CarrierIQ spyware and galaxy s - Galaxy S I9000 General

so now that the news is all over the place, is there any way to tell if this spyware is installed on the galaxy s or any of it's roms?

As i read about i noticed the remark about it eating battery and cpu performance so i think it should be studied. I can't imagine nobody cares ...

I think only htc devices do that.
Sent from my Galaxy S using XDA Premium App

I heard this could be on any Android, RIM or Nokia phones.

In case that some members do not know what it's about then please see this video: http://www.youtube.com/watch?v=T17XQI_AYNo
Think about it this way, all the informations collected will then be sold to the highest bidder to promote products or to find new products based on peoples habits or needs, that is, of course, in the best case scenarios.
It's all about money...again and again! But...it logs and sends all data of your input and that includes passwords and so on and all of that is un-encrypted, so this is getting really getting out of hands and will make a big 'boom' soon.

In the Netherlands the software is illegal and therefore not present on any phone!
Sent from my GT-I9000 using Tapatalk

I'm running teamhacksung's ICS build, no CarrierIQ detected. Run TrevE's CarrierIQ test app: http://forum.xda-developers.com/showpost.php?p=17612559&postcount=110
The software most likely will not be in phones outside of the US or carrier-free phones.

Can anyone sum up what's going on for me?

That spyware is only on USA phones.

I am on Vodafone Netherlands. They say it is free of this spyware. But they said the same about the spyware that blogs WA

In the Netherlands it is forbidden by law. But providers and Law thats like fire and water whahaha

Download app and try yourself.

Vodafone uk has confirmed its not on there firmware
Checks have been made using the app on other Networks and there all clear in the UK
And as in other countrys we have a Data protection Act which prevents this
Now one thing is missing is Stock Roms is this on them if so there straight from Manufactures and not Networks there so called stock roms will have it
So if you don't want to root Flashing a Manufactures Stock Rom should clear this
If its on Stock Then the Manufactures want a Bashing

I read an article that said it showed up on android on
settings -> applications -> manage applications -> ALL
as IQRD

Related

Is Carrier IQ rootkit installed in Touchwiz for SGS2?

For those who are not aware, Carrier IQ software is a rootkit that listens, collects and transmits EVERYTHING we do on a smartphone, this means EVERYTHING: calls, texts, data, login data, locations, touch points pressed on virtual KB,.... and a lot more.
This issue has been addressed on XDA portal.
See and read here
http://www.xda-developers.com/android/the-rootkit-of-all-evil-ciq/
and here
http://www.xda-developers.com/android/carrier-iq-sues-treve/
Original blog is here
http://androidsecuritytest.com/features/logs-and-services/loggers/carrieriq/
Running this kind of code inside an Android Kernel could be illegal in Europe.
I have looked for hints of its presence and asked some to look. However, I have not seen any code referring to CIQ instances on the SGS2 rom.
Is anyone aware of this running inside stock SGS2 rom?
Not found in mine.
http://forum.xda-developers.com/showpost.php?p=17612559
Not on the international version, as far as the USA versions i don't know
Sent from my GT-I9100 using xda premium

