could try disconnecting your internet for a day and see if the calls persist (That is probably not an option for you, but it is an idea). Additionally, you could try a factory reset on one of the phones and see if the problem is still there.
squidstings said:
Im adding a question. My M9 was unlocked without my knowledge. I'm guessing that ***,144*** might be the secret unlock code. IS there a way I can determine if it's been rooted as well?
Click to expand...
Click to collapse
just saw this,
https://www.xda-developers.com/htc-says-the-ads-in-its-keyboard-are-a-mistake-fix-icoming/
which reminded me of your issue, though I don't suppose it's linked, but it does make you wonder WTF HTC are up to!
Anyhow with your issue I wasn't going to answer as I don't know the answer but my thoughts may help in some small way. I don't thank the 144 is a phone developers code to "root" or turn of security in some way as that would not show on your provides call logs as they stay internal to the phone (mostly). Also I don't think it's adware callng a premium number as your phone company says it does not register properly, so nobody will be paid.
That only leaves a more malicious form of hacking, I would say. So maybe that code does enable your data to be sent but untrckable over a network. That suggests to me it's possibly your actual network (who are R? What country, is it?) or maybe even your government if you are an activist or something? Though more likely is a criminal or business competitor, assuming the other people affected are business colleagues. So could be your boss trying to snoop on you all, if not HTC or the Chinese Communist Party aparatus!
What to do? As Ross says disconnecting is probably not practicable. If you have malicious activity they probably are using data as well as calls. So I would install a firewall to block most apps and log attempted connections (normally have to pay for this) then check IP addresses tell see if they are legit. However this may not show anything as data may go via root. So setting up a proxy to route traffic to your PC and use a sniffing program to see traffic or at least I P addresses.
You can download root checking apps from play store. Also check your security settings any app with admin rights? Also use a good antivirus you might get lucky, but even if negative you may still be infected.
Only way to really clean your system is to reinstall your OS, though a factory reset will fix often. But first you need to know how you were all compromised and fix that else it will just return, I would think it's most likely your local work network, (but could be your provider R or even something else you connect to in sore way eg Bluetooth, or an app you all have (you can boot into safe mode to disable 3rd party apps, but with HTC system apps possibly containing apps that use the Baidu apk etc that still has a possible backdoor unpatched (as far as I know) safe mode will not help white those!)
You might have to look into freezing/uninstalling all HTC installed apps.
IronRoo said:
just saw this,
https://www.xda-developers.com/htc-says-the-ads-in-its-keyboard-are-a-mistake-fix-icoming/
which reminded me of your issue, though I don't suppose it's linked, but it does make you wonder WTF HTC are up to!
Anyhow with your issue I wasn't going to answer as I don't know the answer but my thoughts may help in some small way. I don't thank the 144 is a phone developers code to "root" or turn of security in some way as that would not show on your provides call logs as they stay internal to the phone (mostly). Also I don't think it's adware callng a premium number as your phone company says it does not register properly, so nobody will be paid.
That only leaves a more malicious form of hacking, I would say. So maybe that code does enable your data to be sent but untrckable over a network. That suggests to me it's possibly your actual network (who are R? What country, is it?) or maybe even your government if you are an activist or something? Though more likely is a criminal or business competitor, assuming the other people affected are business colleagues. So could be your boss trying to snoop on you all, if not HTC or the Chinese Communist Party aparatus!
You might have to look into freezing/uninstalling all HTC installed apps.
Click to expand...
Click to collapse
Thank you!
Rogers, Canada. But I've switched carriers within the last few days.
I've actually done the FR 5 times now. Disabeling the pre-installed "Gmail" (I think it's more Google thn HTC related seems to have stopped the calls. I've disabled as much as I could.
so here's the kicker. I'm literally nobody! On disability, no exciting employment history and those In my family who have, aren't in contact, nor do I have contact info. And it was my wife and daughter who had the other phones, but mine was central i think. daughters phone was locked. So nothing so exciting. Which is why I even bothered asking lol
squidstings said:
Thank you!
