Database Users

[Q] Android Security

Is Android really secure enough to bank on?
What security precautions do you all take?

I would not suggest to do any banking on any mobile device not just android specially with hacked roms. The risk is too much for instance losing ur device and if ur device is rooted then it data is exposed.
Sent from my PC36100 using XDA App

I use Mint just to view my bank account, if i ever lose my device, they still need my pin number to get into the app(not your bank pin, any pin you set) and i can always change the password of the account online.
Over a cell network is probably THE safest way to bank. I trust that Cyanogen hasnt done anything that will steal my bank info.

Unlock screen password + BoA app doesn't have my password saved, AND has most of the username censored. 3G is also fairly secure, compared to cable or a WiFi connection.

No matter how you bank online it will be insecure IMO, using an unrooted android phone is probably a little bit more secure then using a PC or mac though. Just don't set it up so anyone can get in there without using a password or something.
I say unrooted because once you root it's a whole new ballgame. Using any custom ROM or giving any 3rd party app SU permissions means they have a free for all to any and everything your phone has and does.

I use the web on the phone to check my accounts, but I do not use an app for it.
I also make sure to never save passwords on the browser as well.

Just don't save your usernames/passwords if you bank on the browser, and make sure to tell any banking app to log out when you leave the program (you might not even be ABLE to stay logged in).
All data through CDMA cell networks is encrypted by default, not to mention the additional encryption that any reputable bank's website/app will have. As was mentioned above, online banking with your phone truly is the safest way to bank online.
In regards to rooting, it is only as dangerous as you make it. If you root and then grant SU permissions to "Swe3T fREE BaBEs 4 U" app, you're probably asking for trouble. But I only grant SU to Quick Boot and SetCPU, and other legitimate applications that don't ask for more permissions than they require. Just don't be an idiot and you'll be fine!

So is there a near consensus now that it can be secure?
Any naysayers remain?

It's really your choice to use it or not all it comes down to. I am in the Information Security field and when you learned about how things work and how to get around them. It's scary!

vboyz103 said:
It's really your choice to use it or not all it comes down to. I am in the Information Security field and when you learned about how things work and how to get around them. It's scary!
Click to expand...
Click to collapse
Taking field bias in consideration, I'm looking for your insight on how to make it most secure or if it's really necessary to wait for further security measures.
There are ways to practice safe sex afterall..

i'm still not quite sure how sending data over a CDMA network is any more secure than any other means. i mean sure CDMA is encrypted to begin with; yes. on top of that, any banking you do should be encrypted with SSL at least. great. now you've got two layers of encryption/security there. the fact is though regardless if it's CDMA or SSL, you're still transmitting data out thru the open air where anything with an antenna can grab it. it doesn't really matter how encrypted the data is at this point, it's unsecure in that is is freely available with only an antenna. security is not really how secure the data is at the presentation layer, but how secure it is at the physical layer as well.

vboyz103 said:
It's really your choice to use it or not all it comes down to. I am in the Information Security field and when you learned about how things work and how to get around them. It's scary!
Click to expand...
Click to collapse
I have a very similar job to you. I used to think the same.
Thing is, getting around those things is possible, but less likely that most other ways. Getting a wallet or purse stolen is common. Handing your CC to a server at a restaurant or bar and not seeing what they do with it is pretty trusting, no? Bet we've all done that.
Do the best you can, and be watchful of your accounts. I bank on my phone with more confidence than I would have at Starbucks on wifi.

How will "they" know if I tether with a rooted Nexus One

Just read Tmobile is going to charge for tethering & wi-fi hot spot. How will they know? Isn't data, data? I don't want to be charged for something I might use 5 times a year.
Sent from my Nexus One CM6 using XDA App

I don't know if they can tell, I have used the hotspot feature with my Nexus quite often and AT&T has never tried to charge me.

They wont.

[email protected] said:
Just read Tmobile is going to charge for tethering & wi-fi hot spot. How will they know? Isn't data, data? I don't want to be charged for something I might use 5 times a year.
Sent from my Nexus One CM6 using XDA App
Click to expand...
Click to collapse
Where did you read this from? No source, it didnt happen.

Starts 11/3/2010
Zephyron said:
Where did you read this from? No source, it didnt happen.
Click to expand...
Click to collapse
http://www.boygeniusreport.com/2010/10/26/t-mobile-to-debut-tethering-plan-on-november-3rd-14-99/

the only way they could know if you are tethering is if you are using the carrier's native ROM, i don't think they would ever find out when running a custom rom.