[APP] FREE Anti virus

http://forum.xda-developers.com/showthread.php?t=1453695
Why are you creating 2 topics about it?
Had you tested it? How it compare to theoretically best Zoner Antywirus? Tell us some more, than posting links - this is kind of flooding.
For me, this program won't beat Zoner.. for now.
Anyway, I'll test it
Rayman96 said:
Why are you creating 2 topics about it?
Had you tested it? How it compare to theoretically best Zoner Antywirus? Tell us some more, than posting links - this is kind of flooding.
For me, this program won't beat Zoner.. for now.
Anyway, I'll test it
Click to expand...
Click to collapse
sorry if i did hurt you. well i was a beta tester for the app. it did performed well for me, besides comodo is a reputed company after all and they are standing for free softwares.
I posted the links cause it contains all the details of the software, details about the company etc, i thought its better than i explain those details.
about double posting, the one i posted is in the general section is for all to see. The second is for my fellow lgp500 users, where i really belogs. i hope i am clear enough. no harm ment
Best free antivirus is your brain - never install app without good amount of comments about app.
AdvDretch said:
Best free antivirus is your brain - never install app without good amount of comments about app.
Click to expand...
Click to collapse
Who in this world has time to read all that? Have you ever tried to read Google’s conditions and policies while creating a Google account? Certainly the answer would be ‘NO’. Do you know that Google had 60 different policies that helped them to collect data from your personal Gmail and other Google apps? Now do you know that they had merged all these in to one policy?
Google will know more about you than your wife does. Everything across your screens will be integrated and tracked. Google noted that it collects information you provide, data from your usage, device information and location. Unique applications are also noted. Sure you can use Google’s dashboard and ad manager to cut things out, but this policy feels Big Brother-ish. Google is watching you as long as you are logged in. It’s also unclear whether this privacy policy move will be considered bundling in some way by regulators. This unified experience hook appears to be at least partially aimed at juicing Google+. Google responded with clarification: Google noted that it already has all that data, but it’s now integrating that information across products. It’s a change in how Google will use the data not what it collects. In other words, Google already knows more about you than your wife.( not my comment go read this.... http://m.zdnet.com/blog/btl/googles-new-privacy-policy-the-good-bad-scary/67893)
Now my question is whether Google is good or bad? Do you need Droidwall to defend your privacy? Or do you still believe in your Brain(better do not believe in brain but use it to think rationally)?
Conclusion: we need a new definition to “virus”...My contribution is Anything that steals your private data is a virus.( no flames needed, no harm meant...just my thought about the relevancy of protective apps like Droidwall, comodo, avg, etc. ...etc)
,do we realy need anti virus?,
algie17 said:
,do we realy need anti virus?,
Click to expand...
Click to collapse
You dont need one
Sent from my LG-P500 using XDA Premium App
josinpoul's mean run anti virus before creating Google account
And if too don't have anti virus then don't use Google. Josin your explanation is wrong. Brain and antivirus both useful.
No need for 2 topics about one thing but thanks for sharing!!!
http://ca.reuters.com/article/technologyNews/idCATRE81N1T120120224
By Jim Finkle
BOSTON (Reuters) - Cybersecurity experts have uncovered a flaw in a component of the operating system of Google Inc's widely used Android smartphone that they say hackers can exploit to gain control of the devices.
Researchers at startup cybersecurity firm CrowdStrike said they have figured out how to use that bug to launch attacks and take control of some Android devices.
CrowdStrike, which will demonstrate its findings next week at a major computer security conference in San Francisco, said an attacker sends an email or text message that appears to be from a trusted source, like the user's phone carrier. The message urges the recipient to click on a link, which if done infects the device.
At that point, the hacker gains complete control of the phone, enabling him or her to eavesdrop on phone calls and monitor the location of the device, said Dmitri Alperovitch, chief technology officer and co-founder of CrowdStrike.
Google spokesman Jay Nancarrow declined comment on Crowdstrike's claim.
Alperovitch said the firm conducted the research to highlight how mobile devices are increasingly vulnerable to a type of attack widely carried out against PCs. In such instances, hackers find previously unknown vulnerabilities in software, then exploit those flaws with malicious software that is delivered via tainted links or attached documents.
He said smartphone users need to prepare for this type of attack, which typically cannot be identified or thwarted by mobile device security software.
"With modifications and perhaps use of different exploits, this attack will work on every smartphone device and represents the biggest security threat on those devices," said Alperovitch, who was vice president of threat research at McAfee Inc before he co-founded CrowdStrike. Researchers at CrowdStrike were not the first to identify such a threat, though such warnings are less common than reports of malicious applications that make their way to online websites, such as Apple's App Store or the Android Market.
In July 2009, researchers Charlie Miller and Collin Mulliner figured out a way to attack Apple's iPhone by sending malicious code embedded in text messages that was invisible to the phone's user. Apple repaired the bug in the software a few weeks after the pair warned it of the problem.
The method devised by CrowdStrike currently works on devices running Android 2.2, also known as Froyo. That version is installed on about 28 percent of all Android devices, according to a Google survey conducted over two weeks ending February 1.
Alperovitch said he expects to have a second version of the software finished by next week that can attack phones running Android 2.3. That version, widely known as Gingerbread, is installed on another 59 percent of all Android devices, according to Google.
CrowdStrike's method of attack makes use of a previously unpublicized security flaw in a piece of software known as webkit, which is built into the Android operating system's Web browser.
Webkit is also incorporated into other software programs, including Google's Chrome browser and the Apple iOS operating system for the iPhone and iPad.
CrowdStrike said it had not attempted to create software to attack iOS devices or the Chrome browser.
Ok, now a group of hackers control 500000000 devices... an antivirus will slow the phone down more than a hacker trying to run a phone from another continent over your 2G network... just think about it... how can your screen be monitored over 3G in real-time? It can't be done on my 5Mbps PC...
And if you turn data off, then 1GB of data will be sent to google when you turn it on??? Think logic...(where the f**k do you store that??? I think the effect will be noticed right away, and the attacker has no time to take control, unless you are stupid enough to see a 1GB file and not suspect anything...) PCs have real-time protection, but that is because there are terrible threats out there, and they are optimized, they don't slow down... on your phone, you will regret having a phone for 2 years running like **** and then dropping in water, while you could have best performance in those 2 years...
We are not windows, but we are android, and it is the most unsafe mobile OS, if you want a safe one, get from apple... just 2x price at ½ quality...
Sent from my LG-P500
well i use avast antivirus
but not for scanning viruses
but rather for anti-theft feature and firewall(blocking apps)
and isnt android a java based OS ??
im sure there are not many virus's
that can cause heavy damage

