yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] SHADOW-XIII:
make sure you updated Titanium Backup to the latest one as it might be crash that was recently fixed with apps having own libraries (or something like that)
[Android Apps and Games] asicman:
Feature Request

I would like a feature where upon restarting the phone, the Internet Access Manager's data log is not cleared. In the current version, the data usage resets to 'N/A' on every reboot. I'd like to track data usage indefinitely, kinda like the security log viewer.
[Android Apps and Games] gmorf33:
Excellent app! I've been using it since i saw it on the XDA main page and I am loving the control i now feel over my device and my data. Its VERY interesting to see what apps have access to, and how often they try to snoop around and communicate.

This app is very much worth at least a $5 price tag in the market, and i would like to donate to the project, but don't see any donate links in your post or paid versions for it.

I will be telling all my android friends about this app for sure.

I second the feature requests for the option to remove the notification as well as password protecting the app to prevent unwanted changes.
[Android Apps and Games] Freeeeman:
Does not work on huawei s7 ideos

Service can t start...:( Even after reboot.

Using Huwaei S7 Ideos tablet with with official rom 2.2.2 (rooted of course).

Can you fix this please ? I d love to be able to control apps behaviour...:cool:
[Android Apps and Games] :
This thing needs just 3 things to perfection:

- optional iptables support (for WiFi/3G so that I can get rid of DroidWall)

- password protection

- make the notification icon configurable

Finally we have control back. The scope of abuse of some of the permissions (such as phone identity) is incredible. :mad:

Amazing job, guys!!! :cool:
[Android Apps and Games] nibras_reeza:
This is uber-cool. Came here from Android bug tracker request for app permissions. This is really cool. I've been waiting for this. Thanks a lot man!
[Android Apps and Games] jackleung:
Great app but seems to conflict with Root Call Blocker

if Root call blocker is installed (http://xdaforums.com/showthread.php?t=1082129 ) LBE will complaint service couldn't start in reboot, and I can't start it manually. The only workaround for the moment is disable LBE autostart and manually start it after boot which is quite annoying.
[Android Apps and Games] monomer888:
Great app... It's reassuring to be able to reject location and identity requests!

One thing I have noticed is a low level continuous CPU use from the app when it's connected via USB to a PC, even on charge only mode with USB debugging disabled. (Screenshot from System Panel monitor attached.)
[Android Apps and Games] houzuoguo:
this is a brilliant app, definitely 5*

i have a few minor suggestions though :)

1. in network access control page, since each application can only be either allowed to disallowed to access internet, it'll be more convinient if user can make a change by only one click, not two clicks

2. a "set all to..." feature would be nice ^_^ (e.g. in network access control page, "set all to disallow" or "set all to ask")
[Android Apps and Games] mystifiyer:
I concur! Having the same issue also! On i9000.

Previously I thought it was i9000 incompatibility.
[Android Apps and Games] (•.•):
best app

My favorite App for Android !!

Yeah you doing a great job, please never stop maintaining the app.

BEST APP AWARD!

;):rolleyes:
[Android Apps and Games] asicman:
I have noticed that the internet manager does not seem accurate in calculating bandwidth. Its telling be I used 100KB for a 50min skype audio call!
[Android Apps and Games] surveysays:
thanks for this app .. this is hands down a must have app for your android device. power to the user !
[Android Apps and Games] Manadar:
Running fine, thx a lot :)
[Android Apps and Games] angemon10:
Why LBE need access to this?
[Android Apps and Games] BenKranged:
First you said this app is faster/better than droidwall because it doesn't use iptables. Then you said you will be adding iptables. Which is it? Also does it really need to run all the time? The app "permissions" lets you set permissions once and then never runs again unless you run the app.
[Android Apps and Games] :
1/ Without iptables, you cannot allow connections on WiFi and disallow on 2/3/4G. Already explained on this thread.

2/ Eh... dunno which "permissions" app are you referring to, but this one obviously needs to run as a service in the background. Dunno what is your trouble with having it running.
[Android Apps and Games] traumatism:
has the issue with the desire z and cyanogen rom 7.0 been fixed yet?
[Android Apps and Games] asicman:
There hasn't been an update or word from the dev in a long time.
[Android Apps and Games] traumatism:
well thats poor.
[Android Apps and Games] BenKranged:
Its called "Permissions" in the market. Thats what the quotes are for. And I don't like any apps that run constantly wasting ram, cpu and battery.

