yashsingh1/xdaforums huggingface dataset:
[HTC One Mini] RuffBuster:
by this do you mean s-off can be turned back to s-on or do you mean the flag can be changed to hide s-off status? Cheers.

Sent from my HTC One using Xparent Green Tapatalk 2
[HTC One Mini] Aciz:
It can be turned back to S-ON. Revone can turn your phone back to 100% stock. Read the S-OFF tutorial thread for more info.
[HTC One Mini] RuffBuster:
I,ve read most of the revone thread, thought I might of missed something to fake the s-off status. but cheers.

I only say because if something terrible was to happen to our phones and we had to send them in for repair, it's most likely that we would be unable to remove such things before sending them off. And if they manage to boot it up it would show all the nasty stuff we've done. They may end up charging you to have it fixed. and htc quality seems to be slipping these days and makes it more likely something may happen. I'm just paranoid I guess ;)

Sent from my HTC One using Xparent Green Tapatalk 2
[Security Discussion] 0x0rbit:
Hello,

why isn't there an Android-ROM like this: (my dream thoughts)

NSAdroid

1. Every outgoing packets are encrypted

2. Detects, if the other phone - its communicating with - has the same ROM, then use encryption between them (for calls, messages)

3. TOR Network integrated (with TOR Relay service / ORBOT app)

4. iptables integrated (like the DroidWall app)

5. No Google-Services (like the Replicant ROM)

6. Integrated Permissions-Manager (e.g. Decide by app installation which permission is allowed)

7. AutoBackup-Service (Features like: upload encrypted backup into a cloud service / Complete / Incremental )

8. Custom sync (to own server, data encrypted into the cloud or to the computer if usb-con established)

9. Integrated Remotecontrol (trace+whipe like Webkey app / stealth running, send phones-IP if connected in intervals to defined server)

10. Everything easy to use for non-experts that it can wide spread

Plus a basic check for Malware.

Another idea:

Two-Face-Droid

e.g. If I'm entering PIN-Code A, I see another screen, data, settings, else if I had entered PIN-Code B.

Even if the "other face" is revealed with forensic software, my data is secure/encrypted.

Your comments please. :)

Greetings and have a good day.
[Security Discussion] pan.droid:
Because security isn't sexy enough. Everyone is too absorbed with penetrating to wrap their shi+ up. Check out:

Guardian Rom:

http://xdaforums.com/showthread.php?t=2316300

OpenPDroid:

http://www.xda-developers.com/android/openpdroid-brings-an-open-source-privacy-solution/

XPrivacy:

http://xdaforums.com/showthread.php?t=2320783

SecDroid:

http://www.xda-developers.com/android/secure-your-android-device-with-secdroid/

F-Droid:

https://f-droid.org/ (for play store alternative).

---------- Post added at 10:19 PM ---------- Previous post was at 10:17 PM ----------

Oh, left out a big one...

YubiKey:

http://www.yubico.com/products/yubikey-hardware/yubikey/

---------- Post added at 10:21 PM ---------- Previous post was at 10:19 PM ----------

...Anyway, it's a losing battle, but I admire your optimism=)
[Security Discussion] Dudebowski:
any openVPN/openswan service would do most of the trick, but end-to-end encryption depends on the whether the server you're talking to is https-enabled.

CM is likely looking into improving 'android beam'. Bluetooth communication is certainly a considerable threat, I hope to see further dev'mnt here. Cyanogenmod now has WhisperPush, which is TextSecure integration (SMS/MMS end to end encryption)

Install Orbot , secureChat, etc... set to run on boot if you want.

Install AFWall (Droidwall reborn) note that iptables binary is already installed with CM, and maybe AOSP itself.

Disable gApps or neglect to install gApps in a CM or other custom ROM installation

CyanogenMod Privacy Manager and/or Xprivacy Xposed module

Cyanogenmod Developer Options -> encrypt desktop backup option

Titanium-Backup -> encrypted cloud container (such as git-annex, Dropbox with BoxCryptor, etc)

CyanogenMod Account - Device Administrator - allows remote wipe, device location. im sure they're using https for reqeuests. there are other opensource device locator services out there too.

Above apps with Cyanogenmod. touch a button, function enabled. How much easier could it be?

Play store has 'basic' checks for malware, and gServices has a setting to 'verify apps'. It's certainly in Google's best interest to keep their environment free of malware. Spyware on the other hand... that's a semantics issue. There are numerous malware and spyware checkers out there, although most of them are only accessible from Play store. If your device isn't gPwned, you're probably already aware enough to use common sense when installing apps, particularly ones with root permissions. Apps like xPrivacy are also a major head start in keeping your device on lockdown from potential malware.

