yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy Nexus] beekay201:
probably... its for stock android roms.

Sent from my i9250
[Samsung Galaxy Nexus] donsh00tmesanta:
Yep I'm on stock ota

-----------

iphones are the creation of people with nowhere left to turn
[Samsung Galaxy Nexus] Petrovski80:
1) make a nandroid

2) try

;)
[Samsung Galaxy Nexus] donsh00tmesanta:
no go
[Samsung Galaxy Nexus] efrant:
Why not just flash one of the many "stock" deodexed ROMs in the dev section?
[Samsung Galaxy Nexus] razieltov:
Don't forget you want to reodex.
[Samsung Galaxy Nexus] donsh00tmesanta:
In this case reodex = android back lol

-----------

iphones are the creation of people with nowhere left to turn
[Samsung Galaxy Nexus] donsh00tmesanta:
Cuz they are "stock" not stock

-----------

iphones are the creation of people with nowhere left to turn
[Samsung Galaxy Nexus] efrant:
If you deodexed a stock ROM, then it is NO longer stock. Period. Do you think if you deodexed your ROM it will be any different or any more stock than the others?

There are at least 2 "different" ROMs in the dev section (that are essentially the same) that are just stock ROMs that are deodexed.
[Samsung Galaxy Nexus] beekay201:
// rant

// ref tag 4.1.1_r4 + extracted binaries + 'make -j4 WITH_DEXPREOPT=false' = latest of the latests, deodexed, stock rom.

// great stuff, having a nexus.

yeah, pure bliss, almost all roms are stock here. :D in the sense that almost all are source-based.
[Samsung Galaxy Nexus] donsh00tmesanta:
Stock to me means taken from stock ota 3U build not aosp. Those are stock aosp but stock ota means deep sleep

-----------

iphones are the creation of people with nowhere left to turn
[Samsung Galaxy Nexus] donsh00tmesanta:
Plus this build was tailor made for Toroplus so I see it as optimized

-----------

iphones are the creation of people with nowhere left to turn
[Samsung Galaxy Nexus] Petrovski80:
Lolwut
[Samsung Galaxy Nexus] donsh00tmesanta:
Aosp is not built for Toroplus which is not in aosp anymore right?

-----------

iphones are the creation of people with nowhere left to turn
[Samsung Galaxy Nexus] beekay201:
toroplus never had aosp official support. recently toro was added to the list, besides maguro and the rest of previously supported devices.
[Samsung Galaxy Nexus] donsh00tmesanta:
Exactly that's why I favor the ota over source built

-----------

iphones are the creation of people with nowhere left to turn
[Samsung Galaxy Nexus] beekay201:
still, it must be possible to extract needed binaries from official ota for building.
[Samsung Galaxy Nexus] donsh00tmesanta:
Of course

-----------

iphones are the creation of people with nowhere left to turn
[T-Mobile LG G2x] Mixalot213:
i wanted to see if anyone can list the proper steps to install roms on the g2x as ive tried multiple roms and there is always something that wont work( text messaging etc) i figure its because im installing them incorrectly
[T-Mobile LG G2x] rtotheichie:
Use NVflash to install CWM (NOT ROM Manager)

Put the ROM you want on your SD card

Boot into Recovery (Vol down + power button; hold then until second LG logo appears)

Wipe data (factory reset)

Wipe cache

Wipe Dalvik (under advanced options)

Format system and emmc (this is optional, I do it so I can ensure I'm getting a clean install)

Install your ROM

*Fix Permissions* (some ROMs you don't need to do this-check the instructions on the ROM's thread)

Reboot

Wait about ten minutes after it turns on to do anything (also optional)

Enjoy
[T-Mobile LG G2x] Mixalot213:
how exactly is step one done ? "Use NVflash to install CWM (NOT ROM Manager)" i know how to do the rest
[T-Mobile LG G2x] cricketAC:
Here is your step one.

http://xdaforums.com/showthread.php?t=1056847

Sent from my LG-P999
[T-Mobile LG G2x] Mixalot213:
Still having the same issue

Use NVflash to install CWM (NOT ROM Manager)