If you don't bother searching - at least do read the same thread on the same 1st page of the forum, instead of opening another one.
Einstein was right about infinite things...

Packages being sent contain HTTP requests, which may contain info on the device that's being used, among other stuff I don't really know about.
If those packages contain specific info on the device, they probably can tell even if you're using a custom ROM, just by putting some effort into it.
Anyways, if by some mean they'd manage to analyze it in a way where they can tell whether you're tethering or not, we'll also find a way to trick them by parsing those packages on the fly.
So, ultimately, I don't know whether they can tell or not if you're tethering, but if they can don't worry, someone will take care of it.

St.Jimmy! said:
Packages being sent contain HTTP requests, which may contain info on the device that's being used, among other stuff I don't really know about.
If those packages contain specific info on the device, they probably can tell even if you're using a custom ROM, just by putting some effort into it.
Anyways, if by some mean they'd manage to analyze it in a way where they can tell whether you're tethering or not, we'll also find a way to trick them by parsing those packages on the fly.
So, ultimately, I don't know whether they can tell or not if you're tethering, but if they can don't worry, someone will take care of it.
Click to expand...
Click to collapse
Companies cannot legally spy into your network traffic in that manner here in the US.

JCopernicus said:
Companies cannot legally spy into your network traffic in that manner here in the US.
Click to expand...
Click to collapse
This is true, deep packet inspection is against the law as it infringes what little privacy we are still allowed thanks to homeland security

St.Jimmy! said:
Packages being sent contain HTTP requests, which may contain info on the device that's being used, among other stuff I don't really know about.
Click to expand...
Click to collapse
Not picking on you, but I'm sure you mean packets

Here in France, SFR set up atransparemt proxy that checks the user-agent sent by your browser.
You can trick it by setting a mobile user-agent on your PC.
Sent from my nexus desire

zEar said:
Here in France, SFR set up atransparemt proxy that checks the user-agent sent by your browser.
You can trick it by setting a mobile user-agent on your PC.
Sent from my nexus desire
Click to expand...
Click to collapse
That's screwed. You can set any UA when using a custom ROM, so you'd be charged for tethering when you set it to Desktop?
In that case, someone might have a good reason to sue them...

Thanks for the info.
Sent from my Nexus One CM6 using XDA App

Jack_R1 said:
That's screwed. You can set any UA when using a custom ROM, so you'd be charged for tethering when you set it to Desktop?
In that case, someone might have a good reason to sue them...
Click to expand...
Click to collapse
First, you're right. But I forgot to mention that they won't charge you, it simply doesn't work. So if you changed the UA the way you suggest, you would see a blank page and quickly fix that
Second, I noticed after answering that I didn't read the question well (sh*t happens ) and didn't get the point about root. So to be more clear about the original question :
- "They" shouldn't be able to know if you're rooted or not, but there may be ways for them to detect that you are tethering.

Tethering and T-mobile...
If you run speedtest.net on a computer that's tethered to the N1, it shows on speedtest.net's server that you are on T-mobile USA's IP. Somehow T-mobile would have to acquire when the tether option was turned on and off at the same time the 3g service is on. They would have to submit that into the header files that get sent to their services. That would be a stretch, but it would be doable in future software updates. Say Gingerbread....

Actually, yesterday I've found something interesting about one of our local carriers.
It has 2 APNs: one for "dumbphones" and one for smartphones.
The first one allows Nexus to use internet and market, but tethering doesn't work. The DNS requests are blocked - I still didn't figure out how they block them. DNS servers get the ping, but the requests aren't resolved. Yet it looks like they're resolved, if sent from the phone.
The second one allows full internet access for the phone - and tethering also works.
So they don't detect tethering (and don't charge for it), but looks like they can block it with some restrictions that still allow the phone browser to work, when using "dumbphone" APN.

