[Q] how to disable/cripple OMA-DM? - Droid X General

ref:
http://www.innopath.com/pdf/mobile_device_management_standards.pdf
The Device Management (DM) group – one of the most active and prolific of the
OMA groups – consolidated prior device management activities in order to focus
on the following implementation areas:
Initial device configuration settings
Installation and updates of persistent information
Retrieval of management information
Management of device diagnostics, events and alarms
Software installation and lifecycle management
Software and firmware updates
Application settings
User preferences
Click to expand...
Click to collapse
In contrast, OMA-DM, based on SyncML, provides two-way communications. The MDM server may poll the device for data, such as the configuration, and may compare the response against expected
values. It is therefore quite suited for troubleshooting. Since OMA-DM provides
acknowledgement that the message was received, it also supports mass operations
Click to expand...
Click to collapse
Thanks, verizon, but I do not need OMA-DM active for you on my Droid X .... froyo or gingerbread

Old thread:
http://forum.xda-developers.com/showthread.php?t=811567
You could use Droidwall to block it from connecting as well.

alright.. but does that address the four or five oma*.apk files in /system/app ?

Related

this 2 icons ?

hello,
what mean this 2 icons on my ozone ?
cheers
4sale:
Moto Q9H (US)
Samsung BJ II (SGH-I617 US)
Samsung Valencia C6626
It mean Location Setting is enabled, below is the description from the manual:
Location Based Services (LBS)
Your wireless device can determine its (and your) physical, geographical location (“Location Information”). Certain software applications are capable of accessing, collecting and using Location Information and disclosing the information to the application provider and other people. You should use caution and discretion when determining whether or not Location Information should be made available to them. To limit potential unauthorized access to your Location Information, Verizon Wireless devices are preset to “E911 ONLY” which will only allow authorized emergency response personnel to locate you if you dial 9-1-1 from your wireless device.
By changing the setting on the device to “LOCATION ON” you are enabling third party access to Location Information through software, widgets or peripheral components you choose to download, add or attach to your wireless device. Verizon Wireless encourages you to check your wireless device periodically and only use software, widgets and peripheral components that are obtained from reliable sources. When you use your mobile browser or other services and applications, you authorize Verizon Wireless to collect, use and disclose your Location Information as appropriate to provide you with any location services that you enabled.
Verizon Wireless does not retain Location Information longer than necessary to provide the services to you. We will not knowingly disclose your Location Information to third parties without your consent. You should carefully review the privacy policies of application providers and third parties who you allow access to your Location Information, and you should know that significant risks can be associated with disclosing your Location Information to others.
To change LBS settings
Click Start > Settings > Phone > Location Setting.
Use the NAVIGATION
Interesting...my T-Mo Dash 3G has no such setting that I can find!
Ghost of Jaco said:
Interesting...my T-Mo Dash 3G has no such setting that I can find!
Click to expand...
Click to collapse
I'm sure I saw this on mine but can't find it now. Maybe it was just on the origional HTC ROM

