Hi!
Does anyone want to try to make an app that can take control of the apps in the phone's I / O data. An app that allows me to take control of the In and Out data retrospectively after instalation. Many, many apps empties phone on sensitive data such as IP number, e-mail phone GPS info, and even account number etc.. It should be pretty easy to make an app that wrapp the apps in the phone ands allows me to take kotrollen over what my appa's access to and have to do with my data, a kind of App-Firewall.
Should not be too hard to Write that code. Had been super HITT! sure of that i am!
Anyone who is interested!
Henrik Bie
Related
In many application downloaded from market, like anysoftkeyboard, there is a popup warning window that says "the application may be able to collect all the text you type... passwords, credit cards numbers(!!!) etc.". The preinstalled applications on a device do the same? Finaly is the android applicable for secure usage in everyday transactions like online shopping or internet banking?
sinnaiy said:
In many application downloaded from market, like anysoftkeyboard, there is a popup warning window that says "the application may be able to collect all the text you type... passwords, credit cards numbers(!!!) etc.". The preinstalled applications on a device do the same? Finaly is the android applicable for secure usage in everyday transactions like online shopping or internet banking?
Click to expand...
Click to collapse
Not 100% sure as I didn't write the apps, but as far as I know, it doesn't actually "collect" your passwords and credit card numbers in the sense of stealing it...but rather certain keyboards allow you to add custom words into the dictionary. For example, if you were to write "ROFL," this obviously wouldn't be in the dictionary. If you choose to add this word to the dictionary, the keyboard will effectively collect (store) the word. So, as you see, the keyboard only "remembers" the words, with your approval, to make typing easier for you in the future.
Keyboard could collect key data, but they need internet access to send them to other people. So if the keyboard doesn't has got full internet access you're safe. (Unless it saves data to SD and another app sends that file to server, but most keyboard doesn't has got SD-card write access)
fifarunnerr said:
Keyboard could collect key data, but they need internet access to send them to other people. So if the keyboard doesn't has got full internet access you're safe. (Unless it saves data to SD and another app sends that file to server, but most keyboard doesn't has got SD-card write access)
Click to expand...
Click to collapse
In a perfect world this would be true but there are a few eploitable holes to pass that data to the internet.
Just because an app doesnt have the INTERNET permission does not mean it cant send out certain data.
Some of the exploits are known but I'm not going to go into detail about them. Just be sure you trust they keyboard people before installing their keyboard.
I think you don't have to be afraid as long as you use the stock keyboard. If you use an other one check what was said in tue prevoius posts. And don't forget, Google doesn't checks the apps, this message is shown for every keyboard to let you know the risks
Sent from my GT-I5700 using XDA Premium App
Is there any way to disable the "Delete" option for my messages in inbox?
That is no one should be able to delete the messages.
Not aware of any such system, but, you can use one of the various "App Lockers" which will lock the messaging app with a password. Or, alternatively, take backups of your messages regularly using any SMS backup app.
userwf said:
Is there any way to disable the "Delete" option for my messages in inbox?
That is no one should be able to delete the messages.
Click to expand...
Click to collapse
Very intresting.. u might be facing some serious accidental deletes / unauthorized deletes. But u might not find a messaging application like that.
---U can lock any apps with "App Protector" preventing the unauthorized usage. I guess u also need individual msg locking, but I don't know whether it is available presently.
---And there are full fledged sms backup applications (say "Sms Backup & Restore"). U can set automatic scheduled hourly backups to memory card. And u can restore and even can access the backed up content from pc.
---And if u still need an option to disable the deleting, maybe u should ask the devs. Or maybe u should write ur own source (if u r a programmer) without the delete option and compile it. Don't know how far it works, but definitely it is a tough one.
Sent from my HTC Wildfire using XDA App
It worrys me when I try to install a new app, only to see a long list of permissions its requesting. Why would a simple game require it access my call logs, phone number etc...
Is there anything built into custom roms that prevents this private data being sent out? Can these apps really pull your info such as your whole contact list and call history?
I just installed an app called LBE privacy guard, and even Launcher Pro is trying to access my call logs and sms messages. Ive set most all apps to restricted on it and my security log is full of downloaded apps trying to access my info.
redspeed said:
It worrys me when I try to install a new app, only to see a long list of permissions its requesting. Why would a simple game require it access my call logs, phone number etc...