Jack_R1 said:
Actually, yesterday I've found something interesting about one of our local carriers.
It has 2 APNs: one for "dumbphones" and one for smartphones.
The first one allows Nexus to use internet and market, but tethering doesn't work. The DNS requests are blocked - I still didn't figure out how they block them. DNS servers get the ping, but the requests aren't resolved. Yet it looks like they're resolved, if sent from the phone.
The second one allows full internet access for the phone - and tethering also works.
So they don't detect tethering (and don't charge for it), but looks like they can block it with some restrictions that still allow the phone browser to work, when using "dumbphone" APN.
Click to expand...
Click to collapse
so all the other data, non browser based - how do they decide if/when to block which data ? i'm assuming this will only work on a non-rooted phone, or they are breaking the law and doing deep inspection.
if they =are= doing deep packet inspection, they can and will be held liable for eavesdropping, child porn, online harrassement (if you ever harrass someone), and a whole host of other things.
the ISP (tmo) not knowing what you're doing is a benefit to them. ignorance is bliss, and knowledge means responsibility the way the gov't views it.
lol, that last statement, the gov't and responsibility could be a joke i guess.

I believe they just have all traffic going through proxy which allows only very few selected packet types through, and blocks the rest for "dumbphone" APN. They don't check/block anything beyond DNS requests, and if you want to connect to a site while tethering "dumbphone" connection by IP - I believe you'll get there (didn't have a chance to test, but pinging IPs works without problems).
And of course, my Nexus with Enomther's ROM was used for experiments and showed exactly the same behavior.
The thing is - if I understand it correctly, it's not a planned behavior. They wanted to shut off all the network but the sites they give access to from their own WAP portal (considered "internal" internet), but in fact for some reason Nexus isn't completely blocked by it. PC is, though, when connected through Nexus.
And again, they don't have something that detects tethering - once a smartphone APN is used, the traffic is the same for Nexus and for tethered devices.

Some technical info...
Hello!
There is a way to detect if You are using tethering. Basically - tethering is routing - adding one more point in communications. So - if You just use Your phone, packets are addressed from/to Your phone. But if You are tethering - packets are addressed to device behind phone (using phone as gateway, basically router with NAT).
So - they may check:
ARP tables
TTLs
OS specific packets/DNS requests/used IP's (Why would Your phone check for MS updates? )
other things...

1 Method to Circumvent T-Mobile Tether/Hotspot

Time for me to update this thread!
For all of the T-Mobile users who are still trying to find a way to circumvent the user agent checking that T-Mobile does while using a third party hotspot app and don't feel like decompiling, editing XMLs, and recompiling, or messing with editing APNs, or ETC... A simple solution that I'm using; use a VPN.
Search the market for: Hotspot Shield
▼ ▼
https://play.google.com/store/apps/details?id=hotspotshield.android.vpn&feature=nav_result
▲ ▲
Also DO NOT use the native hotspot, I state this because of all the edits I've tried, the native hotspot still connects to the APN: pcwebs.tmobile.com instead of epc.tmobile.com - Which sniffs out the user agent of your browser and sends you to the upsell page.
If you're on the Galaxy S3 and JB use this app by TrevE
▼ ▼
http://forum.xda-developers.com/showthread.php?t=1988735
▲ ▲
All others that are capable use Wifi Tether for root users.
▼ ▼
https://play.google.com/store/apps/...S5nb29nbGVjb2RlLmFuZHJvaWQud2lmaS50ZXRoZXIiXQ
▲ ▲
-----------------------------------------------------------------------------------------------------------------------
1 - Start Hotspot Shield. (As of 10/18/2013 If you select to "Restore Purchase" Redeem code is "FREE" it'l give you 30 days of elite service for free!)
2 - Wait for connection to establish and a "key icon" to show up in your statusbar.
3 - Start Wifi Tether for Root Users or TrevE Mod which ever you're using.
4 - Configure wifi tether settings.
[For SGS3 users on JB using WifiTether_TrevE_Mod Version 3.2-Beta2-041713, I've found the best setting to use is as follows:
Device Profile: Generic ICS/JB (wlan0)
Setup Method: Auto
Wifi Encryption: Your Preference
SsID: (whatever you wanna use)
Don't disable bluetooth: Checked
Wifi driver reload 2: Checked
Enable Access-Control: Checked
MMS Clamping: Checked
Routing fix: Checked
---------------------------------------------------------------------------------------------------------------------
5 - Tap icon to start tethering.
Once all of the messages stop popping up... Enjoy!
----------------------------------------------------------------------------------------
Optionally:
If you wanna setup your own personal VPN - G.I.Y.F. (Google is your friend) Search for OpenVPN methods. PPTP also works.
Im just a little too lazy to type the instructions. ლ(ಠ益ಠ)ლ
-------------------------------------------------------------------------------------
Also I'm using the following setup:
Device: SGH-T999
ROM: Synergy (R484) ► http://forum.xda-developers.com/showthread.php?t=2113452◄
Kernel: Faux (OC'd 1.62 GHz) ► http://forum.xda-developers.com/showthread.php?t=2089801◄
Modem: UVLI8 ► http://forum.xda-developers.com/showthread.php?t=1880987◄
Data Plan: Unlimited Nationwide 4G
*UVLI8 happens to be the best modem for the areas that I frequent, which ranges from Waukegan all the way to downtown Chicago; it keeps me on HSPA+ 85-90% of the time. So experiment and find out which modem works best for you in your area.
►http://forum.xda-developers.com/showthread.php?p=31409271#post31409271 ◄ Here's a map to help you guys get started on finding the right modem for you.
-----------------------------------------------------------------------------------------------------------------------
If anyone has an issue where Hotspot Shield is not working on their device and giving you the error message:
-------------------------------------------------------------------------------------------------------------
Critical Error |
VPN API is not available on your device. |
Unable to find explicit activity class |
{com.android.vpndialogs/com.android.vpndialogs.ConfirmDialog}, Have you |
declared this activity in your AndroidManifest.xml?" |
-------------------------------------------------------------------------------------------------------------
It, in my case, is caused by having Xposed Framework installed. The only fix I've found for it was to Titanium Backup my apps, then uninstall the Xposed Framework - requires you to boot into recovery and flash the zip file "Xposed-Disabler-CWM.zip" then you have to Wipe Data/Cache/Dalvik/Fix Permissions, flash your rom again, and restore from TB.
Sent from my SGH-T999 using xda premium

