yashsingh1/xdaforums huggingface dataset:
[Google Chromecast] Asphyx:
You know what I always say.....

"Just because you are Diagnosed Paranoid doesn't mean people aren't out to get you!"

LOL

This is the second conversation regarding CCast vulnerability and so far all we have identified as a REAL security concern is that someone could set up the CCast to connect to some WiFi other than yours which would lead to the grand total tragedy that they could send content to your TV.

The other conversation was in regards to the Rooted ROM having SSH and Telnet installed that could be used to hack your Router Password provided you had already hacked the router password to make the connection to the CCast in the first place to use those tools to get what you already have!

Here is something folks should take into account....NOTHING IS SECURE EVER!

Even the Servers in Iran's Nuke Plant that had no connection to the outside world whatsoever were compromised, Hacked and attacked by Stuxnet!

There is no security ever the only thing you can ever really do is make the hack hard enough and as time consuming as possible that they will move onto someone else's system to pry into their Word Docs and that private folder you keep your IFriends profile pictures in instead. LOL

Yes WEP can be hacked. Imagine how much fun someone will have after they set up your CCast to use their network and try to send content to a TV never knowing if you actually noticed it or not because they can't see your TV.

It's still a damn site better than leaving an Open WiFi AP on the CCast until setup which takes no hacking skill at all to crack.

The way I look at it if the person is smart enough to hack they are also smart enough to know there is no point in hacking a CCast...Not when there is a WiFi router that gets them a hell of a lot more personal info and much more access than just displaying content to your TV.
[Google Chromecast] bhiga:
While this would be a great dorm prank, at least with the current functionality of Chromecast, that's all they get to do... turn on the TV and send whatever video to the TV they want, which would be quite scary/annoying. Think of the beginning of Back to the Future Part II where all the screens in the house turn on with Marty's boss telling him he's fired. ;)

Actually I think the scenario [MENTION=4124152]mathorv[/MENTION] described is a little different and easy to exploit.

Chromecast is in setup mode and broadcasting an open AP

Attacker connects to the open AP

Attacker connects to Web Panel and enables ADB/Telnet/SSH (because web panel currently does not require authentication, Team Eureka said authentication is coming)

Attacker connects to Chromecast via ADB, Telnet, or SSH and gets access to the root filesystem, where they can see the cleartext password and SSID of the AP that Chromecast normally connects to (because password is stored in supplicant config file which is accessible)

So the attacker does not need anything more than to see the Chromecastnnnn AP.

Sadly, the WPA authentication seems to be stored the same way on phones/tablets as well. The only thing that shields phones/tablets from the same type of attack is not all of them have root and they usually aren't accessible from the network. Hence, with root comes extra responsibility, which is why root often is made difficult.

Yup. What we commonly call "security" is really just a deterrent. It increases the effort and the hope is that the attacker will pick an easier target. It's why we put locks on doors when it's often relatively simple to bypass them.
[Google Chromecast] Asphyx:
Except for the fact that if it is not connected to the router then that means the router is unavailable, and or the Password saved in cleartext isn't working. If it was it would be connected and not in Setup mode.

Thats the point I was trying to get across there....

Sure you could find passwords to APs the CCast was connected to...

But if it isn't connected at the time of the hack then those APs are not available if they were you would not be able to connect to the CCast.

And if they are available then anything saved in the CCast is worthless since the CCast couldn't use it to connect either.

And I told him how to plug that hole far better than via the ROM....

Turn on Mac Filtering so not only do you need the password but need to clone a MAC address as well.

And all of this to get at what?

Your last will and testament and some compromising Pictures?

If you make it difficult enough that the payoff isn't worth the effort they will move on....
[Google Chromecast] bhiga:
Ahh, I see your point now.

At least for me, sometimes Chromecast will "miss" the connection shortly after boot, so the setup AP is available for a few minutes after a reboot. To exploit that, someone would need to be sitting and listening for it to pop up - not a "juicy" target, but still possible. People do strange things "just because they can" - at least that's what YouTube teaches me. :D

As you say, MAC filtering provides an additional deterrent level. Unfortunately the target customer is probably not sophisticated enough to do that. I'm not sure all ISP-provided devices (I avoid integrated hardware that I can't configure) allows setting MAC restrictions though. :rolleyes:
[Google Chromecast] frantisek.nesveda:
Well, in theory, you could connect to the CCast when it is in unprotected AP mode, enable ssh, and write a shell script which gets started every boot and sends out the saved wifi password somewhere to the internet. Then, when the CCast owner sets up is wifi, and sometimes later reboots, the wifi passwords will be sent out.

