Database Users

WaveSecure Serious Vulnerability!!

I'm using Modaco latest r8 rom with froyo 2.2. I noticed 2 things:
1. wave secure will not download my account data automatically when I factory reset. I need to register again which make it vulnerable. >> Anyone can disable wave secure
2. I don't even need to factory reset and I can reset wave secure by clearing the data in settings!!!!
I have tried in original HTC ROM 2.09(rooted) and flash in /system/app. same situation.
And I've tried that if wavesecure hasn't been register, you can't lock it from wavesecure.com or sms
I don't know if this is due to the nature of froyo or it's been like this since 2.1
wave secure is practically useless right now on my phone!!
Anyone can confirm this?

called them and they said they disabled the function for temp as they are working on some fix, it will be up again in 3 weeks as what they said

Yep, saw this on MoDaCo. Will not be renewing my WaveSecure subscription.

Lets be honest, it was a waste of money to begin with right.

This whole thing makes me wonder...can an Android phone REALLY be protected by these kind of softwares? Even assuming there are no security issues with the app..I mean,a lot of Android phones are rooted by their owners and all are rootable (?) without booting into the OS, so even if said apps are installed as system apps (just like wavesecure can be) what's preventing a "smart/geek" thief from pulling the battery, changing the simcard,(rooting a non-rooted phone), booting into recovery, mounting system and wreaking havoc through adb, including removing the security app?? Am i going on a wild goose chase or is all this sound??

MacCarron said:
This whole thing makes me wonder...can an Android phone REALLY be protected by these kind of softwares? Even assuming there are no security issues with the app..I mean,a lot of Android phones are rooted by their owners and all are rootable (?) without booting into the OS, so even if said apps are installed as system apps (just like wavesecure can be) what's preventing a "smart/geek" thief from pulling the battery, changing the simcard,(rooting a non-rooted phone), booting into recovery, mounting system and wreaking havoc through adb, including removing the security app?? Am i going on a wild goose chase or is all this sound??
Click to expand...
Click to collapse
Yeah, but I don't think the average mugger/thief is that smart
Sent from my HTC Desire using Tapatalk

So can I cancel my current subscription then and get a refund?

If you install wavesecure to /system/app and make sure its only there and not in /data/app as well then you should not have this problem.
Also wavesecure have gone through a rough month, got brought by Mcafee who in turn just got brought by Intel. They need to adjust to the new owners. They are (were) only a small company and lets face it their app is the best around by a long long way.
If you have any problems or suggestions on how to improve they usually listen (it was one of TeamVillain and a xda mod who suggested they make a update.zip for /system/app and a number of other improvements and they did it straight away).
Don't just say "oh no its not working" no app can protect your phone from the right people, if someone who knows all about rooting etc gets your phone then your screwed anwyay. But the average joe thug who steals your phone will get it, put in a new sim the alarm will go crazy then they panic, drop the phone and run. You can then use the tracker to find it, or give details to police.
Just put the apk in your rom next time before you flash in system/app and flash the rom. Restore data from a backup (but not the app) and you still get your market link too.

Lennyuk said:
If you install wavesecure to /system/app and make sure its only there and not in /data/app as well then you should not have this problem.
Also wavesecure have gone through a rough month, got brought by Mcafee who in turn just got brought by Intel. They need to adjust to the new owners. They are (were) only a small company and lets face it their app is the best around by a long long way.
If you have any problems or suggestions on how to improve they usually listen (it was one of TeamVillain and a xda mod who suggested they make a update.zip for /system/app and a number of other improvements and they did it straight away).
Don't just say "oh no its not working" no app can protect your phone from the right people, if someone who knows all about rooting etc gets your phone then your screwed anwyay. But the average joe thug who steals your phone will get it, put in a new sim the alarm will go crazy then they panic, drop the phone and run. You can then use the tracker to find it, or give details to police.
Just put the apk in your rom next time before you flash in system/app and flash the rom. Restore data from a backup (but not the app) and you still get your market link too.
Click to expand...
Click to collapse
While i agree with you that a witch hunt isn't the proper response and that it is unlikely that the average thief will know his way around adb, i have personally tried to remove wavesecure from /system/app...it works...i did it without breaking a sweat. I intentionally triggered the lock by attempting to uninstall the uninstall-protection, pulled off the battery, booted in recovery and got rid of wavese cure with a single command. Reboot and presto! A free phone . So it is true that there is no full-proof way to be safeguarded, at least using this software, and in my humble opinion the guys over at wavesecure should clearly state so on their website. And they don't always listen..there is a long story of noisy silences concerning op's issue...omissions, censorship etc etc. I got a free lifetime subscription so i'm not particularly yelling at anyone, just making hypothetis, but wouldn't you be quite pissed off if someone stole your phone and rendered it's security software (for which you payed) impotent just because he knew "SU"?