The "inferior" (according to the dev of this app) droidwall doesnt run in the background.
[Android Apps and Games] asicman:
It doesn't waste anything. LBE has a smaller footprint than simi clock widget. Hadn't that icon been there, I wouldn't know that LBE was even running.
[Android Apps and Games] :
1973 results for "permissions" search. Pardon me, will not waste time trying to find out what you mean. I assume it is yet another iptables GUI. As for Droidwall, it is immediately obvious that it is inferior solution to this one as Droidwall is merely a GUI to iptables (which is a userspace application to configure netfilter in Linux kernel.) Will it protect your phone identity? SMS or contacts? No. Will it prevent the applications from calling out or sending SMS/MMS? No. Will Droidwall prevent them from accessing your location data? No. Still want to argue about which is inferior?

Without this running in background, obviously you will get no prompts on applications install/update, no notifications when permissions are denied, nothing of this. As said, you eye candy widgets are using more resources than this. Anyway, noticed the autostart in configuration? Or maybe this application is just not you, so just uninstall it :p (Oh, and contrary to what you might think, iptables rules are using memory, and their realtime processing and enforcement is using CPU and thus battery. Invisible for you since there is no icon for kernel-level stuff.)
[Android Apps and Games] asicman:
I'd also like to add that droidwall can't even edit iptables properly. For me anything more than 20 rules and it will crash. LBE has never crashed on me in this manner.
[Android Apps and Games] intangibleDroid:
Not sure but I think @BenKranged is talking about this app.
[Android Apps and Games] mmarz:
Would it be possible to add conditional firewalling? I would like certain apps to function only when the screen is on. When the screen is off, I would like only a select few apps to have network access. You can obviously see the benefits of such an arrangement for privacy, data usage, battery life...etc without loss of function in the apps when you actually want to use them. Do you think you could add the ability to have screen on/off firewall profiles?

Right now I have accomplished this by using Droidwall generated scripts, and then running them using Tasker when the screen turns on or off. This is fine, but I'd love to simplify my setup to a single app.

Great job on the app!

This app has been the only way I've found to stop google from accessing my location when I visit google.com using the built in browser app. No matter what you set as you privacy setting on your phone or your google account, google will take your coarse position when you visit google.com.
[Android Apps and Games] rogier666:
Would it be possible to split permissions so we can avoid undesirable permissions that hitch a ride together with useful permissions?

An obvious candidate for split permissions is the "read phone state and identity" permission, which should be two separate permissions that can be allowed/denied individually.

The "read phone state" is useful, because it allows media players to pause when you receive a call. Obviously I want my media player to shut up when I'm talking on the phone.

But this permission is bundled with the "read phone identity" permission, which allows apps to read your phone number, IMEI, and IMSI, which I definitely do NOT want. Especially when an app needs to go online, because then your phone #/IMEI/IMSI can be abused as a super tracking cookie that you can't opt out of.

Is there a way to allow app to see that there's a call in progress but deny access to phone number, IMEI, and IMSI? Or could LBE feed bogus numbers to apps that ask for too much?
[Android Apps and Games] BenKranged:
I'm just trying to be constructive by suggesting additional functionality. Some users might prefer to set app permissions once rather than having constant popups.
[Android Apps and Games] XlAfbk:
There's no way to make it a one-time-switch.

The permissions app you mentioned only shows a list of permissions, it can't change them.
[Android Apps and Games] mmarz:
It's called Permissions Denied, and there are advantages to both app Permissions Denied and LBE. That is why I use both of those apps plus Driodwall. Permissions Denied offers more refined control over app activity, but does have the drawback of being only a one time setting. I setup my permanent permissions with Permissions Denied, and then I setup my conditional permissions with LBE. Finally I use LBE for my permanent network blocks, and use Droidwall generated scripts for conditional firewalling.