CyanogenMod has a device encryption option. There's also Profiles and Users, which helps if you'd want to quickly limit functionality of your phone in a potential attack scenario, e.g. handing your phone to an acquaintance. You seem to be talking about a truecrypt-like double-system container though, which is certainly possible but rather complicated given the limited resources available to a phone/tablet device. To date I haven't seen anything exactly like that for android, though there are multi-boot developments and kexec-enabled kernels on various devices.

Some helpful info, if you haven't seen it already:

https://prism-break.org/en/categories/android/

Point I'm getting at here is... Cyanogenmod without gApps, and with a few other apps intalled is basically what you're asking for. Every app i noted above is available outside play store, via F-Droid or the developer's site. Cyanogenmod tries their best to keep things simple as possible, while integrating advanced security measures and other features not found in the AOSP base.
[Sony Xperia T, TL, TX, V] khaledshahine:
My Mobile is Xperia V [LT25i] Rooted...Using stock Rom 4.1.2 ....can I update it..when 4.3 arrive ??

......

And..when I root my mobile..i flash Custom recovery (cwm) ..it works perfectly for many times...but now..it wont open ..and I try many ways to flash it again and wont open...it stock at Sony logo...??

(sorry for bad grammer)
[Sony Xperia T, TL, TX, V] Allen Hu:
What did you flash before it was bricked?

And the first question was stupid :eek:
[Sony Xperia T, TL, TX, V] khaledshahine:
Nothing...try to edit Vold.fstab !
[Sony Xperia T, TL, TX, V] khaledshahine:
Why the 1st question is stupid ?
[Sony Xperia T, TL, TX, V] Ainster:
Yes you can update to 4.3 for cwm you need flash back stock than root and install it again i think you just deletet it.
[Sony Xperia T, TL, TX, V] khaledshahine:
Sorry...Flash stock rom ??

Or what..?
[Sony Xperia T, TL, TX, V] Allen Hu:
4.3 still doesn't exist for Xperia V.......

Sony HASN'T update it yet......
[Sony Xperia T, TL, TX, V] khaledshahine:
I say..when it arrive :D
[Sony Xperia T, TL, TX, V] enrycko:
stuck on sony logo, u have to use the flashtool for flashing to revert back anything you do for your device..

search the ftf ( with root and deodexed apps ) on the forum, flash with flashtool.

You can bring your device back if you do a right procedure to flash it..
[Sony Xperia T, TL, TX, V] khaledshahine:
When I try to open the recovery..it stock on sony logo...i remove the battery and open phone normally...it open !
[Sony Xperia T, TL, TX, V] enrycko:
good for you sir.. i think thats kernel panic you had.. the best thing for you now is reflashed again your rom.. :o
[Sony Xperia T, TL, TX, V] palomino7:
You reflash your rom. This is clear solution for you. You minimize potential future problems.
[MDA II, XDA II, 2060 General] flywhc:
My o2 xda2 cannot play music from SD card while browsing Internet.

Actually not only playing music but also operating a file within SD card, SD card cannot be recognized as soon as GPRS signal changed (even just show that G icon after turning off flight mode). I have to pull out and push in SD card again to make device work with that SD card.

If I just browsing webpages without touching any file within SD card, that would be fine. After disconnecting GPRS, files in SD card are still there.

I am using 1G KingMax and 128M VK SD card. I have seen this problem on another two XDA2 but there is one doesn't have this issue by using same SD card.

I went to O2 shop on Oxford street that lady said that "phone" did not support playing music while using internet ... then she believed that was a software problem. I hoped their repair centre had professional guys could understand so I wrote down how to reproduce the problem.

After 1 week when I received my XDA2, it came with a letter "Fixed by upgrade firmware". Of course problem is still here, I tried many official and unofficial ROM before I went to o2 repair centre.

Now its warranty is expired and I don't expect O2 can solve it.

Anybody saw same problem and any suggestion?
[Windows Phone 8 Development and Hacking] hjc4869:
That's an app to help you lock screen and adjust volume with tiles. It calls functions in ShellChromeAPI.dll . Finally, it got published with English version.

link: http://www.windowsphone.com/en-us/store/app/quick-tiles/1725cca2-2349-4d33-b5d5-8b04e7810c04

(You may need to switch your phone language to English to download the English version. otherwise, the Chinese version will be shown. Forgive me for my tight schedule and I have to split different languages into different XAPs, for I only spent 2 hours developing this app...)

