yashsingh1/xdaforums huggingface dataset:
[Android General] IronTechmonkey:
Cough. What a sales pitch, advertising full of general platitudes. Dolphin's past and repeated "crimes" are too serious to forgive that easily and nothing you've said speaks to those serious things such as routing lists of our visited web through non encrypted servers in China. No trust remains after that.
[Android General] DGL2033:
I was replying to the guy I quoted, when he asked if Firefox and Opera were the only choices left. Previously I had written about Braves linkbubble browser, but this new one is only a few months old. And besides, can I help I like it :o
[Android General] IronTechmonkey:
Derp. I stand corrected and apologize. I thought you were referring to Dolphin, Thanks for clarifying.
[Android General] anass20:
Does this apply to other applications What happens when uninstalling?
[Android General] onestoploser:
Ninesky owns! Give it a try.

Drunk texted from my CM7 Bolt.
[Android General] aceian:
Maxthon browser is an ideal replacement I think....

It's quick...

It has option to pause/resume the download... Which I loved it. :-)

Hit the thanks button if I helped :-)

[FOLLOW XDA RULES]
[Android General] Rico ANDROID:
What if I roll back to version 4.6.5? Or were all versions of Dolphin HD phishing and forwarding browsing history? This drfinitely a HUGE TRUST KILLER for such a very popular named browser.
[Android General] solarus2011:
Maybe I'm just to cynical, but I've notice a ton of 5 star reviews today on the Market. The number of reviews seems a little convenient.

Either way, uninstalled and back to stock browser.

Thanks for the heads up.
[Android General] Paul22000:
Is this the correct method of blocking webzines from AdAway? (Picture below)
[Android General] aceian:
Dunno about that.. :-(

But stop using it as I did to stay away from phising.....

Hit the thanks button if I helped :-)

[FOLLOW XDA RULES]
[Android General] Rico ANDROID:
Good point! I think what I will do before removing 4.6.1 or whatever this version is.. Is look up nothing but sites and articles about this entir dolphin phishig scam so that will get fed back to dolphin and its cronies only...then delete... Just before I dropped 5.0, I reduced my market rating to a 1. Too bad theres no 0
[Android General] aceian:
LOL...... nice one...

Hit the thanks button if I helped :-)

[FOLLOW XDA RULES]
[Android General] lexluthor:
Yes, but look at the note on the bottom that reminds you to apply adaway again after you make entries there.

I guess after doing that, this should be blocked.
[Android General] rogier666:
And after applying AdAway again you should reboot your phone to make sure Android uses your updated hosts file.
[Android General] Rytt55:
Which Browser?

Hey,

So then, which browser would you guys recommend or how would I go about testing this myself?

I was using Boat Browser but got scared with what was reported here and the stupid upgrade message keeps popping up, but was satisfied with it.

Currently, I'm on stock sense browser, but every time you go back a page, it jumps back up to the very top, which is annoying. Opera sucks with flash and is heavy even with my dual-core.

I would like to go back to Boat Browser, but what do I need to block?

Thanks for reporting this!!!
[Android General] FadeFx:
Its because they are fishing for compliments, they have a popup in the new version. But it is not totally wrong, they Yvette made it 30% faster they say, and u can feel that, it is browsing like a devil on chilli... i gave them their 5stars also in the beginning, jthen i found this topic and reverted to one star. You should do that also if u did not yet...

----------------------------------------

tapatalked
[Android General] FadeFx:
This should do it, but you should either unlink it from market, or uninstall it after giving a bad rating with a link to this thread. Others should know what's wrong...

----------------------------------------

tapatalked
[Android General] A2Eric:
Would using Tor solve the problem? Or, where do I find /system/etc/hosts ??
[Android General] leolawliet:
Can you possibly upload a link of.your modified apk and send it in a.private message?
[Android General] Chrscott22:
Lol, seems like you can't trust anyone nowaday. Even though I don't use it cause I had stuff like this would come out, it's good that you caught this. Can't stand sneaky people.
[Android General] FadeFx:
I'd be interested as well, but i think they deserve even worse, i guess posting the modded version to some warez sites is the least...

----------------------------------------

tapatalked
[Android General] baseballfanz:
In system/ect/hosts where else?:D (must have root)
[Android General] lawalty:
Please post a link to one of those megadownload sites. You can do that all day long without any worries. Plus they deserve it!
[Android General] onestoploser:
Why would you even want to still use Dolphin when you know they're shady as ****, even if it's a modified apk? Their browser isn't THAT good. This should be boycotted not encouraged.

