yashsingh1/xdaforums huggingface dataset:
[HTC EVO 3D] ssojyeti2:
I didn't really understand that, but it looks important. I'm not really sure but I think that the video meant that the wimax can be accessed when its not on. Something like that?
[HTC EVO 3D] issafram:
Read the article on this.... Sprint deserves a wag of the finger from Colbert. Its just dirty. Back doors like crazy. And why the **** would HTC not pro actively remove all the crap in the first security patch. They KNOW everything before we FIND it.
[HTC EVO 3D] huytrang90:
TrevE, would that LBE tool be enough to revoke privilege for network access?

not an expert, but we could probably port over the iptables and add some default configuration for our phone.

Heck, maybe I just build one. Ha.. MOM. :)
[HTC EVO 3D] Mikee4fun:
Thanks TrevE for being on this!
[HTC EVO 3D] ch1naski:
TrevE, thank you for putting this out there. And thank God you aren't a maligned dev, or we'd all be in trouble. HTC should be paying you for doing QC on their code. Oh, wait... I forgot, all this was on purpose.

Warm & cozy.
[HTC EVO 3D] busventinc:
Always treve you are one step ahead of the dictatorship known as HTC and Sprint I am grateful your on our side man thank you
[HTC EVO 3D] xHausx:
Well isn't this lovely, they set that up for debugging and forget to disable it or something?
[HTC EVO 3D] Tiffany84:
Just read about this on Phandroid. Kinda crazy. Thanks Treve for all you do.
[HTC EVO 3D] TrevE:
those binaries are actually whats called if you logcat connecting to wimax. While I cant say for sure my guess is it wasnt left open for debugging, more hey nobody will look here. The wimax monitoring port is very curious as well - if you look at the poc app it can query DUN state, release keys and rom versions among other things.

These ports look like they are never used until you connect to 4g, so the best solution I came up with is just shutting them off all the time and turning them on with an app before you connect 4g. This atleast limits vulnerability time from any random app reprogramming your wimax values to only be possible when your on 4g.

As always I think its a good general warning to stay away from shady apps, things arent always as sandboxed as you would think. While HTC is already working on an official patch for this and other issues where theres a will theres a way with malware. I think firewalls and protective measures need to start stepping up before things get worse, its a linux pc in our pockets with a radio - not just a phone anymore.
[HTC EVO 3D] TrevE:
Not sure, I kinda see this as a problem in android - local and internet arent really separated. I cant say for sure if revoking will work, download the proof of concept app and try :) This is one of the reasons i feel strongly about demonstrating issues like this, everyone can learn from it how it works and how to squash this stuff and protect ourselves. The last thing we need is winnuke/sasser/whatever on android.
[HTC EVO 3D] laie1472:
Forgive for the noob??? But I'm just trying to gain an understanding of how to use this. Do I just edit the int file or use your app before I turn 4g on?? Also since Im in an area that has little to no 4g is there a quick way to completely disable the 4g antenna untill I want to use it??

Locked & Loaded

""shooter on Deck""
[HTC EVO 3D] NxtGenCowboy:
HTC loves you TrevE!

Good work again! :D
[HTC EVO 3D] il Duce:
TrevE, I just gotta say, because it's not said enough, thank you. You are afaik the ONLY low-level dev still working for the end user in public, and I for one find it both heartening and praise-worthy. With all the drama we see around here, and get involved in, you still keep on pushing forward. I'm thoroughly grateful that you are doing this and not some douchebag hacker who wants to nuke our phones from the cloud :D

#idrankthekoolaid
[HTC EVO 3D] KCRic:
TrevE - While I'm not using an HTC device with Sprint (did with T Mobile) I truely appreciate all your work.

I do have a question though. Do you know if this is strictly HTC or if it's more Sprint? I ask that because it would leave others vulnerable if it's not narrowed down to who is actually writing the code into these devices. Or is this just an Evo 3D issue (wouldn't make any sense IMO)?

So:

1: If it's HTC > What carriers does it effect?

2: If it's Sprint > What devices does it effect?