I've found two ways to pass the marketplace API detect, one is to use P/Invoke and the other is to load LoadLibraryExW without extern that from the lib provided by Microsoft.

both methods will be provided here in a month, and I may provide write some wrappers or static libraries.

Notice that I only found ways to access restricted API, but get higher privilege is not possible.

By this way, I think [MENTION=3529492]GoodDayToDie[/MENTION] 's HTTP Server with registry browser can be published with some simple modify. Even publishing the samsung interop unlock guide, which launches the toast using undocumented, is possible. Maybe we should try to find more useful functions which can be called without privilege in different dlls.
[Windows Phone 8 Development and Hacking] ngame:
What restricted API's possible to upload ?
[Windows Phone 8 Development and Hacking] hjc4869:
you can load any API functions. but only some of them can be called and only a few is really useful.

I only tested the following functions

BOOL Shell_IsLocked()

void Shell_TurnScreenOn(BOOL)

void Shell_AdjustVolume(int)
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
Interesting. But almost useless cause now all can freely make a developer unlock. Store apps can use RPC but this requires InteropServices CAP.
[Windows Phone 8 Development and Hacking] ngame:
yes I tried it before in beta app .

ID_CAP_INTEROPSERVICES , Xbox live and exe files in xap are unable to upload !
[Windows Phone 8 Development and Hacking] mcosmin222:
And those APIs work without having the restricted capabilities in the manifest file?
[Windows Phone 8 Development and Hacking] the_nutria:
After the update, it went back to Chinese... it would be nice if you set English as the default language, at least for European and American countries
[Windows Phone 8 Development and Hacking] mcosmin222:
Hmmm

This looks interesting.
[Windows Phone 8 Development and Hacking] Sunius1:
P/Invoke? How did you manage to use it? I thought it was not available for Silverlight?
[Windows Phone 8 Development and Hacking] mcosmin222:
pinvoke is possible with silverlight, but according to microsoft it is illegal on the marketplace.

which is half true. you cant pinvoke a native dll compiled for arm, but the wp8 own dlls seem to make an exception
[Windows Phone 8 Development and Hacking] Useless guy:
What is the difference?
[Windows Phone 8 Development and Hacking] mcosmin222:
Go ask microsoft.

If you scroll down you will find that p/invoke is not allowed in wp8 sdk

http://msdn.microsoft.com/en-us/lib...jj206940(v=vs.105).aspx#BKMK_Appcompatibility

however, the OP seems to have managed to do it with a DLL contained in the WP8 system.

I never actually tried to p/invoke something on the marketplace. Maybe this needs additional research to see if arm compiled third party dlls can be used.

I remember some guy on the forum trying to p/invoke a native ARM dll and got type load exceptions.

by native i mean something which is not compiled with C++/CX for windows phone. As in pure C/C++ targeted for ARM.
[Windows Phone 8 Development and Hacking] Useless guy:
I know what pinvoke is perfectly, don't send me to msdn as long as I'm able to find it by myself.

Both an unmanaged dll and a WinRT component are native. CLR wraps every COM\WinRT object in the Runtime Callable Wrapper, but the object itself stays in the unmanaged heap.

If you think that WinRT or C++/CX are not native, you're wrong.

To [MENTION=4770139]hjc4869[/MENTION]

How did you manage to bypass marketplace analysis using P\Invoke? I'm fairly certain that MS checks metadata for DllImport attribute.

I'm going to try the second way, thanks!
[Windows Phone 8 Development and Hacking] mcosmin222:
never said you don't know what p/invoke is.

I just wanted to show you that it is illegal in wp8 SDK (which that link leads to).

And if you actually read that link, you would see that invoking winRT or C++/CX (compiled for WP8) is allowed. This is probably due to the fact that these methods still execute in a sandbox. While MS won't allow arm compiled dll without the WP8 SDK because it can't verify its security.
[Windows Phone 8 Development and Hacking] Useless guy:
What does it mean - compile for WP8? I can add to the package any dll that uses Win32 (non-restricted) and compiled for ARM. The library will work on both WP and W8 without recompilaton.
[Windows Phone 8 Development and Hacking] Sunius1:
Will it? When you compile a C++ dll for desktop, it references kernel32.dll and unless you explicitly exclude it from the linker, it couldn't possible work on WP8 since there's no kernel32.dll.
[Windows Phone 8 Development and Hacking] Ray Adams:
Hi all

Trying to play with this method, but it seems LoadLibraryExW is not available. The only function available is LoadPackagedLibrary and when I try to run it, I've got C00000D error which is STATUS_INVALID_PARAMETER.