Put the ROM you want on your SD card

Boot into Recovery (Vol down + power button; hold then until second LG logo appears)

Wipe data (factory reset)

Wipe cache

Wipe Dalvik (under advanced options)

Format system and emmc (this is optional, I do it so I can ensure I'm getting a clean install)

Install your ROM

*Fix Permissions* (some ROMs you don't need to do this-check the instructions on the ROM's thread)

Reboot

Wait about ten minutes after it turns on to do anything (also optional)

Enjoy

rtotheichie I ended following all the listed steps you gave me exempt(fix permissions had no idea how to do it) but had the same issue i had last time which is everything works but i can only send text messages but cant receive any. I know it has to do with the rom install as when i restore a phone to previous back up and all text messages i was sent during the time the custom rom was running all are received instantly. I dont know what else to try ive seen people mentioning stuff about updating the baseban or kernel i honestly dont know what those are for but do you think that might be my issue as my g2x is running the lg's last gingerbread update(completely stock)
[T-Mobile LG G2x] rtotheichie:
I replied to your PM...but post the answers here, so other people may be able to help, too
[Xperia Arc Q&A, Help & Troubleshooting] SammiSaysHello:
is it possible to move facebook onto sd card while still maintaining all the functions of having it on the phone memory?
[Xperia Arc Q&A, Help & Troubleshooting] KartzXDA:
Yes

You have first to uninstall any updates to the system apps.

Second, using a rooted file manager, delete the original apk from /system/app (android keeps the system app apart from the updates, the latter being at /data/apps).

Once this is done, reboot and reinstall the app from the market.

It will be installed as a user app and as such will be movable to the sd card.

As an example, my gmail, facebook, maps etc. are all on my sd card now.”

Use link2sd (if rooted) or app2sd. :good:

Move all your apps into SD without rooting -

http://xdaforums.com/showthread.php?t=1795410

Hit "Thanks" if anyone helped you.

Xperia Arc LT15i

Rooted/Bootloader Unlocked

Running JellyBean - FXP136/CM10
[Sprint HTC EVO 4G LTE] xHausx:
Thanks go to Urban Strata for helping clarify it's purpose, and to SteelH, il duce, -viperboy- and everybody else whose been helping look in to this.

Security issues are still always of interest, but if those are patched all that is left is for someone to remove any extraneous code here.

The APKs for it are:

HtcOMADM_SPCS.apk

HtcOMADM_SettingsPlugin_SPCS.apk - looks harmless (thanks SteelH)

HtcOMADM_Tool_SPCS.apk - has some questionable content

I apologize if we jumped the gun blaming htc for this, but with the reputation data mining companies have earned themselves it's not a very good feeling to find software from a company like that running without your knowledge.

http://www.redbend.com/en/company/red-bend-enabled-devices

http://www.redbend.com/en/products-services/software-analytics/benefits
[Sprint HTC EVO 4G LTE] xHausx:
I'll try to dig into it more later, but for now I'd just like to know what all it does.
[Sprint HTC EVO 4G LTE] Anthonicia:
Think it will be under red bend or vsense? Try and find it as well.
[Sprint HTC EVO 4G LTE] bacidath:
With a quick look I found this.. data/data
[Sprint HTC EVO 4G LTE] xHausx:
First thing I did was debloat so I haven't noticed it running, but somehow the /data/data/com.redbend.vdmc/ folder is still on my phone. Part of what got my attention is that I don't remember seeing it when I went through the system apps.

I've been swamped here lately so I was kinda hoping someone else has already had a chance to rip it apart. Even if we can opt out of it I still don't trust it, especially if it's this poorly protected.

edit: found it HtcOMADM_SPCS.apk
[Sprint HTC EVO 4G LTE] chazybaz13:
Great, wtf is wrong with HTC and Sprint? Leave the spyware out of android ffs!
[Sprint HTC EVO 4G LTE] Anthonicia:
It's hiding under something if it is running. That's all I can see for now too. Sorry for being obvious.

HTC has so much running, if theyre responsible then it is gonna be in with their shat.

I don't have the tools to monitor what's going out and where. Ciq was found in that manner. If redbend isn't stupid they will hide it better.
[Sprint HTC EVO 4G LTE] whiterider13:
Maybe someone could get in touch with TrevE and see what he can figure out.