Porting S Voice to other device. Is this Illegal??

I have been a fan of XDA and appreciate the development and support the devs provide. But last few days a thought is bugging me continuously. We saw a lot of posts about S Voice and other apps being ported to other devices. Specially for S Voice, I believe that it's illegal as this could potentially cause Samsung to lose sales. My views:
1] We know that this is re-designed vlingo. vlingo is available in market, S Voice is NOT. Clear indication that they (as in Samsung) don't want the app to be used with other devices and they are not willing to sell it separately. Using vlingo from market is NOT same as using S Voice.
2] Did Samsung give us the permission to use/modify and distribute the app?
3] There is some infrastructure costs associated with running the services. It costs money to install and maintain servers and network. I work in enterprise storage management, so I am aware of costs associated with such massive infrastructure. Who pays for the non-SGS3 devices using the services?
4] Did Samsung every promise that SGS2/Nexus or other phones will get S Voice? So, why should we assume that other Samsung-device owners have the divine right to use a feature meant for SGS3?
5] It is one of the main USP for SGS3. Check here. This is listed as the top-most feature in the SGS3 product page. Hacking this app to be used with other phones is going to harm the phone sale. Is that not clear enough?
6] When Samsung started blocking connections from other devices - was that not an indication that they want the service exclusive for SGS3?
7] How is this different from movie piracy? The uploader never gains anything, but the studios/producers lose money.
8] What if Samsung starts locking their device in future with locked bootloaders/DRM/encryption because of such activities? Can we then blame Samsung for locking the devices?
9] Android is open source - but why assume that every feature in any Android is also open source? If someone can show me that S Voice is open source software, I will retract my statement.
It's sad that most people here equate freedom with piracy. Freedom and piracy are not same thing. Such act in the name of open source and community-feeling does not make it right. Maybe Samsung won't do anything about it -- but it does NOT make this act any better. It will just prove that Samsung considers this to be a petty nuisance (I am not using the word crime as I know nobody is doing this for any monetary gain).
Though I support open initiative with regards to Android, but I can't support such act.
Last check this statement from Samsung in VERGE
An initial test version of S Voice which was found online has been blocked as Samsung Electronics does not want consumers to judge the quality of the voice feature based on a test version. When the product is launched, users of GALAXY S III will be able to fully experience S Voice.
Exactly my thoughts. Though I am not sure what can be done to stop it.
Sent from my GT-I9100 using Tapatalk 2
rd_nest said:
I have been a fan of XDA and appreciate the development and support the devs provide. But last few days a thought is bugging me continuously. We saw a lot of posts about S Voice and other apps being ported to other devices. Specially for S Voice, I believe that it's illegal as this could potentially cause Samsung to lose sales. My views:
1] We know that this is re-designed vlingo. vlingo is available in market, S Voice is NOT. Clear indication that they (as in Samsung) don't want the app to be used with other devices and they are not willing to sell it separately. Using vlingo from market is NOT same as using S Voice.
2] Did Samsung give us the permission to use/modify and distribute the app?
3] There is some infrastructure costs associated with running the services. It costs money to install and maintain servers and network. I work in enterprise storage management, so I am aware of costs associated with such massive infrastructure. Who pays for the non-SGS3 devices using the services?
4] Did Samsung every promise that SGS2/Nexus or other phones will get S Voice? So, why should we assume that other Samsung-device owners have the divine right to use a feature meant for SGS3?
5] It is one of the main USP for SGS3. Check here. This is listed as the top-most feature in the SGS3 product page. Hacking this app to be used with other phones is going to harm the phone sale. Is that not clear enough?
6] When Samsung started blocking connections from other devices - was that not an indication that they want the service exclusive for SGS3?
7] How is this different from movie piracy? The uploader never gains anything, but the studios/producers lose money.
8] What if Samsung starts locking their device in future with locked bootloaders/DRM/encryption because of such activities? Can we then blame Samsung for locking the devices?
9] Android is open source - but why assume that every feature in any Android is also open source? If someone can show me that S Voice is open source software, I will retract my statement.
It's sad that most people here equate freedom with piracy. Freedom and piracy are not same thing. Such act in the name of open source and community-feeling does not make it right. Maybe Samsung won't do anything about it -- but it does NOT make this act any better. It will just prove that Samsung considers this to be a petty nuisance (I am not using the word crime as I know nobody is doing this for any monetary gain).
Though I support open initiative with regards to Android, but I can't support such act.
Last check this statement from Samsung in VERGE