---------- Post added at 01:03 PM ---------- Previous post was at 12:49 PM ----------

It seems LoadPackagedLibrary only loads .dll from installation folder of application and do not allows full path in name. Thats why I got invalid argument error :(
[Windows Phone 8 Development and Hacking] clrokr:
Code signature.
[Windows Phone 8 Development and Hacking] Useless guy:
Kernel32.dll is the huge part of Win32 and it exists on both WP and Windows. WPSDK doesn't include kernel32.lib, but I'm pretty sure it can be easily generated from dll file.

#define WINAPI_PARTITION_DESKTOP and kernel32.lib should work, I think.

UPD:

I forgot, kernel32 could be removed as it's just the compatability layer for kernelbase.dll and new windows 8 api sets (api-ms-*.dll).

DLLs are signing on certification process.
[Windows Phone 8 Development and Hacking] mcosmin222:
Compile for windows phone 8 means taking the source code and compile it with the compiler provided by the SDK (which happens to be the same one windows 8 uses).

The difference lies in code signature. The CLR checks code signatures when it attempts to load a native DLL to make sure there are no incompatibilities. This causes a little overhead which is removed in winRT & CX & VC++ assemblies because they use the same metadata format as does the rest of the .net, so for the CLR, the objects appear as if they are native .net objects when they are not and, as you said, reside in the unmanaged heap.

So I doubt you could take an arm assembly compiled with, let's say, atmel studio, and invoke it from WP8, even though the code is actually compatible with windows phone 8.

As i said, this is most likely a security "feature" in windows phone to avoid developers use malicious code from a DLL they can't check. If your dll is not signed properly, you won't be able to p/invoke it.
[Windows Phone 8 Development and Hacking] Useless guy:
Signature, compatibily, overhead, damn...

Ok, let me clarify:

1) The DllImport atribute: when marked method is being called, at first it loads library using LoadLibraryExW which triggers signature verification (by policy?), and then perfoms some marshalling magic.

2) WinRT is almost the same COM, with some tricks like type projection. Metadata impelents ECMA 335/CLI standart, but they are not assemblies and are not part of .Net. They don't appear for the CLR as .Net objects, instead the CLR wraps in the RCW, that perfoms marshalling and some tricks like transforming HRESULT to exceptions. Anyway they are being verified too (using LoadLibrary I think).

Signature is not the way of checking compatability. It has other purposes like file integrity checking and running code from the trusted publisher.

As I told above, you can use in your projects both signed or unsigned libraries, they are being signed at Microsoft while processing certification. At least because we don't have MS's private keys.
[Windows Phone 8 Development and Hacking] Sunius1:
I still want to see a code sample demonstrating that you can invoke anything via P/Invoke, even if it's phone API. I've never been able to do it.
[Windows Phone 8 Development and Hacking] mcosmin222:
Basic example

http://xdaforums.com/showthread.php?t=1805041

is for wp7, but it is based on dllimports of the operating system. You can ask for source code or look for similar apps (there are more).

[MENTION=2306792]Useless guy[/MENTION]

There is a huge difference between interoping COM and interoping winRT.

I am not going to argue with you on this matter. You can find a lot of blog posts by .net compiler devs on the matter.

Am i pretty sure we were talking about the marketplace verification.

We both already know that you can p/invoke any unmanaged dll in windows phone. The problem here is getting past the marketplace verification.

If you look careful, I said that p/invoke is not allowed not impossible. There is a little difference.

However, Microsoft's own dlls (as in signed by microsoft with their private keys, this includes cx/c++ dlls you can make with visual studio) seem to make an exception to this rule. If you try to dllimport a library without the microsoft keys it will probably work in a homebrew app but not on the marketplace.
[Windows Phone 8 Development and Hacking] Sunius1:
It's not using P/Invoke. It's using COM to do interop with the native DLL. That's quite a bit different.
[Windows Phone 8 Development and Hacking] Useless guy:
The only I've already mentioned - types projection and metadata.

Nothing was told about P/Invokeby by me, neither disallowances nor impossibilities. Look at my posts carefully, I was talking about differences between ordinal libraries and winrt libraries.

