yashsingh1/xdaforums huggingface dataset:
[Android General] ssuds:
Sweet! I've been using it for a few hours so far... the only thing I caught so far is that the search box on grooveshark.com (mobile version) doesn't work.. it works fine in other browsers.

And could you add an option to make the menu bar always visible? Maybe something like dolphin where it's always there but scrolls with the page? The disappearing menu bar is kinda annoyingly twitchy imo

Also, the apps name makes it look like I'm looking at p0rn :rolleyes:

But overall, seems good so far
[Android General] aminaked:
That's a weird problem with grooveshark. I tried it in the stock browser and Dolphin and it didn't work either. Naked Browser uses the same rendering engine (webkit) as those browers. I suggest trying the desktop version or a browser that doesn't use webkit, like opera or firefox.

> And could you add an option to make the menu bar always visible?

> Maybe something like dolphin where it's always there but scrolls with the page?

> The disappearing menu bar is kinda annoyingly twitchy imo

I may add this in the future. The problem is that that feature is not supported in the newest version of Android so it is a bit of a support nightmare. If it's any consolation, I eventually got used to the twitchiness after a little while.

> Also, the apps name makes it look like I'm looking at p0rn :rolleyes:

Yeah, not the best name I know.

Thank you for trying it out. I'm keeping your suggestions in mind!
[Android General] ssuds:
Awesome, thanks for the awesome support and open mind!

You might want to make a separate thread for this. That way it could be flagged as news worthy and potentially hit xda front page and get more publicity.
[Android General] banderos101:
Just found the thread

Unistalled straight away, and will be uninstalling and boycoting ANY app DEVELOPERS who have no regard for human privacy.

I do no CONSENT, wheres that option

"Its there, but we dont use it".....yeah, how the f do we know, wheres the checks and balances, wheres the consequences

This kind of thing really pisses me off

Why arent there laws protecting privacy.......
[Android General] GermainZ:
Cool.
[Android General] aminaked:
The list is short as far as I know. I trust something like Opera but they do have the option to send all of your traffic through their servers. At least the option is there. Firefox, Chrome, and stock Browser, I also trust. There's only one more that I trust and I actually trust it above all of the others, but only because I made it myself...Naked Browser (xda discussion about it)

Dolphin, Boat, Maxthon...look back in this thread to see how they track you. I wouldn't be surprised if most of the others in the Play Store do too.

Even if you don't care about privacy, it is still wasting your battery power, bandwidth, and CPU cycles. I was so pissed at the situation, I had to make my own browser!
[Android General] banderos101:
Thanks for the list, are the browsers listed as relatively safe, been tested or is this an assumption
[Android General] aminaked:
I don't know if the big name browsers like Opera, Firefox, and Chrome can be trusted. It's just that I trust the organizations behind them. As for the stock browser, I've checked out several versions of the source code for it and nothing has popped out anyway.

As you mentioned in the other thread, it sounds like I'm giving a "shameless plug" for Naked Browser and I can't argue with that. I'll try not to mention it again...but it is a free app without advertising and doesn't frickin' spy on you! :p I encourage anyone to join me in the Naked Browser thread if you'd like to discuss that app.Thanks.
[Android General] banderos101:
No way mate, you plug away, seriously, i wished more devs, or corporations employing devs had your moral compass, i 100% agree with projects like yours, this shameles plug, and i kid when i say shameless, is most welcomed, very much so, id regret lossing devs such as yourself, hope you stick around untill your blue in the face, and dont lose that highly thought compass, its why someone like me will always support devs like you :good: :D thanks for your work

Now, in the hopes that i havent over flattered you..........Dear diary................

Pre advance sorry for my lame jokes :D
[Android General] GermainZ:
Firefox for android is open source as well, so any one who is paranoid could check the code out and build it by himself.
[Android General] rogier666:
Firefox is sponsored by Google and their raison d'etre is data collection...

The best defense against nosy browsers is to block their snooping servers in your Android hosts file. AdAway makes it really easy to stop Dolphin from phoning home.
[Android General] Homey:
I know that this is an old thread but has anyone taken a look at Ocean Browser to see if it's stealing your data?