Sent from my EVO using Xparent Blue Tapatalk 2
[Sprint HTC EVO 4G LTE] SteelH:
I'm looking into this.
[Sprint HTC EVO 4G LTE] eXplicit815:
Well, this is a little unsettling...
[Sprint HTC EVO 4G LTE] il Duce:
looking @ "tree.xml" in /data/data/com.redbend.vdmc/

there's some REALLY creepy code in there about data logs and server pulls, re-auths, there's even a command to upload (I think) some user info on data behavior to https://oma.ssprov.sprint.com/oma .....

I also see in the /ext/ directory there, they have 2 files:

libvdmengine.so

libvdmfumo.so

I also have no idea what the info inside "vdm.reg.xml" in the /shared_prefs/ points to but it loos like it may be injecting an xml line into another part of the system?

...more to come...

ok now looking in titanium backup for "com.redbend" it returned this app name:

vDM Client 1.0.2218232562.436999.426320

just reporting lol
[Sprint HTC EVO 4G LTE] eXplicit815:
It seems like this had a quick response when all the techblogs began to report about it. Maybe we should submit this to Engadget, BGR, Gizmodo, etc. and see what kind of feedback we can get back from Sprint/HTC about it?
[Sprint HTC EVO 4G LTE] fearbasel04:
Damn these fing companies.... Is it enough we have uncle Sam on our tails
[Sprint HTC EVO 4G LTE] -viperboy-:
We took these files out of our Viper4G 2.0.0 Beta from the beginning, ladies and gentlemen :) nice find, Haus.
[Sprint HTC EVO 4G LTE] sullivan7221:
Does it free up some Ram like when removing it from the 3D did?
[Sprint HTC EVO 4G LTE] Rippley05:
Good god...Thanks for digging in on this fellas, if it is doing some naughty things...I hope it gets all blown up like cIQ did. I'm about ready to go back to a flip phone if this crap doesn't stop.
[Sprint HTC EVO 4G LTE] il Duce:
and you now cannot update your PRL and profile :(

just discovered this.

I am pushing the 3 apks back one at a time until I know which does what.

so far, the settingsprovider one put the "system updates" back into my settings menu, but I still couldn't update :(
[Sprint HTC EVO 4G LTE] DB13:
Damn thats not good, looks like Sprint and HTC are gonna force us to have their spyware
[Sprint HTC EVO 4G LTE] Gumby63:
Nah I'm sure one of the talented devs will figure out a way to disable it without any ill effects.
[Sprint HTC EVO 4G LTE] il Duce:
Ok so I pushed back all but the _tool_ one and can update my stuff.

Sadly it looks like they built dependencies into these :(

Hopefully the more talented people can find a way to fix this.

I'll keep the tool apk out of my system and see how it goes, I do still have signal and data.

Also that app name I listed earlier in TiBu is installed again, must be one of those first 2 apks.
[Sprint HTC EVO 4G LTE] Anthonicia:
At the very least we should be able to block the uploading of the data they are mining from us... Didn't they learn the first time?
[Sprint HTC EVO 4G LTE] il Duce:
wow

it looks like they use AES encryption on some of their output files :(

const-string v2, "sprint@omadm"

invoke-virtual {v2}, Ljava/lang/String;->getBytes()[B

move-result-object v2

...

new-instance v2, Ljavax/crypto/spec/SecretKeySpec;

const-string v3, "AES"

I would also say some of this tech is how they know how much data we use, which isn't the end of the world.

I did find a value that pissed me off:

conn_timeout=60

so they were shutting off things at a minute?

...

looks like some VZW devices have the SAME thing, maybe we look at their recent HTC threads for similar findings?

.method public getUseVzwTreeStructure()Z
.locals 1

iget-object v0, p0, Lcom/redbend/vdm/VdmConfig;->_proxy:Lcom/redbend/vdm/ConfigProxy;

invoke-virtual {v0}, Lcom/redbend/vdm/ConfigProxy;->getUseVzwTreeStructure()Z

move-result v0

return v0
.end method
[Sprint HTC EVO 4G LTE] Gumby63:
But what exactly are they shutting off after a minute?
[Sprint HTC EVO 4G LTE] il Duce:
No idea, probably data? That piece isn't "scary" it's just annoying.
[Sprint HTC EVO 4G LTE] -viperboy-:
Didn't look into that piece of it.