Drunk texted from my CM7 Bolt.
[Android General] Fnorder:
I've had so many requests for them via pm....

7.0 cleaned: http://qfs.mobi/f40936 : Not renamed, but resigned, so the original (and all plugins and themes) will need to be uninstalled

4.0 modded: http://qfs.mobi/f40949 : Renamed, won't need to uninstall original. This one has a number of tweaks to UI behavior, and extra functionality (Custom search URL, customizable bookmarklet button, unlimited tabs) 'exit' menu option closes tab, so hold back to exit. All admob/analytics/mobosquare code removed.

(if mods -do- object, apologies ahead of time :P)
[Android General] sensati13:
Maxthon browser definately can replace dolphin browser from a feature standpoint. Not sure if it tracks any usage though.
[Android General] mattkroeder:
Personally, I'll just switch back to the stock browser.

The only thing I would miss is tabbed browsing and only because switching between 'Windows' in stock is kind of annoying.
[Android General] rogier666:
Switching to another browser sounds easy, but Dolphin has too many things that other browsers don't have.

No browser has the custom gesture control that Dolphin has. And those that have some sort of watered down gestures (like Maxthon) don't have Dolphins bookmarks sidebar.

Dumping Dolphin for Android would be like having to remove Firefox on my computer. It's possible, but then I'd miss too many features that I use too often.

For now I'll keep Dolphin 6.2.0 (no forced C2DM process), with en.mywebzines.com and mywebzines.com blocked with AdAway.

@ Fnorder: could you please post a cleaned version of 7.0 renamed, so I can use it together with 6.2? A renamed clean version of 7.0 with the C2DM part stripped out would be even better. Thanx!
[Android General] FadeFx:
Read at least the last page please...

----------------------------------------

tapatalked
[Android General] Err0rist:
I guess I'm checking out Boat Browser.
[Android General] TheKucho:
He also said that Boat Browser is collecting data aswell. Try one one his modded ones up top?
[Android General] TheKucho:
By the way, anyone who has downloadeded the 7.0 cleansed, can you explain to me what that means? I installed it but it still has webzine on the main tab page. Confused....

Loyal user of dolphin browser and i don't wanna give it up now...
[Android General] Persona+:
Lol I never trusted dolphin browser! Nows your chance Firefox make us love you like your desktop brother. I think I read somewhere that Chrome is coming to android soon though so that might be your best bet for alt browsers.

Trust me d-..-b im from the webs
[Android General] Fnorder:
Renaming is a bit of a PITA; what I did was recursively replace every instance of 'mgeek' with 'fnord' and 'tunny' with 'fnord', along with case variations, and still certain other things required manual judgement calls iirc. I've been using the modded 4.x for months. 7.x doesn't really offer anything that would make me want to switch and re-add all the tweaks I've come to depend on, aside from the new tab button with absolute positioning, and really the point of my post wasn't to promote my mods. I wanted to warn the community, and hopefully shame the dolphin devs into behaving (unlikely, considering the way they have ignored and suppressed comments on this behavior).

I may release a clean/renamed/enhanced 7.x at a later time but it's a very busy week, and I'm sick =[

In any case, 'c2dm' doesn't appear to be google c2dm, but snipping it should be an easier matter of commenting out line 137 of smali/com/dolphin/browser/core/a.smali, wich reads:

invoke-static {p1}, Lcom/dolphin/browser/c2dm/m;->a(Landroid/content/Context;)V

as that's the only reference to smali/com/dolphin/browser/c2dm outside of the src tree itself

7.0 cleansed still has webzines. I disabled the webview callback which makes it contact webzines.com on every page load.

If people want to verify the /etc/hosts method, the best way to do it is with ngrep as per my initial post, or with another packet sniffer.

The /etc/hosts method will -not- break webzine content already in the webzines tab; it does break refreshes and adding new sites.
[Android General] Vextreme:
Any chance you could (and are willing to ;)) check 'Maxthon'?

Or could you maybe explain how you logged this in Dolphin?
[Android General] Rico ANDROID:
Uninstalled The	latest , Reinstalled 4.6.1

Reinstalled version 4.6.1
[Android General] hallydamaster:
Uninstalling and rating bad in market.
[Android General] pikachu01:
How about browsers like skyfire and opera mobile without the turbo mode?
[Android General] Vextreme:
Greath, fast responce :)

Glad to hear they don't send it on each page.