Rogers, Canada. But I've switched carriers within the last few days.
I've actually done the FR 5 times now. Disabeling the pre-installed "Gmail" (I think it's more Google thn HTC related seems to have stopped the calls. I've disabled as much as I could.
Click to expand...
Click to collapse
Ah! Rogers Canada should be a well controlled and trustworthy provider, so probably not them, though a rogue employee or having their network compromised can't be ruled out.
Also if official Gmail app it should be safe though it does have some quite intrusive permissions like full network access, view confidential info etc, but all are legit if you want the full functionality of Gmail. But it shouldn't have access to place phone calls, so should not be able to create the behaviour you describe.
That leaves a rouge app, but you would all need to have it I suppose, HTC app (or system behavior) or local hack ie via your router or via your PC. A good anti virus should find rogue app on phone and similarly on PC. HTC system apps hard to spot without doing the firewall etc etc. So I would also be double checking your local router for firmware update and resetting it with a new strong password, to prevent possible return, so to any Bluetooth devices.
Hope it doesn't return! All the best
been a while but, just how does one get a "," in the phone keyboard? long press * for P, but no ",".
Now that time has passed and more people might be awake and less likely to make excuses, I'm wondering if this issue can be solved, or at lest thought about intelligently. Maybe someone who knows how it CAN happen, instead of trying to find ways I'm mistaken. this was on THREE SEPARATE PHONES in 2 separate cities.
squidstings said:
been a while but, just how does one get a "," in the phone keyboard? long press * for P, but no ",".
Now that time has passed and more people might be awake and less likely to make excuses, I'm wondering if this issue can be solved, or at lest thought about intelligently. Maybe someone who knows how it CAN happen, instead of trying to find ways I'm mistaken. this was on THREE SEPARATE PHONES in 2 separate cities.
Click to expand...
Click to collapse
Check with a root app to see if your device is rooted
check permissions also you can take back permissions with a app on fdroid
unknown app check with virus total or
IF someone has root on your phone they can do what they want and when they want
a app that has call access they can transfer information over a phone connection which can be anything
The troubling thing here is that your phone was unlocked w/o you which implies root access
IF you bought your phone new you might not be anybody but to be put in perspective amazon lets you steal $500 if you use another id and they say it is not you so you do not lose out
but if it is used this can be from the previous user.
The best thing to do if it does not stop is to upgrade the software on the phone if you have already done that then use a Root firewall or change to a rom here on xda (you can all change making the transition easier).
Applied Protocol said:
Check with a root app to see if your device is rooted
check permissions also you can take back permissions with a app on fdroid
unknown app check with virus total or
IF someone has root on your phone they can do what they want and when they want
a app that has call access they can transfer information over a phone connection which can be anything
The troubling thing here is that your phone was unlocked w/o you which implies root access
IF you bought your phone new you might not be anybody but to be put in perspective amazon lets you steal $500 if you use another id and they say it is not you so you do not lose out
but if it is used this can be from the previous user.
The best thing to do if it does not stop is to upgrade the software on the phone if you have already done that then use a Root firewall or change to a rom here on xda (you can all change making the transition easier).
Click to expand...
Click to collapse
Thank you for taking the issue seriously and not trying to force kool aid down my throat (if carrier was "trust"worthy, THEY would have solved it).
It didn't show root. 2 of 3 m9s were mysteriously unlocked. the 3rd did prompt for a code, but did also show those "unknown #" calls. However, I'm still stuck on the code. I can't even enter a ",". Didn't check the other units for it, but it's still the only unanswered issue that could explain the unlock (aside from your suggestion). No one's even heard of it, but programmers are known for adding backdoors. If anyone's got a new, s-on unit and feels like trying it, that's about the only way to get an answer.
It's dead now anyways. Battery won't charge unless powered off and went from 24+hours regular standby to about 3 hours with extreme powersave on, overnight and doesn't extend with usb power. usb data comm isn't even recognized. All 3 have failed actually (different ways) so I'm going back to my m7 which still works great. Except, it says s-on but works with different carriers and I can't even enter the code I paid for (no prompt. is there another way?)