Vee63b said:
For all of the T-Mobile users who are still trying to find a way to circumvent the user agent checking that T Mobile while using the native hotspot app and don't feel like decompiling, editing XMLs, and recompiling, or messing with editing APNs, or ETC... A simple solution that I'm using; use a VPN.
Search the market for: VPN One Click
Also don't use the native hotspot, if you're on the Galaxy S3 and JB use this app by TrevE
All others capable use wifi tether for root users.
Enjoy! I'll post later to help you guys setup your own personal VPN. I'm currently in a moving truck moving to Chicago. ლ(ಠ益ಠ)ლ
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
Sounds nice! i'll check it out when you post your setup

imilleson said:
Sounds nice! i'll check it out when you post your setup
Click to expand...
Click to collapse
Did you have a chance to try this bypass method? And did it work for you?
Sent from my SGH-T999 using xda premium

Vee63b said:
Did you have a chance to try this bypass method? And did it work for you?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
it worked for me after a lot of screwing around on my note 2.

Working so far, I'll give it some time just to make sure it doesn't pop up again or if it just stops working. I'll report back later :thumbup:
Sent from my SGH-T999 using xda app-developers app

GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium

Vee63b said:
GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
i read about it but not quite sure how it works, does the server go on the phone or the computer? isn't there more to it then just setting up a server, otherwise why would companies make you pay for this?

robl45 said:
i read about it but not quite sure how it works, does the server go on the phone or the computer? isn't there more to it then just setting up a server, otherwise why would companies make you pay for this?
Click to expand...
Click to collapse
The way a VPN (Virtual Private Network) works is by anonymously masking ALL network traffic to it's destination. I hope my explaination can help those who doesn't understand how a VPN connection work. Here we go:
Normally -
A mobile device connects to service provider monitored internet. In T-Mobile's case, packets are sniffed out that contain any form of user-agent strings, and if the strings report anything other than a mobile device, internet connection is denied and you are redirected to the dreaded "upsell page".
Think of it as water with particles in it passing through sand before reaching the well of water below the sand.
If the water is your network traffic the particles in the water would represent your user agent and the sand is your service provider's filters; not all of the particles will make it through the sand and into the well if they arent small enough to pass through the grains of sand.
Using a VPN is kinda like shoving a tube through the sand and sending your water & particle mixture through the tube directly into the well below. Everything makes it through whether the particles are big or small.
Sorry its late and I probably used a bad analogy. Anywho I hope it made a bit of sense. Lol
I can help you set up your own private VPN. The problem is there's some many different types of routers available for everyone to use. The PPTP type VPN is actually set up through your router. For most people there will be an option to utilize the PPTP port within your router setup screen. Open a web browser, type in 192.168.0.1 or 192.168.1.1 or "routerlogin", the webpage will ask for a username and password. If you changes it, whatever your username and password is. If you didn't, the default username is "admin or administrator" and the default password is usually, "password" dig through the available settings you have and let me know if you have the option to enable anything labeled "PPTP" also let me know which router you have.
Sent from my SGH-T999 using xda premium

yea, so basically, you'd have to setup and only use at one place? is there a solution that will let you tether to any computer anywhere? like is there something you can just setup on the phone? I mean something we can setup as opposed to this 1click vpn which my guess is won't stay free for long.