All of these apps have their own uses. Lets not turn this into a pissing contest. Although, if LBE did have conditional firewalling, I'd drop Droidwall in a heartbeat.
[Android Apps and Games] g26er:
I'd like to see this also... I love the app though in it's current state!
[Android Apps and Games] Cyclu:
Any news from developers?
[Android Apps and Games] Private-Cowboy:
Can this app be trusted?

I had LBE installed for a few days, and while it (seemed to) do its job, it also communicated on its own. The option to send anonymus logs was disabled but despite that my traffic monitor showed continuous data usage by sending blocks of data every couple of hours.

I removed LBE to comfirm this and after I did the data usage stopped. So even if the option to send anonymous logs is disabled, LBE is sending some kind of data constantly. And given the fact that LBE is closed source and can do pretty much anything with root rights, it is pretty dangerous in that regard.

Maybe the 'security app' is a data spy itself and you should block it of the net with droidwall.
[Android Apps and Games] asicman:
How large were the blocks? Can you capture a few packets for analysis? And what program did u use to monitor usage?
[Android Apps and Games] nibras_reeza:
This app uses real time monitoring and intercepting to block access. Permblocker modifies manifest in apk to prevent app access to API. They are both totally different.
[Android Apps and Games] Private-Cowboy:
I checked overnight and LBE seems to send ~8-10kb per 12h. Without LBE my outgoing traffic is about 8kb per night, with LBE installed and running it roughly doubles - and that is with the feature disabled that would send anonymous logs. I've checked over several nights switching back and forth (enableing and disableing LBE etc) and the numbers are pretty consistent. I used 3G Watchdog to measure the outgoing traffic

I don't have a per-app-traffic-logger though since I'm still running eclair so I can't directly log LBE's traffic.

Could LBE be blocked from the net completely with DroidWall?
[Android Apps and Games] mmarz:
That is how I have it configured. Droidwall blocks LBE and LBE blocks droidwall. I don't know how concerned you should be though. It is hard to determine what app is sending what data just by looking at the download/upload totals.
[Android Apps and Games] Private-Cowboy:
True, but under eclair you have no tools to measure per-app-traffic. Those tools all need froyo. And I'm not extremely concerned (yet), I just wondered why there seems to be a consistent traffic of ~8-10kb/12h when LBE is running even it there shouldn't be any difference.

The thing is LBE just works wonderfully otherwise and I'd love to keep it. LBE can't block itself so I thought I'd block it with DroidWall and use it's wonderful feature set without getting overly worried. Good to know that this works.
[Android Apps and Games] rogier666:
Eclair has a traffic-per-app monitor built in. Open the testing app:

When you're in the testing app, hit "battery history" and then select "network usage" from the pulldown menu. All apps that have used data are listed there. Hit an app to see how many bytes went in and how many went out.

I never found LBE in there, and not in the DroidWall log either. The paranoid approach is to assume that LBE hides its own traffic from the data logs. The less paranoid explanation is that LBE makes other apps talk more. If you block apps from sending out your location/imei/contacts they may cause extra traffic by trying more often.
[Android Apps and Games] SHADOW-XIII:
that's very interesting thing you found, it *might* be stealing the information overnight

using 3G Watchdog Pro and it's build-in per-app-traffic with DroidWall rejected LBE it reports 0 bytes in last month ... still unsure if it's going behind that but I doubt since DroidWall is editing iptables, LBE would have to keep editing iptables to pass through it
[Android Apps and Games] :
Bluntly - blocking network access for this one is about as stupid (to put it mildly) as blocking network access or otherwise restricting your PC antivirus/firewall software.

If you do not trust it, then uninstall it. For other tin-foil hats, there is network packet sniffing, not "debugging" like "oh my fancy widget says it sent 8 kB overnight" :rolleyes:
[Android Apps and Games] p107r0:
Thanks. You've definitely cheered my day.

Here's visual addendum.
[Android Apps and Games] PartyVirginX10:
conspiracys dont excist period
[Android Apps and Games] Tachikoma_kun:
Not to fan the flames of distruct any more, but why does the VPN Service suddenly want to run since installing this?
[Android Apps and Games] Private-Cowboy:
First, I neither have the apps nor the knowledge to do packet sniffing. I just noticed an increase in traffic since LBE is running. Even if 9kb doesn't sound like much, when there should be zero difference, it is.