Being on the Epic 4G Touch, I'd like to figure this out. Do I just pull the logcat to look for this or is there more?
[HTC EVO 3D] TrevE:
Not a noob question, sorry i get kinda technical sometimes.

The way I have found to patch this is disable the services in the ramdisk (by making edits in post 1) so they are not run all the time. Then if you ever want to connect to 4g, just start up the app and click start services, then start4g.

You should also be able to use the app to manually stop the services once the rom has booted without making ramdisk changes, but you will need to do it each boot.

A bit of a pain until HTCs official patch comes out (probably a month from the last issue), maybe someone can make it easier I included full source for everything

While i havent qutoed everyone - thanks guys for the kind words. It was a hard decision wither to release this publicly but I feel its right. Theres a lesson for everyone showing this - HTC / XDA devs / general public - and I hope it raises awareness about the state of mobile security....

Anyway good question about whos responsible. I have no farking clue. Some helpful tools that are usually standard in seing whats going on in your phone

busybox ps :process list of everything running

busybox netstat -alp :network connection info. Anything LISTENING is a local port waiting for a connection. ESTABLISHED is something talking to another port

the dumpstate / dumpsys commands are also helpful in finding information about services in the background. I have started writing a security suite - http://xdaforums.com/showpost.php?p=17612559&postcount=110 - alot of that should be generic on samsung although i have not tried because I do not have one.
[HTC EVO 3D] hitman4274:
Very interesting will be watching this thread closely

Shot from my shooter in 3D

injected with cleanrom2.7
[HTC EVO 3D] KCRic:
Thanks for the reply. Got the app and I'll buy the pro key in a bit. From what I can tell it works perfectly on the e4gt. Time to get down to business and see if we have similar security threats.

I'll put up a thread in our device section about this issue and link it to this one if you don't mind. Would be helpful to get a couple device brands and across carriers involved to see who/what all these issues effect. I'll wait for your go ahead first given the sensitivity of this obviously I can see your desire to keep it fairly quiet and contained for the moment.
[HTC EVO 3D] oohaylima:
That's what I've been pushing from the gate. So many people think our phones , because it's ''Linux'', that it doesn't need firewalls or AntiVirus systems. Security Now with Steve Gibson mentioned the possible exploits our phones will have.

So glad you're out there finding theses things, Treve. So very glad indeed!
[HTC EVO 3D] laie1472:
Thanks for the feedback trev I really appreciate it. I will definitely edit the script and as far as being to tech lol na man my brain shuts off on its on at times lol, and starting an app is a welcome to me if it give me better security. Once again man thanks for the info, feedback,app,script & for looking out for us xda members.

Locked & Loaded

""shooter on Deck""
[HTC EVO 3D] Max_Pain:
i know i'm part of the minority here, but for those of us on non-Sprint providers, can we completely disable/remove all the 4G stuff from our phones. MetroPCS will never get Wimax (they JUST got LTE) so the Wimax stuff is unnecessary and i'd rather remove it now that we know there's at least one exploit that uses those binaries.

thanks.
[HTC EVO 3D] xHausx:
It shouldn't hurt anything to, you could probably get away with just deleting it from the ramdisk and erasing the binary for it.
[HTC EVO 3D] HammDroid:
First, I just want to join in on the consensus of thanks for catching this. The community owes you a lot TrevE.

Second, I apologize for any lack of knowledge on this, but I either am doing something wrong, or just didn't fully understand what stopping these binaries does exactly.

Should stopping the binaries via the .apk or using the edited init.shooter.rc file cause wimax to not work? Because I did both (stopped via your .apk, and then after noticing wimax still worked, pushed a new init.shooter.rc file with your edits) and then initialized my wimax/4g and it worked whether the binaries were 'stopped' or 'started'.

If wimax should be working with binaries stopped, then why would we ever turn them on, which is what leads me to believe I'm either doing something incorrectly, or not fully understanding it.
[HTC EVO 3D] HammDroid:
I think I've answered my own question on this, but someone correct me if I'm wrong, please.