An initial test version of S Voice which was found online has been blocked as Samsung Electronics does not want consumers to judge the quality of the voice feature based on a test version. When the product is launched, users of GALAXY S III will be able to fully experience S Voice.
Click to expand...
Click to collapse
Samsung will have known about this,
If they explicitly didnt want it to be shared with other android phones they could have prevented this easy in one of 2 ways,
1. integrate it into touchwiz framework
2. link the phones imei or unique identifier to the app and set up a database on the servers, similar to siri's protection.
Samsung wanted this app to be freely available as they have done nothing to protect its redistribution. I dont think they mind this because they have NO competitor in the Android market and are far superior to any other OEM that produces android phones.
PS. The Android OS is open source but there are many applications that have closed source to protect their business. Touchwiz source is never fully open sourced and neither is Sense.
I remember a year ago with the CM team asking for help from Samsung for little bits of protected code to get the camera fully functioning on the stock android rom (CM7 ROM).
JD
JupiterdroidXDA said:
Samsung will have known about this,
If they explicitly didnt want it to be shared with other android phones they could have prevented this easy in one of 2 ways,
1. integrate it into touchwiz framework
2. link the phones imei or unique identifier to the app and set up a database on the servers, similar to siri's protection.
Samsung wanted this app to be freely available as they have done nothing to protect its redistribution. I dont think they mind this because they have NO competitor in the Android market and are far superior to any other OEM that produces android phones.
PS. The Android OS is open source but there are many applications that have closed source to protect their business. Touchwiz source is never fully open sourced and neither is Sense.
I remember a year ago with the CM team asking for help from Samsung for little bits of protected code to get the camera fully functioning on the stock android rom (CM7 ROM).
JD
Click to expand...
Click to collapse
My view is that we took the application and made it compatible with other devices, Samsung never explicitly gave the permission.
Maybe they thought it would be easier to upgrade the app if it's not integrated into the TW. But I fear such activity may force them to become less dev-friendly in future.
It's a different story if in future they make the code available for CM9 or other projects separately. I just hope not, but the way it's being spread over the internet, I fear they will react in some way. Also throws a bad light over XDA.
JupiterdroidXDA said:
Samsung wanted this app to be freely available as they have done nothing to protect its redistribution.
Click to expand...
Click to collapse
They obviously didn't want it to be freely available because they have blocked it now.
Anyway, I don't get this mentality that if something is not impossible to take, it's ok to take it.
I will ask about the validity of ripping/porting the samsung apps and post back to this thread. If there is anything illegal about it (and im not sure there is unless the apps have been licensed specifically to the Galaxy S3) then any links on xda will be taken down.
I cant do anything about the rest of the internet though lol.
Mark.
mskip said:
I will ask about the validity of ripping/porting the samsung apps and post back to this thread. If there is anything illegal about it (and im not sure there is unless the apps have been licensed specifically to the Galaxy S3) then any links on xda will be taken down.
I cant do anything about the rest of the internet though lol.
Mark.
Click to expand...
Click to collapse
Much appreciated. I wanted this to be brought to the notice of MODs. Nobody wants XDA to be in bad light for such a petty affair.
As for the apps (specially S Voice) being exclusive to SGS3, I think so. That's what I infer from Samsung's statement in Verge:
http://www.theverge.com/2012/5/22/3037943/samsung-blocking-s-voice-app-leak
But please do verify with relevant authorities and take appropriate actions (if required).
Mac OS X doesn't require a product key, but that doesn't mean my friend can just use my installation DVD legally, it all depends on the T&C's
The fact Samsung have blocked it for other devices should give an indication of their decision towards people using this software on another device. They may not send the FBI to kick down your door and arrest you, but cracking it to spoof a SGSIII for example would probably get a DMCA take-down notice pretty quickly. They almost certainly won't want all and sundry freely enjoying one of the big features of their new flagship device.
I have e-mailed Samsung PR dept on their views about this issue. Not sure if they check their Inbox
Unless we hear otherwise from Samsung, we will follow the normal site policy. In this case (though it is an edge case) for the moment we're allowing it.
If this is the case, then all devs who port roms from other models are in breach also.
Is this thread trying to stop dev work, and has the OP loaded the program, if he has shame on him for going against his beliefs, now let us and the devs get on with it.:what:
Sent from my GT-I9300 using Tapatalk 2
Edit: phone model is Arc, now why did I change the prop build?
OP - Care to share how this is any different from all of the Sense ports to other devices? It's not.
I also like how you thanked Mark for checking into this - and that you were waiting to hear.... And then not even an hour later you go and contact Samsung PR? It sounds to me like you have an ax to grind.
I think everything that needs to be covered has been

