Related
Most people don't yet know that many Android software leak all sorts of information to the internet with only scant user acknowledgement (basically what you accept when you install the app).
Due to this and the fact that there are already privacy information harvesting apps for Android on the marketplace - a team of security experts have created TaintDroid:
What is TaintDroid?
From the project's web page: "A realtime monitoring service called TaintDroid that precisely analyses how private information is obtained and released by applications "downloaded" to consumer phones."
From: http://appanalysis.org/index.html
How can I install TaintDroid?
As TaintDroid is currently compiled into the kernel, you cannot easily install it, but you have to cook your own kernel. Instructions (for Nexus 1) are available at the project web site: http://appanalysis.org/download.html
How does TaintDroid work?
Here's a video demonstrating how TaintDroid works once it is installed and configured:
http://appanalysis.org/demo/index.html
Why would you want to install this?
There can be many reasons for installint TaintDroid:
- You want to learn about privacy features and play with Android kernel
- As it is currently impossible to differentiate between innocent and sneaky Android apps based only on what access rights they request, you may want to dig in deeper
- You are worried about what apps are doing behind your back and you want to know which apps to uninstall
- You want to help create Android a more secure and privacy-protected platform, instead of the swiss cheese it currently is
What can you do?
As compiling kernels is mostly beyond the reach of mere mortals currently, consider cooking TaintDroid into your kernel, if you are cooking one yourself and offering it available for others to try and use.
Hopefully increased awareness and usage will bring this program eventually into other modders and perhaps even Google's attention and something more easily accessible is offered for the public at large.
BTW, I'm just a user, interested in getting TaintDroid on my own Galaxy S. I'm not affiliated with the research program, but I like what they are doing. This information is purely FYI.
+1 for the idea
Sent from my GT-I9000 using XDA App
+1
Since we cannot expect information gatherer Google to come up with a good privacy protection mechanism soon I think we are forced to take measures ourselves.
I also learned that several of my bought applications are constantly forcing me to enable synchronisation and/or 3G internet. They either randomly uninstall (Asphalt 5), their icons disappear (for example: Mini-squadron) or won't start, with (Schredder Chess) or without a message. Angry Birds Beta2 lite (free game) and Hungry Shark are 2 more examples. So much for an incentive to buy games...
It would be great if applications used a well-defined mechanism to check their validity on-line, and not have this sneaky, lingering attack from all sides to any privacy or battery consumption aware user.
I can not cook Kernels, but this is something i want to use.
Not that i am worried, but i dont know what apps are sending when you open them. Thats something i want to know!
I am sure i am not the only one.
+1
Yes please... This should be in all android phones... as a security option you could turn on!!!
Antonyjeweet said:
Not that i am worried, but i dont know what apps are sending when you open them. Thats something i want to know!
Click to expand...
Click to collapse
And do some of these applications only send stuff when you open them?
--
From a user perspective it currently is really difficult to judge applications that need to start at boot-up and deal with many facets of your computer (Launchers, tools combining lots of divers features).
Do you know some ROM where Taindroid is included?
I've posted in hardcore and laststufo kernel threads to ask if they could add it.
We just need more people wanting it so they think about adding it
exadeci said:
I've posted in hardcore and laststufo kernel threads to ask if they could add it.
We just need more people wanting it so they think about adding it
Click to expand...
Click to collapse
glad you did that
+1 support the idea. hope some of our hardworking kernel builders will add this in.
My concern is how much another real time service will affect battery life. For people trying to make the leanest, fastest kernel I'm not sure it's viable.
I have been wanting TaintDroid built into android by default since the day it was announced, but I really do not think google cares about this, so please, please ROM cookers out there (Maybe Doc?), lets add this into our galaxy S roms.
Well, this seems to work only on android 2.1
Make it so.
+1
Combined with walldroid (or other firewall) this could put back power into users hands. Would really love to see this inside hardcores kernel. Maybe as an option for the stable releases?