MacCarron said:
While i agree with you that a witch hunt isn't the proper response and that it is unlikely that the average thief will know his way around adb, i have personally tried to remove wavesecure from /system/app...it works...i did it without breaking a sweat. I intentionally triggered the lock by attempting to uninstall the uninstall-protection, pulled off the battery, booted in recovery and got rid of wavese cure with a single command. Reboot and presto! A free phone . So it is true that there is no full-proof way to be safeguarded, at least using this software, and in my humble opinion the guys over at wavesecure should clearly state so on their website. And they don't always listen..there is a long story of noisy silences concerning op's issue...omissions, censorship etc etc. I got a free lifetime subscription so i'm not particularly yelling at anyone, just making hypothetis, but wouldn't you be quite pissed off if someone stole your phone and rendered it's security software (for which you payed) impotent just because he knew "SU"?
Click to expand...
Click to collapse
The thing is though, if they knew SU and other commands chances are they will get around any protection whatever it would be.
But Wavesecure offers you a way to track the phone, you can still contact your carrier and get them to IMEI blacklist it, then track the handset down via wavesecure.

hi - just check out secrep5265.blogspot.com - thats interesting information concerning your discussion.

Exchange Server - Security policy

I'm finding a lot of threads about changing from pin/password to pattern unlock, but not having any luck in completely disabling the security feature BS...
Is it possible to completely eliminate the password lock required by my exchange server? I have tried lockpicker and no lock, neither of which worked.
I would like to keep syncing but am not going to deal with this unlocking all the time (they JUST started enforcing it)...any help would be appreciated.
BTW, running Calkulin's EViO 2 v 1.7 (sense, so HTC mail)

Nope, this is tightly integrated down to the OS in order to pass MS requirements, and it reports the control level back to exchange so it can make sure it's in compliance with their mobile device policy.
In theory you can make an app that proxies the API and lies about what the phone can do ... but it wont be done with a simple APK/market app ... it's integration goes much deeper.
Honestly your best best: this is clearly a new policy. complain repeatedly to your IT staff. You're probably not the only one upset ... and noise will result in policy change ... because reality: IT staff hate dealing with people. They want to deal with servers.
Option 2: if you have a buddy on the exchange team he can put you on the same policy he undoubtedly created for himself and his team, that's 10x as lenient so he can mess with his little pet projects he plays with on the side.

Justin.G11 said:
Nope, this is tightly integrated down to the OS in order to pass MS requirements, and it reports the control level back to exchange so it can make sure it's in compliance with their mobile device policy.
In theory you can make an app that proxies the API and lies about what the phone can do ... but it wont be done with a simple APK/market app ... it's integration goes much deeper.
Honestly your best best: this is clearly a new policy. complain repeatedly to your IT staff. You're probably not the only one upset ... and noise will result in policy change ... because reality: IT staff hate dealing with people. They want to deal with servers.
Option 2: if you have a buddy on the exchange team he can put you on the same policy he undoubtedly created for himself and his team, that's 10x as lenient so he can mess with his little pet projects he plays with on the side.
Click to expand...
Click to collapse
Thanks...I figured it wouldn't be that easy but I had to ask.

Justin.G11 said:
Honestly your best best: this is clearly a new policy. complain repeatedly to your IT staff. You're probably not the only one upset ... and noise will result in policy change ... because reality: IT staff hate dealing with people. They want to deal with servers.
Click to expand...
Click to collapse
I get complaints all the time about policies. 99.999% of the time, the policies are created/approved by steering committees, the legal department or executive management. There is usually nothing IT can do about it as the policies are put into place for legal reasons or company security.
Additionally, if IT departments are not compliant in company policies there could be legal ramifications if the company has to comply with certain government guidelines.
And IT staff don't hate dealing with people...it sounds like your work environment is not like others.

Check out this thread to see if it does what you are looking for.
http://forum.xda-developers.com/showthread.php?t=775007
They modified the actual email.apk app to remove the security requirement that was hardcoded in it.
It was taken from CM7 which is AOSP, so I cannot say whether or not it will work on sense.
EDIT: After searching some more, droidforums has a modified email.apk file that you can install, that you use instead of the HTC mail, which tricks your exchange server into thinking that you have your security enabeled.
http://www.droidforums.net/forum/dr...onal-froyo-bypass-exchange-server-policy.html
Just download the zip, and extract the apk from it, then place the apk on your SDCard and install it just like a regular app.