Hacking to clear security settings created by lotus traveller

My company which uses lotus traveler to enable access to corporate mail and calendar on WM devices. I installed this on my HTC HD running WM6.5 (Dutty Leo ROM). The installation has forcing us to use strong alphanumeric passwords and also greyed out the "prompt if unused for" radio button where you would typically turn off the phone password locking. This has rendering the phone virtually unusable as it takes 3 mins to enter a strong alpha password each time you use the phone...brilliant!
Is there a hack/registry edit that I can use to un-grey this button so I can turn it off and start using my phone normally again.
Any suggestions would be appreciated...
It's probably not related to the Lotus Traveller itself, but with the company enforced policies included in the CAB file - I presume You got the CAB from the company, not the Lotus/IBM website. At least that was the case in our company, that they forced to use the simple PIN lock with Exchange sync - I was already bothered by the simple PIN, so I dropped the whole idea. But I suggest You take a look in the CAB file, if You can still get it and see what changes does it make in the registry. Or You can also ask from Your company IT guys about the WM policies they have to enforce, they should know.
Anyway, hope You have some directions to go now.
Thanks for the suggestions....
1) I tried removing the lotus traveler application - this had the effect of removing the security enforcement. I reinstalled it and it was enforced again.
2) The traveler application launches automatically when the phone boots up. So I removed it from the startup sequence. Unfortunately this did not solve the problem. So I think there must be a registry setting somewhere that is set and monitored by the application.
3) I also looked in the setup.xml file that was in the traveler.cab installation file. I could not find any registry mods that were related to security.
4) The traveler release notes say the following: Customizable device password strength enforcement rules!
Traveler provides a built-in set of default device preferences and security settings that an administrator can modify for use when a device initially registers with Lotus Notes Traveler. The default device settings for users come from the Traveler administration database default device settings document. Users can change their device preference settings from their devices, but only an Traveler administrator can change device security settings.
Suggestions?
In the last few days I have browsed the registry quite thoroughly and there doesn't appear to be key that controls whether radio buttons are active or not (greyed out). I was hoping to make the "prompt if unused for" radio button active again so I could manually switch it off.
I'm out of ideas....any suggestions pls
i have lotus traveler installed on my tp 2 i have flashed my phone many times and reinstalled lotus and have had no problems. can you post a screen shot.
Security Policy
Hi
I am a Notes admin and can confirm this is a polcy that has been set to secure company data on mobile devices. Most companies have a policy that requires company information/access be secured especially on things like mobile devices.
Think about it, your company email system would be available to anyone stealing or finding your phone. While this may not worry you, it could be a cause for concern for your company executives or auditors - and could be a compliance issue in many industries.
The policy is set on the email server itself and pushed down and enforced on the device so it cannot be bypassed.
To remove it or get a less secure PIN you will need to speak to your company Lotus Notes admin.
This is an issue I have seen before and can cause conflicts between employees who use their own phones and resent the way they use them being changed and those concerned with securing and protecting their company.
Hope that helps but the long and short is speak to your email admins. The security policy is not default so someone must have set it up that way for a reason.
MIUI used to have an option to disable the password option even when it is enabled/enforced by Notes Traveler. However the new versions of miui do not have this.
Check this link
http://miuiandroid.com/community/th...en-security-has-been-removed-fro-1-7-29.8941/
why not have the security measures focus on the app?
paulbenwell said:
Hi
I am a Notes admin and can confirm this is a polcy that has been set to secure company data on mobile devices. Most companies have a policy that requires company information/access be secured especially on things like mobile devices.
Think about it, your company email system would be available to anyone stealing or finding your phone. While this may not worry you, it could be a cause for concern for your company executives or auditors - and could be a compliance issue in many industries.
The policy is set on the email server itself and pushed down and enforced on the device so it cannot be bypassed.
To remove it or get a less secure PIN you will need to speak to your company Lotus Notes admin.
This is an issue I have seen before and can cause conflicts between employees who use their own phones and resent the way they use them being changed and those concerned with securing and protecting their company.
Hope that helps but the long and short is speak to your email admins. The security policy is not default so someone must have set it up that way for a reason.
Click to expand...
Click to collapse
so why not have the security measures focus on securing the app and the app data? personally, I don't mind the 24/7 emails...but making me lock my phone so the company can blow up my phone at 7pm on a sunday...LAME.
Are there any news? I would like to remove the LockScreen security and want to use ibm verse.