Second, I don't see why LBE shouldn't be blocked. It's not a PC anti virus solution that need to get fresh signature databases once in a while. It's more or less a permission-manager on a case-by-case basis. Why should it need to access the net itself? If there is an update I'll notice in the market.

Third, this has little to do with paranoia but with control. I'd like to know what app is sending data and I'd like to allow when and what data. Android apps are getting dubious with their rights quite often and I'm preffering to be in control of my personal data. And that portion of common sense also applies to security apps like LBE.
[Android Apps and Games] mmarz:
Why would you trust your anti-virus programs? A majority of them come bundled with all sorts of adware, browser toolbars, and advertisements. There is nothing stopping them from selling your browsing habits to advertisers. This is true of free and paid apps on all platforms. Why do you even need LBE if you trust all the apps you install?
[Android Apps and Games] rorycs:
...........DELETED
[Android Apps and Games] rorycs:
Not to flame the situation, here is a strange one.

Immediately after installing Droidwall and blocking LBE, the Droidwalll log showed that LBE sent 8kb to two different IP addresses in the 10.17...... range (4kb each).

Now, since that time, there has been nothing else logged at all....

The bigger concern for me is the Developers themselves. They obviously know about this forum as they created this thread. Since then, they have just disappeared. If you were the Dev, wouldn't you keep an eye on your own thread and respond from time to time - even to say thank you for the positive comments?
[Android Apps and Games] DroidzFX:
Using droid wall it blocked LBE trying to send one packet to 175.41.246.91. NSlookup reports this is a Amazon server(amazon is hostname dont think its actually amazon server). Im curious to hook this up to my WIFI and sniff the packet that way to see what it is sending. Also I unselected error reporting and auto update.

Its just hard to trust a website written in Chinese when that seems where most of the bad apps are coming from.
[Android Apps and Games] p107r0:
175.41.246.91 in itself does not look that bad:

http://translate.google.com/translate?sl=zh-CN&tl=en&layout=2&eotf=1&u=http://175.41.246.91/&act=url
[Android Apps and Games] DroidzFX:
not sure if that link was suppose to do something. but that ip is owned by Asia Pacific Network Information Centre
[Android Apps and Games] mmarz:
That IP is the address for the website of the developer of this app. That is what the link above shows.

http://175.41.246.91/

http://www.lbesec.com/

http://translate.google.com/translate?sl=zh-CN&tl=en&layout=2&eotf=1&u=http://175.41.246.91/&act=url
[Android Apps and Games] rogier666:
@ those who detect LBE network traffic:

Did you switch off "auto update" and "send error report" in LBE's configuration screen?

I have them switched off and DroidWall/Testing/DroidStats find zero bytes sent/received by LBE.
[Android Apps and Games] DroidzFX:
I had the two options deselected and it tried to send the packet. I just recommend using other apps to block LBE. Checks and balances. Permission deny app can revoke its ability to create network sockets.
[Android Apps and Games] ukanth:
People who have doubt about it, install "Permission Denied" app from market and revoke permissions for creating network socket and internet permissions which will prevent this app to connect to internet.

It could be possible that It can disable droidwall and send logs ( because it has a permission to restart applications)
[Android Apps and Games] Final5k:
Thanks! "Permission Denied" is definitely a must for root-users!
[Android Apps and Games] mmarz:
Droidwall doesn't have to be running for the firewall settings to be in place. The LBE app would have to rewrite the ip tables to gain internet access. But I have all three of these apps installed anyways. Might as well use them all against each other.
[Android Apps and Games] ukanth:
I agree, DroidWall just updates iptables, very much possible that it can rewrites. I too use all these three.
[Android Apps and Games] :
Because otherwise there is no need to use one. If you do not trust it, then you can as well assume it is a rootkit or that it allows malware in your PC intentionally.

You do not install security stuff that you do not trust, that is just it.
[Android Apps and Games] Private-Cowboy:
I do trust my security software. However, I also know that it does not need to know about my personal data.

A security software doing its job and a security software sending data that you don't want it to send are two different things.