Khilbron said:
Check out this thread to see if it does what you are looking for.
http://forum.xda-developers.com/showthread.php?t=775007
They modified the actual email.apk app to remove the security requirement that was hardcoded in it.
It was taken from CM7 which is AOSP, so I cannot say whether or not it will work on sense.
EDIT: After searching some more, droidforums has a modified email.apk file that you can install, that you use instead of the HTC mail, which tricks your exchange server into thinking that you have your security enabeled.
http://www.droidforums.net/forum/dr...onal-froyo-bypass-exchange-server-policy.html
Just download the zip, and extract the apk from it, then place the apk on your SDCard and install it just like a regular app.
Click to expand...
Click to collapse
Will look into that. Thank you very much!

I ended up using the modified email.apk from CM7...works like a charm!!! The Droid forums version kept coming up with security errors. THANKS AGAIN Khilbron!!!

awenthol said:
I ended up using the modified email.apk from CM7...works like a charm!!! The Droid forums version kept coming up with security errors. THANKS AGAIN Khilbron!!!
Click to expand...
Click to collapse
Can you please post a link to the one you used?
Sent from my PC36100 using XDA App

Justin.G11 said:
Nope, this is tightly integrated down to the OS in order to pass MS requirements, and it reports the control level back to exchange so it can make sure it's in compliance with their mobile device policy.
In theory you can make an app that proxies the API and lies about what the phone can do ... but it wont be done with a simple APK/market app ... it's integration goes much deeper.
Honestly your best best: this is clearly a new policy. complain repeatedly to your IT staff. You're probably not the only one upset ... and noise will result in policy change ... because reality: IT staff hate dealing with people. They want to deal with servers.
Option 2: if you have a buddy on the exchange team he can put you on the same policy he undoubtedly created for himself and his team, that's 10x as lenient so he can mess with his little pet projects he plays with on the side.
Click to expand...
Click to collapse
Yes..this reply really isn't correct. There have been some sqlite modifications that can be made or using the mail.apk from this link (http://forum.xda-developers.com/showthread.php?t=775007) works perfect, even with the new CM7-RC2

Bypassing Exchange security
I had this same issue with my work email. My way of bypassing it and still using the stock Mail app is by installing widgetlocker. Unfortunately the newest version does not bypass your encryption, but the older version before the most recent update does. Also it allows you to fully customize your lockscreen and add widgets and what have you. All in all pretty cool app.
widgetlocker.teslacoilsw.com/general/widgetlocker-1-2-9/
(unfortunately because i have never posted before i cannot post links so pm if the link does not work)

Amazing! So you guys have a device in your pocket that has complete access to your work mail server (something you don't own), and you apparently don't care if that falls into the wrong hands?
I don't want to get preachy but this is serious stuff:
1. Are you aware of the damage that can fall on an organization, its IP and reputation if a hacker/spammer has access to a mail account?
2. Your company's mail server is an assett of the company. Gaining access and leaving it unlocked is like borrowing something from work and leaving it on the street.
I understand that IT policies are annoying to the end user, but they are there for good reason.
Would you leave the company vehicle unlocked because it is annoying to get the key out? No.
Oh, and by the way, you can be held directly liable for damages for disabling/ hacking around policies. I have seen employees get fired for it.
Sent from my device.

ramiss said:
Amazing! So you guys have a device in your pocket that has complete access to your work mail server (something you don't own), and you apparently don't care if that falls into the wrong hands?
I don't want to get preachy but this is serious stuff:
1. Are you aware of the damage that can fall on an organization, its IP and reputation if a hacker/spammer has access to a mail account?
2. Your company's mail server is an assett of the company. Gaining access and leaving it unlocked is like borrowing something from work and leaving it on the street.
I understand that IT policies are annoying to the end user, but they are there for good reason.
Would you leave the company vehicle unlocked because it is annoying to get the key out? No.
Oh, and by the way, you can be held directly liable for damages for disabling/ hacking around policies. I have seen employees get fired for it.
Sent from my device.
Click to expand...
Click to collapse
The issue I have is with the idea that the company gets to dictate how my entire device functions. Your points are valid, but why not just require a password on the email app, not on the whole phone? Why do I have to consent to allowing them to order a full device wipe, instead of just a wipe of the company data?

bkrodgers said:
The issue I have is with the idea that the company gets to dictate how my entire device functions. Your points are valid, but why not just require a password on the email app, not on the whole phone? Why do I have to consent to allowing them to order a full device wipe, instead of just a wipe of the company data?
Click to expand...
Click to collapse
Those are some good points and questions:
If you just locked the mail app then the app would need to encrypt/decrypt all data, which would make it MUCH slower. However, the main reason is that the app lock approach is much more hackable..one simple example would be to load a proxy on the phone to intercept communication before it could be encrypted.
The idea behind the device lock is that it happens on a deeper level and is the most secure answer.
The question about having a choice with your device is actually a simple one to answer...if you don't agree with the work policy then don't use your personal device for work email.
The other thing is that, besides not having a choice, the forced answer is beneficial for everyone....if I lose my device then I definitely don't want strangers crank calling my family or getting personal info. I have read about some horrible stories.
The real question is...If your phone is lost why would you NOT want it to be secure and erased asap??
Sent from my "locked" device.