But... since there are probably only a few thousand rooted Chromecasts, and the time window in which to push the script to the Chromecast is so narrow, I doubt anyone would spend any time to try this.
[Google Chromecast] Asphyx:
I'm sure thats true but if your not sophisticated enough to control your own Network or let an ISP do it all for you the least of your issues are what might happen in the odd chance CCast is disconnected or in the 30 seconds before it connects to an AP during Bootup. Locking up the holes in a CCast sure isn't going to help you much LOL

Well in theory you could have it do location checks with Google and map location, SSID and Password of every AP it ever connects to...

Like I said to what end would someone do that?

What is the PAYOFF in the end?

I could understand it if your living next to Bill Gates and wanted to steal banking info....

The Average Joe doesn't have anything worth seeing that would make someone go through all of that especially when they could get it much easier by just sniffing WiFi packets and finding the same data and decrypting it.

They could sit there all day and hack the Router but they have such a small window to work with on an unconnected CCast either because they have to catch it rebooting or catch it in a location that it isn't setup for and unless you have written a program to do all of that without Human Intervention you still got a snowballs chance in hell of getting any worthwhile information...

Security only happens when there are multiple layers of protection that make it so difficult to breach that they won't bother unless the payoff is worth it.

Someone really has to hate you in order to go through all that so some of the best security practices you can implement is don't be an AZZ and no one will have it out for you enough to want to get something on you via a Hack! LOL

(Not suggesting anyone in this discussion is just saying in General LOL)
[Google Chromecast] frantisek.nesveda:
Well, would you give me your WiFi password?

I can think of a few things you could do with access to someone's WiFi... Free internet, torrenting on someone else's responsibility, or just messing with someone.

The real question here is... Would Bill Gates buy a Google Chromecast? :laugh:
[Google Chromecast] Asphyx:
Sure! I could very easily give you my router password and you would still not be able to do anything you mentioned until you figured out a MAC address one of my networked devices actually uses.

And to my other point...Is Free Internet or messing with someone really worth the risk of going to a Federal Pen for hacking?

As for what Bill Gates has I wonder if he is even running Windows 8 cause I don't know anyone who has it that likes it! LOL
[Google Chromecast] frantisek.nesveda:
Good point.

I guess that if we really wanted, we could play this cat and mouse game for quite some time, but the outcome would be that if you really care about security, you can make your network secure enough. But that would be just spamming the thread.
[Google Chromecast] Asphyx:
Actually I think what I was trying to say is that no matter how much you care and try to be secure...

If they want you they WILL get you and they don't need nor would they do it through your CCast when there are far better tried and true methods to attack a wireless router directly that doesn't require LUCK of a device not connecting or the timing of catching it while it is booting up in order to catch the weakness.

Any security hole that results from the CCast will likely never amount to anything more than the Prankish "Look what dirtyPorn I put on your screen"

If they want dirt they will go to the router which is always up and doesn't require some act of god or electronics to happen.

You secure your router the best you can and if that isn't enough then you need to keep your wireless off until you need it to be TRULY secure....

And even then there is nothing to stop them from tapping into the pole where your Internet connection comes in and getting you that way!

Security is nothing more than an illusion and a deterrent...Truth is your never secure no matter how much you worry which says to me...Worrying is pointless. Unless you have enemies that really want to get you...and if thats the case all the security in the world won't stop them!
[Google Chromecast] mathorv:
MAC access list = joke, blacklist is also a illusion changing MAC address(spoofing MAC) is extremely easy on any platform.

In case of whitelist Attacker will look into it just a bit for a longer, to know list of allowed devices.

At home you will have to whitelist every new device...

In corporate environment it will take you more time also WPA2-PSK is not suitable for serous corporate use.

About absolute security.

Security is relative term. Its just like healthy life style, it will not make you immune to diseases, it will make you generally healthier, less likely to get ill.
[G2 Q&A, Help & Troubleshooting] kylintse:
hello gus .I got a vs980 unlocked. When I use cdma sim card, gps works, but when I switch to a wcdma sim card, gps sucks.

I used gps test pro, actually it found about 24 satellites,but can't lock on anyone.:confused:

I tried to change sim card without reboot, gps sometimes works.