Piracy: How to protect an app?

Hello guys,
are you one of the android developers pissed off by piracy?
I have about 4000 active illegal users (70%), but my app is without any security checks.
Have you found a solution? I gave up on google security checks, it was too easy to hack. There is something more secure?
I've done a lot of research, but I am searching also for some real experience by xda users.
Thank you!
Well, if you chose to implement in-app purchasing, then I suppose that might solve your problem.
taomorpheus said:
Hello guys,
are you one of the android developers pissed off by piracy?
I have about 4000 active illegal users (70%), but my app is without any security checks.
Have you found a solution? I gave up on google security checks, it was too easy to hack. There is something more secure?
I've done a lot of research, but I am searching also for some real experience by xda users.
Thank you!
Click to expand...
Click to collapse
If you have your own server you could crosscheck the user's google account with your purchase list.
Do it hidden, in multiple places and act delayed if you find out about a pirated version, then it's really hard to crack.
If you talk about your facebook app you could be kinda bad mannered and post that they are using an illegal app on their wall
Of course you'd have to be absolutely sure then
octobclrnts said:
Well, if you chose to implement in-app purchasing, then I suppose that might solve your problem.
Click to expand...
Click to collapse
I can't because a lot of people have already purchased the app in the classic way!
superkoal said:
If you have your own server you could crosscheck the user's google account with your purchase list.
Do it hidden, in multiple places and act delayed if you find out about a pirated version, then it's really hard to crack.
If you talk about your facebook app you could be kinda bad mannered and post that they are using an illegal app on their wall
Of course you'd have to be absolutely sure then
Click to expand...
Click to collapse
Actually this is a really cool idea, can I access to my google account using google api?
superkoal said:
If you have your own server you could crosscheck the user's google account with your purchase list.
Do it hidden, in multiple places and act delayed if you find out about a pirated version, then it's really hard to crack.
If you talk about your facebook app you could be kinda bad mannered and post that they are using an illegal app on their wall
Of course you'd have to be absolutely sure then
Click to expand...
Click to collapse
I like this.
taomorpheus said:
Actually this is a really cool idea, can I access to my google account using google api?
Click to expand...
Click to collapse
Have a look at this:
http://stackoverflow.com/questions/2245545/accessing-google-account-id-username-via-android
superkoal said:
Have a look at this:
http://stackoverflow.com/questions/2245545/accessing-google-account-id-username-via-android
Click to expand...
Click to collapse
My Kaspersky Anti-Virus programm says that it is a fishing site.
However, it is STACKOVERFLOW!!!
nikwen said:
My Kaspersky Anti-Virus programm says that it is a fishing site.
However, it is STACKOVERFLOW!!!
Click to expand...
Click to collapse
Kaspersky :silly:
taomorpheus said:
I can't because a lot of people have already purchased the app in the classic way!
Click to expand...
Click to collapse
Sent
In my opinion, create some sort of pop up that says "Attention pirated user, I'm glad you love my app as much as I loved making it, but I need to make money off of it. Please officially purchase this app "
Then have an In app purchase option in the pop up. This would make me want to purchase the app if I pirated it. I don't really believe that fighting piracy with DRM does anything but cause harm. You should just try and make the pirated users feel bad and encourage them to buy the app.
Sent from my SAMSUNG-SGH-I337 using xda app-developers app
v3nturetheworld said:
Sent
In my opinion, create some sort of pop up that says "Attention pirated user, I'm glad you love my app as much as I loved making it, but I need to make money off of it. Please officially purchase this app "
Then have an In app purchase option in the pop up. This would make me want to purchase the app if I pirated it. I don't really believe that fighting piracy with DRM does anything but cause harm. You should just try and make the pirated users feel bad and encourage them to buy the app.
Sent from my SAMSUNG-SGH-I337 using xda app-developers app
Click to expand...
Click to collapse
Ahah yeah that's a good solution!
I've noticed that most of the pirated users come from Burma, where google play doesn't work. So I think that I will leave the app in this way and create another pro version for the nations that have google play issues!
But... how about implementing a solution like ROM Manager does? I mean, with a separate app and a pirate popup as suggested above? I'm clueless on what technology use to create a licensing APK, but it would be easier even for those people that haven't got Play Store, maybe
Tiwiz
I guess the main app checks if the Lisence app is installed and if installed it checks the key from a database of the license app and checks for the validity of Lisence on the cloud
Sent from my GT-S5302 using Tapatalk 2
Hit Thanx Button if i helped you!
taomorpheus said:
Have you found a solution? I gave up on google security checks, it was too easy to hack. There is something more secure?
Click to expand...
Click to collapse
Piracy is a "fact of life" for software. And most anti-piracy measures tend to hurt legitimate paid customers (and the dev) more than the pirates.
If you have a good, useful app, those guys in China can hack almost anything. (No offense to China; no Play there, lower income and an anti-IP culture.)
There are a FEW successful devs who have gone to extra-ordinary lengths at the JNI level. I tested, but never turned any JNI anti-hacking code on, because with thousands of paid users on many weird phones and ROMs, I felt it would break for enough people to not be worth it.
