yashsingh1/xdaforums huggingface dataset:
[Optimus V Android Development] mmarz:
Thanks! With you that makes 3 of us to experience this. The address for the password(s) are different for me which is expected. Where as the MSL code would be located in a certain unchanged portion of the phone, this mysterious log would constantly be changing and could even be fragmented over the flash drive. I don't have (UID FLAGS) anywhere in either file.

What I also have is many Groove IP references with my Groove IP related google login and password. This looks like it is capturing it as internet traffic. I don't see why Google or Groove IP would log a password they both have encrypted access to.
[Optimus V Android Development] obijohn:
It's the keyboard. The OS isn't logging your passwords, at least as far as I can tell. If you select a different keyboard than the default, you will see a security warning popup which says that the keyboard can log everything, including your passwords. Well, this is normal, because softkeyboards need to be able to store words you enter into their dictionary/history to enhance their spelling and prediction. This is why your old password is still there after you changed it, and why they are stored in plaintext (because dictionaries are never thought to be encrypted).

Whether or not the softkeyboard is storing "words" that your entered in password fields in plaintext is not an Android security hole, it's the keyboard's, so complaints and/or advisories should be directed to them. They should at least give us the option of marking password fields as something not to store, and if we do want them remembered, for jimminey cricket's sake store them in a separate encrypted dictionary.
[Optimus V Android Development] mmarz:
There are a few reasons I don't buy this as being the cause.

Where would this unencrypted keyboard log be? I have data2ext going. My password was found on my internal phone partition. Whatever is doing this has permission to modify files outside of the data folder.

My password was present repeatedly. Even when I changed my password, it appeared twice even though I had only entered it once.

You have to manually select when you want to add words to the dictionary, otherwise all your misspelled tweets would be added. In password fields, this is not possible because only a single letter is inputted at any given time. No word is ever developed.

My other passwords are not in this log file. For example, my titanium backup password that I have to constantly use when I restore backups is not in here. Also my internet search phrases and other relevant items that I have typed in.

Update:

I just got this from KSmithInNY:

http://androidcentral.com/android-passwords-rooted-clear-text

Any app with root access has the ability to get your google credentials because android stores them in plain text. Wonderful!
[Optimus V Android Development] csrow:
Use the 2-step verification for your Gmail account and also set up an application specific password for your android device.

http://www.youtube.com/watch?v=zMabEyrtPRg
[Optimus V Android Development] mmarz:
Wouldn't this mean that you have to enter a verification code when entering your normal password, but if malware were to steal your application specific password that you created just for your phone, they could access your account using it and bypass the verification process?
[Optimus V Android Development] csrow:
Application specific password will only work on that phone. If you lose your phone, you can revoke that password for that phone which will block the access.
[Optimus V Android Development] mmarz:
No, they work on any device. There is no way for google to know what device is using it. You personally assign them for that phone, but if the password were to be stolen, then it can be used on any device. Also, if your account were to be compromised, you wouldn't know which password was stolen. With each application password you create, you are allowing another passcode that can be used to access your account. This seems very unsafe.

Update: I just tested this and I am right. I can use the same application specific password on all my apps and phones. So if this password were to be stolen, anyone could use it to login to my account. This is a major fail on the part of google....again.

Update2: Application specific passwords can be used to create login tokens. That means you can use a program like trillian to log into your gtalk using it, and then use the login token it produces to get access to your main google account through a web interface.
[Optimus V Android Development] csrow:
Well, that completely defeats the purpose of 2-part authentication. Oh well.
[Optimus V Android Development] SlightlyTilted:
I hope you've reported this security hole... because obviously the intent is to be more secure than it actually is.
[Optimus V Android Development] mmarz:
Which hole are you referring to? How google's two step verification is worthless because of one step passwords they force you handout to automated login apps? How Android's own password storage system keeps passwords in plain text and protects it by setting the file permissions to "please don't read this"? Or are you taking about how putting all these issues aside, I can still see my password in plain text in some sort of data capturing log that I found in a data dump of my phone's internal memory?

If you are talking about the last one, I'm still trying to find out exactly where the password is being stored in the dump and by what process. I've been searching through my phone's internal memory while it is on, but I can't seem to find it. I also want to rule out malware or something stupid that I might be doing before I start yelling about the sky falling. If more of you guys try this out, maybe we can rule out malware since all of us can't have the same bug. It really can't hurt your phone to dump it. It only takes 40 mins of your time.