Ah, true. However, I no longer have the stupid Software updates menu and it is back where it should be on HTC phones...

That timeout looks like just a standard timeout, just like when you load a webpage and it times out. Basically, just the amount of seconds before it gives up trying to do something.
[Sprint HTC EVO 4G LTE] il Duce:
Wait you can still update your prl and profile from there?
[Sprint HTC EVO 4G LTE] SteelH:
HtcOMADM_SettingsPlugin_SPCS.apk seems to be clean from my look at it. I found no references to redbend or data collection in this one.

Going to take a peek at the other two.
[Sprint HTC EVO 4G LTE] SteelH:
I can't say HtcOMADM_Tool_SPCS.apk is clean...

Dirty HTC!

.method static constructor <clinit>()V
.locals 1

.prologue
.line 32
const-string v0, "/data/data/com.redbend.vdmc/files/"

sput-object v0, Lcom/htc/omadm/util/DMLog;->logPath:Ljava/lang/String;

.line 33
const-string v0, "OMADM.dat"

sput-object v0, Lcom/htc/omadm/util/DMLog;->DMFile:Ljava/lang/String;

.line 34
const-string v0, "data/local"

sput-object v0, Lcom/htc/omadm/util/DMLog;->DMFilePath:Ljava/lang/String;

.line 55
const/4 v0, 0x0

sput-object v0, Lcom/htc/omadm/util/DMLog;->IS_LOG:Ljava/lang/Boolean;

.line 56
const/4 v0, 0x0

sput-boolean v0, Lcom/htc/omadm/util/DMLog;->IS_SAVE_LOG:Z

.line 57
const/4 v0, 0x6

sput v0, Lcom/htc/omadm/util/DMLog;->LOG_LEVEL:I

.line 58
const/16 v0, 0x14

sput v0, Lcom/htc/omadm/util/DMLog;->MAX_LOG_SIZE:I

return-void
.end method

Now let's see if I can turn their logging off....
[Sprint HTC EVO 4G LTE] louched1:
If it can't be turned off, can we have an option to send custom data to HTC? :devil:
[Sprint HTC EVO 4G LTE] SteelH:
For right now, just rename those 3 apks to .bak or something with a file manager and reboot. If you need to update PRL in settings, rename them to apk and reboot. At least this way, for now, they will be completely disabled.
[Sprint HTC EVO 4G LTE] SteelH:
HtcOMADM_SPCS.apk is the worst of all 3...

Loaded with Red Bend's code in smali.... /com/redbend/

Yikes.
[Sprint HTC EVO 4G LTE] drob311:
Well although I'm currently running cm10 and this appears to be irrelevant for aosp, does anyone know if these bull$hit files are on the sg3? Reason I ask is because, ENOUGH IS ENOUGH! I spent hours ripping ciq out of newSENSE (a rom onelove, dread, and myself made for the evo shift) and even then they still included it with the Smith.apk and the qxdm(whatever the hell its called).apk and the corresponding libs, although it appeared to be"inactive". This could be the driving force in me returning this phone and getting a sg3, as long as the intrusive bull$hit isn't on the sg3. I can't stand samsung but this crap is too much...

Sent from my EVO LTE using Xparent Blue Tapatalk
[Sprint HTC EVO 4G LTE] louched1:
Time for a noob question:

Will freezing them in Titanium Backup disable them as well?

EDIT: I see those the three .apk's listed in the OP don't show up in TiBa. Only vDM Client 1.0.2215272749.382381.329836
[Sprint HTC EVO 4G LTE] dougxd:
It should. It does that for anything else you freeze.
[Sprint HTC EVO 4G LTE] bog3nator:
Freezing them is almost the same as removing them. It can cause you to not be able to update your profile or prl
[Sprint HTC EVO 4G LTE] SteelH:
Well it's htc. You'd have to ask in sg3 forum about their software
[Sprint HTC EVO 4G LTE] sgt. slaughter:
They need something for reporting purposes period. They would be dumb to not have something on the device to allow them to poll signal issues and the like...