So, here's the tinfoil hat part. Although I'm nobody, This all started around the time of the '16 election. when I was arguing with a youtube account named (not looking to attract attention so no name, but you know it) for the person who came 2nd.
Thank you for your help. It's a shame it's pooched before solving the issue. But hopefully, the code will be solved.
But any help entering my sim unlock code a different way would be appreciated. But if other carrier sims work, should root be doable while showing s-on?
Thanks a TON!!
squidstings said:
Thank you for taking the issue seriously and not trying to force kool aid down my throat (if carrier was "trust"worthy, THEY would have solved it).
No one's even heard of it, but programmers are known for adding backdoors. If anyone's got a new, s-on unit and feels like trying it, that's about the only way to get an answer.
Click to expand...
Click to collapse
It would seem in your case that it is a setting change that was made and not comparable to other phones. Probably what we are talking about is a connection to a command server. S-on is a protection so that one cannot change the state of certain partitions namely the recovery boot and system however their are ways to get around this. You would need to get a root app to do that.
As a general rule you need to prove something is going on and funny numbers are a indication but nobody in the security community would touch it because it is very open. What you need to do however is
Get a copy of the calls use pcap and
check your firmware with the standard HTC firmware
this will show you what the phone call is doing and will help the android community overall (improved security)
Also programmers do not try to add backdoors they try to have a good product it is the hacking/security teams of _________ that do that. This being a programmer myself.

New OTA Android update, good or malware?

As I am sure all Alcatel Idol 3 owners noticed by now, Alcatel have, over the last year or so, released on Google Play "updates" for most of their builtin software - the launcher, file manager, radio player, photo gallery, calendar and more - with what is, if I can be blunt - malware, updates whose only intention is to show you ads and notifications (whereas the original applications, obviously, did not have ads) which you have no way of disabling, and who knows what else.
I avoided this crap by "uninstalling" the updated applications and getting back the preinstalled versions.
BUT, today I started getting on all my Alcatel Idol phones (I have 3 of them!), OTA Android update. And I'm worried what would happen if I click it. Will I get the "updated" (malicious) versions of all the builtin applications with no way to revert them?
Does anyone have an experience with the new OTA update that came out yesterday? Can you tell me if after the update, the "joy launcher", "file manager", etc., are decent versions or the crappy versions which show ads?
P.S. Alcatel, you guys are idiots. I love your phones, and in the past bought 5 of them, but I'll *never* buy another phone from you because of this malware issue.
i have been wondering the same thing, i was scared to even touch the notification to see if it is a large upgrade or just 1 or 2 megabytes, in case touching it forces me to download it. please note, i have no idea if the OTA is any good, but i'm going to continue this post to vent about alcatel idol 3.
i was a bit annoyed with the last system upgrade, which started flashing the screen on and off periodically when any notifications were left active... for me, i always leave some notifications going, so that i don't forget about them or just want to leave them up even if i never take any action with them...
so i'm sure this takes a toll on my battery, since the screen will be flashing on and off for a few minutes before it stops.
i was shocked when a few months ago (or even a year?) apps started sending ads to the notification bar, from reading some posts i figured out you not only had to stop auto-updates in the play store, but also go into the updates app and disable them there. i didn't even know ads on a stock system were a thing, until i saw my dad's BLU $50 phone and realized that's how they make a decent phone $50.
since my idol 3 4.7" was relatively cheap at $180, i could see how they might need to put ads, but if i got a brand new alcatel phone at over $400, i'd be even more furious, do they put ads on their brand new phones?
i see a lot of cheap phones on amazon now listed having versions with "lockscreen offers and ads" including idol 5s
as long as the ads aren't malicious, and if you can just block notifications in android (i dunno if they somehow disable that) then it's sort of worth saving the money
anyway, i've had my idol 3 4.7" for just about 2 years, it's still fine, but i guess i'm starting to think about getting something else. i'd love to get another small phone, right before this i had an xperia z1 compact which i loved but the the battery started failing and bloating after less than a year and a half, so i'm kind of thinking i should never spend over $200 for a phone again (that one was $350)
my android history has been
nexus one $529
galaxy nexus $435.50
xperia z1 compact $350
idol 3 4.7" $180
i've been looking at nokia's new androids lately, or some kind of honor maybe
but my idol 3 4.7" is still working fine pretty much
i just remembered one other thing i hated about the marshmallow updated, which is the adopted SD card storage...