+1
This should be the next standard in aAndroid
idea about spoofidroid application
how about a program to spoof or make the phone send fake:
GPS location,
IMEI,
phone number,
simcard id,
etc... information to applications that ask without permission.
this way you can feed these application with information they want but without breaking your privacy. (both end sides are more than happy)
-----
nice option to have:
1) enable/disable auto generate different id every time.
2) allow list / ban list of application to have real or fake id.
3) enable/disable notify for application request.
-----
there are all ready applications that fake your simcard PLMN mobile network codes without the need of kernel rights, but you need to enable disable the flight mode to restore the default code.
===========
good luck to spoofidroid or similar applications.
Jumba said:
My concern is how much another real time service will affect battery life. For people trying to make the leanest, fastest kernel I'm not sure it's viable.
Click to expand...
Click to collapse
I hope there will be developers out there who prioritize privacy/security over speed/battery and storage usage.
I'm the project lead of the TaintDroid system. We are currently working on a few extensions of TaintDroid but unfortunately are short on engineering resources to port TaintDroid onto other systems than Nexus One that we originally developed. We'd greatly appreciate it if XDA developers would take on this effort! Many ongoing projects would hugely benefit from having easy-to-run TaintDroid ROM available for many different devices and upcoming Android systems let alone user benifit.
Thanks,
Jaeyeon
Research Scientist @ Intel Labs Seattle
Ettepetje said:
I also learned that several of my bought applications are constantly forcing me to enable synchronisation and/or 3G internet. They either randomly uninstall (Asphalt 5), their icons disappear (for example: Mini-squadron) or won't start, with (Schredder Chess) or without a message. Angry Birds Beta2 lite (free game) and Hungry Shark are 2 more examples. So much for an incentive to buy games...
Click to expand...
Click to collapse
beta2 lite? i think that was malware, make sure it came from rovio otherwise it's fake and you should delete it.
It's really scary to see with the lookout app how many apps can access to your imei, telephone number "Read Identity Info", can access your contacts, track your position, and can send out all this data.
Here a HTC Desire user, asking for some privacy.
Best regards!
As we all know the Google Latitude service is shutting down on 9th August 2013.
Does anyone know of a suitable replacement?
p.s I never made it to the moon :crying:
The official replacement is "Locations" in Google+. Any reason why that won't work for you?
Solutions Etcetera said:
The official replacement is "Locations" in Google+. Any reason why that won't work for you?
Click to expand...
Click to collapse
My family and friends don't use Google+, any other apps?
meyert11 said:
My family and friends don't use Google+, any other apps?
Click to expand...
Click to collapse
Come next month, they won't be using Latitude either. I don't understand why looking for another app is preferential to switching to Google+. Is it just having to add it to your account? Or is it something else?
Solutions Etcetera said:
Come next month, they won't be using Latitude either. I don't understand why looking for another app is preferential to switching to Google+. Is it just having to add it to your account? Or is it something else?
Click to expand...
Click to collapse
Google latitude ran under Google maps, so users of Google maps (virtually anyone) could follow each other. Now that latitude is being moved under Google+, only people with plus accounts will be able to use it. Since my family and friends don't use Google+, if we want to follow each other we will all have to sign up for Google+ accounts, just to use latitude. Seems like an unnecessary amount of work, for a feature that is useful during vacations and trips. Hope this explains it a bit.
meyert11 said:
Google latitude ran under Google maps, so users of Google maps (virtually anyone) could follow each other. Now that latitude is being moved under Google+, only people with plus accounts will be able to use it. Since my family and friends don't use Google+, if we want to follow each other we will all have to sign up for Google+ accounts, just to use latitude. Seems like an unnecessary amount of work, for a feature that is useful during vacations and trips. Hope this explains it a bit.
Click to expand...
Click to collapse
Google+ is a single option on a Google account. If they are using Maps with Latitude, the already have a Google account. IIRC adding Plus to an existing Google account is a single mouseclick.