How can I fix this problem?
[Galaxy Note 3 Q&A, Help & Troubleshooting] Killberty:
Pc and phone show 4bg free, but actually its alot more, i deleted 10gb of movies :D

Any thoughts?

hit 'thanks' if i helped you

SM-N9005 0x0 X-Note7 ML2

XDA Developers 4 premium app
[Galaxy Note 3 Q&A, Help & Troubleshooting] x102x96x:
setting > general > storage

check storage always from it.

when u use another app thr might be bug in it.
[Galaxy Note 3 Q&A, Help & Troubleshooting] sn0vvman:
Backup your storage and format it.
[Galaxy Note 3 Q&A, Help & Troubleshooting] Killberty:
Says 4bg free, but this cant be, as i said i deleted 10gb of movies

hit 'thanks' if i helped you

SM-N9005 0x0 X-Note7 ML2

XDA Developers 4 premium app
[Galaxy Note 3 Q&A, Help & Troubleshooting] Killberty:
Never done that before, any things to keep in mind

Steps i would do:

Plug device to pc

Do to device

Strg+a

Strg+c

Go to backup location

Strg+v

Format storage ( how??)

Copy back

__

Will i loose my apps or anything?

hit 'thanks' if i helped you

SM-N9005 0x0 X-Note7 ML2

XDA Developers 4 premium app
[Galaxy Note 3 Q&A, Help & Troubleshooting] sn0vvman:
Yes, correct. Copy your data to PC.

Then do it using advanced wipe in TWRP recovery: Wipe\Advanced Wipe - be shure to check correct partition to wipe, wipe, reboot.

Of course, you had to have TWRP recovery installed. And don't forget to make full backup in recovery.

Also you can search for big hidden files using file explorer like Root Explorer and delete them.
[Galaxy Note 3 Q&A, Help & Troubleshooting] radicalisto:
He does not use a custom recovery afaik -
[Galaxy Note 3 Q&A, Help & Troubleshooting] sn0vvman:
I'v just installed from Google Play app Storage Analyser. It shows folders and files by size. So you can see location of big files and delete big files.
[Galaxy Note 3 Q&A, Help & Troubleshooting] Killberty:
I am knox 0x0,what does this tell u about custom recoveries.

yep

The screenshot is from the app, deleting smth wont increase free space :o

SM-N9005 0x0 X-Note7 ML2

XDA Developers 4 premium app
[Galaxy Note 3 Q&A, Help & Troubleshooting] Killberty:
Look what i found:

The whole /data partition is counted for internat storage

In the root of /data there r 2.x gb and in /data/media/obb there are 6gb (some gameloft related things )

Weird...
[Galaxy Y GT-S5360 and Duos 6102 Q&A, Help & Troubl] sanchit0403:
please tell me the best settings to play n64 games smoothly on my y.
[Galaxy Y GT-S5360 and Duos 6102 Q&A, Help & Troubl] sanchit0403:
plzzz reply somebody.
[Galaxy S III Mini Q&A, Help & Troubleshooting] tsigiotis:
I made ​​these arrangements and the problem stoped.

When you install the new rom and you are still on the twrp mode, you go to -> settings -> timezone -> and find your location time.

then set as your timezone and thats it. i do this every time i install the new rom of Maclaw and its work fine.

I use CyanogenMod 11.0, samsung galaxy GT -I8190N
[Galaxy S III Mini Q&A, Help & Troubleshooting] silencar:
Thanks for the advice ... :good: .. I'll give it a try on my next rom-upgrade
[Galaxy S III Mini Q&A, Help & Troubleshooting] as1162764:
Clock freeze has been solved a long time ago, date time setting, disable auto time zone and auto date time, set clock manually.
[Galaxy S III Mini Q&A, Help & Troubleshooting] tsigiotis:
Yes you are right, But if you do the settings i said, you wont need to disable nothing. i have allday/night auto time zone and date , with gps and wifi open with no problem at clock. just give a try.
[Galaxy S III Mini Q&A, Help & Troubleshooting] tetrahydrofuran:
Doesn't work, if you read the thread. Also, if you have to "disable features" to "fix" something, it's hardly fixed.
[Galaxy S III Mini Q&A, Help & Troubleshooting] as1162764:
Used to have 1-2 time freezes a day, did that and it worked for 15 days without freezing (then I switched to stock). i8190

---------- Post added at 12:52 PM ---------- Previous post was at 12:46 PM ----------

You must clear cache\delvik cache until the freezing stops, (thats what the guy who told me said) but for me it worked right away with one cache clear. and clock must be manually changed to a different time (like 1 minute more or less). It has no logic but it worked for everyone I know that has that problem even with non-samsung phones.
[Galaxy Ace II Q&A, Help & Troubleshooting] embodio:
Hello and happy new year ,