from what i understand if your phone dies, everything that was on the SD card can never be read again, because it works only when plugged into your phone. i mean i guess that's good for security, but it should be optional. it'd be nice to just be able to take that SD card to a new phone and just have everything that was there on it again.
i just noticed someone's post about "semi-adopted" SD card, which i guess means making 2 partitions, which kinda makes sense, but it would be nice if android offered that as a preset option. i had just gotten an SD card a few weeks before the marshmallow update came out and moving apps to SD for apps that supported it, worked fine.
anyway, i don't think and kinda hope no one read this, i'm not sure why i wrote this
I know that feeling, bros
Actually, I managed to uninstall built-in apps using adb shell, which was described in the discussion about Debloater (the app itself did not work after Marshmallow update):
Code:
pm uninstall --user 0 com.package.name
(this uninstalls system apps for the current user, so that they cannot be launched, do not notify about their updates in Google Play, and this works without root)
nyh said:
BUT, today I started getting on all my Alcatel Idol phones (I have 3 of them!), OTA Android update.
Click to expand...
Click to collapse
Dear nyh, what is your region and phone model (like, 6045K or 6039Y or with other letter in the end)? Here in Belarus (Eastern Europe), my 6045Y does not notify of any update (current system version 6.0.1-010 20).
Mankann said:
Dear nyh, what is your region and phone model (like, 6045K or 6039Y or with other letter in the end)? Here in Belarus (Eastern Europe), my 6045Y does not notify of any update (current system version 6.0.1-010 20).
Click to expand...
Click to collapse
I have the 4.7" model 6039S, and three more phones of the 5.5" model, I don't remember now their model number.
What I'm running now appears to be Android 6.0.1 build number "1BGD-UED2". I don't know how this relates to your number. I noticed the "update" program tells me the new version is "0100020" which is suspiciously close to the number you said, maybe it's the same. With your version, does "uninstalling" the "Joy Launcher" (and other) applications to get back to the preinstalled one, gets you a decent version, or one with ads?
nyh said:
I noticed the "update" program tells me the new version is "0100020" which is suspiciously close to the number you said, maybe it's the same. With your version, does "uninstalling" the "Joy Launcher" (and other) applications to get back to the preinstalled one, gets you a decent version, or one with ads?
Click to expand...
Click to collapse
Ah, I understand now. It seems that your phone wants to update to the version that removes fastboot commands (so I suggest you triple-think and triple-check before upgrading).
"Uninstalling" system apps does not revert them to preinstalled versions, it makes them completely unavailable until hard reset (they are only listed in Settings labeled with "Disabled for current user" and cannot be run). If you decide to do this, you should first install some alternative apps (like Nova Launcher, Google Calendar etc), or else you won't be able to boot and use your phone.
I have the Idol 3 5.5 6045l(USA) Android 6.0.1 Build number 7VGE-UEE1.
I am reluctant to install the OTA I have pending:
______________________________
System update available
010 01 (471.5 MB)
New in this version
Version 7VGS-UES6 includes a security update that fixes Android major security flaw.
Update info:
- Netflix service
- Gameloft games
- UE improvements& bug fixes
______________________________
I am baffled that Alcatel would include Netflix & Gameloft with a major security fix.
After the adware riddled system app updates(that I've reverted to original) I will wait for more information before updating.
I love my phone and was considering buying a back-up or an Idol 4s especially as it seems that the front-facing speakers have been dropped from Alcatel's 2018 lineup.
But the bond of trust concerning system & app updates has been broken.
