Database Users

HTTP POST Capture

I was wondering whether there is such software for the android that can capture http posts before sending. i.e. like the firefox addons you can get and apps like http analyzer?
This would be really useful for testing purposes.
Cheers.
Gazos

You can try some general traffic capture tools (Like tcpdump or airodump-ng). If You have rooted phone, check out Shark for Root (tcpdump on phone).

Thanks for the update but I guess what I want is real time captures (and manipulation) like its possible in Firefox using only the phone.
I currently use tcpdump to capture data but want to edit the data before its sent out.

You can try to find/write small proxy server application and run it on phone, so you will be in control.

ex87 said:
You can try to find/write small proxy server application and run it on phone, so you will be in control.
Click to expand...
Click to collapse
Or you could run paros (http://sourceforge.net/projects/paros/files/) on a machine on your network and get the android browser to use it as the proxy (which looks like a bit of a task in it's self.)

The only viable way I can think of to do this (given Android's insane lack of proxy support) is to hack a custom firmware for a Linksys WRT54g so it basically routes everything to a transparent proxy (Fiddler2, Webscarab, Paros, Burp, etc) running on a PC. Something like this:
Android =[wi-fi]=> WRT54g -[ethernet]-> PC with proxy -> internet router
It might even be possible to achieve this without hacking the WRT54g.
The only problem you might still have (not sure) is Android's handling of invalid SSL certs since the proxy would basically be doing a man in the middle attack, and the app running on the Android phone would see an invalid SSL cert.
Be warned that trying this with a Windows host PC is almost guaranteed to fail unless it's Pro/Ultimate, and in any case this is going to involve some seriously hardcore manual routing config that goes beyond anything Windows' config screens were really intended to set up.
You can try to find/write small proxy server application and run it on phone, so you will be in control.
Click to expand...
Click to collapse
I'm pretty sure I saw this discussed on the android.security list, and the consensus was that the current API doesn't give any way to do this transparently, and it's questionable whether you could even implement something like WebScarab natively on Android using the NDK. I believe the general consensus was that if you want to host something like WebScarab on Android, it's going to take a custom kernel to pull it off, and some solution that lets you offload the actual proxying to a regular PC would be infinitely easier to pull off, and less cumbersome to use for actual security testing (it's enough of a pain trying to use Fiddler2 or Webscarab with a 1280x1024 display, let alone 854x480... not to mention trying to cut and paste examples into Word Documents for vulnerability assessment reports (shudder)).

^^^ OMG. I just installed AOSP ("Buufed") for the CDMA Hero, and it actually HAS the ability to set proxy for WiFi. I haven't tried it yet, and I'm not sure whether it's purely an "AOSP" feature or something I've just overlooked up to now that was in DamageControl, but it looks like at least *some* Android builds DO have it now

[Q] Masters Project question(s)

Hey guys/gals, the folks over at android forums sent me to bug you guys about my endeavor, so if i am annoying, blame them . Also loved the registration video and there were no results of forum posts when it came to robotics.
"Just picked up my new Acer A500 yesterday and have been playing with it just a little bit. It has the unupdated 3.1 OS (honeycomb I THINK). So i have a few questions but first let me explain my purpose for the tab and my background.
My purpose for the tablet is for my Masters project, to interface it to a IOIO (pronounced YOYO) controller board in for motor and senor control. The IOIO is an android driven device hence an android tab. Also the tab is going to the the brains and face of a telepressence robot i am building. My background in mobile devices is windows mobile (forget the version) which i did not mod very much and my IPHONE 3GS which i have jailbroken and modded for my amusement. I also have a background in C# and VHDL but not so much in mobile application development (which i suspect should not be too difficult to pick up)
Now on to some questions. I plan to root this just to have root access but is there any other benefit such as an underground app store. My favorite is book access such as stanza. Can i host a web server on the tab or will i have to remote into it using some other utility? And i thought i had another question but i think that will do for now. Anyways thanks for any help and i look forward to future interaction."
SD

Regarding root, some apps need it. For instance, the advanced features of Titanium Backup or AdFree. As for setting a server, I am using File Expert, a file manager with some cool options (including root access) that also allows http and ftp sharing of files to and from the tablet. I am sure there are other apps with similar functionality.

superdave14 said:
I plan to root this just to have root access but is there any other benefit such as an underground app store.
Click to expand...
Click to collapse
You don't expect anyone to answer that with a link, right? You can install whatever apk you want with or without root on your own risk. The benefits of rooting have nothing to do with stealing of applications. You simply get r/w access to the filesystem.
Sent from my A500 using XDA Premium App

No need for an "underground" app store. You can use the regular Google Market, Amazon App Store, AppBrain, and GetJar to acquire and install applications.
If you are writing one yourself, then merely compile it and package it appropriate for the Android OS and you can install it without a market as long as you enable "Unknown Sources (Allow installation of non-Market applications)".