(The more I learn about this stuff, the angrier I get.)
[Optimus V Android Development] ummkiper:
so after 3 tries i was able to dump the memory and after hours of searching i cant find my mn_aaa or mn_ha shared secrets,does anyone know the location of these? i have tried qxdm and after sending the spc i send

requestnvitemread ds_mip_ss_user_prof

and i get

22:53:26.203DIAG RX item:

22:53:26.203requestnvitemread - Error response received from target.

or is there another way to find them?
[Optimus V Android Development] srmuc69:
Any luck? I have the same issue with the Optimus V, e.g. I used another phone and reading the NV item was no issue. Seems to be specific to the LG.
[Optimus V Android Development] ummkiper:
well i think ive gotten further with qpst i opened service programming and put in my spc read the phone then saved to file. i double clicked the file and a viewer opened and i viewed it in text format i seen alot of nv items there but have yet to figure out which ones they are.
[Optimus V Android Development] srmuc69:
Any luck? I did the same thing but as I have read in many other blogs the LG Optimus V times out in qpst, so did mine too.

I still have information in the file and I found the NV_ITEM_ARRARY in the file. What I do not know is how that array is built, e.g. is there a developer guide for CDMA phone where they detail the information. I was looking for the 1192 nv item and it should start wit the length like 0A for 10 digits of the AA Password. No luck so far without knowing what the bytes are and from just locking for 0A you get tons of hits.
[Optimus V Android Development] mmarz:
What are you guys trying to accomplish? What is that code used for?

The dump should contain everything that is in the phone's memory. If the code is not encrypted or compressed in any way, it should be in there. The problem is that if you don't know the code, then you can't look up its location. Kind of a catch 22.
[Optimus V Android Development] srmuc69:
I'm trying to get the NV_ITEM 1192 and 466 from the LG Optimus V which is on Virgin Mobile. When I do that with CDMA Workshop it says access denied once you save the file. Now I'm tyring to find what these values are on my LG Optimus V. Do you think the dump will have this and how would I go to find the NV ITEMs, e.g. in which file are they and at what hex position?
[Optimus V Android Development] ummkiper:
yeah the dump should have all nv items.the hard part is figuring which ones are which.
[Optimus V Android Development] ummkiper:
well the mnha and mn aa are paswords needed to get your data working when you want to use a different phone ie the Samsung Epic on virgin mobile.you can clone all info from the optimus v to the epic but with out those password data will not work.i may not be inclined to do this anymore since the motorola triumph is coming out.meaning i wont need to find a better phone and clone this one.
[Optimus V Android Development] mmarz:
Inside the phone's memory dump, do a hex search for "3436365F316EFF01" and "3436365F326EFF01" and "4E565F44535F4D49505F53535F555345525F50524F465F49" for 466

and "4E565F4844525F414E5F415554485F5041535357445F4C4F4E475F49" for 1192

I'm not sure exactly what value you are looking for, but they should be next to those markers. Is it possible that you only need the login (466) and that there is no password (1192)? Or that both items are contained within 466? 1192 seems be blank at least in my dump.

In QXDM

requestnvitemread ds_mip_gen_user_prof 1

gives some results.
[Optimus V Android Development] srmuc69:
Thanks for the info, I will try to dump my phone tonight and see what happens. My Optimus V is running out of internal memory(even so I move every app to the sd card) and I wanted to use a high-end Droid phone on my VM account. I had no issue to read the EPIC 4G NV items 466, 1192 from a sprint phone and they had values. May be Virgin does not use anything from 1192 but without finding these and programing my new phone and then testing it I would not know. I was not able to find anyone who used a LG Optimus V from Virgin to switch it to a newer phone. Since now the Motorola Triumph is coming out, it might not be necessary anymore to do this but I have not found how much internal memory that phone has for apps etc.

The requestnvitemread ds_mip_gen_user_prof 1 did not work on my LG Optimus e.g. did not bring anything back and had an error. My guess QXDM has the same problem as the CDMA workshop cannot read the items 466, 1192 even so the SPC is set there and also at QXDM.

