yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] Senax:
WifiFofum PhoneCreeper HushSMS

I see nothing wrong in posting a link in your first post. It is an application, there's a free demo which we can test and this is an development environment. I am totally into programs like this :) PhoneCreeper, WifiFofum and Hush SMS are installed on the fly here (using User Customization) after a flash cq hard reset.

I would say go for it! :D

In my opinion handago.com might help you market your application. Or some other per sms basis company..

Edit: I see you have posted a link. Thank you for your 'proof of concept' application.
[Android Apps and Games] bponury:
Never used it, but from I've read now it looks similiar. I mean it also steals cookies.
[Android Apps and Games] jonalexgalaxy:
dude. you're asking why they removed an app that steal private information?

am i allowed to call people dumbasses on this forum?
[Android Apps and Games] deejaylobo:
Wouldn't this cause a similar FC when it's used over public wifi with large amounts of traffic?
[Android Apps and Games] bponury:
Well okey, I've edited first post and posted link to it. If this thread gets deleted then it's your fault :P
[Android Apps and Games] bponury:
I really don't know. I have 1GHz CPU and it is enough for handling 10mbits of traffic easily. But I could try to optimize it better it there really is an issue with that.
[Android Apps and Games] Tekti:
Can you make it for non root phones... my friend asked, he has galaxy s
[Android Apps and Games] bponury:
No it's impossible without root.
[Android Apps and Games] pulser_g2:
I have removed the link from the first post. While it is necessary for attention to be gained on matters like this (I work in security), this isn't always the best way to go about it.

Per the XDA rules though we must remove it, as this facilitates "hacking", which is illegal in the UK and US, and therefore cannot remain up here.
[Android Apps and Games] bponury:
To whom it may concern - there was an update regarding performance issues and a few other fixes.
[Android Apps and Games] Suprah:
I think the OP is dumb thinking this will fly ok with everyone
[Android Apps and Games] sfreemanoh:
First, I was sick for a couple days, so I apologize for jumping on the bandwagon late.

Second, you, sir, are a tool. First of all, a decent amount of people know about the SSL option for Facebook. The ones that don't, don't deserve to get their Facebook profile hacked into just to show them they're dumb. 99.9% of people who would have gotten this app wouldn't have used it as a "You're not using a secure connection to facebook.com, so now that you know, start using it, here's your new password" app. They would have used it for purely malicious purposes, and if you're providing an easy way of doing that, it would happen constantly. If you think that's NOT the case, well, grow up. We don't live in a world where everyone is a good samaritan, trying to help their fellow man. I'm not saying it's right (it's definitely not), but most people will screw over their neighbor if it gets them something.

Third, some if not all FB apps require you to not be connected over SSL. Granted, I don't know what kind of account information, if any, would be transmitted when going into one of these apps.
[Android Apps and Games] bponury:
You could not secure FB two months ago. When they've added SSL feature it's disabled by default. Facebook app on android used HTTP to connect to facebook and they didn't care about privacy/insecurity of this (they are not dumb). Until! someone pointed out that facebook app doesn't use SSL and boom! Next version of the app with SSL enabled. That's how the progress is made. If it wasn't for the one who pointed it out we would've had an insecure app, but because things got public FB had to do something and they did. Of course a lot of people will use it in a bad way. And the 'victims' will flood FB forcing them to do something about it. And why do you keep offending me? Aren't you smart enough to have a normal civilized conversation?
[Android Apps and Games] khaytsus:
What's your market developer name? Nevermind, found it.

http://www.appbrain.com/browse/dev/ponury

Never use one of your apps, thanks for the warning! By the way guys, this tool is just spamming his app all over Android forums, I guess he figures he'll drum up a little Paypal or donation business.
[Android Apps and Games] bponury:
Please don't use any of my 0 (zero) android apps from the market. It would be devastating to me. And yes I'm spamming all over internet! I wrote it on literally one other forum and one polish which you probably didn't read. I never said I didn't want to get donations - on the contrary!

Your ignorance is annoying. You just don't get it do you? It's not my app you should be afraid of. It's limited to only FB. But the same old technique can be used to hijack every single session that is not using SSL. And it's just a few clicks on PC. Google mail with ssl disabled also could be hijacked. And I would bet a lot of mail services don't use SSL properly. Yet no one cares about it. But yes call me a tool call me an idiot and don't enable SSL pull your phone in KFC and log on to your accounts. And guess what, if you close your eyes no one can see you!