robl45 said:
yea, so basically, you'd have to setup and only use at one place? is there a solution that will let you tether to any computer anywhere? like is there something you can just setup on the phone? I mean something we can setup as opposed to this 1click vpn which my guess is won't stay free for long.
Click to expand...
Click to collapse
You actually set up your home network to host you own personal VPN. So no matter where you are, your phone would always use your home network.
Your phone will still use the service provider's data service, however, it would use it only to connect to your VPN at home and then securely reroute that data back to your device. So as all of the data is moved along T-Mobile's servers the data in your VPN cannot be read by tmobile's filtering process.
So one personal vpn server would be all you need. There's an option if you check your "settings -> more settings -> VPN" that will let you use a VPN for all connections on your device. Let me know if there's anything I can clarify.
Sent from my SGH-T999 using xda premium

Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up

thanks for sharing !!

Reilly1812 said:
Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up
Click to expand...
Click to collapse
This is true, its not that bad of a lag for me here in Chicago however, normally my download speeds are between 5-7 Mbps on 4G, with the VPn running I drop to 3-5 Mbps, but I've kinda tweaked the tether apk to start OpenVPN when tethering starts and to disconnect when I turn off tethering. So for the most part I never notice the hit on my speed, I've configured packet compression on my personal VPN server. I'm using a Linksys E4200 on AT&T U-Verse. Thanks for pointing that out for me by the way Reilly, I know I've forgot to list the pros and cons of a vpn, I have a few minutes in my hectic life to hop on xda and make a few quick posts but never enough time to go into detail and proof-read my own posts.
Sent from my SGH-T999 using xda premium

giffy89 said:
thanks for sharing !!
Click to expand...
Click to collapse
No problem. I was just seeing alot of people asking for a surefire method to bypass the UA check to connect things that you can't simply use a plugin to spoof. So I decided to share how I get by it on the Nationwide Unlimited 4G plan.
Sent from my SGH-T999 using xda premium

Vee63b said:
GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
I just setup my own VPN server on my Windows Home Server 2011 box last night. I'm now tethering and haven't had any issues yet.
So far, so good. :good:
I have my UA set normally and am on the unlimited plan as well.
Reilly1812 said:
Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up
Click to expand...
Click to collapse
Yes, there is a hit but it's still MUCH faster than the slow wifi at Starbucks.

mark925 said:
I just setup my own VPN server on my Windows Home Server 2011 box last night. I'm now tethering and haven't had any issues yet.
So far, so good. :good:
I have my UA set normally and am on the unlimited plan as well.
Yes, there is a hit but it's still MUCH faster than the slow wifi at Starbucks.
Click to expand...
Click to collapse
Lol, originally I started looking for a way to bypass UA checks because I wanted to update my laptop which reports UAs as Internet Explorer through the Windows Update Center, and my Xbox 360 which also reports as IE when connected to Xbox Live. I didn't really need tethering until then. But its a pretty convenient function to have when I'm out and about.
Glad I could help out the other users on T-Mobile, lol I guess as the slogan says, "Stick Together"
Happy tethering everyone.
Sent from my SGH-T999 using xda premium

Hey, thanks for the info. If you're using a VPN it should work with most wifi tether apps though, shouldn't it? I'm on a N4 and CM10.1, which I guess should have about the same tethering app as the stock firmware. Also, it should work with BT tethering, shouldn't it?
Another question, is VPN One Click really free, or is there a catch? My router doesn't seem to have the VPN option you mentioned before, and my home internet appears to be 15mb down, but only 1mb up, which would limit considerably my speed even if I did a personal VPN.

andy o said:
Hey, thanks for the info. If you're using a VPN it should work with most wifi tether apps though, shouldn't it? I'm on a N4 and CM10.1, which I guess should have about the same tethering app as the stock firmware. Also, it should work with BT tethering, shouldn't it?
Click to expand...
Click to collapse
I use Wi-Fi Tether for Root Users and it works fine with VPN.