ramiss said:
Those are some good points and questions:
If you just locked the mail app then the app would need to encrypt/decrypt all data, which would make it MUCH slower. However, the main reason is that the app lock approach is much more hackable..one simple example would be to load a proxy on the phone to intercept communication before it could be encrypted.
The idea behind the device lock is that it happens on a deeper level and is the most secure answer.
Click to expand...
Click to collapse
Yes and no. There are approaches that are easier if you aren't securing the whole device, but that doesn't mean it can't still be hacked.
The question about having a choice with your device is actually a simple one to answer...if you don't agree with the work policy then don't use your personal device for work email.
Click to expand...
Click to collapse
Overall I agree with that, although I think at a company that offers mobile email, there's a sort of "peer pressure" to use it. Not to say that's a good reason. I'd imagine that it'd be hard for a company to actually require you to use mobile email on your personal device -- if your job truly requires it, I'd think they'd have to provide you a device if you don't have a compatible device or aren't willing to use it that way. So yes, you're probably right that you have the choice. It doesn't mean that we can't complain though.
The other thing is that, besides not having a choice, the forced answer is beneficial for everyone....if I lose my device then I definitely don't want strangers crank calling my family or getting personal info. I have read about some horrible stories.
The real question is...If your phone is lost why would you NOT want it to be secure and erased asap??
Click to expand...
Click to collapse
If it's really lost forever, yes. But what if:
- The exchange admin sends the wipe command to the wrong phone. ("Hi, I'm John Smith and I've lost my phone.")
- The "wipe after X invalid passcode" policy is enabled. A friend or a kid picks up the phone and tries to play with it. Whoops.
- Something else goes wrong...bottom line is that the company should have no right to wipe anything other than their own data.

I understand the need for locking the device...I really do. But, if someone does happen to find my phone (knock on wood but HIGHLY, HIGHLY unlikely, as I've never even almost forgotten any phone, anywhere, ever) they aren't going to find ANYTHING of value in my emails. I'm pretty low on the totem pole.
If I had sensitive data on my phone...no questions asked, I would keep it p-word locked.
matt2053 said:
Can you please post a link to the one you used?
Sent from my PC36100 using XDA App
Click to expand...
Click to collapse
http://forum.xda-developers.com/showthread.php?t=775007

awenthol said:
I understand the need for locking the device...I really do. But, if someone does happen to find my phone (knock on wood but HIGHLY, HIGHLY unlikely, as I've never even almost forgotten any phone, anywhere, ever) they aren't going to find ANYTHING of value in my emails. I'm pretty low on the totem pole.
If I had sensitive data on my phone...no questions asked, I would keep it p-word locked.
Click to expand...
Click to collapse
Your Exchange Admin (or you depending on the version of Exchange you're using) has the ability to remotely wipe your device in the event it gets stolen/lost.

Could anyone give a brief possible explanation of why I can connect to my exchange server easily using Touchdown, but not using the Android integrated Exchange Account Sync?
Sent from my PC36100 using XDA App

Just found this thread as I've encountered the same issue on a HTC Sensation, just setup Exchange ActiveSync, and bam, have to set up the PIN lock on the phone.
However I've noticed that once you've done it, you can then go into Settings, Security and change the timeout before it locks up to 1 hour (I think that is dependent on your company setting). Mine was defaulting to every time the screen locked, but changing it to 1 hour I find I hardly ever have to unlock the phone now apart from first thing in the morning as I tend to use it regularly through the day.