The binaries being stopped will only protect the phone when Wimax is off. Wimax still functions when the binaries are stopped, but it will automatically start the binaries up again during the time you have Wimax on, leaving you vulnerable. There isn't actually any reason to not have the binaries stopped all the time, as you don't need to start them up again just to use Wimax, as I initially thought. At least, this is what it looks like to me...

-----
[HTC EVO 3D] TrevE:
Hey guys sorry I'm stuck in CT no power since sat. Drove around to find.1x, cell towers are even screwed. Its like the apocalypse here :p

Be around hopefully soon...
[HTC EVO 3D] AndroidUzer:
Do you like any of them and if so which one?

DroidWall seems the very popular or is this too primitive as well?

Thanks!
[HTC EVO 3D] freeza:
Does anyone still have this app? The link is down.
[HTC EVO 3D] HammDroid:
Here ya go!

http://dev-host.org/8jj3ophejgox/TrevE_WiMAX_Patch.zip
[HTC EVO 3D] freeza:
I love you :)
[HTC EVO 3D] EpicBarbecue:
So flash this and Wimax ports are off correct?
[HTC EVO 3D] :
Aslong as u disable it from ramdisk u can choose when to switch it on and off
[HTC EVO 3D] EpicBarbecue:
I just want it off all the time cause I never use it ...but I'm not familiar with finding the ramdisk to turn it off...
[HTC EVO 3D] HammDroid:
No, not flashable. Its just an apk file you need to unzip.

If you have Root Explorer, you can follow the instructions in the op post and just copy past the binaries there into the correct spot.

Then you don't have to worry about remembering to run the wimax patch street each restart.

-----
[HTC EVO 3D] HammDroid:
Awww... So warm and fuzzy up in here :P

Lol
[HTC EVO 3D] EpicBarbecue:
Sweet thanks hamm
[HTC EVO 3D] HammDroid:
Don't thank me, thank TreVe ;) He is the guy who found the issue and wrote the wimax patch. I'm just a random guy who happened to still have the zip file on my phone.

-----
[HTC EVO 3D] EpicBarbecue:
Yes I have thanked him too lol....awesome work....maybe someone can make a flashable zip to completely turn it off for people that can't figure out where to go and what to do.
[HTC EVO 3D] mingolianbeef:
Is this free 4g, I'm confused.!?
[HTC EVO 3D] EpicBarbecue:
No its to turn your Wimax ports on and off....security stuff
[HTC EVO 3D] laie1472:
Does anyone have a copy of the zip in the op?? The site seems to be down at the moment. Thanks

""Shooter on Deck""
[HTC EVO 3D] EpicBarbecue:
There is a link on page 4
[HTC EVO 3D] chippillie:
As far as a firewall avast mobile security seems to work ok so far and has a firewall that you can choose what app can access what in it. As far as apps. I know its not really the topic but thought id throw it out there.
[HTC EVO 3D] HammDroid:
And not exactly the same thing, but I like LBE Privacy Guard for quickly and simply changing specific permissions on individual apps. You can set stuff, for example to allow internet connections, ask/confirm, or auto deny, among other permissions.

-----
[HTC EVO 3D] thznutz87:
What happened with this? Is there a finished firewall?

Sent from my PG86100
[T-Mobile LG G2x] siulmagic:
Android-Maisters

Presents

Here is the latest version of MIUI Rom for our G2x, this rom is based on the optimous 2x official release. I will try my best to keep this one updated with MIUI.

Features:

My own ram script

Wifi Calling(Check Addon Section)

OC Kernel

4 way reboot

MOXed apps

Changes:

v2.1.0

Now Based on Miui 2.1.20

increased vmheap size to 36m

and all my usuall optiimizations

v2.0.0

Now based on Miui 2.1.13

+ the usual optimizations

v1.0.6

Based on Miui Latest Build 1.12.9

v1.0.5

Tweaked ramscript to have less frezzes, system had a hard time keeping up with the lomemmorykill settings.

removed oc daemon

updated Build to latest MIUI 1.12.2

v1.0.4

Updated base to 1.11.18

+ the usuall optimizations

v1.0.3

Updated base to Miui 1.11.11

Changed oc daemon default governor to powersaver.

v1.0.2a1

Removed wifi calling(its available as a flashable zip,check add on seciton)

removed code to make the theme folder, ilbwork on a flashable zip for that

v1.0.2

Now based on Miui 1.11.4

Manually edited mms.apk for bigger mms size(please test this i dont have a data plan)

Themes now work properly

Added UI Optimizations

v1.0.1

Now based on miui latest version 1.10.28

mms fix included.

v1.0

Fixed the signal issue

Sound issues should also be fixed

Moxed apps for more free ram

added virtuous OC Daemon (thanks rmk40)

Fixed su issue being lost randomly.

