Database Users

[Q] Security for Android

OK, I did search for this before I posted so I hope I don't get anybody mad for starting a new thread if this has been covered.
Regarding security threats and android phones. I did see the thread about a malware program out of Russia affecting android phones (installed via a movie program?). But in general, security issues do not seem to be a big issue.
The other threads I've found seem to have conflicting opinions.
So my question(s) is, how much do you all worry about security issues? Does anybody use Lookout (free mobile security app)? I did see that it has high ratings on the market, but I put more stock in what this community has for opinions than the market users.
Again, if this has been covered to death and I missed it, I apologize.

I do have concerns over security and therefore really don't install many apps. Since I have had an android phone, my gmail account has been compromised once, allowing spam to be sent from my gmail account and also spam to be placed on my Blogger site. While I cannot be certain it was something on my phone that allowed this, I rarely use my computer to access any of my Google apps. I also had never had issues with any email or other accounts being compromised for as long as I've had a computer. I also rarely get spam. So while I can't be certain, the fact it showed my account being logged into by a mobile device in Malaysia makes me very suspicious.
Sent from my HERO200 using XDA App

Thanks for the reply. I take it you haven't used Lookout or any of the other security apps?
Lookout looks legit, but I am a little skeptical. Guess I'll wait and see if I get any other responses before I do anything with it.

I haven't tried it in the past, as I'm skeptical too. I went ahead and installed it though after my post just to see. It is now being installed by some of the carriers by default apparently and I guess has won some awards, so hopefully it's been poked at a bit by people to where it itself isn't a large threat. Figure if it doesn't impact performance a lot there can't be any harm in trying it. Now, as for how effective it really is, I'd imagine that's something many people will never know.
Sent from my HERO200 using XDA App

Again, thanks for your input.
Performance impact is basically what I was worried about. I actually installed it the other day but when I realized it was on ALL the time, I uninstalled it before really giving it a chance.
I guess it's worth a shot. I'll install it again tonight and run a couple before and after quadrant benchmarks to see how much of an impact.
If I don't get anybody else posting here, I'll still post my experience in a couple/few days, so if you're interested, check back later in the week.
Thanks dpeeps, have a good one.

Paranoid much?
Sent from my HERO200 using XDA App

Eric_1966_FXE said:
Thanks for the reply. I take it you haven't used Lookout or any of the other security apps?
Lookout looks legit, but I am a little skeptical. Guess I'll wait and see if I get any other responses before I do anything with it.
Click to expand...
Click to collapse
seriously? lookout is featured in a Droid commercial for verizon. (i think its verizon anyhow)
i use it, i really haven't noticed any effect on the performance.

Vandelay007 said:
Paranoid much?
Sent from my HERO200 using XDA App
Click to expand...
Click to collapse
Not paranoid .... just cautious.
There is so much good information on this site that when I search for something that sounds too good (for free), and I can't find anything, yes, I'm going to "err on the side of caution".
ngholson, thanks for the input.

Eric_1966_FXE said:
ngholson, thanks for the input.
Click to expand...
Click to collapse
you are welcome. i use it mostly for the lost feature. if i lose it i can activate the gps and locate it that way, and i can also make it scream (caution this is really loud, and the only way to stop it is a battery pull) if it is somewhere close to me. it is very effective.
EDIT: they changed the scream feature, now it will scream for 1 minute and you can stop it by turning the volume down on the phone.

SamFirmware on Twitter: "Making better camera software and fixing lag problems"

SamFirmware on Twitter: "Making better camera software and fixing lag problems"
http://twitter.com/SamFirmware/status/28676855742

And what about the GPS?...

Could this mean dropping rfs...only time will tell
Sent from my GT-I9000

"Samsung: Making better camera software and fixing lag problems (Galaxy S)"
or
"SamFirmware: Making up bull**** stories to get more followers/page impressions and fixing sweet FA."

Valeo said:
"SamFirmware: Making up bull**** stories to get more followers/page impressions and fixing sweet FA."
Click to expand...
Click to collapse
My money on this

What's wrong with the camera?
Never had such an amazing camera... videos are crisp, nightmode is out of this world, what could be fixed?
And then again, SamFirmware has been flaged as "unreliable" many times from what I read!

someone need to nuke the stupid owner of samfirmware .
ffs. stfu and stop posting ****
^-- trying to be calm here even :/

the statement on the samsfirmare twitter is soooooooo empty
no source, no additional info, no news, no nothing to back it up....