I hate Google Support

I would like to complain about my current struggle with Google (since I have no one here to complain to. So I wrote Google a message and said I have a number of purchased programs that give me a download 403 error when i try to download them (geocaching, root explorer, titanium pro, gps status and toolbox pro etc.) and can they help me fix the issue. So they send me a canned response that says that I cannot install the programs because they are from a different userid of mine. So I respond and say that i have both user id's added as accounts on my phone so thats not it. So I get a canned response back that tells me there process of how apps are bought and how they are good forever and how you can install them on any devices. So I respond again telling them this is a download issue that I need help with. So I get another canned response that says during these issues you should try to wipe data on the play store and download manager. So I think, ok, this makes sense. I try that and nothing happens. So I respond again and tell them It didn't do anything but I have tried this on at least 6 different devices and it happens on all of them. So I get another canned response that says during issues like this you should delete your account and re-add it and if that doesnt work then wipe your phone to factory reset and try again. Now I am getting pissed. So I respond again and tell them that I just told them that it happens on many devices not just this device and I included a screenshot of the error this time and suggest maybe its having an issue looking up if i bought it and could they reset it so i could buy it again and see if that works. I get another canned response that says, it sounds like you are having issues with these apps, You should contact the developer so they can explain any issues that you dont understand on how their software works. NOW, each one of their responses comes with atleast a page of "We are sorry, we know this is frustrating, blah blah blah" with more detail on how to find the developers address etc." So I have this mile long email trail that's all canned bull sh!t I realize. So I responded again and told them to quit sending me canned responses and to read my damn issue so you can address it. I told them they should be working with the developer, not me, because this is their issue. Well - Stay tuned for there next canned response. I am going to blow a gasket if its another one that addressess nothing.

Has anyone else had a 403 download error in the playstore that they know how to fix?

Tried selecting the correct account before attempting to install?

JulianPaoloThiry said:
Tried selecting the correct account before attempting to install?
Click to expand...
Click to collapse
that makes sense. is there a place to choose which account?

Where it shows the account name on the left side.

JulianPaoloThiry said:
Where it shows the account name on the left side.
Click to expand...
Click to collapse
OMG dude, you just fixed my problem that i have been having for a year. I should know to ask xda before i ask google....stupid stupid stupid me..
Thanks Bro.

jbeitel said:
I hate Google Support.
Click to expand...
Click to collapse
Here's your first mistake - you assume they care down to the individual customer level. We (humans) all exist as a necessary evil that Google's dependent on because we are the plebes who own the wallets which we open after clicking links that make money by selling advertising to the companies we buy from. If they could by-pass us and connect our wallets directly to advertisers they would. Google's taken away ActiveSync support, created a holy war in the YouTube community to push G+, created another furor by linking G+ to Gmail so anyone on G+ can e-mail anyone they can find on G+. There are tons more but you get the idea that "customer first" isn't exactly their manta. If you want to see their customer support in action look at the Nexus hardware forums. Google's support is byzantine. Your only hope of getting "real" support for s/w from Google is if you happen to stumble upon a s/w issue that intrigues them Or if you unmask a newsworthy security hole.
"Don't be Evil" has long been trumped by the need to keep revenue and margin high to keep the stock high to please both shareholders and Google'rs who's fortunes rise and fall by the value of that very same stock.
Google's an oligopoly now and not benevolent or our friends.

BarryH_GEG said:
Here's your first mistake - you assume they care down to the individual customer level. We (humans) all exist as a necessary evil that Google's dependent on because we are the plebes who own the wallets which we open after clicking links that make money by selling advertising to the companies we buy from. If they could by-pass us and connect our wallets directly to advertisers they would. Google's taken away ActiveSync support, created a holy war in the YouTube community to push G+, created another furor by linking G+ to Gmail so anyone on G+ can e-mail anyone they can find on G+. There are tons more but you get the idea that "customer first" isn't exactly their manta. If you want to see their customer support in action look at the Nexus hardware forums. Google's support is byzantine. Your only hope of getting "real" support for s/w from Google is if you happen to stumble upon a s/w issue that intrigues them Or if you unmask a newsworthy security hole.
"Don't be Evil" has long been trumped by the need to keep revenue and margin high to keep the stock high to please both shareholders and Google'rs who's fortunes rise and fall by the value of that very same stock.
Google's an oligopoly now and not benevolent or our friends.
Click to expand...
Click to collapse
couldn't have said it any better. They just tricked me because the first couple canned responses sounds personal, until i started seeing a pattern and then all out ignorance.

I got the final end all be all response from google
"It appears from the apps that you are having a problem with that your device is rooted. Because of the complexity of rooted devices, we are not able to support you".
So I told them xda told me how to fix in in 5 mins. c*ck suckers.

Factory Reset Protection (FRP) myth -- Lesson for everyone!