Included 4 way reboot

1.2ghz Default OC

To overclock with the OC daemon use this app Here

Rember to remove any oc app, else the daemon will disable it self.

ScreenShots:

If themes dont work on first boot, do this:

Flash the Theme fixer on the add on section.

Download Link:

v2.1.0

v2.0.0

v1.0.6

v1.0.5

v1.0.4

v1.0.3

v1.0.2a1

v1.0.2

v1.0.1

v1.0

Old build

Let me know if there are any issues

Add On's

Install Wifi Calling( flash this trough recovery)

Theme Installation Fix( flash this trough recovery)
[T-Mobile LG G2x] siulmagic:
Reserved

Reserved....
[T-Mobile LG G2x] Longevite:
Thank you very much. Will try it.
[T-Mobile LG G2x] shovelhead83:
Why is the link not clickable via phone?

Thanks for coming aboard.
[T-Mobile LG G2x] LEGEND94:
Does Wifi Calling Working on this Port?
[T-Mobile LG G2x] saotua:
I just flashed the rom and it took awhile to search for signal (as in OP stated) but after that it stays connected. Haven't try GPS yet, I'll try tomorrow morning. Wifi calling still no go for me... still Invalid sim. Beside that, everything working well so far. Thanks siulmagic again for the port.
[T-Mobile LG G2x] fcisco13:
Ram script ....

Oc kernel ....

Sounds good will try, thanks keep it up
[T-Mobile LG G2x] siulmagic:
has wifi calling ever worked on a miui rom?
[T-Mobile LG G2x] fcbarca17:
Works for me on the latest build. I am using whitehawkx s rom but am looking forward to this one too.
[T-Mobile LG G2x] fcbarca17:
Edit : only works sometimes
[T-Mobile LG G2x] saotua:
When i had the mytouch4g, it worked perfectly. Since i moved to this g2x, i always got "invalid sim "
[T-Mobile LG G2x] brianhaskell:
stoked to see a new miui developer. need more of a good thing!Q
[T-Mobile LG G2x] Kabley:
More devs?! Hell ya! Looks clean! I have a great appreciation for what you devs do! Siulmagic, thank you for you time!

Sent telepathicly using xda premium
[T-Mobile LG G2x] nycelitemaster:
@Siulmagic, hey i am trying to learn how to port o2x to g2x.. MIUI is an example, i know boot.img has to be changed since it is the main file, kernel has to be changed.. RIL file needs to be changed.. i am trying to figure out.. do you extract MIUI system folder and re-cook the rom, or do you just change some files since it is similar. please let me know. thanks
[T-Mobile LG G2x] carlosm83:
Nice to have another dev here :-)

Send from MIUI_G2X_WH
[T-Mobile LG G2x] shovelhead83:
Lol, I will try a different approach.....anyone have a mirror?
[T-Mobile LG G2x] player911:
I've never had Wifi Calling work on MIUI using the G2x. It always reported an invalid sim.

Whitehaux typically just updates the base to coincide with new MIUI builds but doesn't have the time to really get down with it. Seems we're picking up more bugs as we go.

I eventually went back to CM7 a few days ago because it just got so crazy.

G2x - 2.3.7 CM7

Transformer - 3.2 Revolver OC/UV
[T-Mobile LG G2x] pottyvick:
I'm gonna wait for tomorrow's update ...
[T-Mobile LG G2x] jcaf77:
Why is it that wifi calling doesnt work on miui?? I really like miui but wifi calling is a deal breaker..
[T-Mobile LG G2x] siulmagic:
version 1.0 is out, check op for changes, enjoy guys, let me know if anything fcs.
[T-Mobile LG G2x] danthemanohhyea:
Feedback again:

Installed the updated file after completely wiping my phone. Flashed the file and it would continue to cycle the boot screen over and over.