If you have an app that needs a server connection, or data updates, and you have some kind of independent registration system, you have a chance too. But that can be a lot of work.
I'd rather spend my time making my app better and supporting customers. My app price is higher than many would like (but I have virtually no paid competition). And because my app is support intensive, I've taken the view that I'm selling support and convenient updates, not an app, so much.
I mostly verify people are customers before supporting them, do as good a job as I can, get good reviews, and people see there is value there for their money. And yes, I get tons of support requests from pirates. Some of them I've converted to customers.
And... regular updates to an app provides value. If pirates want the latest, they keep having to go look for it. (Or do I recall some pirate update service ?) Updates via Play are easy and that ease has value.
All the above said, I do get angry from time to time, mostly at people stealing my time IE support. And the idea of finding a highly effective anti-piracy measure is fascinating.
But almost none of us is without some sin in our life regarding music, movies or software downloading... So I think it's good to consider the pirates' perspectives. Effective antipiracy definitely drastically reduces the user base and the Internet knowledge base and familiarity, and its' questionable as to how much revenue might increase, if at all.
IE, piracy can be seen as free advertising, and an opportunity to show some pirates there are valid reasons why going legitimate might benefit them, or even reduce their guilt level. I've had a few people buy my app and apologize...
mikereidis said:
Piracy is a "fact of life" for software. And most anti-piracy measures tend to hurt legitimate paid customers (and the dev) more than the pirates.
If you have a good, useful app, those guys in China can hack almost anything. (No offense to China; no Play there, lower income and an anti-IP culture.)
There are a FEW successful devs who have gone to extra-ordinary lengths at the JNI level. I tested, but never turned any JNI anti-hacking code on, because with thousands of paid users on many weird phones and ROMs, I felt it would break for enough people to not be worth it.
If you have an app that needs a server connection, or data updates, and you have some kind of independent registration system, you have a chance too. But that can be a lot of work.
I'd rather spend my time making my app better and supporting customers. My app price is higher than many would like (but I have virtually no paid competition). And because my app is support intensive, I've taken the view that I'm selling support and convenient updates, not an app, so much.
I mostly verify people are customers before supporting them, do as good a job as I can, get good reviews, and people see there is value there for their money. And yes, I get tons of support requests from pirates. Some of them I've converted to customers.
And... regular updates to an app provides value. If pirates want the latest, they keep having to go look for it. (Or do I recall some pirate update service ?) Updates via Play are easy and that ease has value.
All the above said, I do get angry from time to time, mostly at people stealing my time IE support. And the idea of finding a highly effective anti-piracy measure is fascinating.
But almost none of us is without some sin in our life regarding music, movies or software downloading... So I think it's good to consider the pirates' perspectives. Effective antipiracy definitely drastically reduces the user base and the Internet knowledge base and familiarity, and its' questionable as to how much revenue might increase, if at all.
IE, piracy can be seen as free advertising, and an opportunity to show some pirates there are valid reasons why going legitimate might benefit them, or even reduce their guilt level. I've had a few people buy my app and apologize...
Click to expand...
Click to collapse
Well, this is my philosophy. I usually reply to all emails, build the app around the feedback from the community and try to fix all the issues. This permits to create a loyal group of users, and it's the reason why apps like Facebook Home are hated so much: they talk about building apps around people, but for them people is the product, so it's a fail from the beginning
After some considerations I have abandoned the idea to build an antipiracy system, the reason is in part related to your thoughts but also because the 60-70% of pirated versions come from nations like Burma, indonesia, etc etc. So I don't feel that someone is stealing, google play can't provide a service, so people react. The good thing is that despite the lack of a service, they try to use my apps, so that's good, right?
So, at the conclusion, the best antipiracy system is to not use an antipiracy system. Clearly it will be hard to be supported only by paying customers, but the majority accepts some ads if the product is good ( the important thing is to not include spammy and intrusive services, one banner or a full screen on time a day is sufficient).
Thank you for this reply, it's really important to know that there are good developers around! :highfive:
Have you tried google licensing?
taomorpheus said:
Hello guys,
are you one of the android developers pissed off by piracy?
I have about 4000 active illegal users (70%), but my app is without any security checks.
Have you found a solution? I gave up on google security checks, it was too easy to hack. There is something more secure?
I've done a lot of research, but I am searching also for some real experience by xda users.
Thank you!
Click to expand...
Click to collapse
Hi,
I am new to android development but I've read about google licensing services which checks for user account whether the app is actually purchased from that particular account associated with the user. If authentication fails then user gets a blocking dialog to either exit the app or purchase it from play store.
dbroid said:
Hi,
I am new to android development but I've read about google licensing services which checks for user account whether the app is actually purchased from that particular account associated with the user. If authentication fails then user gets a blocking dialog to either exit the app or purchase it from play store.