They could be trusted to quite an extend... they have been the source of alot of firmwares that many of us use now... let just wait and see what will pop up from Samsung..
Regarding the camera.. it seriously could be improved.. our photos taken are highly compressed which results in the lost of sharpness and I believe they know about this issue already..
Sent from my GT-I9000 using XDA App

And not having the option to turn off gps from within the camera application on froyo is a huge annoyance of mine.
Sent from my GT-I9000 using XDA App

I can post a tweet too, "Samsung is releasing a update to the Galaxy S to print real money"
woohoo!

I don't see the problem with the cam either.
I use stock app and camera zoom.
Camera zoom is a good program to take photo. You can also enabled geotagging in the program.
Sent from GT-I9000 Jpm OS kernel with z4mod

Geotagging feature is also not working quite reliable. They could fix that, too.

If you go near the ant, then you can't see nothing. Just blind. And I think they will fix it.

have you tried switching to macro mode?
Chronos12 said:
If you go near the ant, then you can't see nothing. Just blind. And I think they will fix it.
Click to expand...
Click to collapse
Sent from my GT-I9000M using XDA App

Im getting really sick of samfirmware.. Yes he was good at start.. But now he gone crazy.. members members (money money) F..k off
Sent from my GT-I9000 using XDA App

Why should you disbelieve samfirmware? They have been a reliable source of information for a long time.
I don't recall any instance in which they spread false information. If they have, please enlighten me.
At least don't call them liars with no better evidence yourself.
That being said, I don't deny their financial motivations.

even if what they is real, do you really think samsung would be able to bring it out in time for beginning of November, due time for Froyo?

Rfs is not a problem. Check the performance charts. No one android device had better IO. The lag comes from another way. I hope they solve that.
Sent from my GT-I9000 using Tapatalk

1. who the frack is Samfirmware? Why don't Samsung tell this?
2. Enough from frackin GPS complain, some people always has case for complaining something
(frack - from BSG for awareless)

99% Of Android Handsets Are Vulnerable To Attack That Can Leak User Login Credentials

Hello,
I've been going through Redmondpie and there's a lil issue that popped up.
http://www.redmondpie.com/99-of-and...-attack-that-can-leak-user-login-credentials/
Researchers at multiple universities are warning that almost all smartphones running Google’s Android software could be allowing third parties access to digital tokens that could allow access to services such as Google Calendar and Contacts.
The issue, which affects all devices running versions of Android prior to 2.3.3 is related to handling of the authentication protocol ClientLogin. According to researchers at the German University of Ulm the, once a user enters their credentials, the programming interface retrieves its token in clear text. With the token valid for 14 days, a window appears where attackers could use their new found access however they like.
The whole process is relatively easy to exploit too, according to the researchers.
“We wanted to know if it is really possible to launch an impersonation attack against Google services and started our own analysis,”
“The short answer is: Yes, it is possible, and it is quite easy to do so.”
This comes after a professor at Rice University demonstrated a similar flaw affecting Facebook, Twitter and once again Google Calendar. This time however the hack could only be carried out on an unsecured Wi-Fi network. Google has since patched the hole in Android 2.3.4 but failed to plug the whole when it comes to Picasa which allows web albums to potentially transmit sensitive data in the clear. Google is working on a fix.
The potential security holes are exacerbated by Android’s fragmentation issues, which cause phones to remain on older software long after patches have been released. With carriers and device manufacturers insisting on meddling with Google’s operating system updates can take months to get past their own software engineers. The result is a massive 99% of Android devices still being wide open to hacks.
Google recently said it will be working more closely with carriers to try to reduce the time it takes for updates to be rolled out fully.
-------------
What is your opinion? We are now risking our login credentials and our entire data with third party tokens and google which could be taken advantage of.
(This is only happening for users prior to 2.3.3)

Yeah, I saw an article about this too on
http://news.cnet.com/8301-27080_3-20063646-245.html?tag=TOCmoreStories.0
also. Good post. I had no idea android could be attacked like this. Here is another article about it if you want to see another one from one of my favorite sites.

omg, you mean to tell me that people may be able to find out what time my doctor's appointment is AND get my mom's phone number?

great news...now you can save your ass from a embarrassing situation in front of your girlfriend saying your android was hacked

This isn't really surprising considering it only works over unencrypted networks. Everyone knows unencrypted networks are susceptible to attack I'm not to surprised at this. It was kind of stupid of Google to transmit important data in plain text but hey, at least they fixed it in 2.3.4. I never use WiFi anyway so guess I'm safe.