The phonehome on start doesn't really bother me. It's a free app so some statistics are fine by me but Dolphin clearly crossed the line here.

Thanks for the info!
[Android General] Fnorder:
I checked out opera awhile back, no issues. Skyfire was in the news for privacyfail(tm) in the past.

Unless it's in the .zip. These android browsers are making me paranoid o.o
[Android General] xDragonZ:
Moved to UC browser http://www.ucweb.com/English/UCbrowser/

http://www.uc.cn/product/product_browser.shtml
[Android General] Persona+:
When you use chrome you expect it and who and why. Dolphin just phishes data behind your back like run of the mill spyware. I doubt you will see Mozilla or opera try anything like this without giving you an opt-in dialog.

Google needs to mandate an opt-in policy for this kind of thing. Thanks for informing us! :-)

Trust me d-..-b im from the webs
[Android General] FadeFx:
I pmd egzthunder a link to this thread, so be prepared that the thread will gain some publicity in the next days...

----------------------------------------

tapatalked
[Android General] Dodgylegs:
This thread makes for an interesting read...

Is there any news on the Boat Browser, Ninesky and UC Browser?

Thanks peeps. I love XDA - they got my back!
[Android General] FadeFx:
Youd better think about this again, you can not know what they do with your data...

----------------------------------------

tapatalked
[Android General] metaldood:
Thanks for this. I find it shocking for a reputable app like Dolphin to do this.
[Android General] :
Thanks for the info. I'm sticking with stock until Chrome for android comes out.
[Android General] Paul22000:
Because Dolphin really is the best browser.

Yesterday I tested pretty much every single of the major browsers on the Android Market. Here's what I found:

Boat/Miren/Maxathon: None of these reflow text automatically on pinch zoom-in, which is extremely annoying. They require a double tap or rotating the phone. This is a deal breaker for me.

Maxathon: Also, it's fairly ugly as well (my opinion of course).

xScope: Zooming in is ridiculously buggy. There's no bounds, so you can zoom out until the page is only a tiny dot, or sometimes it jerks back and forth when pinch zooming. It's also even uglier than Maxathon.

Opera Mobile: Pinch zooming and scrolling around works great, but there's no link URL preview (long press a link to see where it points to). Wtf? How can this feature be missing from ANY modern browser?

With Dolphin HD and AdAway blocking mywebzines, what's the problem?
[Android General] TheKucho:
If any of you guys want to continue using Dolphin, just download the cleansed or modded versions he posted a few pages back.
[Android General] MrPib:
Now hold on. I'm supposed to remove a well-known, established browser from the Android Market, and instead install a hacked version from someone I don't even know?

That's exactly what I'm going to do. Thanks for this!
[Android General] TheKucho:
Is that sarcasm? Because I'm using that hacked version from someone i don't even know at the moment. You make a good point, kinda feeling cautious now..
[Android General] Talderon:
He may not have many posts, but looking at his post history and reading, seems to be very giving to the community and I didn't see any complaint to any of his work.

Little research clears up a lot.

Thanks,
[Android General] Geletis:
I'd like to know too.

Has Miren been tested?
[Android General] Rav3ncroft:
I'm unable to reinstall a dolphin theme but at least the snooping is gone. Much thanks.
[Android General] oluwaponmile:
Can't seem to be able to install your version, getting 'application not installed' error.

Anyway, thanks for bringing this to our nitice
[Android General] soberarmy:
Its giving an error when trying to install addons. What to do.
[Android General] bugmenow:
I am just surprised no one here recommends Firefox. Am I missing something?
[Android General] daveid:
Flash.7890
[Android General] Kashban:
Most people do nowadays (living on their phone, that is), so backstabbing at their privacy like Dolphin and Skyfire is just a crime.

I really like to know what our privacy guards say about this (in Germany). From my perspective it's illegal and should be sued.

Dolhin HD got deinstalled on all of my devices. Period.

I have Firefox mobile, which lacks flash, otherwhise is a good and fast browser. Opera Mobile seems to do the job, if only I could get my bookmarks synchronized between my desktop firefox and Opera. Dolphin HD had an XMarks plugin.
[Android General] rogier666:
Response from Dolphin on their own site:

http://blog.dolphin-browser.com/2011/10/19/introducing-dolphin-7-0/#comment-18278

Sounds reasonable at first glance, except that the phone home behaviour seems to be present in a bunch of of versions before 7.0.

http://blog.dolphin-browser.com/2011/10/19/introducing-dolphin-7-0/#comment-18275

Where in the settings would this be?