I always thought that linux (and android) users have open eyes to security issues. Looks I was wrong.

Just as a reminder how things work in windows environment:

1) someone finds a bug in XYZ (he's the bad guy here)

2) next month windows publishes update

and in linux it always was like this

1) someone finds a bug in XYZ (thanks to him we will be more secure now!)

2) next day or two there's an update

Good luck with your ignorance.
[Android Apps and Games] PRTEQ:
I cant find your app to download..any advice?
[Android Apps and Games] InGeNeTiCs:
Hahahahahaha reading this thread is both hilarious, and sad. Why does this guy not get it? The terms are the terms. You break the terms of use, they pull your app. It doesn't matter what you think, google needs to protect users from idiots like you trying to promote the acquisition of personal information.

Asshat!
[Android Apps and Games] bponury:
Forum rules forbid me to promote this. But as it's PoC you can see how it works here: http://www.youtube.com/watch?v=1sO6G9lw-dU what's worth mentioning is that the network I'm connected to is WPA2-PSK (which you could see on the video if you have eagle eye).

For obvious reasons a lot of information was censored in this vid :)

Good for you! And you are SO smart that you couldn't figure out that this thread started from "did my app got deleted because of paypal as a payment method or because it's dangerous app?" but then it became a discussion about whether it is good to shed a light on the problem of session hijacking using so unorthodox methods as this app. I have an opinion that it's the only way because the technique is so so old and hackers warn about it all the time and nothing happens. But hey I'm an idiot what do I know? I'm so stupid that in fact this app was coded by my grandmother because I'm too stupid to understand it.

Have a nice day.
[Android Apps and Games] sfreemanoh:
Geez, I'm SO sorry if I've offended you. There's a difference between how you're trying to "effect change" (or however you're trying to rationalize this in your head), and how other, more civic and security minded people do it. They develop the process, show how effective and easy it is to hack into someone's bank account, or FB page, or whatever, then they make their findings public on various news sites. They don't provide the ability to hack into accounts to the masses. You're not trying to help anyone, you're just trying to make money. But fine, whatever, you're not a thief (technically), just an enabler. That's SO much better. I'm sure your mother would be proud.
[Android Apps and Games] InGeNeTiCs:
If you want to help, contact facebook directly. If they won't listen, contact google and tell them there is a serious flaw in the facebook app and let them handle it. You can expose whatever security flaw you'd like. However, it's not your place to put the ability to manipulate said security flaws in the hands of every scumbag on the internet. While your intentions may be good, your approach and attitude are crap. The funny thing is, you're still wrong. Google is pushing in-app purchases in the market, so your paypal thing would eventually get you pulled, but I'm fairly certain the main reason your stupid little experiment got pulled was because it was created to obtain information that doesn't belong to you. No matter what the purpose, it's still stealing.

As an aside, I hope you get banned for being so pompous. I know you're proud of your app, and that you found a flaw in such a widely used product, but you're being a ****.
[Android Apps and Games] bponury:
Please tell me who of this security minded people succeeded in showing flaws in this? Also who of them are you referring to? Probably the one who almost did it was the guy who created firesheep - Eric Butler. But this was not enough. You can hate me for developing the app and you could love facebook for not making you safe. But in fact it's not me who's making you unsafe. It's not even people who use this app. For facebook it would be like a single SQL query like 'update users set SSL=1'. But this thread is really going in the wrong direction. Anyone who had something valuable to say had already said it. And egzthunder1 posted info in front page so my job is done. Like it or not but some people are safer now thanks to this thread and a post on the XDA.

As I said one million times before:

1) I DIDN'T INVENT IT! Damn can't you read? This technique is at least 8 years old.

2) Apps like this exist already and are even easier to use.

3) Facebook is completely aware of the problem because this technique existed before facebook was born.

4) Sure I am proud of my app it's my first app and it works which is good, but still I didn't found any flaw in facebook. This flaw exists in a bunch of other pages like this board. If you don't understand it how can you say anything about my stupidity?

Now read it a few times maybe it will get to you.

As George Carlin used to say... I'm tired of this **** (http://www.youtube.com/watch?v=eScDfYzMEEw#t=1m42). This app exists, I got my answers and I failed, I really thought this could change something but no.
[Android Apps and Games] InGeNeTiCs:
1. You created the app, therefore, bringing the usage of the exploit to the masses. For all intents and purposes, you're just as bad as the exploit itself.