[Not sure whether one will be able to revert adware riddled system apps after the update]
That's real bad
Maybe this "security update" is resolving BlueBorne vulnerability (actually I wrote Alcatel about this, and they told me not to have bluetooth on all the time, wait patiently and install an antivirus which of course I did not do). But Netflix or Gameloft as system (priv-)apps is a no way (I struggled with TWO hidden Facebook services preinstalled on my phone until I found a method to "remove" them, which I described above).
If such an update comes to me (it may take days, weeks or months before it reaches all regions), and if no one installs it, I will do it and report here
I was stupid and sleepy and didn't fully check the update notes in depth when I saw it pop-up yesterday, I figured the majority of it was for security and maybe a couple of quality of life improvements like a new lock screen, even the entry about the Netflix app just sounded to me like they were fixing a problem people might have been having with it. suddenly I have and Netflix app I didn't want, a news app, some sort of Alcatel store front and two space wasting games (or at least one game and some gameloft "50 free games thing I have no use for).
I got rid of the apps that could be insta-deleted, and the netflix app can at least be disabled, but the filemanager is by far the worse offender. It's "boost" download and obnoxious UI, not to mention it clutters my notifications and lock screen. I've managed to quiet it down by canceling its access and whatever permissions I could. The fact that it restarts itself after a few seconds is just as irritating even before the reports that it actually may make my phone operate worse. I haven't experienced anything yet aside from the Google Play store crashing once while trying to figure out how to get rid of the update, but that was shortly after doing the factory reset and it's only been a day.
Whats mroe annoying is this now part of their most recent update on Idol 3. It's now impossible to revert or kill this as it's all baked in, not even factory reset will remove it. The new file manager app restarts at every turn, even after Force stop and will not allow you to disable it, and it seems to resist methods of hiding it from the user. I'm still seeking ways of getting rid of it that dont require rooting my phone but at this point it seems like the only possible answer, which is a shame because I was fine not rooting android, this was a really nice phone until they ruined it with this garbage. I know I'm pretty much screwed because My computer doesn't always seem to respond properly to Android stuff for some reason so any attempt to root will probably result in me bricking the thing, and even if I could root I'm not certain I'm comfortable with my phone being that open with other applications like this roaming around not to mention the questions of whether any of my desired apps will respond poorly to my doing it. But I wanted to at least add my voice to the rest that are complaining about this and telling Alcatel this is the last product of their's I'll ever own.
@PN04
Thank you for your very detailed report. Sorry to hear of the predicament you are now in. It goes without saying that I - thanks to you - will not be updating.
PN04 said:
I got rid of the apps that could be insta-deleted, and the netflix app can at least be disabled, but the filemanager is by far the worse offender. It's "boost" download and obnoxious UI, not to mention it clutters my notifications and lock screen.
Click to expand...
Click to collapse
have you held down on a notification and hit the (i) and then block notifications?
does it somehow disregard that? that was a new feature added in marshmallow
zxcvb2 said:
have you held down on a notification and hit the (i) and then block notifications?
does it somehow disregard that? that was a new feature added in marshmallow
Click to expand...
Click to collapse
I have, it takes you to the app notification section where you can reduce it's priority, stop it from peeking and "hide sensitive content" (not sure what that last one means but I turned them all off anyway). As far as I can tell it's teeth are pulled as long as I don't actually start the app or give it any permissions when it asks, but the fact that constantly force stopping it only gets rid of the menu bar on my lock screen for a few seconds and that little stupid broom icon is constantly showing in my bar at the top means it's still an ugly scar on an otherwise nice phone. also App memory usage claims it's used 27 mb in the last 3 hours and I havent' even touched it.
I'll probably be studying up on rooting this weekend.
ichmoimeyo said:
@PN04
Thank you for your very detailed report. Sorry to hear of the predicament you are now in. It goes without saying that I - thanks to you - will not be updating.
Click to expand...
Click to collapse
Same here, no update for me either thanks to PN04's findings. I have managed to silence the Update app by uninstalling updates on the app and then turning off auto update and notifications. So far so good, no nagging messages about the update. Considering my latest security patch is from Nov 2016, I was not expecting to get any more anyway.