Is there anything built into custom roms that prevents this private data being sent out? Can these apps really pull your info such as your whole contact list and call history?
I just installed an app called LBE privacy guard, and even Launcher Pro is trying to access my call logs and sms messages. Ive set most all apps to restricted on it and my security log is full of downloaded apps trying to access my info.
Click to expand...
Click to collapse
CM7 allows for the ability to restrict permissions for specific applications(not finished yet), but that's the only one.
FWIW, Launcher Pro requests those permissions to do little "pop ups" on the dock for missed calls and text messages.
Decad3nce said:
FWIW, Launcher Pro requests those permissions to do little "pop ups" on the dock for missed calls and text messages.
Click to expand...
Click to collapse
That makes me feel a little bit better at least. Thought Launcher Pro was betraying me by stealing my info
When an app requests permissions like read contact data- does it actually have the ability to go through my private contact list and send back the names and phone numbers to their server?
I've always thought it funny that people who worry about data security will install a ROM built by a semi-anonymous chef. At least when you deal with Samsung and Sprint you know who has to answer for any problems. With a cooked ROM, who knows what could be in there?
I don't know what they would want to do with anyone's contacts but like posted above most apps use notification features even though some don't use the feature that often it is still available I trust that Google's os has certain inalienable features to keep app in check and make sure data is safe..... I haven't heard of anyone being killed or follwed because location data was sent to a corporation .... now calleriq is something to be requined with...
No one show the OP what carrieriq is ...lol
Sent from my SPH-D700
poit said:
I've always thought it funny that people who worry about data security will install a ROM built by a semi-anonymous chef. At least when you deal with Samsung and Sprint you know who has to answer for any problems. With a cooked ROM, who knows what could be in there?
Click to expand...
Click to collapse
I believe moderators examine Roms for that sort of thing. Also, if it was found out that someone was doing that, there would be some major problems.
Would anyone be able to tell me if there is an app like HTC Sense online that lets me see where my phone is at any time?
Cheers
Where's my Droid
Sent from my GT-I9100 using xda premium
Try
samsungdive.com
redesignni said:
Would anyone be able to tell me if there is an app like HTC Sense online that lets me see where my phone is at any time?
Cheers
Click to expand...
Click to collapse
Try Android Lost
digi_fort said:
Try Android Lost
Click to expand...
Click to collapse
+1
.....................
The best & free solution is already on your phone. On your SGSII Go to Settings>Accounts & Sync. Create a Samsung account there if you haven't already. Then go to samsungdive.com to track your device, lock it, make it ring if lost.
what if it is stolen and the ROM has been changed?
Cerberus protects even starting without a Sim or a different one, and capture photos if wrong screen lock, call logs and SMS, remote wipe, tracking with GPS, phone wake and scream, popup message, apply extra lock, call phone even if you don't know the number, record calls, hide app, etc. can be SMS or Web activation, Cheap lifetime license and can be installed on 5 devices. Vendor built Sim checker before then two years ago and I can confirm that service is still running. can be moved to /system/app and survives factory reset, Basically only new flash ROM will kill it.
Sent from my GT-I9100 using Tapatalk
With remote lock applied from Web site
Lol just saw can take photo on demand and email it, or if phone finder dismisses a popup request to return the phone.
Used push notification unlike Samsung solution which I found was battery killer
Sent from my GT-I9100 using Tapatalk
You can give a try to
- Watchdroid
- Phone locator
- Lost Phone
- Wheres my Droid
- SMS remote control
....
I didn't still find the right one ;-) and still searching....
Guys,
I have lost my Galaxy S1 earlier this year; had Samsung dive setup while the phone was lost, but did not help me.The phone was switched off by the time I realized the loss.
I guess, folk who get their hand on some ones phone, kinda know what to do with the Samsung beasts/beauties. Handovers to someone to wipe and flash, would be their best bet, I reckon. I am sory, not taking about all honest folks who would have return the devices to the actual owners.
Since then, have been searching for solutions which are wipe proof / flash proof but not successful. I have even checked android feature request sometime back ,found none.
Since then I have been thinking of this crazy idea that Google needs to implement as part of android OS.
Since we are registering phone / market app on the phone with Google with a gmail id, why can't Google associate the IMIE of the phone with that gmail id ?