Thanks, I have never used the android device before so i was not sure of the actual restrictions the OS has as far as modifications compared to the Iphone, which is what i'm use to. If i offended anyone as far as the thinking i'm looking for free apps, i apologize. I'm more interested in direct access to the accelerometer, 6 axis gyroscope, and compass for instant feedback for my robot navigation system, as well as setting up either web server or remote capabilities to motors and functions through the device. It's all about what type of control and feedback i can gain from root versus not rooting. As well as tethering my iphone to it for greater bandwidth range, when WIFI is not available or weak.
Again any info regarding this type of information would be great.

superdave14 said:
Thanks, I have never used the android device before so i was not sure of the actual restrictions the OS has as far as modifications compared to the Iphone, which is what i'm use to. If i offended anyone as far as the thinking i'm looking for free apps, i apologize. I'm more interested in direct access to the accelerometer, 6 axis gyroscope, and compass for instant feedback for my robot navigation system, as well as setting up either web server or remote capabilities to motors and functions through the device. It's all about what type of control and feedback i can gain from root versus not rooting. As well as tethering my iphone to it for greater bandwidth range, when WIFI is not available or weak.
Again any info regarding this type of information would be great.
Click to expand...
Click to collapse
Have a look at the sdk. You don't need root for the things you intend to use your tab for. Root is needed if you need to modify the filesystem and you don't. You aren't helping yourself with thinking in the ios box. Android is much more open and thus much more friendly to the developers. All google apps are created using the same sdk that's available to us all, so if they can do anything, we can do it too (or at least we have the means to do it). There are some good examples in the sdk too, that can really help you to understand the means of reading sensor data. If I remember correctly, you had some C/C++ background, so it might help you to look as the ndk too.
Sent from my A500 using XDA Premium App

Android is much more open that the iOS, if you have a basic linux background, you can apply it here too. Rooting allows you to edit the filesystem, the equivalent of being able to write to the c:\windows and c:\program files folders. Occasionally, you may need it, but for most applications, you don't. The SDK is pretty powerful and its tutorials are quite comprehensive, with a little studying, you should be able to write an app that extracts the information you want. In general, Android app development is quite open and flexible.
As for the underground app store, there are many free apps in Google Market. Angry Birds and AdFree for instance (this is just to show that not just second rate developers offer free apps). Also, Amazon has a marketplace and they occasionally have offers for free or very discounted apps. In general, if you need an app, there is probably a free version that is supported by ads, or a lite version you can try before buying the full thing.

Just buy the Iconia tablet already.Erica promises you will love it..
Giggles.

Access Internet from virtual Android device during development and testing

Hi,
I'm just starting off developing my first android app. An issue I have at the moment is that when I run my app on the virtual Android device (by running it from Eclipse using the "Run" button), I don't have access to Internet. My app is supposed to access a webservice on Internet.
How do developers usually handle this kind of issue - how can I have my virtual device connect to real life webservices out there?
Greetings,
kenneho

kenneho said:
Hi,
I'm just starting off developing my first android app. An issue I have at the moment is that when I run my app on the virtual Android device (by running it from Eclipse using the "Run" button), I don't have access to Internet. My app is supposed to access a webservice on Internet.
How do developers usually handle this kind of issue - how can I have my virtual device connect to real life webservices out there?
Greetings,
kenneho
Click to expand...
Click to collapse
You can't I don't think. Test it on a physical device.

abtekk said:
You can't I don't think. Test it on a physical device.
Click to expand...
Click to collapse
Actually, after testing it some more it seems like it uses the internet connection on the host computer. When I run the app on the virtual Android device, it manages to connect to internet. When I first tested it I got some error message, and it looked like it couldn't connect to internet. But now it works, at least in my setup.