Shame on you Alcatel for ruining an otherwise perfect phone! Maybe i can get one more year on this one. The Xperia XZ1 Compact is looking more and more attractive, apart from the price (native Wifi calling, VoLTE and band 12 on TMO US, stuff that this phone didn't have and start to become more important for me).
Glad it helped. I guess I can take some measure of comfort in that at least.
The result of the upgrade.
nyh said:
Does anyone have an experience with the new OTA update that came out yesterday? Can you tell me if after the update, the "joy launcher", "file manager", etc., are decent versions or the crappy versions which show ads?
Click to expand...
Click to collapse
So, I was surprised nobody came up to talk about their experience with the upgrade, so I took a risk and updated two of my Alcatel Idol 3 phones (mine and my son's) to the new update. Like in the old movie, I have good news, bad news, and ugly news:
The bad news was that the application content of the update was just as lousy as I feared it would be. It has the evil file manager and a bunch of other crap applications which spew notifications all the time, spontaneously install applications you never wanted to install, and so on. The strangest thing is that the update claims to add Netflix support, but actually uninstalled the Netflix app that I already had installed, which was very annoying (I had to re-install Netflix, re-download my downloads, and tell Netflix that I don't have the "old" device any more so it will let me download on the "new" one).
Also, the last on the bad list: after using the new system for two days, I haven't found a single thing to be better than the old system. This update doesn't upgrade Android - it's still exactly the same release 6.0.1 as it was before. The "patch level" is listed as November 2017, so maybe it has some security improvements, but I can't really tell.
The good news is that with some considerable effort, I was able to get rid of all of the crap (at least, everything I found so far). There is a new application called "Apps" which installs random crap. You can't uninstall it, but you can "disable" it and it never runs again. The evil file manager you can't uninstall (or disable), but its menu has an option to not send notifications, and then it doesn't. Then I went to the list of applications and uninstalled (luckily, that's possible) a bunch of games and other crap that Alcatel installed for me. If Alcatel had a better track record, I might actually enjoy trying out the new games they installed for me, but as it stands, I was worried about what might happen if I run them - I prefered to uninstall them. Anyway, after doing all that (sorry I don't have more detailed instructions), I am running with the updated Android for two days, and I haven't seen another ad, unexplained notification, or unsolicited application being installed. Hallelujah!
The ugly news is that after two days, I'm starting to worry that this version is less stable than the previous one. In two days I had to reboot my phone at least three times, once it hung during taking a video, once when Netflix suddenly couldn't find my downloaded content, and once when another app suddenly couldn't use the SD card (and a reboot solved these problems). I can't say I never had to reboot my phone, but this seems to be more frequent than I used to do it. I'm not sure this a real new problem or just a string of bad luck - only time will tell.
Mankann said:
Ah, I understand now. It seems that your phone wants to update to the version that removes fastboot commands (so I suggest you triple-think and triple-check before upgrading).
Click to expand...
Click to collapse
What is "fastboot commands", and why should I be worried if they are removed?
Mankann said:
"Uninstalling" system apps does not revert them to preinstalled versions, it makes them completely unavailable until hard reset (they are only listed in Settings labeled with "Disabled for current user" and cannot be run). If you decide to do this, you should first install some alternative apps (like Nova Launcher, Google Calendar etc), or else you won't be able to boot and use your phone.
Click to expand...
Click to collapse
This is not my experience... In the Google Play app. For most applications, "Uninstall" lets you really uninstall an app. But for built-in applications, when you "Uninstall" it asks you if you really want to revert to the pre-installed version, and that is actually what happens. This is why I did on my Alcatel Idol 3 for a year before this latest update. In application tray, when you long-press an application, it lets you "uninstall" regular applications, but for built-in application, the uninstall operation is simply missing. I never found any way to do what you describe - "disable for current user". Somebody above suggested this can be done through adb, but I never saw a way to do this in Alcatel's normal UI.
I wrote above my experience from the upgrade, which you can read, but I have two small comments about your experience:
PN04 said:
I got rid of the apps that could be insta-deleted, and the netflix app can at least be disabled,
Click to expand...