Some good news: after I updated to v7.0.1 the unwanted Dolphin C2DM background service seems to be gone. I guess it only starts if you make a Dolphin account, which I'm not going to do.
[Android General] Lucas0511:
Too little too late Dolphin, I already got rid of your browser on all of my devices.
[Android General] yangzii:
So finally the Webzine button gets removed from the address bar in Dolphin HD v7.0.1. Frankly speaking, it takes up a lot of space on the screen.

Otherwise, it has provided us with, imo, the best browsing experience.
[Android General] FadeFx:
i think it would have been better practice to just store the database for webzines locally on the device and check for updates periodically or on browser startup then? i think this is just a faint excuse...
[Android General] DolphinBrowser:
Webzine Does Not Store User Data

Thank you for all your comments.

We are delighted that our user community is growing to new heights daily. We continue to learn from you, our users, and will always be responsive to your comments.

Here we promised we never stored user data. Please check here to know more details. blog.dolphin-browser.com/2011/10/27/webzine-does-not-store-user-data/

Dolphin Browser
[Android General] FadeFx:
Hey, we, the comunity, realy love dolphin browser, it is by far the best browser out there nowadays. But, if you learn from the comunity, you definitely should consider my suggestion above and store the webzine db locally and check for updates on startup. This would not only squash our security concerns, but also reduce network traffic.

However, thanx for getting in contact, i am sure we will be able to find a solution together.

----------------------------------------

tapatalked
[Android General] janner43:
Does this flaw apply to Dolphin for Pad? I cannot see any mention of Webzine in it, so presumably not?
[Android General] surviveland:
Actually I am shocked to get the big title of the news, since Dolphin is really a good team, which I met in the TechCrunch Disrupt.

While everything is clear now according to their official states on blog. They have always put the users’ privacy and safety as the top priority in Dolphin.

So, Anyway, Dolphin rocks! The best browser ever on my tablet!
[Android General] jassyfr:
Appreciate the quick response

Good,as always, you have the quick response and I have found the updated Dolphin HD v7.0.1 on market! Good job, guys!

I love Dolphin Browser, while what expressed me most is the quick response from the support team.
[Android General] MrEzzzkiel:
So I guess we can start to use the 7.0.1 update? :)

I was pretty hesitant towards unfreezing it in titanium, but seeing as they know its a BIG problem for us users, I'm gonna give this browser a second chance...

Thx for reporting this, OP!
[Android General] MrPib:
I was making a joke, or trying to, anyway! I'm running the hacked version.
[Android General] slurpdroid:
wow :eek:

uninstalling :mad:
[Android General] keijitakeda:
Not fixed yet? (Android & iOS)

Hi, I have just checked three versions of the browser.

Dolphin Browser HD 7.0.1 on Android seems still sending URLs to

en.mywebzines.com /v3/columns.

Dolphin Browser v1.1 iPhone is also sending URLs to

en.mywebzines.com /v3/columns

(Oddly,)

Dolphin Browser HD v1.0.1 on *iPad* seems NOT sending URLs to the site.

I am not 100% sure but checked at least twice on each version.

Any more information?

Keiji
[Android General] :
7.0.1 was released 24th October. Obviously not fixed.
[Android General] Fnorder:
I'm torn between cynicism and my hope that this -is- innocent, so I'll go with both in my reply.

The way you guys dealt with previous attempts at calling this to your attention - ignoring emails and outright deleting my blog comment - cast the honesty of your organization into doubt (in my mind at least, I cannot prove this part of the affair). I find myself in doubt that dolphin would have (claimed to have) taken action had this issue not appeared on major android news sites such as http://www.androidpolice.com/2011/1...e-you-visit-to-a-remote-server-in-plain-text/

You -say- data is not collected, but I do not have access to your server and thus cannot verify that browsing history (juicy marketing data) is not retained (this includes access_log), I only have the promise of an organisation that has not earned my trust. (And I would not trust Mozilla with this)

As you can see, people consider browsing history sensitive data, it is -not- a zero on a scale of 1-10 as stated in your blog, especially for those of us that make use of url obscurity. (HTTPS requests secure host and path, this was defeated with dolphin)

That said, while I'm pleased that you -say- steps are being taken, I can confirm that:

version 7.0.1 (build id 105) still forwards urls like version 6-7.0.0 (id 103) have done. In addition, unlike v7.0.0(103) from getjar, it nagged me to rate it, thus I have bumped my one star security warning.