The big issue with CIQ wasn't that it was there, but that the dang thing was open to anything gaining way too much access, and it was also constantly polling the servers which was redic and not allow an opt out at all...
[Sprint HTC EVO 4G LTE] drob311:
There is no opt. out for this... If we remove the apks, we can no longer update profile or prl. I honestly don't want any issues reported automagically from my phone. I am a big boy and if I'm having issues, I can report them myself. I see where you are coming from Sarge but I personally believe htc and sprint are way over stepping their boundaries with the spyware.

Sent from my EVO LTE using Xparent Blue Tapatalk
[Sprint HTC EVO 4G LTE] sgt. slaughter:
I guess the big thing here is that we should find put exactly what it is doing and what its for before we go jumping to conclusions here.

Lotta unknowns here...
[Sprint HTC EVO 4G LTE] bog3nator:
So can we remove the _tool_ apk One or is there no point without the others
[Sprint HTC EVO 4G LTE] sgt. slaughter:
Point is u don't know exactly what its doing at all really or its full purpose....

Till then calling it spyware is a lil silly this early on in the investigation of it...
[Sprint HTC EVO 4G LTE] drob311:
I don't know the exact definition of spyware but any software that collects my data and sends it anywhere without my consent I consider spyware. If they (htc&sprint) want to collect data for research/development/customer service, we the end consumer should be notified and given the option to not participate. The fact that we can't disable it without losing functionality is what chaps my a$$ the most. Not trying to argue with ya Sarge, just giving my perspective. I hope some of the skilled devs around here can get to the bottom of this.

Sent from my EVO LTE using Xparent Blue Tapatalk
[Sprint HTC EVO 4G LTE] SteelH:
From Merriam-Webster: Definition of SPYWARE

: software that is installed in a computer without the user's knowledge and transmits information about the user's computer activities over the Internet

HTC/RedBend is collecting unnescessary data from me #1 without my prior consent and #2 without disclosing they are doing so. This, by definition, is spyware. Spyware it most definitely contains. Thus, I will properly label it as containing spyware.
[Sprint HTC EVO 4G LTE] jeffsanace:
I would have to agree, this is spyware in every sense of the term. I thought they learned their lesson the last time. And to link it to updating prl and profiles is just a sneaky way to hide it. And make sure that it's needed for device functionality. This is unacceptable and underhanded deception.

Bad Seed Customs

Just Sick!
[Sprint HTC EVO 4G LTE] Granite1:
Personally I don't care if you call it spyware, or underware. The rub is:

1. what does this code do?

2. How do we turn it off?

What it's defined as won't help answer ^ 2 questions.

No offense intended. Just trying to help. :o
[Sprint HTC EVO 4G LTE] xHausx:
I've added some more to the OP. If it handles the PRL and software updates that would explain a lot, but it still looks to be much more intrusive then it needs to be. As well as insecure.
[Sprint HTC EVO 4G LTE] sgt. slaughter:
tbh i didn't even read the whole thread here...:p original assumption was there is a difference in collecting and actually sending the information out... didn't realize it was shown that it was actually being sent vs having the ability to be sent as the two things there are different... ie could be a logger that just stores the android logs and then has a way to send it out but only does so under X circumstance.

I say this b/c I remember Sprint talking about doing a different troubleshooting method in future where they would have customer on phone transmit log to tier X tech and such while tech connected to the device or whatever...

anyway my bad.
[Sprint HTC EVO 4G LTE] sgt. slaughter:
yeah sending out info when there is an OTA or PRL update is much different than the CIQ constant sending of data out of the device we used to have...

Someone dig up TrevE. :D
[Sprint HTC EVO 4G LTE] whiterider13:
This is some of what Red Bend collects, this is from their website.

I don't like what I am seeing here.