I tested with the native app, but it doesn't connect to the internet. So that's that.
With Wifi Tether for Root Users, it worked once but in a very flaky way. After that one time, couldn't get it working again. Tried many different profiles, and the one in which I don't get any log errors is forcing the generic one, forcing one of the setup methods. Apparently it doesn't work with the N4, there's another N4 user in the reviews that has problems too. Another very similar app is Open Garden's wifi tether, but it seems to be pretty much the same app as Wifi Tether for root users, has an almost identical interface and options. And of course, also doesn't work. Barnacle is another that doesn't work with the N4. By the way, this is all without even using VPN, so those aren't viable for us with the N4.

andy o said:
I tested with the native app, but it doesn't connect to the internet. So that's that.
With Wifi Tether for Root Users, it worked once but in a very flaky way. After that one time, couldn't get it working again. Tried many different profiles, and the one in which I don't get any log errors is forcing the generic one, forcing one of the setup methods. Apparently it doesn't work with the N4, there's another N4 user in the reviews that has problems too. Another very similar app is Open Garden's wifi tether, but it seems to be pretty much the same app as Wifi Tether for root users, has an almost identical interface and options. And of course, also doesn't work. Barnacle is another that doesn't work with the N4. By the way, this is all without even using VPN, so those aren't viable for us with the N4.
Click to expand...
Click to collapse
Possibly it's because the app hasn't been updated in months and is not playing well with 4.2.1 or having encryption issues with the device
Sent from my SGH-T999 using xda app-developers app

Is there someone watching us when connected to the net?

Hi Guys, I have a D802 International version.
I think, there is a data sending when you connected to the Internet. It is from the Android System, I don't know what data and where it is send to.
I didn't noticed it before rooting and installed Droid Wall.
When I have my phone rooted, I blocked internet access on Android System. The first time connected to the Internet, my phone raised an error message said that there wasn't Internet access, but browsing, WA, Play Store,email,etc were okay,.
So I traced this error and found out that the error was from Android System.
Since there many packages on the Android System, I couldn't determine which one that sending the data.
On my Nexus 7, I also blocked Internet access on Android System and can connected to the internet without any problem.
Can you confirm that your phone have the same behavior? Is there any tools that can use to inspect which package that tried to sent data?

I'm using afwall+, see attachment for my para(noia) profile setup, everything needed works like that. International 802

android404 said:
I'm using afwall+, see attachment for my para(noia) profile setup, everything needed works like that. International 802
Click to expand...
Click to collapse
I am using Droidwall, settings are almost the same with yours, except that I didn't give access to root - Application running as root.
It is works fine with me.
What I am talking about is Android System, this one that trying to sent something to the net, the first time you connected to the net.
In your firewall, did you give access on Android System to the net?
If so, try to block it and see what's happen then.

htcm7 said:
I am using Droidwall, settings are almost the same with yours, except that I didn't give access to root - Application running as root.
It is works fine with me.
What I am talking about is Android System, this one that trying to sent something to the net, the first time you connected to the net.
In your firewall, did you give access on Android System to the net?
If so, try to block it and see what's happen then.
Click to expand...
Click to collapse
That's what i meant. As you can see on the screenshot i don't allow internet for the system and everything works fine. No message from system about lack of internet.

Also make sure you disable CarrierIQ from System, General, Backup and Reset, Collect Diagnostics and uncheck Allow Diagnostics.
Cheers!

Rayan said:
Also make sure you disable CarrierIQ from System, General, Backup and Reset, Collect Diagnostics and uncheck Allow Diagnostics.
Cheers!
Click to expand...
Click to collapse
When I go there the settings force close. I think i restricted that on day one with this phone but i would like to check. Don't find anything frozen in titanium or blocked in xprivacy or afwall that should cause this fc.
Also: install xposed framework and xprivacy to control which data you don't want apps that need internet to send home.

android404 said:
When I go there the settings force close. I think i restricted that on day one with this phone but i would like to check. Don't find anything frozen in titanium or blocked in xprivacy or afwall that should cause this fc.
Also: install xposed framework and xprivacy to control which data you don't want apps that need internet to send home.
Click to expand...
Click to collapse
I didn't have problems disabling it, I even froze the system app (rooted). Mine's T-Mobile branded.
Cheers!

android404 said:
That's what i meant. As you can see on the screenshot i don't allow internet for the system and everything works fine. No message from system about lack of internet.
Click to expand...
Click to collapse
That is not what i mean. If i give internet access to root, of course, it won't be any error.
I don't wan't every apps has root access to access the net without knowing by me.
Take a look at attachment. With that setting, i still can browsing, WA, check mail, etc.
I guess, something from LG's stuffs burried in Android System trying to connect to the net, and since it has no access, err msg raised.