[IDEA/POLL] Use C2DM app for remote phone access

These apps allow you to remotely access your phone from a web browser. However, they all run a web server on the phone, and I cannot connect to any of the over 3g (Verizon).
LazyDroid Web Desktop
Remote Desktop
Remote Web Desktop
I want to move the web server off phone, and (hopefully) onto private sites.google.com site. App Engine might be necessary, but I'm hoping this could be done solely in JS.
The hosting site would provide the UI, and interact with the phone using C2DM (the magic that powers Chrome2Phone, GMail, and installing apps from the web Market).
The UI is pretty obvious. It just needs a whiz to create HTML, Javascript, etc.
The C2DM backend is a still a bit mystifying to me... and searching for c2dm and javascript does not yield any obvious working implementations. But it seems plausible. Push a command to the phone, phone returns/uploads data to website, and UI updates.
Then there is the Android end. Well, there are the 3 projects above, Tasker for a quasi-hackish approach, and RPC (promising, but it seems like a WIP).
Thoughts? Volunteers? Geniuses?
Ooo... 2 birds with one stone!
This would also kill 2 birds with one stone.
No more typing in dynamic IP addresses! You get to use DNS to handle the connections. Bookmark your site in your desktop browser (it is always the same!). And set a preference in the Android app.
On lazydroid i've in planning some kind of trick that will let you connect behind firewall ... similar to a vpn...
CloudsITA said:
On lazydroid i've in planning some kind of trick that will let you connect behind firewall ... similar to a vpn...
Click to expand...
Click to collapse
I tried it again last week, and it is still unsuccessful. Webkey is currently the only application that I can successfully use to reach my phone.
Now, I could be wrong, but I believe all of these apps run a web server on the phone. I get a lovely, private 10.x.x.x IP address, which I can't reverse the route to. I have tried and failed to get DynDNS to work.
I have been looking into a solution since my original post. I have not had any time to do code squat, but I have loosely figured out all of the parts.
The big architectural difference I have been seeking is removing the server from the phone. I am not an Android expert, but I don't believe it even requires a running service. (Thank you, C2DM.)
With the app-webservice separation, you can work a "protocol" that reduces the overall bandwidth used... and thus improve battery life. Put all the "hard work" on a webserver, and (things get fuzzy here) possibly push it off onto the client browser (JS).
C2DM Browser Links
I could probably make something like WebKey but with C2DM and some more features. If you want you can give suggestions and I'll start making on saturday (after my exams). It would probably be possible in javascript for the actual sending from server and php just for logging in to your google account. The phone would just be registered on the server and no services (just as you wanted )
nebkat said:
I could probably make something like WebKey but with C2DM and some more features. If you want you can give suggestions and I'll start making on saturday (after my exams). It would probably be possible in javascript for the actual sending from server and php just for logging in to your google account. The phone would just be registered on the server and no services (just as you wanted )
Click to expand...
Click to collapse
I am not sure "more features" is necessarily the direction I'm headed. I am focused on making a "seamless" experience (i.e. less separation of phone and computer).
I was headed to App Engine (Python bias + easy Google integration). I have a project created. I haven't pulled together the various examples to make the core, but it seems <naive>simple</naive>. Stir in some templates, CSS, a sprinkling of JS, and voila!
The big "tricky" part that I can't convert from f***ing magic to a clear approach is the data link in the server. I want to avoid any storage to a Google disk, or otherwise, even temporarily. No stored data = easy privacy policy.
nebkat, if you're really chomping at the bit to code, here's my Android client concept.
- C2DM is a wake-up call. (cheat an borrow ChromeToPhone's ID to begin with)
- Connect to web server, send "I'm here," and wait for further instructions (Channels API/Comet/AJAX/.........)
- make the command set extensible
- each command is blockable in the client. (Permission control is set on the phone, not remotely.)
- After N minutes of no activity, send a "good bye," disconnect from the server, and fade into the background.
Don't worry, I'm very experienced with the server side stuff and I know exactly what you want. The only information stored on the sever side would be google account, the device c2dm registration id and some logging features just for statistics. A password could be set on the phone that would be sha512 hashed on the ajax request and would be sent to the phone. Even if a hacker found the hash, it would be useless without being logged in to the persons google account or knowing the server side auth token.