As I'm a beginner I'm not sure if LG just blocked the nv_item read and Samsung not.
[Optimus V Android Development] ummkiper:
i doubt lg did virgin mobile did because they are getting smarter yeah it can be done with the intercept but not the v and right now the intercept is $200 where the v is $150 the way i figure it if i really want to use an epic or evo ill have to get the intercept but the triumph is coming out so ill hold off and see what it is like.im sure it will be more locked down then the v is.but if it performs well maybe stock 2.2 or when 2.3 comes for it may prove nice.
[Optimus V Android Development] mmarz:
You need to send this before you send anything in QXDM

spc ######

where ###### is your spc code.
[Optimus V Android Development] ummkiper:
yeah um if we didnt send that we couldnt read anything thanks for the tip tho.

virgin mobile has locked down their phones and they wont even give you the spc for any of their phones.virgin mobile made the firmware for the v lg made the phone.as time goes by virgin mobile gets smarter to hacks and such take the intercept you can read the nvitems on it and im sure vm realized that someone will use a better phone on their network so when the V came out they locked it down harder.
[Optimus V Android Development] srmuc69:
I did this this, e.g. enter the SPC first

but you cannot read the 466 which is ds_mip_ss_user_prof 1 or ds_mip_ss_user_prof 2

or 1192 hdr_an_auth_passwd_long 1 or hdr_an_auth_passwd_long 2

465 which is ds_mip_gen_user_prof 1 works just fine

I guess I have to see if the dump has any value for these or not.
[Optimus V Android Development] srmuc69:
No luck, even so I set the 466 and 1192 like out of the dump it did not work and kept trying to start and stop the phone again and again, e.g. the modem part is my guess.

Any idea why the 466 is found in the binary part and the 1192 only in the XML kinda format?
[Optimus V Android Development] mmarz:
FYI, I tried to get 466 and 1192 from an Optimus S with the same results.
[Verizon Droid Charge] i0sandman0i:
So i have this awesome late 4g with a ffc and can't seem to find a way to video chat to my friends on a pc..... Is there anything out there?
[Eee Pad Transformer Q&A, Help & Troubleshooting] jjsoviet:
Hey there all. Just got my Transformer last Thursday and it's now running on the leaked 3.1 Honeycomb update. My TF is still rooted as well, as per a modified version over at the Transformer Development sub-forum. :D

Anyways, I have a big question regarding the 3.5mm audio jack of the device. Back when it was pure stock, it was working fine and audio playback was good. However, ever since I've rooted it and installed new ROMs its output has been drastically reduced to mere static and slurred sounds. Any ideas on what process within the rooting/flashing has gone wrong? I've already done these methods but so far, no luck:

- Rebooting the Transformer

- Hard reset via 10-second Power button + Volume Down button

I have yet to do a full cache and data wipe, and those are my last resort. I have a backup though in case it still won't work. It would be disappointing if this is a problem of the hardware itself, meaning I have to return the device which is kinda a no-go for me. Any suggestions would be appreciated. Thanks.
[Eee Pad Transformer Q&A, Help & Troubleshooting] j.bruha:
I had this same problem, though it wasn't related to root or anything else. The first time I used headphones at all, the quality was just awful. I restored back to factory settings and had the same issue.

ASUS ended up replacing it for me altogether.
[Eee Pad Transformer Q&A, Help & Troubleshooting] jjsoviet:
So it's a possible hardware issue? I'll try a factory reset tomorrow morning after a NAND backup. If this fails, maybe I'll have to RMA it. So did you contact the supplier or ASUS directly? I'd rather not have it shipped, but whatever.
[Eee Pad Transformer Q&A, Help & Troubleshooting] b3ltazar:
same problem here asus wants me to send them my 10 day old tablet for 2 weeks!! screw them. ive been waiting for a supervisor to call me back for 3 days now... It seems to work on and off after a couple reboots its fine then it doesn't work im am pretty mad because I use the tf as my car audio system
[Eee Pad Transformer Q&A, Help & Troubleshooting] jjsoviet:
Well, did a factory reset and the problem is still there. I'm kinda bummered I may have to contact ASUS support for this; I hope the RMA process will be quick and hassle-free.