It's getting a lot of favourable reviews but then again so was Dolphin...
[Android General] aminaked:
Yeah, I posted in the other thread but here you go. I like to use mobilesandbox.org for a quick and easy analysis.

Here's an analysis of the current Ocean Browser APK: http://mobilesandbox.org/xml_report_static/?q=356301

Some interesting items:

android.permission.READ_CONTACTS

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.READ_LOGS

Execution of external commands

Cipher(AES/CBC/PKCS5Padding)

It is not widely known but apps can actually query contact data without requiring the READ_CONTACTS permission in the manifest. Reading logs is a big "no no" in my book as all kinds of data can be gleaned. "Execution of external commands" is also really scary.
[Android General] FadeFx:
Can you proof that?

_________________________

tapatalked from GalaxyS3
[Android General] Homey:
Wow that's really scary. Can these particular permissions be turned off for any app so that you can simply stop it doing stuff that you don't want them to do?
[Android General] aminaked:
From android.com: "you can retrieve data for a contact in the Contacts Provider, even if you don't have the READ_CONTACTS permission"

Do they grab contact data without user interaction by "executing external commands", reading log data, or in some other way? I do not know, but the question remains: do you want/need your web browser to access your contact data at any time and in any way? Keep in mind, sharing data (say, from a browser to an email app) does not require access to contact data.

This is just one area of concern, though. What data are they collecting? Do you want your browser to do all of this stuff? Their privacy policy is fairly scary: http://www.compal.com/apps/oceanbrowser/privacy.html

Yes as the OP of this thread has done, you can decompile an APK and, with enough effort, strip out most of the garbage. Also, I believe that some "ROMs"/root apps allow tweaking of privileges.
[Android General] jarvik:
Would you goto the bathroom with glass walls in the middle of town square? Or would you give us your bank card number or your social? of course not. Its a lot like that. Its no ones business but your own. speaking of privacy I hope everyone is using startpage.com in lieu of google.
[Android General] peter-k:
Android is constructed from the ground up to collect data about what people do, whom they know and where they go. I am not paranoid about it. I am realistic about it.

What about the Sleipnir browser? Seems fairly reasonable.
[Android General] 2Droidswalking:
i'm really torn between my dislike and distrust of google and the infinity 700 as a fun toy with a lot of potential. i've been in IT for 23 years so i'm not a noob in most things and i'm 49 years old so i'm also not really a noob in any other way. i'm anti google in every way, especially in the corporate environment. if you use a piece of software you get to click through a EULA - end user licensing agreement. googles eula states ( in very general terms) that they provide software for you to use in pretty much any way you need to and you agree to allow them to upload code updates and program mods as they see fit and we also agree to allow them to remove any information they want to under the guise of "anonymous user statistics". google are the borg of computing and along with facebook they have removed any semblance of privacy we used to have and we've let it happen. i'm not what you'd call a quick adopter of new technologies. it's taken a few years for me to get a 'smart phone' (nokia n9) and this is my first tablet, and yes it's got android (CROMi-X 4.6.9). i'm grateful that there's someone who will look at this stuff and let us know about the dodgy crap. every single coder out there who punches out a blob of software does it for a reason - everyone has their own agenda.

Thank you to the android community in general for doing their best to "keep it real".
[Android General] sushidog:
This isn't true. Before Google buy it Android was something completely different. Even now it's open code and you always can choose to protect your privacy with Xposed + Xprivacy.

Android is BY FAR more transparent than your windows PC or any Apple device.

Sent from my Nexus 7
[Android General] 2Droidswalking:
tse
[Android General] aminaked:
There is a difference between a large, established, public company like Google spying on you versus a small, new, private company. This thread is about the makers of Dolphin but there are lots of apps out there that are able to collect data. These developers have nothing to lose, and many are based in countries where they face no ramifications for gross privacy violations. I do not like Google spying on me, but that does not mean that I am going to install software by companies like Dolphin. It is a matter of degree and Dolphin, Boat, etc. are over the line in my opinion. Spying also wastes battery, bandwidth, and CPU so why would anyone want to install more spyware on their device?
[Android General] peter-k:
It's a well known fact. A relevant portion of the upload traffic is raised user data.