2. If you're not part of the solution, you're part of the problem. Creating another app that uses this exploit to extract information from facebook only adds to the problem.

3. I'm sure your buddy Mark Zuckerberg told you that over dinner one night.

4. The fact of the matter is, you used a known exploit method to hack into people's facebook accounts. I fully understand what you're saying, and what you're doing. What you're not understanding is that all of what you're saying is completely irrelevant because you've RELEASED an app that allows people to hack into other peoples facebook accounts. Thus, making you a douche.

So you may as well get a paypal account start asking people to send you money because the region of nigeria that you rule has imprisoned you and all you need is like 10,000 dollars to get out. Because in reality, you're no better than those d-bags. Just trying to ruin people for a little bit of profit.
[Android Apps and Games] bponury:
Okey I'm the bad guy. Crucify me. All I want is money. Thank you and goodbye.
[Android Apps and Games] obsidianchao:
Yes. You are. What this app does is illegal and unethical. If you want to make money off that, there's a black market. Go use that. This is not the way to prove exploitation in FB security.
[Android Apps and Games] Archer:
Obvious troll is obvious.
[Android Apps and Games] weirder:
Hi, I actually agree with you. Sometimes companies need a kick in the butt. But you will have to admit it can be morally on the fence for some, even more so of you do not understand this technically.

Don't get offended by people who are on the other side of the fence. Its what will happen if you touch something like this. No worries m8, you sorta wanted a big outrage like this ;)
[Android Apps and Games] the_scotsman:
Thread closed...we don't condone apps that hack Facebook accounts.
[Touch Pro2, Tilt 2 Windows Mobile General] skyler1994:
Hi all,

First off all, I'm new here so sorry if I'm posting this in the wrong section / being newbish.

I have a problem with my HTC Touch Pro 2, the T-Mobile network isn't working when I boot into android. It works just fine in when I'm in Windows Mobile so the problem isn't with the simcard. When I'm in Android however it recognises T-Mobile NL, but it just says: "No Service".

I don't know if it is a common problem with Android and T-Mobile, but Google didn't really help either.

Thanks for taking your time to read this.
[Touch Pro2, Tilt 2 Windows Mobile General] cajunflavoredbob:
Post the text from your startup.txt. I think I know why it isn't working, but I need you to post that to be sure.
[Touch Pro2, Tilt 2 Windows Mobile General] skyler1994:
Nvm. It was the simcard after all, I tried it with the simcard of my dad and it worked. So I'm taking it to t-mobile tomorrow and see if they can fix it for me.

Thanks anyway for your reply
[Sony Ericsson XPERIA X10 Mini] melvinchng:
Hi guys, this is the bootanimation that I resized for Wildfire and I hope you guys like my work, it should be working for Xperia x10 Mini. Please tell me if it doesn't work.

This is the animation (version 1) that had been downloaded for over 4000 times for Nexus S!

A cool bootanimation huh? Why dont use a better lockscreen?

Want a screen off animation working for your device? Check it out here!

Dont forget to Thank charlieb620, thermanlee and jlbmgrnr for their great work!

If you want to combine this theme with something else, check this out here!

Here is another resized bootanimation that I made, feel free to check this out =]

[BOOTANIMATION RESIZED] MW4 (Modern Warfare 4) Android intro animation [SOUND ADDED]

Please hit a Thanks if you like my resize work!

Thanks,

From Melvinchng

Currently using CM7 Nightly

HTC Wildfire @ 729mhz/768mhz

16GB Class 4 Kingston SD card [1.2GB EXT Partition]

with 170/175mb phone momory available.

Special Thanks to charlieb620, thermanlee and jlbmgrnr for great bootanimation!

Please check the thread before asking questions.

Please press THANKS button if you feel it is useful and it can make me happy!
[Sony Ericsson XPERIA X10 Mini] CM-PRo:
Screenshots??
[Sony Ericsson XPERIA X10 Mini] melvinchng:
Please view it by using dophine HD browser that have flash support or use your computer. I had added the animated gif file into it.
[Sony Ericsson XPERIA X10 Mini] CM-PRo:
Yup thanx. I can confirm that its working.
[Sony Ericsson XPERIA X10 Mini] Sesme:
amazing friend!!!
[Sony Ericsson XPERIA X10 Mini] melvinchng:
My work is share with you guys... since the original creater want more people to enjoy his animation, so I post it here...