If the registered user decides to sell / transfer the phone to someone else the registered user, the register user of the phone initiates the request for transfer with another gmail id / approves the request from another gmail id, without which all/most to the Google support Android features like maps, browser, market ,emails would not work.
i am not finished yet.., android should have a feature to re-confirm the ownership regularly every after a fixed duration of time, which can be user defined. As long as he/she is on data connection, the renewal is a silent process with the cached credentials on the device. If not, provide some window of time time reconfirm the ownership, failing which the lock the features down to just phone calls / limited set user defined and basic android operations. This could be a optional feature, rather than losing the phone and would opt for this feature and i wont mind reconfirming my phone ownership at regular intervals
If someone lost an android phone , he/she has to just change the registered gmail account password which would make if difficult to renew the ownership.If the phone has a data connection, using the registered Google account on the lost device,one should be able to push a message to displayhttp://media.xda-developers.com/images/icons/icon9.gifed on the lock screen and home screen. Similar to ChromeTohone / SendToPhone feature.
Mandatory reconfirmation on every flash which are not Non -Wipe. On devices with NFC/ similar chips with writable memory, the ownership details can be written to it and will not be wiped off by wipe or flashing.
Also I would make a humble request to all devs and ROM chefs to keep their busy hands off this feature, if implemented. Ethical stuff
We all love/hate our android phones but won't want to loose them, please let me know you feedback.
PS : I have moved on since my SGS1 only after mouning the loss,but now owns a SGS2
androidlost is the best
Hy.
Do anyone know an app, maybe free, that if I lost or stolen my phone the app make pictures with the front camera and send it to an e-mail address or phone number with the current location? And if somebody make pictures/videos/phone call or send a sms, the app automatically (after a SIM card change too) send it to me or a preset address (e-mail/phone number)?
Thanks in advance!
I use an app called gotya unfortunately it's not a free app but it's cheap price on Google play it takes picture of person who tries to get into your phone plus it sends you an email with pic of person plus location very good app and there are other stuff you can do
Sent from my GT-I9505 using xda app-developers app
I use tasker for this. I have created a profile for tasker in this manner- If not connected to home wifi AND if I send it a specific "xxxxxx yyy" message from a certain number, it activates a certain tasker profile. Then it does the following every time someone tries to unlock via pattern lock- take front and rear pictures, turn on gps and mobile data, send pictures and gps coordinates every 25 minutes to a certain number and email. It also does the same routine every time I send it a specific message like say "location update" from a certain number. Once battery level reaches 30%- start backing up data to cloud accounts.
It can be programmed to do more of course lol but that would drain its battery very quickly. Also if someone just pulls out the battery/sim card, puts a new sim card, and then flashes a new rom, there's not much that can be done I guess with tasker or an app..
I like 'where's my droid'
Cerburus is my personal favourite
But these are not free And I do not want to use it via sms. I more prefer the website communication.
Prey.
Edit - You do realise there's a very simple/logical reason why most of these apps use activation SMS's (rather than web based); if I'm a thief & nick someone's phone, the last thing I'm going to do is turn mobile data on, but obviously if I'm going to actually use the phone, I'm going to leave mobile networks on.
I use avg anti virus protection it works great.
Sent from my SAMSUNG-SGH-I337 using xda app-developers app
Since someone sold my S4 last month and I was careless by not installing any kinda anti-theft or security, i googled a lot about this stuff after buying my new phone. Always set a password/pattern lock for your phone. It not just helps against thieves but also against nosey family members/friends/co-workers, etc. About the free anti-virus/anti-theft app that captures pictures from the front camera as well as the capture location and sends you an email, Lookout Security & Antivirus works just fine. It takes a picture of the person that incorrectly enters your password/pattern more than 3 or so times. It also has a signal flare feature which emails you the location of your phone when the battery is low. For all this to work well though, i suggest turning on your phone's GPS along with the mobile data when you leave your home (assuming you're on wifi there). It might affect your battery life a bit but it's worth it imo. Samsung also has some anti-theft features built in btw. Go in Settings>More>Security and you'll see a 'Find my mobile' tab with Remote Controls and SIM change alert, set them both up asap. Also once you do all this, in the Security settings, go into Device administrators and make sure Android Device Manager and Lookout are both checked. Hopefully this helps you!
Try prey
Sent from my GT-I9500 using xda app-developers app
Well I use Cerberus now, and I bought it
It is great. Via SMS commands works fine.