Click to expand...
Click to collapse
Cracker can easily remove IF and your won't ask to buy it.
There should be VMProtect or Themida like tool for android
GR0S said:
Cracker can easily remove IF and your won't ask to buy it.
There should be VMProtect or Themida like tool for android
Click to expand...
Click to collapse
It was hacked not long after its launch.
http://www.androidpolice.com/2010/0...on-easily-circumvented-will-not-stop-pirates/
taomorpheus said:
After some considerations I have abandoned the idea to build an antipiracy system, the reason is in part related to your thoughts but also because the 60-70% of pirated versions come from nations like Burma, indonesia, etc etc. So I don't feel that someone is stealing, google play can't provide a service, so people react. The good thing is that despite the lack of a service, they try to use my apps, so that's good, right?
Click to expand...
Click to collapse
Yes. Most pirates can't afford the app or wouldn't buy it anyway. I also think that many pirates and those who felt "forced" to buy a protected app are bad customers. They will spread their bad feelings about the app and the "greedy dev".
And many have a sense of entitlement, so they make demands, expect lots of support, complain and write bad reviews. They project their own faults on others, and always assume others are trying to rip THEM off. Some have told me they were "testing" my app, because they were worried about getting ripped off if it didn't work (despite my free version and anytime cancel policy).
Better not to have such customers. These are the same people who think they are more important than everybody else and cheat in traffic and lineups etc.
taomorpheus said:
So, at the conclusion, the best antipiracy system is to not use an antipiracy system. Clearly it will be hard to be supported only by paying customers, but the majority accepts some ads if the product is good ( the important thing is to not include spammy and intrusive services, one banner or a full screen on time a day is sufficient).
Thank you for this reply, it's really important to know that there are good developers around! :highfive:
Click to expand...
Click to collapse
For most of us small devs, yes. Things may be different for certain apps, such as those that need a backend server, and for multi-person companies.
You can also promote that your app is "DRM free". That's definitely a plus, especially to custom ROM users who may avoid using Google Play.
I tried ads for a few months in 2011. The "CPM" rates started good, but quickly dropped to almost nothing. I think it's very hard to make money from ads, unless your app has a million users, and they are more "average" people who might click on the ads, accidentally or not.
I think it's usually better to raise app price as high as you can. I experimented a lot for many months between $1 and $10, usually keeping price constant for at least 2-3 weeks. I, and some others, have found that total income remains somewhat constant no matter what the price, LOL.
Now I've left price at the high end, so I can provide the best support possible, by limiting sales quantity. Some people think we should "make it up in volume", but that's a self-serving wish of the person who wants it cheaper. High volume might be viable if you provide zero technical support though.
What I'd say in terms of pirate stuff is to not try too hard on the software level (though I might write a guide on a few useful methods and pieces of code to prevent the usual circumvention methods) but on the upload level. When you release a new version, wait a couple of days and then search for a pirate version of your app. If you find one, report it, they're usually down in about 5 minutes. The more often you do this, the more likely people are to search, find all the links are "dead" and then just think "stuff it, I'll just buy it". However, this will only work on people who can buy it and are using pirate versions because they wish to, not because they have to
Quinny899 said:
What I'd say in terms of pirate stuff is to not try too hard on the software level (though I might write a guide on a few useful methods and pieces of code to prevent the usual circumvention methods) but on the upload level. When you release a new version, wait a couple of days and then search for a pirate version of your app. If you find one, report it, they're usually down in about 5 minutes. The more often you do this, the more likely people are to search, find all the links are "dead" and then just think "stuff it, I'll just buy it". However, this will only work on people who can buy it and are using pirate versions because they wish to, not because they have to
Click to expand...
Click to collapse
Because they'd PREFER not to spend money, if possible. In most areas of life, that's what most of us do.
Last I looked, this was the best Android cracking site: http://androidcracking.blogspot.ca/ . I read everything there twice before I started experimenting with protection code. If nothing else, it gives a glimpse of how hard it is to protect a popular app well.
I sent DMCA takedown requests to a few sites some time ago, but it's an endless task, and IMO not worth it, unless your app is VERY niche/has relatively few users. I've been "honored" to have my app included in several Torrents full of Android apps. Some of those Torrents are updated regularly.
I will still notify XDA admins if there's a link or offending ROM on XDA. XDA mods take it seriously.
Some companies will put out their own "pirate" fake or crippled versions of movies, and app devs could do the same. Perhaps have endless popups offering to buy the app legitimately. I personally wouldn't bother (at this time) but it could work. I agree that making piracy a hassle may improve sales a bit.
LOL, I just re-looked and see 3 on isohunt that are my app alone, but they are older. If I have time for "fun" later this year I should (1) start my own torrents, (2) collect IP addresses, and... I dunno; don't seriously want to be a copyright troll; rather design & develop.