ExtensibilityApp class in WP 8.1 Silverlight

Hi all,
If you've read the text that USED to exist here before, scratch that. Big Thanks to @Sunius1 for clarifying what I thought was a win. Due to this, I DID find something interesting in regards to the ExtensibilityApp class (Windows.Phone.System.LockscreenExtensibility.ExtensibilityApp). I happened to also find a hidden capability "ID_CAP_SHELL_DEVICE_LOCK_UI_API" (Seems to be a locked CAP because it only works on Emulator. I get a deployment error on my if I try including this capability). I suspected that these two worked together, but I wanted to make sure of this.
Before we get started, read through the documentation from this site: http://msdn.microsoft.com/en-us/lib...lockscreenextensibility.extensibilityapp.aspx.
We have the following methods:
BeginUnlock
EndUnlock
GetLockPinpadHeight
IsLockScreenApplicationRegistered
IsSystemOverlayApplicationRegistered
RaiseToastNotifications
RegisterLockScreenApplication
RegisterSystemOverlayApplication
UnregisterLockScreenApplication
UnregisterSystemOverlayApplication
EDIT: After the release of the Live Lock Screen app, my speculations about the ID_SHELL_CAP_DEVICE_UI_API capability and the ExtensibilityApp object were correct. Thanks to @jessenic for finding out a good bit of info on this with me.
It seems that in order to get this working, we have to add an Extension to the WMAppManifest.xml
<Extension ExtensionName="LockScreen_Application" ConsumerID="XXXXX" TaskID="_default" ExtraFile="Extensions\\LockAppExtension.xml" />
In the LockAppExtension.xml:
<?xml version="1.0"?>
<x:Extension xmlns:x="urn:LockApp">
<AppID>AppNameForLockScreen</AppID>
</x:Extension>
As usual, Microsoft doesn't really give us much in terms of documentation.. Probably because it isn't meant to be used by the normal developer Confirmed: For now we have to actually ask for permission in order to use the cap. As to whether we'll get that granted? Who knows....
All of these methods have no parameters at all, but I can almost guarantee this has to do with having an application that can control the lock screen.
This thread will be for efforts in breaking this open and seeing whether we can create lockscreen applications..
Homebrew Lockscreen Apps:
Lockscreen App by @-W_O_L_F-

There are actually two Windows.winmd files in Windows Phone SDK, one for Silverlight 8.1 apps and one for Jupiter 8.1 phone apps (located in C:\Program Files (x86)\Windows Phone Silverlight Kits\8.1\ and C:\Program Files (x86)\Windows Phone Kits\8.1\). There's only one the phone. And some APIs support only one app type (it's phone limitation it seems: faking .winmd file results in Platform::InvalidOperationException, saying you cannot use that API from this app type). That explains why the one on the phone has more APIs available than either of for single app type.
As for LockscreenExtensibility - it's documented, just not available for Jupiter apps:
http://msdn.microsoft.com/en-us/lib...ows.phone.system.lockscreenextensibility.aspx

Sunius1 said:
There are actually two Windows.winmd files in Windows Phone SDK, one for Silverlight 8.1 apps and one for Jupiter 8.1 phone apps (located in C:\Program Files (x86)\Windows Phone Silverlight Kits\8.1\ and C:\Program Files (x86)\Windows Phone Kits\8.1\). There's only one the phone. And some APIs support only one app type (it's phone limitation it seems: faking .winmd file results in Platform::InvalidOperationException, saying you cannot use that API from this app type). That explains why the one on the phone has more APIs available than either of for single app type.
As for LockscreenExtensibility - it's documented, just not available for Jupiter apps:
http://msdn.microsoft.com/en-us/lib...ows.phone.system.lockscreenextensibility.aspx
Click to expand...
Click to collapse
Well that is very good to know! Thanks for the clarification. The best part is that I was actually able to compile without receiving an error (somehow).

I found something that may be of use in order to get the LockscreenExtensibility working (I just tried on a Silverlight 8.1 app and got access denied).
<Capability Name= "ID_CAP_SHELL_DEVICE_LOCK_UI_API"/> <----. Can't be used OOTB
EDIT: I just tested this in the Emulator and it really IS the capability that the LockscreenExtensibility needs in order for it to work.

snickler said:
I found something that may be of use in order to get the LockscreenExtensibility working (I just tried on a Silverlight 8.1 app and got access denied).
<Capability Name= "ID_CAP_SHELL_DEVICE_LOCK_UI_API"/> <----. Can't be used OOTB
EDIT: I just tested this in the Emulator and it really IS the capability that the LockscreenExtensibility needs in order for it to work.
Click to expand...
Click to collapse
I assume this is the thing Rudy Hyun used to create the lockscreen app at Build?