Is it working??
[Desire HD Q&A, Help & Troubleshooting] xvicedice:
Hi thank you for looking,

I currently have a Desire HD and i have rooted my phone and i am now running Cyanogen 7

my issure is i have tried to install both revolution hd, core droid but everytime i do a full install (full wipe) when it loads it gets stuck on the boot animation and i am forced to do a backup back to cyanogen.. Please help my phone details are below

Android version

2.3.3

BaseBand Version

12.28b.60.140ep_26.03.02.26_m

Kernal Version

2.6.32.35-vyanogenmod-g0825ccbandroidguiulio-desktop#1

Mod Version

cyanogenMod-7.0.0-DesireHD

Build Number

GRI40

Thank you
[Desire HD Q&A, Help & Troubleshooting] ghostofcain:
Not sure how things currently stand , but you used to need an older clockwork recovery ie 2.5.1.3 to flash Coredroid or ARHD
[Desire HD Q&A, Help & Troubleshooting] letom:
I have flashed both CoreDroid and AR 3.5 with CWM 3.0.0.6.
[Desire HD Q&A, Help & Troubleshooting] Enjoy!:
Are you sure it hangs in boot? Depending on how many apps you have installed, it can take a very long time before it boots fully. So, how long have you waited in the boot screen?
[Desire HD Q&A, Help & Troubleshooting] frosty_ice:
You could try to do the "adb logcat" command and check what your phone is doing during boot. It might just be the zipaligning that takes that long.
[Desire HD Q&A, Help & Troubleshooting] LINKSLOVESANDROID:
are you wipping dalvik cache as well? goto recovery then advanced then wipe dalvik
[Desire HD Q&A, Help & Troubleshooting] xvicedice:
to be honest i gave it about 15 minutes and the boot animation seemed to keep resseting itself so i booted back into recovery and used the restore function

also no i have not wiped dalvik as to be honest i dont even know what that is lol

Thank you all for your help im currently waiting on the new pyramid as soon as there is a better bversion i will try agai and i will wipe the dalvik as well as being more patient....
[Desire HD Q&A, Help & Troubleshooting] frosty_ice:
Just do a full wipe (http://xdaforums.com/showthread.php?t=868720&highlight=full+wipe , just flash it like you would flash a ROM) and try again. It should work this time.
[Desire General] neomis:
First:

Sry about posting in here and for my bad english. Because of some senseless restrictions I'm not allowed to ask my question in the developer section.

Anyways...

Does anyone know, if they fixed the "timeroll-bug"? That means: Am I able to set the time in tasker, easyprofiles, etc.

This wasn't possible in previous versions because the rolls were too big and this bug is confirmed by some users as MIUI-related.
[Desire General] neomis:
*bump up and waiting for reaction*
[Desire General] skedone:
Yeo fixed
[Thunderbolt Q&A, Help & Troubleshooting] hogowner:
Hi all

When you unlock the phone and you have the "task bar" on the button....if I long press the button on the right ( I htink it is the search button) I get a long message. It does not do anything.....I do go into rosie settings and try to select an app for it...but it still doesn't work. Please let me know wht I am doing wrong....

THANKS!!!!
[Thunderbolt Q&A, Help & Troubleshooting] g00s3y:
What button are you pressing (touchscreen or capacitive)? What is the message that it is giving you?
[Thunderbolt Q&A, Help & Troubleshooting] Mr.Obvious:
Sounds like capacitative just for the fact if you long press on the dock it wouldn't do search. Weird error none the less.
[Thunderbolt Q&A, Help & Troubleshooting] g00s3y:
Thats what I was thinking but then they said about going into rosie settings :confused:
[Captivate General] Oxicottin:
Hello, I have searched everywhere and cant find the answer to my question. I wanted to replace a file using CWM .zip how in the heck do I do that? Most of all I just wanted to learn how to do it as well... :p