Click to collapse
It's hilarious (or more accurately, sad) how people who already had Netflix installed (like me), their installation got deleted - but for people who never had Netflix, it got installed and made unremovable. Great job Alcatel!
PN04 said:
but the filemanager is by far the worse offender. It's "boost" download and obnoxious UI, not to mention it clutters my notifications and lock screen. I've managed to quiet it down by canceling its access and whatever permissions I could. The fact that it restarts itself after a few seconds is just as irritating even before the reports that it actually may make my phone operate worse.
Click to expand...
Click to collapse
What I did to solve this was to reduce its permissions and more importantly, go into the file manager, go into its "settings", and ask it to stop its notifications. Luckily, it worked, and I never heard from the filemanager again. I don't know if it continues to do evil stuff in the background. It appears it is still running (my app info tells me it has used memory in the last 3 hours), but using "0%" CPU.
PN04 said:
this was a really nice phone until they ruined it with this garbage.
I wanted to at least add my voice to the rest that are complaining about this and telling Alcatel this is the last product of their's I'll ever own.
Click to expand...
Click to collapse
Yes, I wonder if someone in TCL lost their marbles with these adware updates... As I said, I bought *five* of these phones - for me, my wife (two phones), mother-in-law and son, and I would have continued to recommend their phones if it weren't for the tricks they started to pull off last year.
nyh said:
What is "fastboot commands", and why should I be worried if they are removed?
Click to expand...
Click to collapse
One of the Alcatel's OTA updates (IIRC, it was from Lollipop to Marshmallow) removed the ability to send fastboot commands to the phone, so that it became very hard to unlock bootloader and install root or custom ROMs. Actually it was already discussed here many times.
nyh said:
Somebody above suggested this can be done through adb, but I never saw a way to do this in Alcatel's normal UI.
Click to expand...
Click to collapse
You can either use adb shell or you can use shell directly on your phone via apps such as Terminal Emulator (Google Play, F-Droid). Of course you cannot do this within "normal" GUI, because it is designed not-to-be-able-to-break-things
I work from home/am self employed so most of the time so my phone doesn't get outside except for a few occasions a week otherwise it's usually connected to the home wifi so that I don't waste data. But this weekend I had to run a few errands and in a single hour outing using mobile data, I force quit the file manager maybe 26 times as opposed to 5 - 8 times just connected to wifi so I feel like it's constantly trying to ping servers unless you restrict it to mobile data. I also noticed that number dropped by half to maybe 3 or 4 times in the house when I had a few apps like AIMP or one of the games I do play on it to pass time idling in the background. As I said before I did cancel every permission I could find for it and it still manages to crawl out of the grave every so often but maybe those apps had a high enough priority level so having them active an in memory pushes it down the list.... Literally while typing this just now I was charging the phone and got the signal that the battery was full, woke it up to check if file Manager was running, saw nothing on the lock screen, unplugged it and File manager popped up again.
This update is a cancer. I haven't had to restart yet, but I've definitely noticed a few more app crashes. The loss of Fastboot might explain why my first attempt to hide the offenders with ADB failed. after installing every thing , switching to developer mode and connecting it to my computer the phone just refused to show up in the program (again, this might still be a computer issue because I've had trouble with minor developer tools in the past). I may not be an Android developer like some people on this side but feel like I fiollowed the instructions correctly. I get the feeling this is bad news. We might not be able to even get a different rom installed on it at this point.
Is it possible someone has an older version of the firmware that can be reinstalled over top of this some how? ugh, I really can't afford to have to buy a new phone right now.
PN04 said:
This update is a cancer
Click to expand...
Click to collapse
I agree. People, please try to avoid this update. If you can find a way to stop the "update" process from notifying you, great, if you don't, learn to leave with them - it's better than doing the update.
After another day experience with this update, I figured out that:
1. The "Google Play Services" processes takes 30% of the CPU all the time, and causes my battery to run out after 6 or so hours. This was not the case before the update. I can't figure out what is calling the "Google Play Services". I see the evil "File Manager" running, but it's not taking up CPU, and nothing else takes CPU except the "Google Play Services".