For now i'll just make the reciever, processor and command output and later on the extra security and ui stuff. It will work exactly the same way as Chrome2Phone except it will have server side php and the different commands. The connection from pc to phone will be something like this.
user command -> ajax request -> php c2dm request -> phone
phone -> php server http request -> controller page status
BTW I'm saving up for a Nexus S, how much would people pay for this type of app? There would definitely be a free version, but I just need to get the Nexus S because I have a Galaxy Spica now and it isn't the best for app development. I'm new to how stuff at xda works, would a donate version get me enoguh for the Nexus?
nebkat said:
Don't worry, ... <snip> ... auth token.
Click to expand...
Click to collapse
Alrighty then. I'm feeling like I can stop contemplating implementing this.
BTW I'm saving up for a Nexus S, how much would people pay for this type of app? There would definitely be a free version, but I just need to get the Nexus S because I have a Galaxy Spica now and it isn't the best for app development. I'm new to how stuff at xda works, would a donate version get me enoguh for the Nexus?
Click to expand...
Click to collapse
Since I was learning the ins and outs of App Engine, I read their quota rules and realized if this were popular it would require funding. I don't know where you are going to your web server, but I assume you'll have to pay someone to keep it running. But I had thought about $$$ already.
"Give away the razor, and sell them the blades."
Make the app free, no feature restrictions.
You get your money through various "membership" levels on the server. (See the account levels at fastmail.fm for an example.) So, you can use the app for free, but you only get, say, 2-3 MB of traffic per day, and only X sessions per day. Need more? See the pricing chart.
user command -> ajax request -> php c2dm request -> phone
phone -> php server http request -> controller page status
Click to expand...
Click to collapse
user command -> php server http request -> phone
phone -> php server http request -> controller page status
user command -> php server http request -> phone
lather, rinse, repeat.
C2DM is not deterministic, and acts up in low signal conditions. So, I made a decision to only use C2DM to initiate a session. Once both ends are connected to the server, everything goes over HTTP.
Oh.... and not that we need another Lookout/Phone Finder, but a shared-secret SMS code for the case where "they" have shut down the data connection.
I have my own server nebkat.com and there is nothing on it anyway.
The only other way to make "push" requests to the phone is with WebSockets. It would probably be better than c2dm because we have full control over what gets sent (google limits some requests). The advantage of WebSockets is that they send no header information which means that we could send our messages in 20 to 30 bytes.
I'll look into more detail on friday.
With web sockets won't you need to ensure the phone has a routable, external IP address? I know, for one, t-mobile does not expose an external IP address for their phones. Unless, of course, if the phone is connected over WiFi. C2DM works great for me (I have used a couple of apps with it and it is really useful).
MrGibbage said:
With web sockets won't you need to ensure the phone has a routable, external IP address? I know, for one, t-mobile does not expose an external IP address for their phones. Unless, of course, if the phone is connected over WiFi. C2DM works great for me (I have used a couple of apps with it and it is really useful).
Click to expand...
Click to collapse
No, WS is server initiated and the ip address' shouldn't make a difference.
MrGibbage said:
With web sockets won't you need to ensure the phone has a routable, external IP address? I know, for one, t-mobile does not expose an external IP address for their phones. Unless, of course, if the phone is connected over WiFi. C2DM works great for me (I have used a couple of apps with it and it is really useful).
Click to expand...
Click to collapse
You need an valid external IP address if you are attempting to initiate contact with your phone, which is why the 4-5 apps I've mentioned do not work on carriers like t-mo and verizon.
But the phone can establish a connection, and the carrier NATs (or whatever) will handle the routing for outgoing and incoming data.
I think the right questions are: Will Verizon/T-Mo allow the ports and protocol for WebSockets? Do Android and desktop browsers implement the draft API correctly and consistently?
I like C2DM. I works well when you have a good connection. But there are 3 issues with it.
1) The message size limit is 1024 bytes. Not ideal for file transfers.
2) In a poor signal areas, since the service retries sending messages, you will get delayed and/or duplicate messages. I work in a large "concrete" building, so I get this behavior often enough that I don't want to rely on it.
3) I believe there is a limit on the number of messages you can send. So, hunting around the filesystem could hit this limit (but unlikely in reality... I hope.)
It would be interesting to see exactly how those apps handle all of the data. Do they only use C2DM, or do they hand over to another protocol?
Ok my exams are over and I am starting with it. I'll give updates on this thread