Thanks,

Chad
[Captivate General] studacris:
Well to begin with you can take an existing zip with the file path you need, delete everything in the folders not touching the META-inf folder at all, those are the install instructions, and put the file you want to flash in the correct folder. I think thats how everyone starts out.
[Captivate General] Pirateghost:
but your update-script has to match what you are flashing via cwm. if you take a rom zip and just pop in a few files in place of the whole rom structures, your flash will fail because your update-script is looking for specific structures.
[Captivate General] creepyncrawly:
One way would be to use: Update Zip creator/modifier (Requires Windows)
[Captivate General] TRusselo:
yeah it would be bad mojo if you used a wipe rom zips META INFO to make an update zip.....
[Captivate General] Oxicottin:
Thanks a million everyone......
[Captivate General] modest_mandroid:
Sorry for being late to the party again.. Here goes my attempt at an explanation though:

Essentially, a CWM flashable zip is just a zip file with the file system replicated in it. So for example, if you wanted to add swype, and you know Swype.apk would regularly go in /system/app, then you would create a blank folder called 'system', and another folder inside system called 'app', and put your Swype.apk inside that. (/system/app/Swype.apk)

After that, all that's left is to build an update script. So, from your root directory (where your system folder is), you would make another directory called META-INF, with a folder inside called 'com', another one inside that called 'google', and finally one called 'android' inside that (/META-INF/com/google/android), you put a text file in there called 'update-script' that tells recovery what you want to do (in this case, copy swype over to the corresponding directory on the file system).

http://xdaforums.com/showthread.php?t=641223

^There's a guide for how to make those. You can also pick apart any rom you find in the dev section and check out the update script for reference.

After that, it's just a matter of zipping up all the contents in your root directory, then signing the zip with testsign.jar
[Captivate General] eclypse3demons:
Is there a way from the CWM interface to do the same with a backup you create? I noticed backups are not in the same format, they are usually .img, .tar, and an md5 file?
[Vibrant General] richiehd:
Officially.

I hope we get a leak or something soon. :-)

Sent from my SGH-T959
[Vibrant General] Abu-7abash:
Hopefully ours is on the way soon.
[Vibrant General] xriderx66:
Lets give it till 2012!
[Vibrant General] presence06:
2012 is my vote too.
[Vibrant General] iynfynity:
I'd go for 2012 too. but that's the end of the world.
[Vibrant General] ATrueJesusFreak:
well, duh, if they wait till the world ends then Samsung doesn't have to do anything; they've got this all figured out :D
[Vibrant General] XPLANE9:
Not bad Samsung, two updates in less than a year. They even beat HTC at their own update game. The HTC Desire still has to get Gingerbread.
[Vibrant General] aliwaqas:
apparently it's only for europe as per this blog post and I saw a thread somewhere that says that after upgrading, the phone won't get recognized by KIES anymore. So be careful while you update..
[Vibrant General] Abu-7abash:
Samsung :facepalm:
[Vibrant General] rakeshchn:
Good job samsung releasing gingerbread when they had to put touchwiz on top. I guess we should not blame samsung for what the US carriers are doing to us to push new phone sales.
[Vibrant General] reuthermonkey:
Well, Froyo for the base GalaxyS came out last year. September to be exact. It's not like they just released Froyo 2 months ago... It just took until February for them to port it to most other "custom" GalaxyS devices (like the Vibrant).

Hopefully it won't take as long for the porting process to work again.
[Vibrant General] Longcat14:
I know I saw somewhere that T-Mobile said that they would be faster when it comes to updates. Hopefully this is true, and we get Gingerbread. I don't care if they put touchwiz on there, because as soon as the source code is released, HELLO custom ROM's, and CM7 stable. :)
[Vibrant General] AustinKnight45:
If they just put it on mini kies then all will be great if they do release it to the vibrant thats how we will be able to get it anyway.
[Vibrant General] Emama:
For the US versions, see u in 2012 ;)
[Vibrant General] oka1:
Ginger bread 2 months after they release S2 here I figure that would be August or Sept............:rolleyes: but then, i am an optimist
[Vibrant General] krackers:
pfft... 2012 guess is too inaccurate

I have insider info that they are going to release it at 11:59:59:999

And one milisecond after they release the earth will get sucked up by a black hole...

And it turns out that the update was an accidental leak, and that all the bricked vibrants caused the black hole... due to all the Samoled screen displaying black
[Vibrant General] mystycs:
http://www.engadget.com/2011/04/16/galaxy-s-gingerbread-update-now-rolling-out-across-europe/
[Vibrant General] Alex530:
That last part was amazing..
[Vibrant General] cashyftw:
Soo I heard eugene is porting this over for us, he almost has recovery working! :D
[Vibrant General] upsalarunvk:
official 2.3 in vibrant 2014