2. Every once in a while - several times each day (!) - something "hangs" in the OS, and applications start to hang: sometimes they can't start, sometimes they can't read their data (!?), sometimes they can't connect to the network (!?), and other bizarre phenomena. Rebooting the phone solves the problem, and I've been doing this several times each day now. Before that I rarely had to reboot the phone (maybe once a week).
Avoid this update. Like the plague. Shame on Alcatel / TCL.
Mankann said:
Code:
pm uninstall --user 0 com.package.name
(this uninstalls system apps for the current user, so that they cannot be launched, do not notify about their updates in Google Play, and this works without root)
Click to expand...
Click to collapse
Doesn't work for me:
pm uninstall --user 0 com.jrdcom.filemanager
Error: java.lang.SecurityException: Package null does not belong to 10096

Could a device be tampered with through mail

Hi!
During the last 6 months I've had a real problem with my online security. Bought a MacBook Pro which turned out to have had a root virus installed, infecting my Wi-Fi and thus all units who connected to it.
Took me a while to figure out...
First I had a brand new, out of the box Xiaomi MI 9 that got rooted OTA and I lost admin privliges etc.
From my experiences with that and from what I could gather I think it might have had something to do with this cloak and dagger virus thing, overlay and ****ing permissions hidden and yeah I really dont know, anyway.
Today I still worry about what happened. I know much is irrationell since I no longer have any Wi-Fi, instead I use unlimited data and got my self a new Oneplus 7T.
Not even enabled developer options nor touched the bootloader or usb debugging.
When I first bought it, (I had not been able to browse the internet nor search the info before bc of above) I ofc asked the store if they had any type of deal or knew of for a reliable VPN.
Unfortunatley, due to my lack of research, being locked out of my mail acc etc I ended up with a second license of Mcafee Internet security vpn, proxy.. (Probably have around 10-15 of those, containg True key and virus protection)..
This is where my fear comes in again.
Been trying to find an answer to this but I can't find enough to have piece of mind, or my 6 months "rehab" from the internet and technology made me a noob at googling.
Bear in mind, I also have and had Malwarebytes Premium, now I also use ExpressVPN instead of Mcafee. (Though I think I'll take advantage of this life time deal on Ivacy VPN today.).
Back to my first fear.
- Mcafee Internet security + Malwarebytes.
As mentioned I lost my mail accounts. Lost or lost, I reclaimed them and eventually locked them with a Yubico key.
Trying to retrive the Gmail on my new device I could swear my menu altered and Android all of a sudden allowed other users, ("All users get their own space, acc, etc").
Still having PTSD (how I refer to it) after this spring I wiped it all, didn't use it for a week, wiped it some more, hahah, and I begin to use it again.
I changed pass, added Yubico key, log out of all devices nor do have anything worth stealing. I wonder If there is anything I'd might have missed?
Ex, might be of topic.
When I try to restore my messenger password. I get the mail, enter the code and proceed to change pass when the code no longer is valid, permission #200 something. This ofc gets me thinking that my mail somehow might be forwarding my mail, syncing them? Gdrive have previously been set to auto sync and then I've unknowingly loaded malware in previously used phones.
I'll to summarize my question.
I guess I wonder if it could be dangerous in somehow or possible to install something on my new device through Gmail if I decide to log in again? Just saw my fb acc is schuduled for delete tommorrow, which is why I'm posting here, could use some advice.
While I'm at it I also am curious if there are any good info regarding Android security. Because I would like to flash a new rom without all bloatware, Google stuff etc and keep reading about safetynet and Selinux.
Also, good tip if there any on how to disable ssh, sftp, stf and all that? During this that happened I also found Samsungs Knox good, probably bc it wont work with overlay? Are there anything similar to Knox for a Oneplus? Many questions in one but I also wonder; I know that I once used my NFC security key one the Xiaomi, when it was infected. Could the key somehow been copied? Might be a bit over cautios,
0

Categories

Resources