Androids different parts are having permissions to see your telephone number and the one of your calling partner, know where you went, where you are and where you are going now, know the accounts you are having at different sites, things that you are looking at at the web, music that you listen to, pictures that you view, articles you read, searches you do, things you buy and might buy, issues which you communicate with your wife and with your mistress. I bet most owners of Android phones are not even remotely aware of this massive data harvesting. If we remove some parts of the Android system, then there are still several others left which can do absolutely the same. And removing everything is not possible, unless I like to own a brick. If someone undertakes the task of managing the plethora of permissions, then with the next update they may get reset again.

I assume in excess of 90 % of the software offered at Google Play use permissions with only purpose being to raise user data. Installing one of the aftermarket apps is just like adding a few more arms to an octopus with hundreds of arms.

Browsers are certainly very suitable user data collectors. Most browsers nowadays are only user interfaces to the Android build-in Webkit. If the factory browser is removed from the system what is actually removed is only the user interface, simply said. Dolphin, One Browser, UC Browser, Maxthon, Boat, name it, these are all only new user interfaces to the build in Webkit. What you can really chose is, if you want you data to land on a Chinese servers, or on a server in the USA. That feature comes depending on your browser being from China or from the US.

Very few browser use only the permission required for their function.

Very few Android apps offered are there to offer a good app to the public, with the permissions which are needed for their function only.
[Android General] sushidog:
As I told on my previous post you can have a really private Android platform if you choose to install xposed + xprivacy.

If not you can use a very solid and really clean browser like Tint, Afwall firewall to stop some IP connections and most of all remove all Google crap.

I stopped to install gapps or using any Google services long time ago and I'm not missing a bit. Now I have my Owncloud where I put my files to share, synced with my phones and tab contacts/calendar using CalDAV and CardDAV.

My markets are F-Droid and Aptoide (yes, I'm judiciously careful on second one). If I can't find an app my last resort is using an old phone with a clean ROM to connect and download it from Play Store.

Sent from my Nexus 7
[Android General] peter-k:
I tried Tint. Exactly what I was looking for. Thank you for this useful recommendation! I was using Sleipnir. but it has still a few rough edges.

Well it may have sounded so but I am not obsessed with privacy issues, I am just trying to be realistic about Android. But also I don't like the idea to be a marketing vehicle ready to be used by anyone. Or a relevant portion of my resources being blown away for non-sense. If the wallpaper needs permission to access the accounts stored on my phone and the browser wants to take pictures and makes phone calls, or my friends gets spammed with adverts of things that I viewed before, then I am off.

Tint is a good suggestion.
[Android General] Scripts:
I had no idea that there was a security issue with this browser. Thanks for the proof.
[Android General] markp1989:
The issue I had with the dolphins collection of my browsing habits is that I don't get any benefit from the collection, at least with googles monitoring I get some sort of benefit when it comes to Google Now etc.

Also I had no illusions about Google I and everyone else knows that data is collected, where with dolphin I had no idea
[Android General] ThePureHeart:
This is old and Dolphin have explained this!

It's no longer an issue.

Sent from ThePureHeart's I9300 Boss Edition

ParanoidAndroid | Googy-Max
[Android General] aminaked:
Stop defending Dolphin by propagating their public relations spin.

The whole truth is that Dolphin now encrypts the data that they phone home. That does not fix the privacy issue. They made a completely incompetent and bonehead move phoning home all URLs in plain text, even https URLs which should always be encrypted as they contain sensitive information like passwords. It is true they stopped that idiocy, but you are ignoring what is really happening now.