If anyone still has ideas on how to fix this, just let me know. I really don't want to return my Transformer but for this hardware problem it's not easy to ignore. It could be the issue with the 3.5mm contacts, or that the jacks aren't reaching the socket deep enough to secure a stable transmission.
[Eee Pad Transformer Q&A, Help & Troubleshooting] j.bruha:
Both of you guys want to keep the following in mind if you just bought it brand new as I suffered the exact same situation.

Being within the first 30 days of purchase, you are of course entitled to exchange the device where you purchased it...provided they have any in stock to exchange for you. :(

So! The way I justified it to myself was this: I can either wait until the retailer has another one to attempt an exchange, having to wait who-knows how long, OR, I can contact ASUS and have them repair it. It took about a week and a half, and they ended up replacing it with a new, sealed one anyway.

Yeah it sucks, but it's worth it, and you're not fighting the crowd of other people trying to buy one and potentially taking it out of the hands of people who haven't been able to grab one yet.
[Eee Pad Transformer Q&A, Help & Troubleshooting] jjsoviet:
I have the option to either exchange the Transformer at Best Buy (they still have stocks online) or send the unit for RMA from ASUS. I'm gonna go for Best Buy since it's the easiest option so far; however, if they somehow won't take it back or it will take some time, I'll have a shot at an RMA as a fallback option.
[Eee Pad Transformer Q&A, Help & Troubleshooting] j.bruha:
If you do have to go the RMA route, be sure to let them know everything you did to troubleshoot the issue. I failed to mention I factory reset the device and was delayed my RMA# by another 48 hours because they suggested I try that first. Their next response had the RMA# and instructions. Good luck.
[HTC Inspire 4G] Cerberus2k7:
To start off, I'm not a huge fan of cases. Yes they're cheap "insurance" but I just don't like the feel of them. Coming from a Bold 9700 I LOVED the synthetic leather backing used. Looked professional and gave me a bit of extra grip. Move onto this phone and it's quite slick. I would like to put some sort of backing on it for extra grip, but I feel that grip tape would look tacky(I'm picky) and be too aggressive. Just wondering if anyone has gone this route with another material instead of using a case.
[HTC Inspire 4G] JamesR913:
if you like the look of Carbon Fiber the phantomskinz carbon fiber chromatics give a nice grip to the back of the phone ( at least they did when I had it on my Captivate). I think the other Chromatics are smooth though so you have to get either the white or black carbon fiber ones.
[HTC Inspire 4G] Cerberus2k7:
Thanks for the company. They seem to have some stuff that might fit the bill. I also found a company that has sheets you can cut to fit at work, and being the forgetful person that I am, forgot to write the name down. :hs: And why does the iPhone get all the cool cases/grips? :(
[Epic 4G General] jspsuperman:
http://xdaforums.com/showthread.php?t=1073930 - the original thread

https://github.com/doixanh/X8Features - the github source

Are there any DEVs willing to compile this in there ROM (lookin at you ACS) lol I have wanted this so badly, but am unwilling to take the performance hit that ee03 causes compared to SRF 1.1.1. :D
[Epic 4G General] gtuansdiamm:
Dont take the dive to gb

Even though the devs try hard some things just cannot be

Like taking the crap**** gb leak and turn it into gold
[Epic 4G General] jspsuperman:
This makes no sense? The developer dioxanh got this to work perfectly on froyo and put the source on github for other DEVS to compile for there ROMs. It can be because he has done it :p
[Epic 4G General] gtuansdiamm:
I meant that the gb link is über slow and it probably wont get better till the next leak
[Epic 4G General] TheDub:
All the Epic ROM's with the exception of MIUI and CM7 are NOT compiled from source code.

They are merely customizations and hacking based off of the compiled libraries. It would likely be impossible to reverse engineer this into any of the ROM's. It would need to be done in Smali... if that's even possible..
[Epic 4G General] 063_XOBX:
Syndicate is in fact compiled from source if I'm not mistaken, that's why they always wait for a few days source leaks to release.
[Epic 4G General] jspsuperman:
Look all I know is that this DEV made it possible to implement into custom ROMs for froyo. It says so clearly in the forum I posted if you had bothered to read it at all. :rolleyes:
[Epic 4G General] dcowboys2184:
Actually read it .. Good work on dev for doing this! .. But it must be cooked into roms only and only works for a few roms
[Epic 4G General] jspsuperman:
I know Impaler and Mystery and others are busy workin on 1.2, and It would be cool if they lookd into implementing this into it. :D
[Epic 4G General] TheDub:
I did "bother" to read it. It's Froyo source code to implement this feature. We don't have 100% of Samsungs source code for Froyo/Eclair/Gingerbread, they don't release it.