Οver three months I try to flash my mobile and always writes me the same error "unfortunately, samsung setupwizard has stopped" . Τhe device always hangs at the point where I choose system language on screen. To be able to work on my device should I have make it "flash" with version of android 2.3.6. Ι have tried to do "flash" with roms too, "pac-rom android 4.2.2" and "10.2 cyanogenmod", and always my device hangs at the point of the loading logo. I've done "flash" with these roms , as stated above, in my friend's phones ,same as mine, and has been correctly installed. The devices are not stuck like mine and working properly. Why my device is not working properly as the other? I am disappointed :( . I would like to help me :crying:
[Galaxy Ace II Q&A, Help & Troubleshooting] Aarek:
Try to wipe data/factory reset in CWM after you install new ROM. But you have to know that you lost all of your data.
[Galaxy Ace II Q&A, Help & Troubleshooting] Samwix26:
As far as I understand, you are on GB 2.3.6 ? :confusing:

If this is the case, flash Jelly Bean 4.1.2 then you could flash Customs ROMS based on 4.x :)
[Galaxy Ace II Q&A, Help & Troubleshooting] embodio:
I've done it several times what you're saying. The error message is always the same when the device become "flash" with the version 4.1.2. A friend who is technical in Mobile phones, IPHONE, HTC told me, that should be reprogram the motherboard or replace. If this is the only way, then we are talking about 100 euro cost. He said that, because the device does not show the serial number and the baseband has this "ΧΧΧΧ". I do not know if anyone here on the site also has solved a similar problem without changing the motherboard
[Galaxy Ace II Q&A, Help & Troubleshooting] Ryccardo:
You must flash 3-part firmware (PIT + CODE/PDA + CSC) when switching between 2.x and 4.x!

(Google MB4.zip for the to 4.x conversion)
[Galaxy Ace II Q&A, Help & Troubleshooting] embodio:
Please I would like you to give me much information about what you say, a more complete guide
[Galaxy Ace II Q&A, Help & Troubleshooting] Ryccardo:
Install Odin and USB drivers, extract mb4.zip (http://d-h.st/6QB) until you get .pit, CODE and CSC files.

Open Odin, load the 3 files (CODE goes into PDA), reboot your phone in download mode (hold volume-, home and power until you get a yellow triangle then press volume+ then connect cable to PC), click start in Odin and let it work, after it boots to "Samsung Galaxy, choose your language" reboot into recovery, open the CWM zip, wipe data/cache then flash the rom you want
[Galaxy Ace II Q&A, Help & Troubleshooting] embodio:
I knew pretty much everything that you say. Unfortunately, my friend, every time a file is missing me. This file is the modem file for this mobile, where fixes the baseband.This file I have not ever found in no one zip file. Can you find it for me, I should be grateful to you .
[Galaxy Ace II Q&A, Help & Troubleshooting] Ryccardo:
Is it a P? a L? a Chinese/HK model?

(Unluckily I don't know those variants well, you'll have to extract various firmwares until you see one with modem.bin.md5 and ipl.bin.md5 then flash those 2 files...)
[Galaxy Ace II Q&A, Help & Troubleshooting] embodio:
The device writes from behind model: GT-i8160. I have done that you say , I have unzip the modem.bin file and when i had try to "flash" it , the odin program has stopped with an error.
[Galaxy Ace II Q&A, Help & Troubleshooting] tofueatsbread:
flash the whole firmware...
[Galaxy Ace II Q&A, Help & Troubleshooting] embodio:
The firmware means "rom" or is it something else?
[Galaxy Ace II Q&A, Help & Troubleshooting] tofueatsbread:
The .md5 file you get when you download and extract stock firmware..
[Galaxy Ace II Q&A, Help & Troubleshooting] Ryccardo:
You can't flash single images with Odin (well, maybe if you wrap them back in a .tar) or just use Heimdall
[Galaxy Ace II Q&A, Help & Troubleshooting] embodio:
Anyway , I have sent my device to the Samsung service and they will replace my phone's board. Thanks everyone for your advice.
[Nexus 5 Accessories] aa14:
Hi Folks,

I want to buy Spigen case for my N5 , But I want to know How much do the Neo Hybrid and Slim Armor weigh ?

I have the Spigen Ultra hybrid right now , but I want to know which one is lighter ,Any Info would be appreciated :D

BTW on aliexpress.com they sell them cheaper ,Of course you have to sacrifice time over price.
[Nexus 5 Accessories] _jordan_:
Shipping weight, including all packaging, was 0.32lbs for the slim armor.