TheInterframe said:
I assume this is the thing Rudy Hyun used to create the lockscreen app at Build?
Click to expand...
Click to collapse
I speculate that this is what he's using. I bet there's more going on that we have yet to figure out. It also could be that the base class EXISTS, but the full implementation isn't available yet. Who knows.

snickler said:
I speculate that this is what he's using. I bet there's more going on that we have yet to figure out. It also could be that the base class EXISTS, but the full implementation isn't available yet. Who knows.
Click to expand...
Click to collapse
Ah, Yes that makes sense. I wonder if there are any other "half-baked" API's in the SDK?
Edit: I Know it sounds stupid but honestly I think we should have a thread dedicated to finding odd API's (Just found one: Windows.Phone.System.SystemProtection, nothing terribly useful though)

TheInterframe said:
Ah, Yes that makes sense. I wonder if there are any other "half-baked" API's in the SDK?
Edit: I Know it sounds stupid but honestly I think we should have a thread dedicated to finding odd API's (Just found one: Windows.Phone.System.SystemProtection, nothing terribly useful though)
Click to expand...
Click to collapse
there are also some hidden APIs in the current SDK for 3D Touch-enabled Apps!
From WP Central:
Some of the features include APIs for gestures, side interactions and even heat maps.
Crazy stuff.
Believe it or not, some of these APIs for developers are in the current SDK, they're just not visible. What this mean though is developers will have access to this 3D Touch technology for their apps. It also means that Microsoft will have a small batch of third-party apps supporting this 3D Touch technology on launch day.
Click to expand...
Click to collapse
source: http://www.wpcentral.com/microsofts-next-flagship-windows-phone-november-3d-touch

Yea, even though those 3D touch APIs may be available, they're not particularly useful, as they require special hardware to work.

Sunius1 said:
Yea, even though those 3D touch APIs may be available, they're not particularly useful, as they require special hardware to work.
Click to expand...
Click to collapse
That is true. Sort of of a side question though, has anyone made a OEM account and looked over the API documentation there? There maybe some useful things we could learn about WP and maybe further a jailbreak for all WP devices....

TheInterframe said:
That is true. Sort of of a side question though, has anyone made a OEM account and looked over the API documentation there? There maybe some useful things we could learn about WP and maybe further a jailbreak for all WP devices....
Click to expand...
Click to collapse
API isn't much useful as long as you cant really use most of functions due to policies.

ultrashot said:
API isn't much useful as long as you cant really use most of functions due to policies.
Click to expand...
Click to collapse
Ah, Yes that makes sense....

http://www.wpcentral.com/joe-belfiore-announces-new-updates-sheds-details-lock-screen-app
Sounds like there will be a dev preview update to enable lockscreen functionality quite soon. Joe also mentioned keeping the lock screen in memory. So 512 MB devices won't get the functionality soon....

Good stuff. Another question: can apps show the action center? Because I want code an app to show notifications on lockscreen. Thanks

Marocco2 said:
Good stuff. Another question: can apps show the action center? Because I want code an app to show notifications on lockscreen. Thanks
Click to expand...
Click to collapse
something to force the volume/music control on the lock screen to automatically open would be really useful as well

Updated first post with some more data since the Live Lockscreen App debuted yesterday. There's more I didn't get into, but I want others to dig in and find out

I suppose we can only speculate how it works at this point, but if I had to guess, it goes like this:
1. You have 2 projects in your LockScreenApp solution, one for the application to register the lockscreen, and the second one for the actual lock screen application.
2. The former would use ExtensibilityApp APIs to register the the second one, coupled with the manifests so it's all "valid".
3. The second application is just a another app that is able to process input and draw whatever it wants on the screen. That would explain why there's a delay at it starting when you press lock screen button while the phone is sleeping (probably it's a time for .NET to startup? Direct3D app should be able to start much faster).
Although this is only speculation, I think this makes sense, because that's how background tasks work on Windows, at least. I wonder though, why Microsoft is not releasing the APIs to be used in public - are they afraid somebody will make a lockscreen application that will drain the battery fast or something?