I did a factory reset before submitting my device to Samsung repair. But before doing it, to not have any trace of my online/offline data after reset I had to take care of ‘Factory Reset Protection’ (FRP) so that it won't ask to enter my email after reset. I removed the device security locks including fingerprints and also any Google account associated as said by 99% articles over internet (at least in my 30 mins of read thru of Google searches specifically for Samsung & also generally for android). Also had checked necessary options for all of my datas to be synced to Google. But in order to reinforce my knowledge about FRP and how it’s getting triggered I went thru some YouTube videos and articles specifically for Samsung & also generally for android prior to reset. And finally everything was good to go and ready for repair
Got my device after repair and did a reset again for Google to ask to restore my apps from previous backup of the same device. But it didn’t as you can see from the pic attached.
So what could be the reason you ask. When I removed the Google account (primary) for reset process, all the ‘App datas’ (thankfully not my contacts and other stuffs) were cleared from Google servers. Simply to say, the ‘Remove account’ option will tell Google that this device is no longer associated with this account and to delete all Android related datas associated and there is no way you can get this back.
So I don’t know whom to blame. The hundred’s of article over Internet about FRP (example: http://www.androidcentral.com/factory-reset-protection-what-you-need-know )
OR Samsung for not giving any information anywhere in internet or even in the Software (as warnings) [Their only website related to FRP is still down here in my country at least]. OR Google? For not giving any clear information regarding this action.
Anyway there is no use in crying over spilt milk. All I have to do now is manually install all my 83 apps one by one that were previously installed and who knows whether their respective datas can still be synced. There were even circumstances which most of us should have gone thru when the Google not showing yesterday app restore list but 1 week ago in the setup process.
Things like this can very well frustrate anyone if they are heaving depending on cloud. This is just one of the many little things(software, H/W dependent) in Android that may frustrate a user very much. NO WONDER WHY PEOPLE MOVE TO iOS. Because over customizability and all there are some stuffs that matters the most and iOS still excels in that. We geeks know that but it’s the freedom and exploration that makes us forget all those important stuffs.
For those of you gonna say “YOU SHOULD HAVE USED SMART SWITCH, ADB BACKUP, TITANIUM BACKUP OR SOMETHING ELSE” -- when something is meant to work it should work. I even had bad experiences with Titanium backup, could be device specific but whatever it is.
Welcoming all POSITIVE and NEGATIVE comments. LOL.
Running stock TouchWiz with the April patch. Tried a reset without removing Google account and it didn't ask for the mail ID to be entered for verification during setup process. So basically something have changed recently on how FRP works and whatever I've wriiten is what you have to take care of. regarding backup and all. Please share this thread with you friends. .
Will appreciate a thanks.

Thanks for sharing. Seems like a good warning for all of us.
Sent from my SM-G930V using XDA Premium HD app

Sorry to hear of your difficulties. My own frustrations have been building with Android as well. It is ridiculous how much we have to eff around with hidden settings and tweaks to get decent battery life. I am keeping an eye on the iPhone 7 to be honest.
Though apple ecosystem has its own share of frustrations.

Thanks for the info. I too had experience of some backup apps not working as they intended to be. Even Titanium Backup had given me tension when new android version comes or sometimes for no reason. But my go to solution(even without root I believe) is always have been Tasker+AutoInput combo. When nothing works out I just program them both to install apps from PlayStore based on the app list I manually backed up with another app. That's it. Don't know whether that will cause any bad effect on device hardware. Does it?

xxaarraa said:
Sorry to hear of your difficulties. My own frustrations have been building with Android as well. It is ridiculous how much we have to eff around with hidden settings and tweaks to get decent battery life. I am keeping an eye on the iPhone 7 to be honest.
Though apple ecosystem has its own share of frustrations.
Click to expand...
Click to collapse
I agree as i mentioned in OP. Sad to see Snapdragon 820 users struggle with battery life by removing un-wanted system packages. This even exists to an extent in my unlocked DUOS version. Google gotta have more control over Android. Hope with Android N this is not just gonna be with updates but also else where. Come on Google it's 2016.

OH gosh. This is an important piece of information. Somebody should link to this info by posting an article in xda-developer.com . Is there any way to reuquest?
Thanks BTW for a warning

Sheryl John said:
.Simply to say, the ‘Remove account’ option will tell Google that this device is no longer associated with this account and to delete all Android related datas associated and there is no way you can get this back
Click to expand...
Click to collapse
1) Disable Internet connectivity (wifi, data)
2) Remove accounts, then
3) Factory reset
Google doesn't know that about the removal so app data is still in your account, yet the device no longer has any link to the Google account so it's safe against FRP.
That said, with multi devices (and household members sharing 1 common account as the base account), I don't back app data to Google at all. TiBu has its quirks but I've yet to lose anything with it. On the contrary, I probably have too much back up (who needs Gingerbread apps back ups??? yeah, I still have them LOL).

lost_ said:
1) Disable Internet connectivity (wifi, data)
2) Remove accounts, then
3) Factory reset
Google doesn't know that about the removal so app data is still in your account, yet the device no longer has any link to the Google account so it's safe against FRP.
That said, with multi devices (and household members sharing 1 common account as the base account), I don't back app data to Google at all. TiBu has its quirks but I've yet to lose anything with it. On the contrary, I probably have too much back up (who needs Gingerbread apps back ups??? yeah, I still have them LOL).
Click to expand...
Click to collapse
That's the only way it seems for hard reset. But as I mentioned in my OP there is no need of removing the Google account for soft reset. FRP won't be triggered.