Open source distributed social network

Hi!
Anyone else bothered by sharing their personal info on social network to the third party? I had thought about developing open source distributed social network app based on https server running on android phones. Each member should have android device as a server of his/her profile.
0) - https protocol could provide possibility to connect to your social network using web browser.
1) - One may be able to deal with extensive upload and download or lost connection issues by allowing distributed profile updates sharing:
I suggest following scenario:
D updates profile. B, C are acknowledged friends of D. B is on quality link - good connectivity to internet and sends broadcast I am sitting on good connection. B downloads update of D. D looses connection. C downloads and update of D from B.
2) - Re-acknowledging of friend ship should be day-wise of few hour-wise. So passwords should change during time using some hashing or whatever.
what do you think?
see ya
mrWax said:
Hi!
Anyone else bothered by sharing their personal info on social network to the third party? I had thought about developing open source distributed social network app based on https server running on android phones. Each member should have android device as a server of his/her profile.
0) - https protocol could provide possibility to connect to your social network using web browser.
1) - One may be able to deal with extensive upload and download or lost connection issues by allowing distributed profile updates sharing:
I suggest following scenario:
D updates profile. B, C are acknowledged friends of D. B is on quality link - good connectivity to internet and sends broadcast I am sitting on good connection. B downloads update of D. D looses connection. C downloads and update of D from B.
2) - Re-acknowledging of friend ship should be day-wise of few hour-wise. So passwords should change during time using some hashing or whatever.
what do you think?
see ya
Click to expand...
Click to collapse
I implemented such a prototype some year ago, although not for mobile clients. You'll have a few issues you'll need to address. You have to use PKI to ensure the identity of the sender in the distributed environment, and you'll have to implement a message routing protocol distributing the messages among the peers. Have a look at my prototype and feel free to steal any ideas: http://whisper.ping.se
Thanks!
Maybe for simplicity one could just copy WIFI WPA2 protocols where router would be one member and internet connection would be connection to the members personal data.
mrWax said:
Maybe for simplicity one could just copy WIFI WPA2 protocols where router would be one member and internet connection would be connection to the members personal data.
Click to expand...
Click to collapse
Huh? I'm sorry, but I can't make any sense of this at all. To achieve what..? I'm missing something here, I guess.
Android is shipped with the BouncyCastle crypto libraries. This is what you'll use to sign the messages with each users private keys to ensure the identity of the author of each message. If you want to encrypt, you'll use this library as well. Since you are working in a distributed store and forward environment, you can not rely on link encryption (e.g. https, wpa2 etc) but have to use point-to-point encryption instead, protecting the message itself instead of the transport channel.
Radio broadcasting resembles similarities to the internet "broadcasting" or: social network resembles similarities to the "person-his friends" virtual private network.
Since it is said that it is hard not to make security flaws when constructing new protocols. i think that adopting whole existing expert made protocol is best solution.
Whole wifi wpa2 protocols could be packed inside ordinary encrypted channel. Where the personal info provider of specific person from which his friends would want to download info - would take place of a "wifi Access Point " in this.