"the following scare tactic/smear campaign has been brought to you by apple"

If you're using unsecured wifi, you deserve to get hacked

pngface said:
If you're using unsecured wifi, you deserve to get hacked
Click to expand...
Click to collapse
Yeahh! That's True! I've never using public or free wifi unless I know from whom it is.

Wow im scared.
NOT
Like hackers are following me when I use the internet on my phone :/ And I almost only use internet here at home on my secured wifi. And I wouldn't be even scared when I would be using a open wifi network. Like they do know what I'm doing.
It's just some piece of crap news made by apple.

There you go, issue fixed: http://www.engadget.com/2011/05/18/google-confirms-android-security-issue-server-side-fix-rolling/

I still cant understand why 99% of users are affected..
Do 99% of Android user connect to an open network ? Even if they connect do they enter credentials so that the auth token can be stolen ? Why is this even a concern ?

realunited123 said:
I still cant understand why 99% of users are affected..
Do 99% of Android user connect to an open network ? Even if they connect do they enter credentials so that the auth token can be stolen ? Why is this even a concern ?
Click to expand...
Click to collapse
99% aren't on 2.3.4 yet, and this is where the issue was fixed....

fiscidtox said:
99% aren't on 2.3.4 yet, and this is where the issue was fixed....
Click to expand...
Click to collapse
I know that. But do 99% of users connect to open network ? And the issue is still with Picasa (even on 2.3.4)

realunited123 said:
I know that. But do 99% of users connect to open network ? And the issue is still with Picasa (even on 2.3.4)
Click to expand...
Click to collapse
no but 99% of users theoretically could, hence the figure.
As for picasa, unless your posting nude pics you have nothing to worry about lol

fiscidtox said:
no but 99% of users theoretically could, hence the figure.
As for picasa, unless your posting nude pics you have nothing to worry about lol
Click to expand...
Click to collapse
Lol i dont even use picasa
Sent from my X10project using XDA App

fiscidtox said:
no but 99% of users theoretically could, hence the figure.
As for picasa, unless your posting nude pics you have nothing to worry about lol
Click to expand...
Click to collapse
And to be honest if you are not bothered about posting your nude pics on picasa, you probably wouldn't be worried if it got into someone else's hands
Sent from my LT15i using XDA App

it's scary!

Not really that scary.. what would be scary if those nude pics started showing up all over the OS without a way of ever getting rid of it all.

Why scary? Android's adoption rate would go through the roof then. The inner pervert inside everyone will shine

Interesting to read but I write this on 2.3.4 miui so I do feel bad for the others who don't root their Android device and install custom roms.
Have a look at this article which has implications for all Android devices.
http://mobile.engadget.com/2011/04/...or-android-a-security-manager-that-keeps-per/
Sent from the miui matrix SGH-i897

Mango review

Pulled yesterday the update from the network with the famous trick.
I have been plying around since then and wanna share my thoughts.
Gmail push mail is working but with a huge dealy comparing it with android or iOs mail delivering. Slow
Multitasking is working only with MS app, not third party. Maybe the apps are not upadated yet but... it sucks at the moment
Social network integration is good with facebook but very complicated to use, not intuitive. Twitter is not supported and the twitter app just plain sucks... no background tweet pull neither push. A mess
Live tiles are nice but daily briefing stays static
Do not know about battery usage
Bing music search is nice but it would be nicer with the possibility of downloading songs directly
I like marketplace, fewr apps than competitor but overall good quality
IT MISS A FAST DIAL OPTION... this is an epic fail... there is no smart dialing too... so calling someone who is not in the start screen takes like 6 or 7 click. fail
If this update eas released one year ago it would be good and efficent... comparing my mango omnia7 with my sammy sgs2 is like stealing sweets to a kid...
Poor Nokia... your N9 is far better that this fruit salad...

Don´t know what you mean?!
Hey that´s wondering me,i just don´t know whatabout you´re speaking,the most times i heard only good replys to mangoupdates,which omnia version do you have?(Telekom,uk3 or what ever?)Maybe its a problem with your provider?
Please tell

Omnia7xdax said:
Hey that´s wondering me,i just don´t know whatabout you´re speaking,the most times i heard only good replys to mangoupdates,which omnia version do you have?(Telekom,uk3 or what ever?)Maybe its a problem with your provider?
Please tell
Click to expand...
Click to collapse
No mango just sucks. I really don't want to see several "messages" to multitask between in the multitask screen, some is even from the same sender. How is having two "apps" to switch too Witch is identical? And when your in marketplace, going deeper into "related" and I want to search..where is the button? I have to hit back a zillion times before it appears? Oh no wait I have a actual button on my phone for that..lets press that..BING wtf? They messed up big time, can't even get my native language to the display language.
Sent from my GT-I9100 using xda premium

what's all this blabbering?????? troll festival???