But is Phoenix OS safe and secure, or a danger?

I've just come across Phoenix OS and tried it out. While it works great for my purposes, I began to wonder about something. You know how there are stories in the news all the time about foreign countries, particularly China, Russia and North Korea are always finding ways of hacking into US secured sites and what not? How do we know that Phoenix isn't sharing all of our private info with hackers or something? I know it sounds paranoid, but we live in that sort of world now. Any thoughts? (Other than I'm crazy delusional, paranoid and don't use it.) Thanks.
netizenmt said:
I've just come across Phoenix OS and tried it out. While it works great for my purposes, I began to wonder about something. You know how there are stories in the news all the time about foreign countries, particularly China, Russia and North Korea are always finding ways of hacking into US secured sites and what not? How do we know that Phoenix isn't sharing all of our private info with hackers or something? I know it sounds paranoid, but we live in that sort of world now. Any thoughts? (Other than I'm crazy delusional, paranoid and don't use it.) Thanks.
Click to expand...
Click to collapse
Dude, after Snowden, the NSA leaks, and homeland security policy, you've honestly have a hell of a lot more to worry about domestically from your own country to be worried about any foreign nation trying to hack your system. The fact this app is made in a foreign land isn't something that should elevate concern, it's whether or not it connects to the internet and you happen to use it to do anything. That's the threat vector you should be worried about always. The fact you even posed this question implies you're somehow more secure on Windows 10 or Android in general just because they're not developed in China. I honestly trust these guys more than I ever would Microsoft or any other company Snowden's leaks long identified as part of Prism. Think Windows 10 forces updates only for our well being? They upload and download files constantly. My laptop has never been as quiet as when I'm on PhoenixOS. It's serene how at ease it is compared to the constant activity I see on Windows machines. Only one on your side here is you and what you do with the data under your domain, once you go online you're at risk. Once you lose your control or possession of your system, you're at risk. Whether in San Antonio or Shanghai.
it isnt 100% safe i dont recommend it can harm your system i dont know but safely is u use a memu ,andy or bluestack my favorite is memu
Use phoenix os it's not a problem for your datas, NSA already owns them, in the moment you begin using anything developed from US companies like microsoft apple or google you give your private life to them.
The real problem for the security is the usa not china,russia or any other country. If you are so paranoid you can use android x86 without google apps, avoid to use android emulator because they are closed source and you can't verify if there are backdoors.

Categories

Resources