Sunius1 said:
I suppose we can only speculate how it works at this point, but if I had to guess, it goes like this:
1. You have 2 projects in your LockScreenApp solution, one for the application to register the lockscreen, and the second one for the actual lock screen application.
2. The former would use ExtensibilityApp APIs to register the the second one, coupled with the manifests so it's all "valid".
3. The second application is just a another app that is able to process input and draw whatever it wants on the screen. That would explain why there's a delay at it starting when you press lock screen button while the phone is sleeping (probably it's a time for .NET to startup? Direct3D app should be able to start much faster).
Although this is only speculation, I think this makes sense, because that's how background tasks work on Windows, at least. I wonder though, why Microsoft is not releasing the APIs to be used in public - are they afraid somebody will make a lockscreen application that will drain the battery fast or something?
Click to expand...
Click to collapse
I don't think its that but most likely the fact that the API is un-optimized, some of the facts you stated (i.e. Slow start up, documentation is lacking) etc... The fact the OS needs to be updated to show a section telling the user what lock screen app has taken over (since the setting page doesn't now)
Edit: Remember what Joe said about keeping the lockscreen in memory and 512MB devices might not be supported for that reason? Yeah seems like they aren't doing that since you can see the resume time for the lo screen is wayyy to much

Sunius1 said:
I suppose we can only speculate how it works at this point, but if I had to guess, it goes like this:
1. You have 2 projects in your LockScreenApp solution, one for the application to register the lockscreen, and the second one for the actual lock screen application.
2. The former would use ExtensibilityApp APIs to register the the second one, coupled with the manifests so it's all "valid".
3. The second application is just a another app that is able to process input and draw whatever it wants on the screen. That would explain why there's a delay at it starting when you press lock screen button while the phone is sleeping (probably it's a time for .NET to startup? Direct3D app should be able to start much faster).
Although this is only speculation, I think this makes sense, because that's how background tasks work on Windows, at least. I wonder though, why Microsoft is not releasing the APIs to be used in public - are they afraid somebody will make a lockscreen application that will drain the battery fast or something?
Click to expand...
Click to collapse
You are correct. Two projects: One is the settings page, which is the main entrypoint of the app when it's opened from the start menu and the second one is the actual lockscreen app.
The settings page uses the ExtensibilityApp APIs to register the second one as a lock screen application. That second application is another 8.1 Silverlight app that uses a LockScreen_Bridge WinRT component that has native access to read what is shown on the lockscreen from the WP Settings item.
It then uses some storyboards to make it do different things as you're swiping up and down on the LayoutRoot grid. It does use a timer so that's where that little lag comes from.
The only background stuff it's doing is latching on to system events ("Start button being touched for example").
I can see where MS would be protective of this. They DID say that they would be releasing a public version of the API at some point. I'm hoping it's not one of the situations that leaves it public only when they've approved you to be able to use it.
It does suck that it's restricted to 8.1 Silverlight though. I could see some Music Apps wanting to take advantage of the lockscreen like this.

snickler said:
You are correct. Two projects: One is the settings page, which is the main entrypoint of the app when it's opened from the start menu and the second one is the actual lockscreen app.
The settings page uses the ExtensibilityApp APIs to register the second one as a lock screen application. That second application is another 8.1 Silverlight app that uses a LockScreen_Bridge WinRT component that has native access to read what is shown on the lockscreen from the WP Settings item.
It then uses some storyboards to make it do different things as you're swiping up and down on the LayoutRoot grid. It does use a timer so that's where that little lag comes from.
The only background stuff it's doing is latching on to system events ("Start button being touched for example").
I can see where MS would be protective of this. They DID say that they would be releasing a public version of the API at some point. I'm hoping it's not one of the situations that leaves it public only when they've approved you to be able to use it.
It does suck that it's restricted to 8.1 Silverlight though. I could see some Music Apps wanting to take advantage of the lockscreen like this.
Click to expand...
Click to collapse
Quite interesting...!
The API in itself is quite powerful, custom lockscreens with weather animations are possible! http://wmpoweruser.com/wp8-1-live-l...amazing-lock-screen-weather-animations-video/

Automatically reopen android/ios app after x minutes

We're building an app that will be installed on smartphones and displayed on a desk. The user need to be able to close the app and use the device, but when he does not use the device the app should move to the front automatically after X minutes.
Here is the catch: we need to support new devices for the coming 3 years and the user should not be able to close/kill the process.
Android: We found that we could use the permission BIND_DEVICE_ADMIN to make the process unkillable. However it will be deprecated soon and we have no idea how long it will remain functional.
iOS: We found no solution
Does anybody have a workaround/solution or does somebody know how much longer they will support the BIND_DEVICE_ADMIN permission?
I know it seems like something fishy, but it's actually intended for distribution internally via our company MDM and it makes sense in the context we are using it for.