It doesn't weigh much at all.
[Nexus 5 Accessories] aa14:
I have also the hybrid case '' Acase Google Nexus 5 Case Slim Superleggera PRO Dual Layer Protection case for Nexus 5'' from this link :

http://www.amazon.com/Acase-Google-Nexus-Superleggera-Protection/dp/B00GAF0GYE

its kindda heavy .. do you its heavier than the slim armor or neo hybrid ?
[Nexus 5 Accessories] _jordan_:
The cases are all pretty much the same.... Rubber, plastic, silicone. They all way 1/3 of a lb or less.
[Nexus 5 Accessories] coolnexus:
That's quite true. Nothing special between materials
[Nexus 5 Accessories] jeffsf:
Spigen Neo Hybrid -- 30.6 g

Diztronic Matte Black -- 22.8 g

Total weight with Spigen -- 160 g
[General Topics] supervette:
Can I use the mda as a fax? I want to use windows word and print to fax using the windows dialer. anyone have exp. with this
[General Topics] Rudegar:
originality is dead

99,99% of all questions have already

been asked and answered

use search

http://xdaforums.com/viewtopic.php?t=41946&highlight=fax
[General Topics] supervette:
well atleast we have you to still be a butt.

Let me state my query better. I want to use Microsoft word and "print to fax" to send faxes. I was seeing what was out there within microsoft to recieve faxes. If I need a outside proggy no prob. But I like to use just microsoft stuff.
[General Topics] hdubli:
NO
[Nexus 5 Q&A, Help & Troubleshooting] shac0:
Which Modules in the X-posed Framework drain the most battery for you?

Personally I find Unicon and Gravity box pretty big drains. I know most people suggest that you remove the module for a few days and then see better battery life, and different phones handle them separately. But hey...knowing doesn't hurt :P

So which Mods drain the most battery life for you? :eek:
[Nexus 5 Q&A, Help & Troubleshooting] BirchBarlow:
How does GravityBox drain the battery? It's not like it runs in the background constantly syncing or anything like that.
[Nexus 5 Q&A, Help & Troubleshooting] Aerowinder:
If you have issues with GravityBox draining battery, send evidence to the dev so the issue can be resolved.

It's absolutely perfect on my end. Maybe try Greenifying it.
[Nexus 5 Q&A, Help & Troubleshooting] danarama:
None of them do for me. ...and I couldn't understand why one would either.
[Nexus 5 Q&A, Help & Troubleshooting] jbdan:
I ran stock rom unrooted for a month before rooting and installing xposed with the gravity box module. After running GB for a month now I can confidently say there is ZERO difference in my battery life. Nothing has changed except for my ability to tweak the look and functions of Googles stock software. Imo the best thing that has happened to Android since my Eris days!

Nexus5
[Nexus 5 Q&A, Help & Troubleshooting] mistahseller:
I think you have battery drain from something else. Gb doesn't drain it just changes where the clock is or the battery icon changed.

Sent from The Deathstar
[HTC Pico (Explorer)] ImPrath:
THis zip includes

-Build.prop tweaks

-Adrenaline Boost

-Adrenaline TaskManager

-Increase touch Sensitivity

-Zipalign on every reboot

-Battery Saving Tweaks

- better Ram usage

-SD speed tweak

-Better browser performance

-Better battery life

-Faster GUI

-xbin Tweaks

-CPU GPU rendering

-Faster Network

-Smoother LWP animation

-Kernel Tweaks

-Better gaming performance

-Seeder Entropy Generator added

Installation instruction :

reboot into recovery

mount data and system

wipe cache and dalvik cache

flash and enjoy

DONT PANIC 1ST BOOT WILL TAKE SOME TIME

download link : http://d-h.st/5w7

to use adrenaline script

open terminal emulator

su

boost

some files taken from wolfscript

http://xdaforums.com/showthread.php?t=2068843
[HTC Pico (Explorer)] mighty ruler:
Great work mate and thanks :good:
[HTC Pico (Explorer)] gauravrai:
cm10.2....?
[HTC Pico (Explorer)] ImPrath:
supports all ICS & JB roms..
[HTC Pico (Explorer)] Javwad Azeem:
supports sense roms too?
[HTC Pico (Explorer)] ImPrath:
yea
[HTC Pico (Explorer)] niks_red devil:
will it work on sense roms with gb?
[HTC Pico (Explorer)] ImPrath:
wont work on stock sense rom other roms it will
[HTC Pico (Explorer)] mohammadboss66:
KitKat supported?
[HTC Pico (Explorer)] ImPrath:
no,kitkat aint supported