Sent from my EVO using Xparent Blue Tapatalk 2
[Sprint HTC EVO 4G LTE] -viperboy-:
No, I can't. Guess we will need to modify these files to remove logging but still allow OTA. Thanks everyone (especially SteelH) for your digging around thus far.
[Sprint HTC EVO 4G LTE] il Duce:
Fyi, that is NOT still in the menu from the stock ruu, verified on at least 3 roms. I have no idea how yours is there but I'd guess your ext jar is mixed with 1X code possibly? In that case if any fixes are discovered here, hopefully they apply to you (probably will) but it might require additional work. Just thinking out loud...
[Sprint HTC EVO 4G LTE] -viperboy-:
Right, my software update option location was changed via a switch in ext.jar
[Sprint HTC EVO 4G LTE] SteelH:
Very interesting stuff there guys. Perhaps we can have a look at some non-US code to see what we can do. The Europeans are way ahead of the US when it comes to carriers putting spyware/logging/etc on their phones.
[Sprint HTC EVO 4G LTE] il Duce:
Viper, care to share with the group?

And steel, fwiw he said it wasn't functional for updates but was present. I achieved that yesterday by only putting back the settings plug in, which looked rather "safe" code wise.

It's the second apk that brought back functionality, and that's the bad spyware one.
[Sprint HTC EVO 4G LTE] xHausx:
doh! Fixed the OP since I misread that one yesterday.
[Sprint HTC EVO 4G LTE] -viperboy-:
This will likely not do anyone any good, since we are using a custom OTA delivery system. But here is how it was done in ext.jar

smali\com\htc\htcjavaflag\HtcBuildFlag.smali

.method public static final getHtcOMADMFlag()Z
.locals 1

const/4 v0, 0x1

return v0
.end method

Replace const/4 v0, 0x1 with const/4 v0, 0x0
[Sprint HTC EVO 4G LTE] Vinchenzop:
The reason this will do no good, is due to the fact that gsm/unbranded devices get their ota updates from HTC, we get ours from sprint. You'd need to edit the SPC (sprint) files to remove/turn off any 'spyware' while still being able to receive updates (software, prl, etc) from sprint.
[Sprint HTC EVO 4G LTE] sgt. slaughter:
have we shown how often data and what all exactly is getting uploaded to them?....
[Sprint HTC EVO 4G LTE] JohnCorleone:
I can see if I can get a hold of kOnane. He's the one that initially found CIQ in the OG Epic and was able to disable it although it wasn't tied to Profile and PRL but you guys may want to look him up. It was,gone from the Epic long before TrevE's video brought the info to the masses and created the uproar that got it quickly removed. When I first got my OG Epic, I would see data sync come on between 1-2am three,times a week when I had sync off. After CIQ was, plucked out, I never saw it do that late night auto sync again

Sent from my EVO using Xparent SkyBlue Tapatalk 2
[Sprint HTC EVO 4G LTE] digiblur:
That would be a good thing for me! I hate it when they update me off of 56006 PRL! I lose my VZW 3G roaming.

Definitely removing these... I don't need the redbend garbage nor do I need update PRL or profile (since my 3G data is already auth'd on my phone)
[Sprint HTC EVO 4G LTE] Urban Strata:
Hi guys,

Official HTC rep here. What you're seeing with RedBend is nothing more than an OMADM client to handle device configuration, provisioning, firmware updates, etc. It does

NOT

track, collect or monitor any personal information about the user and requires only the MEID, model number and software version from the system properties to identify the device for proper configuration.

To be completely clear, there is no usage behavior analysis or user data tracking of any sort happening with this software. It is solely a device management client.

Hope this helps clear things up.
[Sprint HTC EVO 4G LTE] sgt. slaughter:
Boom!

Thanks for the response!

Makes sense given the experience everyone was showing when they removed it...

Now with that put of the way.... can we get to some JB leaks for our device soon Jeff? ;) :)

Can't be waiting till December to see anything...

Sent from my Wolfpack EVO
[Sprint HTC EVO 4G LTE] joshuaw84:
^^^^ this. we promise we won't tell :D

sent from my LTEvo
[Sprint HTC EVO 4G LTE] SteelH:
Yeah, like I trust HTC or anyone claiming to represent HTC on an Internet forum.
[Sprint HTC EVO 4G LTE] NaterTots:
But its on my computer screen so it must be real.:D:p:)

Naters