Also why would you blindly trust an app when you should and could be a bit cautious.
[Android Apps and Games] SHADOW-XIII:
the problem with anti-virus it will find out common viruses but will not have an effect for spyware application, lbe could be sending stuff via normal network traffic without anti-virus noticing it ...

i have droidwalled block lbe, option to send error logs or auto updates is turned off and 3g watchdog is reporting 0 bytes traffic for me
[Android Apps and Games] rogier666:
If LBE can rewrite DroidWalled IP tables and hide traffic from your data counters it can also manipulate Permissions Denied.
[Android Apps and Games] Lanky Git:
That's what I was thinking - it runs with superuser access so it could probably get around that.

Having serious doubts on whether to keep this app, shame it seems a very well put together app with a good interface.
[Android Apps and Games] mmarz:
Here is a list of external addresses I found in the program:

http://www.lbesec.com/

http://www.lbesec.com/report/error_report.php

http://www.lbesec.com/report/behavior.php

http://www.lbesec.com/lbesec.ini

http://weibo.com/lbesec

http://schemas.android.com/apk/res/com.lbe.security

http://analytics.localytics.com/api/datapoints/bulk
[Android Apps and Games] short/y:
I just sent a note to the folks at Lookout (MyLookout.com) to see if they know anything about it. Seems like known legit security firms would (should?) have an opinion on this.
[Android Apps and Games] strazzere:
Application checks out, it doesn't do anything nefarious. I originally checked out when it was first launched into the market - did a second pass when we got an email from short/y just to be safe.

As mmarz points	out above, there are some outbound links which it does contact;

http://www.lbesec.com/

Authors web site, this is just test displayed the about page

http://www.lbesec.com/report/error_report.php

Url used for sending error reports back, disable this by unchecking "Send error	report"

http://www.lbesec.com/report/behavior.php

Url used for sending event data back, the data to this url is that action you took (blocked/not blocked) the application/packagename and the permission which was seen. This is disabled when you uncheck "Send error report" in the configuration

http://www.lbesec.com/lbesec.ini

This is the auto-update url, disable	accessing this by unchecking "auto update" in the configuration

http://weibo.com/lbesec

Chinese social networking site, it's just a link displayed in the about page

http://schemas.android.com/apk/res/com.lbe.security - This is in the AndroidManifest, it's not actually a url ;)

http://analytics.localytics.com/api/datapoints/bulk

Analytics service used by this application, this is similar to flurry and other services. Get's a unique anonymous id to track you by, and sends some device information off to the server. This helps the devs track usage/errors/etc.

Granted, this is a root application - which you are allowing constant access to run on your device. Still use this at your own risk! A note to someone previously in this thread said "just use Permission Denied". Don't expect this to help much if an application truely wants to be malicious and you've given it root access. If you use Permission Denied, it blocks the user id of the application from having this permission anymore, if your giving an application access to root (uid=0) then it isn't hindered by the normal security mechanisms which Permission Denied relies on.

Tim Strazzere

Lookout Mobile Security
[Android Apps and Games] short/y:
Now that's what I call service! Thanks, Tim! Heck, I may upgrade to premium just as a way of thanking you and Lookout for this kind of attention.

And in case anyone is concerned that TIm isn't with Lookout, he replied to my original email so unless Lookout is in bed with this developer - :) - he's legit
[Android Apps and Games] Private-Cowboy:
Indeed. Thank you very much.

The question remains if one should not use LBE given the observations, the Chinese developer that does not respond here and the things it could do with root rights.

After all droidwall could just as well block apps that you don't want to use the net without running in the background. LBE slows down the phone slightly while droidwall does not.
[Android Apps and Games] short/y:
Certainly anything is possible with an app that runs as root. Future updates aren't guaranteed to be benign nor can we guarantee that the developer won't sell his app to someone who will turn it to nefarious means. This is a checkpoint at one point in time and nothing more. Further, there's nothing to say that there might be some code in the app that only activates every 5th (or 10th or 19th) invocation. I wouldn't try to persuade anyone who's suspicious to install or use this app. I did, however, want an "expert" opinion to help address some of the issues raised here. I think that's happened.

It's worth what you paid for it.