Look at this analysis of the current version of Dolphin Browser:

http://mobilesandbox.org/xml_report_static/?q=357932

android.permission.READ_LOGS [basically no app should have this]

android.permission.RECEIVE_BOOT_COMPLETED [why is your browser starting on boot?]

android.permission.READ_CONTACTS [you want your browser to read your contacts?]

android.permission.RECORD_AUDIO [you want your browser to record audio?]

android/telephony/TelephonyManager;->getDeviceId [to identify you]

getSubscriberId [to identify you]

Execution of external commands [scary]

Cipher(AES/ECB/PKCS5PADDING) [now they encrypt data]

Cipher(DES/CBC/PKCS5Padding) [they learned not to send it in plain text]

Cipher(RSA/ECB/PKCS1Padding) [encrypted so we cannot know what they collect]

HttpPost [and phoning home]

That is not even all of the garbage brought to light by that report. Dolphin's developers should be ashamed of themselves and its users need to learn the whole truth. Look at their so-called privacy policy, for example.

If your argument is "Google spies, so what" then you need to wise up. For one, Google is a large and well-known public company that does face repercussions for violating privacy. Dolphin is...not.

Second, even if you do not care about your privacy--and you should--spying wastes battery power, bandwidth, and CPU cycles. No one needs more garbage on their device.
[Android General] ermacwins:
Whats next best after Dolphin what allows to open tabs easilt and reopen them?
[Android General] FadeFx:
Try boat browser

_________________________

tapatalked from GalaxyS3
[Android General] aminaked:
Boat looks even worse: just look at the permission requirements. Kind of off topic in this thread but I ran an analysis of the Boat APK and posted the following in Boat's forum here on XDA. They never responded.

Comment on this analysis of Boat: http://mobilesandbox.org/xml_report_static/?q=351712

0. Why is Boat reading contacts?

1. Why is Boat reading data logs?

2. Why is Boat reading last known location?

3. Why is Boat reading the subscriber and device IDs?

4. Why is Boat encrypting and phoning home data?

5. What about all of the other garbage brought to light by that analysis?
[Android General] FadeFx:
According to app ops boat does not read contacts, only suspicious permission is read location. Nothing else...

But then I also use an adblocker so probably those functions just never get called.

_________________________

tapatalked from GalaxyS3
[Android General] aminaked:
In App Ops are you looking at "last used"? Other permissions can be used by an app during a different time period, like right after device boot. Also, Boat requires strange permissions like the ability to close apps. Who knows what shenanigans they are pulling with those permissions? Look at the permission requirements, the APK analysis, and at Boat's so-called "privacy" policy.

Adblock would not really stop an app's functions from getting called although it could block some phoning home, at least until the phone home server is changed.

Discussed a bit a few pages back in this thread... From android.com: "you can retrieve data for a contact in the Contacts Provider, even if you don't have the READ_CONTACTS permission".
[Android General] vipercoyote:
So whats the best to block the apps from calling home. Would a permission deny manager work?
[Android General] FadeFx:
The thing is that most 'malicous' functions are used for ads serving, most ads are served through plugin librarys that get their instructions to collect whatever data through some company servers which are blocked by the adblocker.

_________________________

tapatalked from GalaxyS3
[Android General] aminaked:
That sounds right to me. The thing is, your ad blocker is playing an endless catch up game with the spyware. At any time the spyware could change its phone home servers.

There are still the wasted resources of the app collecting your data, encrypting it, and at least attempting to phone it home.

Then there's the question: why are you using spyware in the first place?
[Android General] FadeFx:
I think it actually does not collect the info as it does not get the advice to do so from the ad network server, thats why the permissions dont show up in last used list.

However, you are actally right that we should not use adware, but the ui of boat browser is superior to any other browser i know and there are only two browsers that can be totally trusted, that is aosp and firefox and none of them has even a half as good interface.

_________________________

tapatalked from GalaxyS3
[Android General] badboy47:
Get xposed installer > download xprivacy module. It will let you control each app permissions.

---------- Post added at 04:18 AM ---------- Previous post was at 04:04 AM ----------

I kinda blame google for this. I mean 3rd party apps should not have core permissions. If so It should be very minimal for advertising.
[Android General] Galileo:
Why risk it? If I suddenly feel like watching some extremely perturbing and weird porn videos I don't think there's any need for them to know what I'm watching.
[Android General] aminaked:
I do not know how the spyware works. Regarding AppOps, my understanding is that it does not work with every Android permission. You may not be able to rely on it to report 100% of permissions used.
[Android General] vipercoyote:
Im just using furefox firefix for now. I really liked dolphin but o well
[Android General] Schokonuss:
And Dolphin Zero? I mean they promise highest privacy.
[Android General] LostGamer:
Thanks for the info.. Uninstalled.. I use UC.. And tell abt Dolphin Zero what abt its privacy..
[Android General] retry32:
Lol.