My Verizon Services removal

There is a service / app (system app) called MVS and listed as com.verizon.mips.services when you do a pm list services. Under apps and notifications - show system it can only be disabled. After a short time it re-enables itself and gives back full permissions no matter if you remove them or not. So I pm uninstalled it and that sticks as the app is gone. Until reboot! Then it's back, enabled, with full permissions again. Why is that, where does it come from (I know it's Verizon) in the system so that a reboot reinstalls it with no prompting?
I know what it does. Some have said it will break wifi calling but it does not. I don't use wifi calling any longer, it's too unreliable for me, but that's beside the point. What it actually does is report back to Verizon everything you are doing on your device. When you installed an app, when you uninstalled an app, when you used an app, who you called and when you called them and everything in between including the IMEI. If you ever call tech support they will know what's on your device without asking for permission to look at it. If you disable the app they will request a code so they can look since they now can't see it.
So.. how the hell do you get rid of this spyware permanently without root? Heck, even with root! It's also one of the top apps that alarms and partial wakelocks in BBS which is how I found it. There are 2 more packages that don't seem to be causing any problems but then again I'm not sure. Does anyone know what they are and what they do? They are:
package:com.verizon.obdm_permissions
package:com.verizon.obdm

I've deleted all apps that have the word Verizon in it and have had no issues. And wifi calling still works.

Spookymyo said:
I've deleted all apps that have the word Verizon in it and have had no issues. And wifi calling still works.
Click to expand...
Click to collapse
Do they come back on reboot?
edit: Looks like these 3 packages are being installed via apk in the priv-app system folder and thus I think I'd need root to actually get rid of them entirely. This is a Google bought device with no connection to Verizon other than using a sim for connectivity. Will anyone else see if they have these packages installed if on a Google device with or without Verizon as a carrier? The command is:
adb shell
pm list package | grep 'verizon'
If you have them and don't want them use this command for each (one example given) and reboot. See if they come back.
pm uninstall -k --user 0 com.verizon.mips.services

bobby janow said:
Do they come back on reboot?
edit: Looks like these 3 packages are being installed via apk in the priv-app system folder and thus I think I'd need root to actually get rid of them entirely. This is a Google bought device with no connection to Verizon other than using a sim for connectivity. Will anyone else see if they have these packages installed if on a Google device with or without Verizon as a carrier? The command is:
adb shell
pm list package | grep 'verizon'
If you have them and don't want them use this command for each (one example given) and reboot. See if they come back.
pm uninstall -k --user 0 com.verizon.mips.services
Click to expand...
Click to collapse
I have root so whatever I delete stays deleted. I don't need to use adb, just a root explorer.

Spookymyo said:
I have root so whatever I delete stays deleted. I don't need to use , just a root explorer.
Click to expand...
Click to collapse
Unfortunately, that doesn't help me out but it's still nice to know. I see them all in the /product/priv-app folder and obviously can't delete them. Something like this might push me to root ...eventually. I can disable the processes and even uninstall them but only until the next reboot. I wonder if every device has crap like this running even if you don't use Verizon.

bobby janow said:
Unfortunately, that doesn't help me out but it's still nice to know. I see them all in the /product/priv-app folder and obviously can't delete them. Something like this might push me to root ...eventually. I can disable the processes and even uninstall them but only until the next reboot. I wonder if every device has crap like this running even if you don't use Verizon.
Click to expand...
Click to collapse
Of course they do. Even unlocked phones have to connect to a carrier service.

Spookymyo said:
Of course they do. Even unlocked phones have to connect to a carrier service.
Click to expand...
Click to collapse
That's not quite what I meant. If you never connected to Verizon do you still have those files and apks installed? They seem like system files delivered to a device whether or not you use Verizon. That's what I'm curious about.