Solutions Etcetera said:
Google+ is a single option on a Google account. If they are using Maps with Latitude, the already have a Google account. IIRC adding Plus to an existing Google account is a single mouseclick.
Click to expand...
Click to collapse
Google+ is a social media service, like facebook, that is altogether separate. Larry Page is obsessed with having everyone sign up for Google+ because most people are surfing the web via their mobile phones and Facebook is dominating the mobile ad space. My friends and family are not likely to migrate from Facebook to Google+, so I need an alternative to Latitude.
If you'd like further clarity, feel free to PM me, rather than us having a long personal conversation on a forum about Latitude alternatives.
You don't have to use it, you just need to opt in to use the location services. I don't see what the big deal is but to each their own.
Solutions Etcetera said:
You don't have to use it, you just need to opt in to use the location services. I don't see what the big deal is but to each their own.
Click to expand...
Click to collapse
You will have to open the Google+ app to follow your friends and family. It has been physically removed from the updated Maps app.
The problem is that you don't even HAVE to have a Google + "account" just because you have a Google account. I can go into my Google account right now and delete my Google + profile. So that's not even true. To have to opt into and then use the Google + app is a pretty lame alternative. ALSO, the Google + Locations really sucks right now. My boyfriend and I are in each other's circles, have shared our locations with each other, and turned on background location reporting, but he does not show up as a person who I can see his location. He showed up for 1 hour when we first set it up, but he's since disappeared, even though I've been right next to him and seen his settings on his phone as we tried to troubleshoot. It needs some serious work before it's ready to replace Latitude.
I've been trying to use Glympse for those times when I need to let someone know where I am, and for them to track me. The only down side is you can only let people see your location for up to 4 hours at a time. When you've got an active Glympse running, your GPS is in constant use too, so it will drain your battery faster than Latitude did. You can opt to turn your GPS off and just let Glympse use WiFi or cell networks to locate you, but it won't be as accurate.
Other than that, all the other alternatives are also closer to social networking or checkin apps that also happen to share your location. I just want something simple, LIKE LATITUDE.
Oh. I guess the alternative is Latitude. I don't understand why they killed it off. I hope maybe Backitude will pull a Feedly and create something neat out of this.
Solutions Etcetera said:
The official replacement is "Locations" in Google+. Any reason why that won't work for you?
Click to expand...
Click to collapse
For me, three things:
1. No option to navigate to a person on the map
2. No "last update" time stamp means sometimes the locations are 5 minutes old. Sometimes an hour.
3. No accuracy bubble
It's basically useless as a way to figure out where people are at any given time. Extremely annoying to have that go away. Hopefully there will be a replacement that shows up that doesn't drain the battery. Something that automatically responds to a ping for a check-in rather than polling for locations every X minutes would be great.
ppdd said:
For me, three things:
1. No option to navigate to a person on the map
2. No "last update" time stamp means sometimes the locations are 5 minutes old. Sometimes an hour.
3. No accuracy bubble
It's basically useless as a way to figure out where people are at any given time. Extremely annoying to have that go away. Hopefully there will be a replacement that shows up that doesn't drain the battery. Something that automatically responds to a ping for a check-in rather than polling for locations every X minutes would be great.
Click to expand...
Click to collapse
Hi, these are some valid concerns. I am not a big fan of the location tracking features so were unaware of these. Hopefully, as Google continues to unify its social services we will eventually see more granular features resurface. I miss the offline ability in the new maps more than anything else at the moment. Hangouts not showing online status is annoying as well. Its important to leave Google feedback through official channels when valued existing features go AWOL. It has always been Android's nature to throw out something half-baked, and improve (or kill ) it over time based on user feedback.
As for battery... Google announced a number of new API's that would be rolling out this year. Some of which are specifically designed to reign in apps that poll/push data. I remember location services being a big part of that.I'm willing to bet this will get better over time.