[Q] Problems with GCM

Hi guys, I have basically never touched android development before and still meddling around with some tutorials (and i really do not understand most as it is somewhat quite different from Java).
Now i have an project which i need to do basic to advanced development (i think its quite advanced).
I am planning to have an app that can receive a signal from the server that a order is done and it will vibrate or wake the phone screen up.
server would be running php, apache and mysql
1) i key in (or scan in) a string of numbers (tracking number etc)
2) In the server, an entry of this tracking id and its details should be already created in the mysql database with a column 'ready' with values [true/false]
3) when 'ready' turns true, I want it to contact the app. But i do not how to implement this part. I saw some articles talking about CGM but i am not sure.
4) it should be able to connect via wifi or mobile network or check connection to server
5) and how do i mark this order as done on the app-side,; if not it will keep polling the server for this tracking id
As you need both side communication.GCM CCS(Cloud Connection Server) is perfect for your needs.Check GCM CCS Docs.I hope it will help you.
mohitsinghs said:
As you need both side communication.GCM CCS(Cloud Connection Server) is perfect for your needs.Check GCM CCS Docs.I hope it will help you.
Click to expand...
Click to collapse
Which is better or easier?
Using CGM or set the application to poll the server if a tracking number exists?
For example is a PUSH or PULL recommended
sianzb0i said:
Which is better or easier?
Using CGM or set the application to poll the server if a tracking number exists?
For example is a PUSH or PULL recommended
Click to expand...
Click to collapse
I think GCM is easy to implement. If you are using android studio,you can add it easily. For examples you may see the sources of iosched and todo.txt backend example.
You should read the documentation and should go through the sources of iosched and todo.txt to see how easily it all happens.
mohitsinghs said:
I think GCM is easy to implement. If you are using android studio,you can add it easily. For examples you may see the sources of iosched and todo.txt backend example.
You should read the documentation and should go through the sources of iosched and todo.txt to see how easily it all happens.
Click to expand...
Click to collapse
I have helped a friend set up eclipse with Google App Engine, but when we were looking through, some of the features in the App Engine is not free (they have $300 worth though).
I will try and give it a shot first. Meanwhile I will also looking into polling the mysql DB via PHP
sianzb0i said:
I have helped a friend set up eclipse with Google App Engine, but when we were looking through, some of the features in the App Engine is not free (they have $300 worth though).
I will try and give it a shot first. Meanwhile I will also looking into polling the mysql DB via PHP
Click to expand...
Click to collapse
GCM HTTP: Downstream only: cloud-to-device.
GCM CCS: Upstream and downstream (device-to-cloud, cloud-to-device).
Thats why I suggested you CSS over HTTP. Note that Google AppEngine does not support connections to CCS so you need your own server implementation if you need both side communication.Otherwise you can try GCM HTTP with AppEngine.That all depends on your need and how you manage it. And If you are willing you may try Android Studio as it is almost stable now [1.0 RC2]. It is very helpful for Cloud Apps as it have builtin support of GCM over Eclipce. Its just my opinion. Happy coding.
mohitsinghs said:
GCM HTTP: Downstream only: cloud-to-device.
GCM CCS: Upstream and downstream (device-to-cloud, cloud-to-device).
Thats why I suggested you CSS over HTTP. Note that Google AppEngine does not support connections to CCS so you need your own server implementation if you need both side communication.Otherwise you can try GCM HTTP with AppEngine.That all depends on your need and how you manage it. And If you are willing you may try Android Studio as it is almost stable now [1.0 RC2]. It is very helpful for Cloud Apps as it have builtin support of GCM over Eclipce. Its just my opinion. Happy coding.
Click to expand...
Click to collapse
Does CGM always run in the background? like a service?
sianzb0i said:
Does CGM always run in the background? like a service?
Click to expand...
Click to collapse
An Android application on an Android device doesn't need to be running to receive messages. The system will wake up the Android application via Intent broadcast when the message arrives, as long as the application is set up with the proper broadcast receiver and permissions .
Click to expand...
Click to collapse
Thats what written in developer docs. I hope you got it.
I was trying to do a simple poll to the server via this simple example as shared in the forum
http://forum.xda-developers.com/showthread.php?t=2325799
I want to automatically poll the results, say every 5 seconds. Similar to setInterval() in Javascript.
Code:
ScheduledThreadPoolExecutor exec = new ScheduledThreadPoolExecutor(1);
final DoPOST mDoPOST = new DoPOST(MainActivity.this, /*editTextSearchString.getText().toString()*/"John");
exec.scheduleAtFixedRate(new Runnable() {
public void run() {
// code to execute repeatedly
mDoPOST.execute("");
}
}, 0, 5, TimeUnit.SECONDS); // execute every 60 seconds
This is what i added to my onCreate method but it only pulls the data for the first time and it doesnt pull anymore. Can someone please enlighten me?
Currently i am following this example to implement the CCS Push service
http://www.androidhive.info/2012/10...ing-google-cloud-messaging-gcm-php-and-mysql/
However, i couldnt get pass to the MainActivity without crashing the app
are there anymore noob friendly tutorial i can follow?
sianzb0i said:
Currently i am following this example to implement the CCS Push service
http://www.androidhive.info/2012/10...ing-google-cloud-messaging-gcm-php-and-mysql/
However, i couldnt get pass to the MainActivity without crashing the app
are there anymore noob friendly tutorial i can follow?
Click to expand...
Click to collapse
Log? Stacktrace? Run the app with your phone connected to the pc and usually Android Studio (hopefully your using it) will display any crash logs, from there we can help you find which lines your code is failing on.
Jonny said:
Log? Stacktrace? Run the app with your phone connected to the pc and usually Android Studio (hopefully your using it) will display any crash logs, from there we can help you find which lines your code is failing on.
Click to expand...
Click to collapse
Hi, i am still very very new to this.
Do you mean the logcat at the bottom?
i am still using the old eclipse juno bundle
I just rectified the crashing. But there are still some issues.
What I can do now:
1) I am able to register onto server
2) Server can see my device
What I cannot do:
1) I cannot contact the device from the server (nothing appears on the client)
2) on exit, the entry is still on the server. Its best to have a "exit" like how AirDroid does it (afterall I need user to confirm termination)
There only errors I get from LogCat is
Code:
12-30 22:49:27.536: E/GCMRegistrar(2614): internal error: retry receiver class not set yet
12-30 22:51:41.276: E/UnRegister Receiver Error(2614): > Receiver not registered: [email protected]
my android manifest is exactly the same as provided in the website (which should include a receiver, I suppose?), except I changed the corresponding package names

Categories

Resources