Lauren
I may be able to help. I have been going through HELL for 7 months... doing my own detective work and gathering info/evidence on trying to figure out/ prove how my ex (whom conned me) is committing Computer Internet and Identity Fraud therefore including Credit Card Fraud. Just moments ago I found com.verizon.obdm_permissions on my Android phone....Googled... Google lead me here. I am a creature of habit and believe i am fairly in tune with my habits/how my electronics work for my abilities (being uneducated in the way the internet works....one of his ssids to psychologically tease me was Interweb)
*I am on my father's Verizon account. He lives an hour away.
*I have my own Xfinity Account.
* My phone acts like 2 or more phones.
*Verizon says everything looks fine.
*Xfinity says everything looks fine.
*In my Google and Xfinity Account ive found that a Linux server is/has been connected to me.
* I found a coax cable that was cut (I live in an apt building) and found it connected to a splitter (fake?). Once I disconnected Comcast van (during pandemic beginning) arrived the next day. He wired the coax cable that was cut....i painted my closet....the paint spots match.
*I've had an Apple app mysteriously download even though I've never had an Apple Account nor an iPhone. Never would have caught it if I didn't download a notification saver app.
*This asshole has made comments leading me to believe he has live broadcasted me...I have never done that...i don't even like video chat...not even my mother.
*I have a FB Business page with 60,ooo followers that I had no idea I had.
*Just recently when I connect to my wifi (mobile data off) Digital Secure says 0 Apps are running on mobile data.
* at one point my IP address was in-between Pakistan and Iran.
*via FB messenger i was connected by someone who says he's a Middlesex Private Attorney-Union Devision....there is no such decision anywhere...confirmed by District Attorney's Office. I believe he is part of an Islamic group who prays on woman through social media for sex trade.
In conclusion: due to my exs actions, he has made me and my life (including my 14 and 9 year old children) a target for this sex slave trade Islamic group.
Honestly, I need help organizing my report for the FBI. I've already spoken with the Federal Trade Commission whom gave me a number to someone in my local FBI department.

farmdynasty said:
I may be able to help. I have been going through HELL for 7 months... doing my own detective work and gathering info/evidence on trying to figure out/ prove how my ex (whom conned me) is committing Computer Internet and Identity Fraud therefore including Credit Card Fraud. Just moments ago I found com.verizon.obdm_permissions on my Android phone....Googled... Google lead me here. I am a creature of habit and believe i am fairly in tune with my habits/how my electronics work for my abilities (being uneducated in the way the internet works....one of his ssids to psychologically tease me was Interweb)
*I am on my father's Verizon account. He lives an hour away.
*I have my own Xfinity Account.
* My phone acts like 2 or more phones.
*Verizon says everything looks fine.
*Xfinity says everything looks fine.
*In my Google and Xfinity Account ive found that a Linux server is/has been connected to me.
* I found a coax cable that was cut (I live in an apt building) and found it connected to a splitter (fake?). Once I disconnected Comcast van (during pandemic beginning) arrived the next day. He wired the coax cable that was cut....i painted my closet....the paint spots match.
*I've had an Apple app mysteriously download even though I've never had an Apple Account nor an iPhone. Never would have caught it if I didn't download a notification saver app.
*This asshole has made comments leading me to believe he has live broadcasted me...I have never done that...i don't even like video chat...not even my mother.
*I have a FB Business page with 60,ooo followers that I had no idea I had.
*Just recently when I connect to my wifi (mobile data off) Digital Secure says 0 Apps are running on mobile data.
* at one point my IP address was in-between Pakistan and Iran.
*via FB messenger i was connected by someone who says he's a Middlesex Private Attorney-Union Devision....there is no such decision anywhere...confirmed by District Attorney's Office. I believe he is part of an Islamic group who prays on woman through social media for sex trade.
In conclusion: due to my exs actions, he has made me and my life (including my 14 and 9 year old children) a target for this sex slave trade Islamic group.
Honestly, I need help organizing my report for the FBI. I've already spoken with the Federal Trade Commission whom gave me a number to someone in my local FBI department.
Click to expand...
Click to collapse
WTF?

mustangtim49 said:
WTF?
Click to expand...
Click to collapse
Glad somebody said it ?

Farmdynasty
ummm....ya....WTF is probably the right response...lol
In general, I am not the greatest at explaining things... lol Especially, trying to explain something im educating myself on as these strange occurrences are happening. Im better at physically showing someone while I am doing my best at explaining why I have come to these conclusions.
So, I guess, with the "WTF" reply im not fully comprehending what your WTFing about...lol Are you WTFing because its a completely messed up situation or are you WTFing because I explained in such a way that makes me look like a crazy person? Lol
Seriously, I absolutely want your honest opinion. Asking for others opnions who are more educated than I is the whole reason I registered with y'all. I absolutely know that this fraud/hacking is true. I just get confused, lost, side tracked with how he connected and getting to the main source. Im working backwards... like im starting from the top branches of a tree (clues) working my way down to find the main source. If this makes any sense at all,, its like he has a backup to a backup so he can connect in more ways than one. If your sure what I mean about something I said please please please ask me questions...fire away!

I believe we have found the solution to the Verizon services removal. Please close this thread. Thanks everyone.

MOD ACTION:
Thread closed at the request of the OP.