Assuming you will actually fix this:

Making this opt-in is good, provided it's opt-in and explains the security considerations clearly.

Alas, were I not so dependant on the features I added to 4.x, I'd still find myself analysing traffic with a packet sniffer and scouring smali code each time a Dolphin upgrade were made available. I would not do this for firefox or opera, as they've proven themselves to recognize browser security and privacy as Serious Business.

Since you have claimed to disable this, and have yet to actually do so, you prove the opposite with each passing minute.
[Android General] cswroe:
http://androidcommunity.com/dolphin...-disabled-no-breach-in-user-privacy-20111028/
[Android General] Fnorder:
Confirmed, and corrected my previous post =[

T 10.23.1.220:33382 -> 50.17.95.33:80 [AP] GET /v3/columns?u=file%3A%2F%2F%2Fsdcard%2Fdata%2Fhome.html&t=1319820385356 HTTP/1.1!!Authorization: f160db116199425d87301baff8216181!!Accept-Encoding: gzip!!Host: en.mywebzines.com!!Connection: Keep-Alive!!!!

T 10.23.1.220:35082 -> 50.17.95.33:80 [AP] GET /v3/columns?u=http%3A%2F%2Fxdaforums.com%2Fshowthread.php%3Fp%3D18846320%23post18846320&t=131982039123

9 HTTP/1.1!!Authorization: 16c8ed822f0531531592fcbfe56bf06a!!Accept-Encoding: gzip!!Host: en.mywebzines.com!!Connection: Keep-Alive!!!!
[Android General] fiqir:
im already uninstall this software. its totally wrong thing and not respect my privacy. :cool:
[Android General] Paul22000:
And this is why I continue to use Dolphin on both my phone and tablet. Great software, and now, attention to the community!

As I said yesterday, which no one seemed to respond to, with Dolphin HD + AdAway blocking mywebzines.com, isn't everything fixed then?

With AdAway blocking any potential threats, what other reason is there to avoid using Dolphin besides some kind of personal vendetta?
[Android General] Fnorder:
Attention consisting of a promise that cannot be proven, and a claim proven as a falsehood.

I've confirmed the /etc/hosts method works. This may fail in future updates that adjust urls or bring in new 'features'.

Lack of root. Lack of trust.

Nobody should do this sort of thing, ever.

I want Dolphin to become a legitimate browser, however.
[Android General] Fnorder:
Obnoxious unwanted rate-me notification 'c2dm' service polls

http://pnsen.dolphin-browser.com/no...i.mgeek.TunnyBrowser&version=105&locale=en_US

so add that to /etc/hosts
[Android General] deepdownnyc:
You can long-press the link and "Copy Page URL", long press address bar, "paste" and decide if you want to proceed from there. Takes like 2 sec.

That being said, fu Dolphin. Shame on me for not doing the research.

Thanks! Back to Opera once again.
[Android General] xjacko7x:
Boy I really hope Dolphin fixes this. I tried going back to stock browser, and I couldn't do it. Not that I surf anywhere too dicey...just tech blog stuff usually, but still.........
[Android General] ruijay:
Nice find..

uninstalling Dolphin now...
[Android General] aminaked:
There's a new version 7.02 in the market. Does it actually remove the tracking as promised? I don't know.
[Android General] eraser0:
switched to opera :)
[Android General] bazantik:
solved?

It should be solved now, in 7.0.2 - info from their blog.. I can't put URL here, I'm "newbie"..
[Android General] Fnorder:
I'm pleased to see that this has been corrected in v7.0.2 (106)

mobi.mgeek.TunnyBrowser:DolphinNotification persists, but that is only relevant to annoyance levels, and not a privacy / security matter
[Android General] DarkAgent:
Anyone know if this behavior happens on iOS version of Dolphin and if it does has it been patched?
[Android General] fiqir:
this browser dev. should tell the truth in first place. Why hide this serious matter from users. Sorry, no way for this kind of developer attitude for breach our privacy. :mad:
[Android General] Techvir:
Job well done XDA... Thanks for the OP for bringing this to light .
[Android General] norocel:
I agree with you! If they knew all this information purpose from beggining why did not say it?

For people that say this is not important,you should ask yourself just this:do you think they bothered to risk theyr reputation and write that code for nothing? So obviusly the information it sends it is precious.

Sending using a crappy Lg phone (optimus white)whitch i will never ever buy from then again

.