We only receive the kernel source code. This could only be baked into a Froyo based AOSP ROM which other then the very dated CM6 we do not have.

The kernel source code and the entire operating system (AOSP) are two completely different things, and the code to make this work isn't in the Kernel it's in the Framework.

ACS's ROM is not AOSP.

AOSP: Android Open Source Project - I'm using it to reference having the entire operating system's source code available, not just the kernel.
[Epic 4G General] jspsuperman:
I wasnt aware that only the kernal source was released. :( What a bummer if a sony X8 can do this but our epic cant without gingerbread :mad:
[Epic 4G General] TheDub:
Yeah just the way it is...

Most phones don't have 100% complete source drops, the popular two phones that do of course are the Nexus One and Nexus S, this is why the Nexus phones so easily get ROM's like CyanogenMod working. With the Epic and Galaxy S developers are forced to "rewrite" lots of code to get things interfacing with the Samsung proprietary drivers properly.

If we had 100% of the source code I don't doubt ROM's would be very different today, there would have also been a official CyanogenMod by now I'm sure.

If you want to see for yourself what Samsung releases you can go to:

https://opensource.samsung.com/

Do a search for I9000 for example and download one of the releases (I looked at I-9000-Opensource.zip)

You will see a few files in there.. one labeled kernel, the other eclair.

The kernel one is obvious, the eclair one contains only the hardware libraries.

So unfortunately, this really isn't possible in any of our existing Froyo ROM's, except CM6.

PS: I9000 is the model number for the European Galaxy S.
[Epic 4G General] qbking77:
Don't mess with TheDub ;)
[Epic 4G General] jspsuperman:
Apparantly lol :p That sucks but I guess gingerbread will be official soon enough then we will have somthin else kickass from U ACS folk lol :D
[Epic 4G General] chris41g:
This is not true, just so you know.
[General Questions and Answers] pola0:
Hello all!

I looking some croatian keyboard for android-I have Prestigio multipad and I need croatian keybord for my books....
[General Questions and Answers] CROrION:
download smart keyboard pro and croatian language for it. Works perfectly for me.
[General Questions and Answers] pola0:
Pozz!

Skinuo sam ovu tipkovnicu ali nikako da je pokrenem stalno mi daje svoju android tipkovnicu.....možeš li mi reći kako da je uključim,odnosno isključim

Hvala
[General Questions and Answers] pola0:
Thanks,skužio sam....još jednom hvala:)
[General Questions and Answers] Zmajur:
Any swype Croatian dictionary?
[Vibrant Q&A, Help & Troubleshooting] darkside79:
Ok so some times when launching a app that I downloaded from the Amazon App Store it will FC close and say App error please redownload app from the Amazon App Store. Happens about 40% of the time. So then I have to erase the app and reinstall it. Wtf it's a major pain. Anyone else having this issue? Im using Trigger 3.3 beta Rom with Overstock kernel. Tried a different Rom but same issue! Any help would be great! Thanks!
[Vibrant Q&A, Help & Troubleshooting] bigtom624:
I kept having the same problems. I wound up uninstalling the apps and downloading them from the Android market instead.
[Vibrant Q&A, Help & Troubleshooting] darkside79:
Problem is most of the apps are paid apps or apps of the day and can't afford to rebuy them on the android market!
[Vibrant Q&A, Help & Troubleshooting] movieaddict:
The reason for all the amazon problems is because everytime u flash a new rom amazon registers ur phone. For example mine will say i900 and vibrant and vibrant 1 and vibrant 2. The reason is because I flashed a i900 port and bionix and nextgen. So basically to fix this deregister all ur extra phones under ur amazon account and keep the remaining vibrant account. Make sure when u get a new app its being applied to the original vibrant account. I hope this helps and if u have any questions let me know? Because im a amazon free app junkie. Lol