I also always wondered why Google was so positive about Dolphin...

Oh well...

The best browser to use is Opera Labs 12 with Extensions.

It's faster and more functional than Dolphin :)
[Android General] :
Using anything that dolphin makes is just ridiculous. Stay away from their products unless you like handing over all your personal info to shady people.

Sent from my Nexus 5
[Android General] kaliyaakakallu1:
and i thought i was going to do something like that...:D:laugh:
[Android General] rogier666:
Just run AdAway (or any other app that can edit your Android hosts file) and block:

en.mywebzines.com

pnsen.dolphin-browser.com

tracken.dolphin-browser.com

Problem solved.
[Android General] aminaked:
> Dolphin Zero

Analysis of Dolphin Zero APK: http://mobilesandbox.org/xml_report_static/?q=358023

android.permission.READ_CONTACTS

android.permission.READ_PHONE_STATE

android.permission.READ_LOGS

getDeviceId

Execution of external commands

> UC Browser

Look at the privilege requirements: worse than Dolphin.

> Adaway

Again, you are just trying to stay ahead of the spyware. If they change their phone home servers then you lose. Battery/CPU are still used to some extent in attempting to collect and phone home your information.
[Android General] Ryborg:
Had no clue Dolphin was engaged in this behavior. Disappointing at best. Guess I'm on the hunt for my new browser. Opera? :confused: UC?? Tint??? Looking into Xposed as well...appreciate all the info and investigation
[Android General] mchu6am4:
I still wouldn't use it anymore... They've breached my trust!
[Android General] Schokonuss:
Hey, I can't stick 127.0.0.1 en.mywebzines.com mywebzines.com into /system/etc/hosts :( my phone is rooted and I tried 3 different file managers, always "the changes couldn't be saved" pops up :/
[Android General] rogier666:
That's what Xprivacy are for. It feeds bogus data to apps like Dolphin with close to zero battery usage.

When's the last time someone used a packet sniffer to check what info really hitches a ride on Dolphin? That's much more useful than just looking at a list of permissions, because that usually just tells you what's wrong with Android rather than the app that asks for them.

For example, the makers of Android made a really stupid decision when they bundled phone state and phone identity in one single set of permissions. That means that every app that uses "phone state" for legit reasons gets "phone identity" thrown in for free. I guess that's the price you pay for using an OS that was built to collect as much info as possible to shoot ads at you.
[Android General] vipercoyote:
Wow this is getting interesting
[Android General] :
Its easy people just don't use spyware web browsers. Why would one put known spyware on their device.

Sent from my Nexus 5
[Android General] megaancient:
Time to use xprivacy.
[Android General] Schokonuss:
Hey, I can't stick 127.0.0.1 en.mywebzines.com mywebzines.com into /system/etc/hosts on my phone is rooted and I tried 3 different file managers, always "the changes couldn't be saved" pops up :/
[Android General] FadeFx:
You need to mount system/ rw

_________________________

tapatalked from GalaxyS3
[Android General] peter-k:
It is a daunting task to keep the permissions in bail and xprivacy managed well. I ave a life, too.

==================================================================================================

I found out that my factory browser is a slightly improved variation of Tint. THat's what I am using now, and I am sticking to that. It's small and easy to manage, and it does not have any permissions except those needed for it's functions.

No unnecessary permissions, no dubious functions, no storing of bookmarks and links on any crowd or clowd.

People tend to defend what they once choose. Besides of undesired permissions, Dolphin and Boat are overrated anyway IMO.
[Android General] vipercoyote:
Dolphin is no where overrated if anything underrated
[Android General] aminaked:
That adds nothing to this discussion about Dolphin Browser's continued privacy violations and the privacy violations of many Android web browsers.

How and why use an app like Dolphin/Boat/UC Browser when you know that they are garbage?