DJBlaster-303 said:
what's all this blabbering?????? troll festival???
Click to expand...
Click to collapse
No? I'm unhappy with my phone, is that OK for you?
Sent from my GT-I9100 using xda premium

it's ok, if you have to complain about it write to Microsoft, it's sure better than writing here

DJBlaster-303 said:
it's ok, if you have to complain about it write to Microsoft, it's sure better than writing here
Click to expand...
Click to collapse
If i wanted to write to Microsoft i would have, how do you know i didnt? I dont need you to tell me what to do. The topic is "mango review" and that is what i did. You see the points i lifted as positive? did i somehow misunderstand those "features" ? In that case im glad if you could correct me so i can use my phone like it was suppose to

norpan111 said:
If i wanted to write to Microsoft i would have, how do you know i didnt? I dont need you to tell me what to do. The topic is "mango review" and that is what i did. You see the points i lifted as positive? did i somehow misunderstand those "features" ? In that case im glad if you could correct me so i can use my phone like it was suppose to
Click to expand...
Click to collapse
in italy we have magical sphere we know everything, lol
RTFM!

Endr1 said:
Pulled yesterday the update from the network with the famous trick.
I have been plying around since then and wanna share my thoughts.
Gmail push mail is working but with a huge dealy comparing it with android or iOs mail delivering. Slow
Multitasking is working only with MS app, not third party. Maybe the apps are not upadated yet but... it sucks at the moment
Social network integration is good with facebook but very complicated to use, not intuitive. Twitter is not supported and the twitter app just plain sucks... no background tweet pull neither push. A mess
Live tiles are nice but daily briefing stays static
Do not know about battery usage
Bing music search is nice but it would be nicer with the possibility of downloading songs directly
I like marketplace, fewr apps than competitor but overall good quality
IT MISS A FAST DIAL OPTION... this is an epic fail... there is no smart dialing too... so calling someone who is not in the start screen takes like 6 or 7 click. fail
If this update eas released one year ago it would be good and efficent... comparing my mango omnia7 with my sammy sgs2 is like stealing sweets to a kid...
Poor Nokia... your N9 is far better that this fruit salad...
Click to expand...
Click to collapse
not sure about whether there is a delay in gmail, tried that and i do not notice any delay in receiving mail/sending mail via gmail.
what do you mean by third party app? can give some example so that i can try it myself? i take Whatsapp as an example, i have no issue running this app (multi-tasking), games, or whatsoever.
regarding FB, i think its individual experience. some may find it complicated / not user friendly some may find it very nice. i personally find it OK, not the best neither very good. never try twitter, hence no comment on this.
whether all tiles are "live" or not i think it doesn't really matter, of course if all tiles are "live" that would be good to have. i find battery usage on Mango is damn good, way better than iPhone or most of the android devices.
agreed with you that without smart dialing is an epic failure. i believe everybody is complaining about this and hope that it will be addressed in next release (Tango)
let's not "conclude" that Mango is a "failure" release, knowing that there are a lot of so call fundamental features supposed to be in but it weren't. Give microsoft a chance and see what they have in Tango or Apollo.

I fast dial just pressing windows button and saying "call name of person" in italian of course
using mango for 1 day is not enough to write a review from my point of view

DJBlaster-303 said:
I fast dial just pressing windows button and saying "call name of person" in italian of course
using mango for 1 day is not enough to write a review from my point of view
Click to expand...
Click to collapse
Enough to get frustrated , it shouldn't do that. Those feelings should come after a long time when you discovered them. Not get frustrated the moment you want to do something. That speech feature isn't working in my language either . Neither is bing features.
Can someone please explain the multitasking behaivor? I really don't get it
Sent from my GT-I9100 using xda premium

go play with super mario galaxy s2, it's better

DJBlaster-303 said:
go play with super mario galaxy s2, it's better
Click to expand...
Click to collapse
I think you should really stop trolling in this 3d.
You are happy with mango? good for you.
You do not find annoying multitasking between single messages? Good for you.
You like searching for the search button, again good for you.
Are you a microsoft employee? If not, why you feel so frustrated with someone givin his opinions?
I can see you are a newbie on XDA and maybe you do not know that we usually review the software update and even the phones. Do you have any problem with it? Just change topic. And please stop saying that us, italians, have solutions for all the problems, it is just childish.