Solutions Etcetera said:
Hi, these are some valid concerns. I am not a big fan of the location tracking features so were unaware of these. Hopefully, as Google continues to unify its social services we will eventually see more granular features resurface. I miss the offline ability in the new maps more than anything else at the moment. Hangouts not showing online status is annoying as well. Its important to leave Google feedback through official channels when valued existing features go AWOL. It has always been Android's nature to throw out something half-baked, and improve (or kill ) it over time based on user feedback.
As for battery... Google announced a number of new API's that would be rolling out this year. Some of which are specifically designed to reign in apps that poll/push data. I remember location services being a big part of that.I'm willing to bet this will get better over time.
Click to expand...
Click to collapse
I've already complained to google, but I'm not real hopeful there. If Latitude wasn't being used heavily, it didn't make sense to leave it in Maps cluttering up the interface. I don't blame them.
For me, literally the only thing I want to use this for is making it easier to coordinate with my wife, or friends/family when we're on road trips. I suspect thats how most people were using it. It's great to be able to see that she's left her office or is at our kids' daycare or is 10 minutes away from a restaurant without calling her a dozen times a day. Losing the 'last update' stamp ruins that use case. Really not sure how they envision people using the G+ locations feature.
Apple's Find My Friends was great when my wife and I were on iOS. It behaved almost exactly right, only ever reporting your location when someone on your whitelist opened up their FMF app. There was no real power drain associated with it. All the apps in the Play store that fill this niche seem to report locations on their own, which is dumb *and* a redundant power drain given that Google location services is already grabbing that location.
Oh well.
ppdd said:
Apple's Find My Friends was great when my wife and I were on iOS. It behaved almost exactly right, only ever reporting your location when someone on your whitelist opened up their FMF app. There was no real power drain associated with it. All the apps in the Play store that fill this niche seem to report locations on their own, which is dumb *and* a redundant power drain given that Google location services is already grabbing that location.
Oh well.
Click to expand...
Click to collapse
Apple does it right in not allowing apps to just go out and post/get whatever they want, whenever they want it. The app has to register for the info, and the system coalesces these requests for when the corresponding hardware is connected. Google is well on their way to implementing this same behavior.
Having much of this stuff better unified is a good thing IMHO, and I understand the thinking that things related to friends and family should be found in + and not maps. And based on what I saw at I/O, this will get better.
From what I've heard, the previously mentioned Glympse is a pretty decent replacement depending on what features you need. It's more aimed towards temporary location sharing between people during car trips, theme park visits, going out for lunch, etc. There's no option to leave it permanently on, though, and it doesn't appear to use intermittent polling.
Now that Latitude is dead, who knows if it will introduce this functionality to get new users?
I'm hoping that there is a location history feature in the new Google+ locations as I use this a lot, but I would love to eventually reach the moon - and maybe beyond!
It's an opening for another Feedly to come in and increase their market share. Someone like echoecho or swarmly could tweak their application to provide the same functionality, while furthering their own growth, a percentage of those new users would start using their services as result.
If I knew enough about Android development I’d quickly drop an app that pulled the Google+ location information and dumped it into maps provided by the Google Maps API with the options for satellite imagery and streetview. I'm really surprised that Google didn't merge the existing functionality into Google+, it must be available as they'll only be leveraging Google Maps anyway, certainly in regards the above.
theickleone said:
I'm hoping that there is a location history feature in the new Google+ locations as I use this a lot, but I would love to eventually reach the moon - and maybe beyond!
Click to expand...
Click to collapse
Location history will remain:
If you use Location Reporting and have Location History enabled, your location data will continue to be recorded to your Location History. You can view and manage Location History data on the Location History dashboard.
Note: We’re no longer supporting Google Maps for Mobile 6.14.4 and below for Location History or Location Reporting settings.
google is forcing us to use their G+, first was gtalk converted to hangouts, now latitude
i have yet to find a map of people in G+ on the PC, i can only see people on the phone
now they have a universal "location tracking" setting in android, the new maps v7 is garbage, hopefully someone is able to mod the old maps apk to push and pull data from their new location service, reformat it and keep latitude working in the old maps
laur3n.newm4n said:
Other than that, all the other alternatives are also closer to social networking or checkin apps that also happen to share your location. I just want something simple, LIKE LATITUDE.
Click to expand...
Click to collapse
Hi laur3n.newm4n, I'm currently building location sharing app for many of the same reasons you mentioned. We're still in private alpha but if after you checkout the features and it's sound like we're solving your problem you can signup for the beta
Hope it will help: yougy.co
Hi everybody, i would like to validate an idea which is not a mobile app but a service that could help mobile developers in promoting their apps...or at least i think it could!
So, this is the idea: i would like to create a promocodes service.
It would allow mobile apps (but even web apps) to call the service to verify promocodes validity so that developers can easily integrate the service within their apps, and have a gui to create and manage all the promocodes (with analytics about usage). I think this should help developers promoting their apps: dev could give promocodes away to blog reviewers or as a sort of bonus for another app or for other services to users.
I'm honestly asking your opinion about this idea and would like to know what do you think about it. I would be very gratefull to hear anybody's opinion, so please, post a reply and give me feedbacks!
Thanks in advance.
Just to clarify: my idea is about a webapp which allows to create/generate custom promocodes, not to use the ones that is possible to require to Google for paid apps. I think this could be a useful service for developers.
As an example, you can create a free app where features and functionalities are unlocked using promocodes (suppose permanently using specific promocodes that you give to a blog reviewer for example so he can have a full app at no cost, or just temporary unlocked as a trial period for common users). When the user decide to buy the paid-version of the app, he can still buy the paid-version from the PlayStore or permanently unlock the free version, directly from the app using IAP apis.
I think that it could help engage more users, also in games apps where user buys virtual goods, because you could post special promocodes on blogs or somewhere else, to give them free goods so to let them be interested in having a look at your blog or somewhere else where you can drive a different way to promote your apps (tips and tricks, promote other apps and so on...).
Do you think it could be a useful service? Would you use it?
Please, leave me a feedback, even a short one but i'd really like to see what people thinks about it.
Thanks in advance
Hey guys,
I want to explain you how you can integrate different services like Facebook, Dropbox or Slack into your application.
Why is this important?
In the kind of ever evolving market place that we are now in, it is more important than ever that your application can rapidly add new features. You don't have to invent the wheel again, there are thousands of great software solutions out there. All you have to do is to leverage those software and integrate them into your application. By doing so you can provide your users a more pleasant user experience and make your application stand out from others.
What is the problem?
Integrating different services also means to deal with all the different APIs since all the services are using their own API which are very often complex and you will need a lot of time to become familiar with all of them. This means you lose time which you could spent on focusing on your core application.
How to solve this issue?
A very simple solution is to use the CloudRail SDK. CloudRail is a completely free developer tool which allows you to combine all the different APIs including all the features you want to only one universal java or android API in only a few steps. By making the process of adding any new integration quick, simple, and easy, you can start ignoring all of the busy work and get on with making simply great applications.
I would love it if you did check it out and let me know any feedback, good or bad!
Hi all ?,
I'm using mobileaction for my Android app. However, recently canceled my subscription to their startup plan, simply because I didn't find enough use of the service.
Somehow, I ended up using the service only to track ranking of 15 keywords. Nothing else.
There are so many features, that I just don't find accurate. The estimated downloads, keywords difficulty and traffic values. Integrated play store account with the service, and didn't really get any insight from that.
Tried other ASO tools, however, got similar feeling (may be App Annie is good, but don't have money for that?)
I'm sure there is value in these tools, but I'm definitely missing something.
Do you actually find them useful for your ASO research and implementation processes? If yes, at what step do you actually use them, and how?
Perhaps, these services work better with apple app store ?