What I did to fix it was to go back into CWM and wipe data/factory reset then wipe cache, then re-flash zip file, then fix permissions.

After that it booted up no problem.

Wifi Calling is still broken, but I like MIUI more than I like having wifi calling!

Thanks for all your work!
[T-Mobile LG G2x] jjayno2003:
im goin to try what u said cause im also getting bootloops

nope didnt wrk for me!!!!
[T-Mobile LG G2x] lychris85:
I am going to try the CWMR method and then let you know how it goes
[T-Mobile LG G2x] jjayno2003:
thanks!!!!
[T-Mobile LG G2x] siulmagic:
guys make sure you use cwm 5.0.2, thats the version im using.
[T-Mobile LG G2x] :
im gonna cry.. it still bootloops i tried everything and it still boot loops :(:confused:
[T-Mobile LG G2x] jjayno2003:
i am thats what i flash all my roms in lol but for some odd reason id getting bootloops so im redownloading from the site and re-doing it again and see if that makes a big change!!
[T-Mobile LG G2x] bdkinney:
I got the never ending load screen too...so I pulled the battery, booted into CWM (I'm on CWM 4.something BTW), wiped data/factory reset + wiped cache, and rebooted. No, I didn't re-install the ROM...and it booted.

...Still no themes directory...so...something in an initialization script maybe? IDK...

...but it's working now...so...thanks!
[T-Mobile LG G2x] siulmagic:
something is wrong with my recovery, its giving me false positives of wiping data, so im getting inconsistent data wipes, im goimg to have to test my rom further, so i dont get more falsee positives, sorry guys.
[T-Mobile LG G2x] lychris85:
Well after doing multiple wipes, it didn't work. I decided to try just doing a dalvik cache wipe and just installing the rom over the previous version, IT WORKED :). Then wanted try faux's 4.4 kernel, and that is still a no go. So I am just running as is.
[T-Mobile LG G2x] jjayno2003:
now that wrked for me to lol thats crazy.
[T-Mobile LG G2x] siulmagic:
yea that will work, because its using the dalvik cache from the previous version, if it were to use its own it would bootloop. dont worry im going to work out why my recovery is acting up. sorry update has been so crazy and none working.
[T-Mobile LG G2x] lychris85:
Anyone having problems with theme? when I apply a theme, the main wallpaper doesn't go through.
[T-Mobile LG G2x] fortunejr:
In for the update. Came from Whitehawkx MIUI 1.11.04 doing a complete wipe of everything (data,cache,system,dalvik,battstats). Installed 1.0.2 and I get bootloops
[T-Mobile LG G2x] siulmagic:
i finally figured out what was making it bootloop, its the wifi calling apk(kineto.apk), so im uploading a new build with it removed, but dont worry il make a flashable zip to get it back, we just need to flash the rom without it first.
[T-Mobile LG G2x] siulmagic:
new version up, v1.0.2a, only difference is wifi caling app has been removed, iv provided a flashable zip , to install it separately.
[T-Mobile LG G2x] :
do themes work for anybody here? i used the old version i removed the wifi calling app but it still kept boot looping so i went to recovery and wiped data + cache and rebooted (dont flash rom again just reboot) and it worked but the themes dont change..

EDIT

woohoo finally everything works in this rom, i reflashed the rom without wiping anything and themes work now now im going to test the battery life
[T-Mobile LG G2x] jjayno2003:
idk im still bootloopin flashed 3xs :(
[T-Mobile LG G2x] siulmagic:
this one works im sure of it, make sure you wipe data.
[T-Mobile LG G2x] XxSilent.NightmarexX:
same here ^^
[T-Mobile LG G2x] Charleszan:
Yeah bootloops here as well.
[T-Mobile LG G2x] jonathann0222:
Same here!
[T-Mobile LG G2x] siulmagic:
going to upload one more build, if it still bootloos, consider this rom dead for foreseeable future.
[T-Mobile LG G2x] nycelitemaster:
Maybe we can work something out.. i am in process of learning the porting process for o2x to g2x..