you didn't understand how to use the phone, you are the original poster so you are the trouble maker and you are more newbie than me, so shut up
this is my last message in this thread
goodbye

c010 said:
not sure about whether there is a delay in gmail, tried that and i do not notice any delay in receiving mail/sending mail via gmail.
Gmail push mail now works perfectly.
what do you mean by third party app? can give some example so that i can try it myself? i take Whatsapp as an example, i have no issue running this app (multi-tasking), games, or whatsoever.
Twitter app, facebook app. rai.tv app do not multitask. Maybe they will, but now they do not.
regarding FB, i think its individual experience. some may find it complicated / not user friendly some may find it very nice. i personally find it OK, not the best neither very good. never try twitter, hence no comment on this.
You are right. De gustibus. I personally do not like it. It uses a ton of bandwith every time you open contacts app.
whether all tiles are "live" or not i think it doesn't really matter, of course if all tiles are "live" that would be good to have. i find battery usage on Mango is damn good, way better than iPhone or most of the android devices.
Live tiles that are not live is an epic fail.
Battery life is depends too much on user behavior for me to judge it I just says that on android you can UV etc etc to get max battery life.
agreed with you that without smart dialing is an epic failure. i believe everybody is complaining about this and hope that it will be addressed in next release (Tango)
I do not think that WP7 will still be on the market when Tango will be released. That is just my sensation.
let's not "conclude" that Mango is a "failure" release, knowing that there are a lot of so call fundamental features supposed to be in but it weren't. Give microsoft a chance and see what they have in Tango or Apollo.
Click to expand...
Click to collapse
I think my next little soft product will bea a kal el win8 tab. That's it.
Anyway my omnia7 is not branded.

DJBlaster-303 said:
you didn't understand how to use the phone, you are the original poster so you are the trouble maker and you are more newbie than me, so shut up
this is my last message in this thread
goodbye
Click to expand...
Click to collapse
Maybe you should learn basic education. And stop acting like a little n00b. I posted my personal review as anybody is free to do. You didn't like it, all right. But please let other ppl express their minds without the "you didn't understand how to use your phone" or "go play with super mario". That is so stupid. Even for you.
Hope to not hear anything more from you.

DJBlaster-303 said:
go play with super mario galaxy s2, it's better
Click to expand...
Click to collapse
First off, stop telling me what to do.second, I bought omnia 7 because I was unhappy with my galaxy s2. If the case is that we are just noobs that doesn't know how to use the phone, why can't you enlighten us? I would be thrilled if you could make me enjoy my phone. Either that or shut your mouth and let other people have a different opinion.
Sent from my GT-I9100 using xda premium

Official Facebook App

I know a lot of people complain about the official Facebook app, slowing down their phone. I just wanted to inform people that that is not the case for me. Simply because I don't have an account or the app.
Onto more relevant stuff: Under the Hood: Dalvik patch for Facebook for Android and Koush does a quick explanation. For those that have the time and curiosity, read the comments on Koush's post. Very enlightening.

Quite an interesting read. Thanks for the links pons.
The slowness is also a reason I switched to the app tinfoil.
Sent from my Galaxy Nexus using Tapatalk 2

I tried atrium, it was supposedly the top alternative in an article I read but was an immediate failure because it couldn't find a friend.
I would certainly like to know exactly what purpose the face book app has taking up 17mb on my precious dinc fresh off the market. I've seen it swell in excess of 40 mb with heavy use. Get outta here! It seems completely absurd and a bit arrogant of the Facebook corporation to clog up everyone's devices and hide god knows what kind of unpublished ill will in the code.
I wish someone would reverse engineer or whatever so we know why it is so big.
Sent from my ADR6300 using xda app-developers app

zombolt said:
I tried atrium, it was supposedly the top alternative in an article I read but was an immediate failure because it couldn't find a friend.
I would certainly like to know exactly what purpose the face book app has taking up 17mb on my precious dinc fresh off the market. I've seen it swell in excess of 40 mb with heavy use. Get outta here! It seems completely absurd and a bit arrogant of the Facebook corporation to clog up everyone's devices and hide god knows what kind of unpublished ill will in the code.
I wish someone would reverse engineer or whatever so we know why it is so big.
Sent from my ADR6300 using xda app-developers app
Click to expand...
Click to collapse
Exactly, I uninstalled it and now I use greenify to free up ram. I'm still looking for a viable upgrade to the DInc. :/
DNA is locked, s4 doesnt have much development going on, s3 is old hardware, htc one has no menu button, removable battery, OR sdcard...I wish verizon would have gotten the nexus 4. :crying: