How secure is the secure folder? - Samsung Galaxy S8 Questions and Answers

I know the secure folder runs as a sandbox and is encrypted, but is there any look at how the APK functions? Do we know if Samsung has a backdoor or anything like that? I'd love to start using it but know how much they like to have their fingers in everything I'm hesitant. Is their an open source alternative?

Related

[Q] Modify stock mail app?

First off, I'm brand new to Android development so please bear with me.
My only goal at this point is to add the ability to choose the notification LED color to the Android 2.2 stock mail app (on the Droid). I've searched all over the place and haven't found an existing solution for this yet.
It seems to me like it should be super easy to add this functionality to the stock mail app. I can already choose my sound and vibrate settings, why not the LED color? Toss in some notification.ledARGB = something (plus the few other lines of code to make it work), a list to choose the color and we're good to go.
My problem, though, is I have no idea where to begin to have access to the code of the stock mail app. I would guess it goes something like:
1. Download the apk
2. Somehow open the source
3. Make the changes I need
4. Turn it back into a useable apk
5. Swap out the existing apk with my new modified one on the phone
I really only care about making this work on my own phone, so I'm not worried about signing the apk with a public cert or anything. I'm rooted as well, so no worries there.
Anyone have any insight? If I basically have the right plan of attack, and advice on the specifics? If I'm totally wrong in my approach, any advice on what I should be doing would be greatly appreciated.
Thanks in advance for any help!
I think this app is a part of AOSP, so you don't have to decompile an apk - grab sources and build them.
Well, that certainly makes sense. Just did some digging, and I found a pile of info about getting the source, git, repo, etc.
Naturally I'm a windows user, so it looks like I'll need to get some linux up and running to actually do anything with the source code. Ubuntu is installing as we speak....
Any tips on what to do next for a newbie like me?
Should I follow all the directions to get Eclipse ready to develop on the linux box?
Do I just need to download the Email.git to do what I want?
What do I do with the Email.git once I've gotten it?
Just gonna give this a little bump. I've got my linux box all set up and i've got the entire android source downloaded. I'm not really sure where to go from here, though.
How do I just modify and compile the email app into an apk? Thanks for any forthcoming handholding, guys.

gemini virus on android

http://www.techinspiron.com/gemini-virus-threat-android-phone-users.html
how can we protect our phone from this? how can we even detect this? since im sure alot of people here download and install from 3rd party source all the time...
I wouldn't really worry about it. They can't even get the name of the Geinimi virus right in that article!
Anyway, there is AV software available for Android. Don't know if it's able to cope with it, but I highly doubt the virus is anything special.
Just get "lookout mobile security"
isnt android open soure aka linux :S what the use of the virus then??
rbadal said:
isnt android open soure aka linux :S what the use of the virus then??
Click to expand...
Click to collapse
maybe to catch (bank) account logins, pins and passwords? just a thought...
rbadal said:
isnt android open soure aka linux :S what the use of the virus then??
Click to expand...
Click to collapse
Just it being open source doesn't mean anything if you (or anyone else) don't inspect the code before installing to your phone. Supposedly, many chinese app depositories are currently filled with infected android apps. Official Google market is supposedly pretty safe, but once you start installing from non-official sources, you're opening yourself up. Linux itself is no where near immune to such things.
I've found a few apps tainted with Gemini. They can be on Google play btw.
Any Bios Emulator - This app was made by Gemini
My Boy - this gba emulator attempted to use the Gemini permission node although I was using a 3rd party so perhaps you'll be fine.
There are more but those are the two I had to deal with.
Oh and one more thing, lookout does NOT remove this virus. It is on a complete other level than lookout. If you get the virus just know the anti virus on Google play is useless.
Cheers.

password protect a tile?

Is there a way to do this? Thanks ,
I have seen software which "claims" to do it with desktop software. Dont think any of them work with tiles though sadly.
Is creating a new user account with less installed applications not an option?
SixSixSevenSeven said:
Is creating a new user account with less installed applications not an option?
Click to expand...
Click to collapse
Thanks. No this isn't a good option for a tablet..
Switching users is *really* easy on Win8/ Windows RT, but OK...
There's no practical way to do exactly what you want without putting some OS-enforced security boundary between you and the other user. The most obvious, and by far the easiest, is to create a second user account. However, if that doesn't cut it for you...
In decreasing order of security:
* Create an NT driver that intercepts requests to open a specific program, and demands a password first.
* Create or find a user program that will encrypt a program so it can't be run, then demand that anybody trying to open that program supply the password first. (Note: this is way weaker than it probably sounds to you, and also way more complicated.)
* Remove the shortcuts to the app, replace them with a script that demands a password, then launches the app itself if the PW is correct. (Note: this is trivially insecure, and still bloody complicated to do "right".)
There are various other options, such as hiding the app, making the user do something (like alter its permissions) before running it, or similar. None of them are what you're asking for, though, and most of them are insecure, hideously complex, or both).
GoodDayToDie said:
* Remove the shortcuts to the app, replace them with a script that demands a password, then launches the app itself if the PW is correct. (Note: this is trivially insecure, and still bloody complicated to do "right".)
Click to expand...
Click to collapse
This was also my idea of doing it.. It is probably easy to do a skript with autoit http://www.autoitscript.com/site/autoit/ to do this.. Altgough i have years to program with it..
But things like this are easy in android.. I believe that microsoft should copy some things from it..
Thanks again,
Sent from my Nexus 7 using xda premium
sosimple said:
This was also my idea of doing it.. It is probably easy to do a skript with autoit http://www.autoitscript.com/site/autoit/ to do this.. Altgough i have years to program with it..
But things like this are easy in android.. I believe that microsoft should copy some things from it..
Thanks again,
Sent from my Nexus 7 using xda premium
Click to expand...
Click to collapse
Oh you mean how android actually copied microsoft?
You are just messing around with this. Having a separate user is much easier and much better in every respect when you want to restrict access to some app.

Apk copy/extracting/backing up protection

I hope that this is not the wrong place for my post.
I am trying to protect an apk from being copied/extracted/backed up off the phone and installed later, on another phone.
I have to mention that the app is not (and will not be) for sale on PlayStore or on any web store, being sold along with the phone. This is why I can not use apk protection offered by GooglePlay, which is anyway cracked at his time.
But I want to take advantages on this situation: every single phone will pass trough my hands (I will install myself the app) before hitting users. How can I use this advantage in order to protect my app?
At this time my app is not visible in Running Apps drawer, is having a default Android icon and the name is disguised in something pretty innocent. GUI access by dialing a code. No worries, is not malware but only a security app regarding GSM connection security.
Also, is running as a system app, which make it invisible for apps like Astro file manager, thus impossible to copy/back up by such file manager apps. Unfortunately there are a bunch of system app managers, that can convert a system app on user app, and then copying the apk file is easy.
I know that security sucks big time when it comes about Android OS, but I am determined to find a way to protect my app.
I know also that even a licensing scheme based on IMEI, WiFi MAC or Bluetooth MAC addresses can be bypassed by some skilled crackers. This values can be spoofed or even null.
I have tried apk encryption. Doesn't work: some apps supposed to encrypt other Android apps are actually encrypting only app libraries, not the apk file itself. By encrypting apk file, the app obviously will not work.
Code obfuscation is not an option as long the app can be duplicated off the phone and installed later on another phone.
The last idea that I had: pulling some app resources (like drawables) from a server. What do you think?
At this time I'm in a dead end. I have no more ideas how to protect my app. That's why I need your help. Can you give me please some feasible ideas, based on your huge experience?
Thank you very much for your time.
theres a thread
http://forum.xda-developers.com/showthread.php?t=2279813
where we're discussing about methods to protect apps from piracy u can post it there
Sent from my GT-S5302 using Tapatalk 2
Thanks
Thx a lot sak-venom1997.

With The Galaxy Note 7 Dead... Will get all the features the S7 Edge?

Hi Dudes since the Galaxy Note 7 is dead will the galaxy S7 Edge get all the features? (excep the S-pen, iris software) Secure folder?, Full grace UX, Interactive AOD, Ambient Display (i'm not sure if on the stock ROM have I'm Using The Sac23 Note 7 Port), and can't live without this xD.
P.S. Any ideas of Android 7 on our devices?
I hope s7 edge gets grace UI and the secure folder soon as I am a big fan of both after using note 7 for around 3 weeks
I believe Secure folder is a part of the MyKnox app. Someone might want to double check me on this though.
ctuesday said:
I believe Secure folder is a part of the MyKnox app. Someone might want to double check me on this though.
Click to expand...
Click to collapse
Yes, the secure folder was in Knox already, they just renamed it and made a big deal out of it when they launched Note7. Which is nothing bad, it's just that many Samsung devices had it already.
ctuesday said:
I believe Secure folder is a part of the MyKnox app. Someone might want to double check me on this though.
Click to expand...
Click to collapse
MyKnox can be downloaded from google play store while secure folder was installed onto the device and I have used both secure folder feels more better and it's optimized as opening my knox app is sometimes slow
---------- Post added at 05:46 PM ---------- Previous post was at 05:41 PM ----------
Masterfellow said:
Yes, the secure folder was in Knox already, they just renamed it and made a big deal out of it when they launched Note7. Which is nothing bad, it's just that many Samsung devices had it already.
Click to expand...
Click to collapse
Secure folder is knew feature and only note 7 had it built in
Piravinth said:
MyKnox can be downloaded from google play store while secure folder was installed onto the device and I have used both secure folder feels more better and it's optimized as opening my knox app is sometimes slow
---------- Post added at 05:46 PM ---------- Previous post was at 05:41 PM ----------
Secure folder is knew feature and only note 7 had it built in
Click to expand...
Click to collapse
No, it's not. It was in knox already. Maybe they changed a few things here and there, but functionality-vise, it's the same.
Masterfellow said:
No, it's not. It was in knox already. Maybe they changed a few things here and there, but functionality-vise, it's the same.
Click to expand...
Click to collapse
You had to install my knox through the store where as secure folder was built in and nothing need to be downloaded. Secure folder in design and functionality is far more better then my knox app
https://www2.samsungknox.com/en/faq/what-difference-between-secure-folder-and-my-knox
Piravinth said:
You had to install my knox through the store where as secure folder was built in and nothing need to be downloaded. Secure folder design and functionality is far more better then my knox app
Click to expand...
Click to collapse
Knox is built in the phone as well. Yes, you have to download an app but that's really it, nothing else needed. I don't know how is it better (apart from the iris scanner), when it's literally the same? (If you select the folder, in the knox. Not the launcher, of course) You click on an icon (secure folder/my knox), then you type a password or you scan your fingerprint, then you have your apps that are separate from your normal apps. How is this different? I'm not talking about design, I'm talking about the functionality.
All I hear is "far more better" and no valid points.
Masterfellow said:
Knox is built in the phone as well. Yes, you have to download an app but that's really it, nothing else needed. I don't know how is it better (apart from the iris scanner), when it's literally the same? (If you select the folder, in the knox. Not the launcher, of course) You click on an icon (secure folder/my knox), then you type a password or you scan your fingerprint, then you have your apps that are separate from your normal apps. How is this different? I'm not talking about design, I'm talking about the functionality.
All I hear is "far more better" and no valid points.
Click to expand...
Click to collapse
Your right, secure folder has improved design from My knox app and secure folder feels more quicker when you open the folder
Piravinth said:
You had to install my knox through the store where as secure folder was built in and nothing need to be downloaded. Secure folder in design and functionality is far more better then my knox app
https://www2.samsungknox.com/en/faq/what-difference-between-secure-folder-and-my-knox
Click to expand...
Click to collapse
Have a look in the attachments. The name might be different, but it's almost the same thing. The Secure folder even has the little "Knox secured" icon in the corner. Even the little lock icon on each app is the same.
Edit: Glad we figured it out. And yes, the design is better in the Secure folder.

Categories

Resources