Sent via MIUI-G2X
[T-Mobile LG G2x] :
this is how to fix bootloop for everyone

1.download the rom without wifi calling

2.go to recovery, wipe data , cache ,

3.go to advanced,wipe dalvik cache ,

4.go to mounts+storage , wipe system ,

5.flash the zip than reboot, if it boot loops than you pull the battery out

6.go back to recovery and repeat steps 1 & 2 than reboot and it will work perfectly

(DONT FLASH THE ROM AGAIN)
[T-Mobile LG G2x] jjayno2003:
ok ill try it out
[T-Mobile LG G2x] siulmagic:
ok guys try this build http://android-maisters.net/roms/in...oad/30-miuig2x/94-miuiandroid-g2x-1114-v102a1
[T-Mobile LG G2x] jonathann0222:
Any body that was having problems tried the new upload rom
[T-Mobile LG G2x] saotua:
the new version boot up ok. Working great so far. Thanks for great job siulmagic.
[T-Mobile LG G2x] siulmagic:
i think i know why it was being so inconsitant, i was messing up the system permission, when i added code to update script, in order to create the theme folder, so when i get back from uni, il work on a flashable zip for the theme folder fix.
[T-Mobile LG G2x] lychris85:
Thanks Magic. The newest upload works.

Anyone try it with faux's 4.4?
[T-Mobile LG G2x] jjayno2003:
yea it dont bootup black screen with 4.4
[T-Mobile LG G2x] nycelitemaster:
It works but u get sods.. i am trying dragons kernel. Faux is working on new one. Stock is good, dragon is good

Sent via MIUI-G2X
[T-Mobile LG G2x] jjayno2003:
+1 gd job!!!!!!!!!!!!!!!!
[T-Mobile LG G2x] siulmagic:
gonna post the zip to create the theme folder in a couple of minutes.
[T-Mobile LG G2x] avio07:
How is the camera on this one? Last MIUI build the camera was totally whacked out.
[T-Mobile LG G2x] siulmagic:
ok guys need someone to test this, http://android-maisters.net/roms/in...wnload/32-addons/95-miui-theme-folder-creator, see if it creates the theme folder, and fixes applying themes
[T-Mobile LG G2x] siulmagic:
camera works fine, it just sometime it borks when switching from rear to front camera.
[T-Mobile LG G2x] nycelitemaster:
You have to set to 8mp

Sent via MIUI-G2X
[T-Mobile LG G2x] lychris85:
For some reason I m getting black screen for faux 4.4 and dragon's latest. Going to try tgr the theme zip in a bit
[T-Mobile LG G2x] jjayno2003:
for sum strange reason im have problems mounting my sd card to computer its always freezing up!! did i do sumthing wrong ?
[T-Mobile LG G2x] :
my phone freezes too when i mount it, it has happened with every miui build but it only happens sometimes and you have to pull the battery to fix it
[T-Mobile LG G2x] lychris85:
The theme fix zip did the trick. Applying themes now work again.
[T-Mobile LG G2x] jjayno2003:
i just reflashed it wrks again lol

---------- Post added at 12:45 AM ---------- Previous post was at 12:45 AM ----------

i just reflashed it wrks again lol

no wipe
[T-Mobile LG G2x] jjayno2003:
N yes the themes eek perfect my brother!
[T-Mobile LG G2x] siulmagic:
ok thanks for reporting, il post it up on op
[T-Mobile LG G2x] avio07:
Is there anyway you can port the LG Cam to this?
[T-Mobile LG G2x] C0dy:
LG Camera doesn't work on CM7/MIUI based ROMs, so it's probably not going to happen.
[T-Mobile LG G2x] nycelitemaster:
@siulmagic, i was able to pull your script out of your rom, i am trying to test it on different rom. Do i.just put it in init.d folder or do i need to do anything else.

Sent via MIUI-G2X