I'm still trying to explain you, that none of the libraries are being signed while building. Look at this sample and try find any signed library.
[Windows Phone 8 Development and Hacking] mcosmin222:
Ok, this is getting a bit out of topic, so this will be the last time I post here.

The sample you gave me makes use of two third party assemblies.

Both of them are managed wrappers over some unmanaged library, and compiled with either windows runtime compiler(libstarcore) or a .net compiler (star_csharp45), since you can easily see they are added as references, and the namespaces are used directly in code.

if you follow the code closely, you will see there is no dllimport at hand there.

This is the same as making an unmanaged library, create visual C++ wrapper classes for it, and then compile it under .net framework. This is, again, vastly different from p/invoke.

But since we are apparently not talking about the same thing in the same replay, we should stop.
[Windows Phone 8 Development and Hacking] Useless guy:
Ok, the last one post.

There's no dllimport, I know. I was trying to tell that you don't have to sign library in order to use in WinRT.
[Windows Phone 8 Development and Hacking] dergutehirte:
Someone is already "selling" an APP with your way to call this APIs:

wpcentral forum
[Windows Phone 8 Development and Hacking] hutchinsane_:
[MENTION=4770139]hjc4869[/MENTION] wouldn't it be, at least *theoretically* possible to publish the Native Toast Launcher to the store using this methode? (Not asking anyone to do this, just wondering if it were possible :p)
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
It's not needed. Everybody have unlock and can install it.
[Windows Phone 8 Development and Hacking] hjc4869:
it is possible, theoratically.
[Windows Phone 8 Development and Hacking] FlashTek95:
Hey,

as I remember correctly you said, that you'll publish the method you're using after one month... Here we are :P
[Windows Phone 8 Development and Hacking] hjc4869:
Yeah, let me tell you...

1. Create a Windows Store C# Runtime Component (for windows 8.0, not windows 8.1)

2. Enable unsafe, P/Invoke the undocumented API and wrap it using Windows Runtime sealed classes, and compile it to Release ARM

3. Copy the winmd file to your wp8 project and add reference to it.

4. use your wrapped APIs.

This method may be unable to use after wp8.1 update since it supports full windows runtime and ms may start checking the winmd files.

There are more methods, but this one is the most easy-to-use one. You even don't need C++ at all.
[Windows Phone 8 Development and Hacking] snickler:
This is VERY interesting.. If you don't mind, can you make an example of this and post it? Or even PM me :)
[Windows Phone 8 Development and Hacking] FlashTek95:
Either I am currently a bit confused, or I don't use the right api signature, as I do always get a DllNotFoundException, using this

[DllImport("coredll.dll", CharSet = CharSet.Ansi)]
private static extern int waveOutSetVolume(IntPtr device, uint volume);

Is this the right signature, or do I have to change it?

Thanks.
[Windows Phone 8 Development and Hacking] ultrashot:
While I haven't tried it at all, coredll is definitely incorrect library to import from :) You should use desktop library.
[Windows Phone 8 Development and Hacking] FlashTek95:
If you mean the "Winmm.dll", then I can say, that it does not work, too^^
[Windows Phone 8 Development and Hacking] Sunius1:
I admit I was really sceptical about this at first.. But it actually works! Good job discovering it.

Here's a little sample I made:

View attachment 2577874
[Windows Phone 8 Development and Hacking] GoodDayToDie:
Wait, wouldn't using desktop/tablet libraries (instead of phone libraries) lead to the lookup failing at runtime?

Not that Windows Phone 8 has any such library as coredll.dll (at least, not in System32).
[Windows Phone 8 Development and Hacking] ultrashot:
calling non-existing library has a bigger probability of failure :)
[Windows Phone 8 Development and Hacking] Sunius1:
If it's native code dynamically linked with a DLL, it will fail to launch. However, if it's managed code, it will throw File Not Found exception only when you try to use an API that comes from an unavaiable assembly/native DLL. As long as you stick to what is available to Windows Phone, it should work just fine.

And yes, coredll.dll won't work on phone :).
[Windows Phone 8 Development and Hacking] FlashTek95:
And how can I find out which dlls are supported respectively which apis are supported?
[Windows Phone 8 Development and Hacking] -W_O_L_F-:
Unpack a ROM, choose a DLL and look into the Export Table.
[Windows Phone 8 Development and Hacking] FlashTek95:
That's what I did now, but either I am using the wrong calls, or `waveOutSetVolume` and `PhoneAudioSetMute` do not work properly.