Except that root apps can do whatever they want even if you block them... the root thing is an old habit from when i was on 4.3 on my previous phone, under which i had to allow all rooted apps to have access to the net in order to have access at all.
Anyways, i blocked rooted apps now, rebooted and still can access the net without any error messages. Why not install afwall+ and see if it works the way you expect it to work?

android404 said:
Except that root apps can do whatever they want even if you block them... the root thing is an old habit from when i was on 4.3 on my previous phone, under which i had to allow all rooted apps to have access to the net in order to have access at all.
Anyways, i blocked rooted apps now, rebooted and still can access the net without any error messages. Why not install afwall+ and see if it works the way you expect it to work?
Click to expand...
Click to collapse
Check your firewall log. On nexus 7, I didn't get err msg, but after looking the log, there are numbers of Internet access blocked.
I found it who is trying to sent/receive data from the net. It wasn't LG, it is Google.
On the log, here is one of the blocked ip address : 74.125.235.32.
See if your log recorded same address.
What the hell they are doing, spying on us the minute we connected to the net?

htcm7 said:
Check your firewall log. On nexus 7, I didn't get err msg, but after looking the log, there are numbers of Internet access blocked.
I found it who is trying to sent/receive data from the net. It wasn't LG, it is Google.
On the log, here is one of the blocked ip address : 74.125.235.32.
See if your log recorded same address.
What the hell they are doing, spying on us the minute we connected to the net?
Click to expand...
Click to collapse
They take your location whenever possible and also collect data for whatever they would like. How do you think they know how many people are running each version of android and things like that
Sent from my VS980 4G using xda app-developers app

htcm7 said:
Check your firewall log. On nexus 7, I didn't get err msg, but after looking the log, there are numbers of Internet access blocked.
I found it who is trying to sent/receive data from the net. It wasn't LG, it is Google.
On the log, here is one of the blocked ip address : 74.125.235.32.
See if your log recorded same address.
What the hell they are doing, spying on us the minute we connected to the net?
Click to expand...
Click to collapse
Of course they are, that's why we use firewalls, to at least try to make it a little bit harder for them.
Here's One part of what afwall blocked for me over the last. 20 minutes:
AppID : -1
Application's Name: Kernel
Total Packets Blocked: 91
93.184.220.20(1)
74.125.232.115(4)
74.125.232.100(2)
74.125.232.110(14)
54.246.159.107(2)
74.125.232.111(1)
54.230.44.185(3)
173.194.71.84(1)
149.126.74.114(11)
108.161.188.129(5)
173.194.71.95(6)
74.125.232.98(13)
108.161.188.154(7)
108.161.188.224(9)
166.70.171.101(1)
74.125.232.107(2)
173.194.71.108(9)

So, I guess, this is a standard proc when you use Android, you must let Google watching over you

Free Wi-Fi through VPNs?

I've read random articles that state some apps or vpns can assist getting free wifi connections or Internet in general. Anyone familiar with any of this?
Sent from my SM-G900T using Tapatalk

passport619 said:
I've read random articles that state some apps or vpns can assist getting free wifi connections or Internet in general. Anyone familiar with any of this?
Sent from my SM-G900T using Tapatalk
Click to expand...
Click to collapse
Short answer: NO
They are probably scams. VPN-apps don't give you free wifi they connect to VPN-servers through your internet connection and that VPN-server connects to the server of a website you are browsing (e.g. google.com) or service you use (e.g. Viber) this way the site you are browsing or the service you use won't know your IP-address instead they will get the vpn-server's IP-address (great if you get banned from a game for example or a service is not available in your country), but they can't give you free wifi or internet. There is an app called Opera Max though which will compress the data you use through a vpn server and will (probably) reduce your data/wifi usage (with showing the same amount of content). Works best with video/picture downloading/viewing. I've had a great experience with it. It may be a little bit slower than usual but it might use half the amount of data/wifi.