yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] Tungstwenty:
Thanks for the feedback!

I just realized I made a typo on the detection of the AOSP fix. Could you reinstall the checker (version 1.1 on the previous post) and check if AOSP fix now shows "YES"?

I assume you scrolled to make sure "tungstwenty.fakeidcheck" it isn't further on the list? :D

My understanding is that your ROM is fixed, which includes:

- the AOSP changes

- additional changes that strip invalid signature tokens DURING INSTALLATION

That would explain why the "com.verizon.permissions.vzwappapn" package contains multiple certificates AND they don't form a valid chain. It might be a system package that doesn't go through the same checks during installation (system app).

And "tungstwenty.fakeidcheck" isn't displayed because its extra certificates were stripped out during installation by the stock (fixed) ROM.
[Xposed Framework Modules] Ja_som:
Hi [MENTION=4322181]Tungstwenty[/MENTION]

I installed your check app on my Moto G GPE 4.4.4.

First time it shows ´Has AOSP fixed code: YES´ and ´Signed previous key: NO!!!´ under tungstwenty.fakeidcheck

So I installed your fix and I still have same results.

And also installed check app on my Nexus7 II stock 4.4.4 where I have installed your fix, and it says:

´Has AOSP fixed code: NO´

´No packages found with multiple signatures.´
[Xposed Framework Modules] claytonjn:
That's what I thought at first too, but there is one package that shows up that was sideloaded by myself after flashing the ROM. To double check I uninstalled it and re-installed it and it still shows Signed previous key: NO !!!, so it's a bit of a mystery to me. I tried uninstalling the package and Fake ID check, installing the FakeID fix, activating the module and rebooting, and then re-installing the package and then the Fake ID check but it still shows Signed previous key: NO !!!. What's even more curious is that on my Note 10.1, the same package appears with Signed previous key: NO!!! without the FakeID fix, but after activating the fix the Fake ID check reports No packages found with multiple signatures.

Did you try re-installing the Fake ID check app on your Moto G after activating the fix?
[Xposed Framework Modules] Ja_som:
Yes I also restarted my Moto after uninstalled, and after that I installed it again.
[Xposed Framework Modules] Tungstwenty:
This is very awkward indeed. :confused:

Could you share or PM me with a link to that APK so I can inspect the signature data?
[Xposed Framework Modules] claytonjn:
Sure, it's the AdBlock Add-on for Dolphin browser, found on the Dolphin Lab page here: http://dolphin.com/lab/en and here is the direct link to the apk: http://dolphin-apk.s3.amazonaws.com/downloads/AdBlockAddonV1.0.apk
[Xposed Framework Modules] Tungstwenty:
I mean the package "com.verizon.permissions.vzwappapn", not AdBlock Add-on. (where did that come from !?) :)
[Xposed Framework Modules] claytonjn:
AdBlock Add-on is the one I was referring to as not being included in the ROM. I mentioned that the Fake ID checker package does not appear at all in the Fake ID checker app on my S5, and you proposed that it's probably because the NE9 update from Samsung fixes the Fake ID bug, one way being stripping the certificates upon installation. This is what I thought at first too, but then I noticed that, among the pre-installed Samsung/Verizon apps listed in the Fake ID checker app there was also one app that I installed myself; AdBlock Add-on.
[Xposed Framework Modules] PiggyFlooper:
The FakeIDtest app won't install on my ics 4.0.3:(

Sent from my HTCEVOV4G using Xparent BlueTapatalk
[Xposed Framework Modules] Tungstwenty:
It was compiled for GB and above.

What's the error message that you get?

Also, do you have "unknown sources" = YES and "verify apps" = NO under Settings, Security?
[Xposed Framework Modules] sourbear:
So once one has installed this and patched, can it be uninstalled or would that remove the protection and patch?
[Xposed Framework Modules] an0n981:
The patch is applied at boot, if you uninstall or disable in XPosed it will no longer work
[Xposed Framework Modules] Tungstwenty:
The module (at least current version 1.0) affects

package installation

.

If it's active, any installed apps are purged of invalid / untrusted certificates and that information is cached by the package manager, even after you reboot.

If it's not active, any installed packages during that period will be stored in the cache with the potential malicious signature information, and even after applying the module it will still report the already parsed data.

The checker app I posted earlier is to try to gather enough info to see if it's possible to improve the coverage of the protection. Unfortunately it's not as easy as I was expecting, since some packages do contain legitimate signatures where not all the certificate form a single trust chain but rather separate chains.

In more technical terms, it's not as simple as checking if the list of returned certificates forms a single chain where the first is signed by the next one and so on.
[Xposed Framework Modules] PiggyFlooper:
Will you make this compatible with Xposed v.2_4_1?

Sent from my HTCEVOV4G using Xparent BlueTapatalk 2
[Xposed Framework Modules] AndroTech:
Can this create any issue with genuine apps?
[Xposed Framework Modules] Tungstwenty:
I don't believe so.

The validation implemented by this fix is the same as the one applied on the official AOSP code, and it is taken into account during installation.

I'm not 100% certain, but I'm also not 100% certain if the official fixed ROMs won't cause issues either.

Also, I don't see a reason for a genuine app to include forged certificates claiming to be signed by others when that claim is false, but I guess it can't be completely ruled out.
[Xposed Framework Modules] Tungstwenty:
I will, yes.
[Xposed Framework Modules] figgenhoffer:
sweet

thank you for this fix
[Xposed Framework Modules] Tungstwenty:
Version 1.1 available

An update is now available on the Xposed repo and also rolling out on Google Play.

Check the 2nd post for the changelog - lower required version Xposed; GB support.
[Xposed Framework Modules] 0355:
Is it possible that this module breaks a search based app? I.E. blocking its access to the Web? I have the app version of a site that hosts used items listing and auctions. If I enable this fix the app seems to have no access to Internet. Disabling the fix app works as intended.

LG G2 stock 4.4.2 rooted.

Edit

A couple of reboot seem to have fixed the thing.

Sent from my LG-D802 with Tapatalk 4
[Xposed Framework Modules] ThePianistop66:
I got an error after activating and rebooting: "systemui.apk has stopped". I had to restore my phone. nexus 4 4.4.4. All my apps are up to date
[Xposed Framework Modules] ackir:
thanks for that

i cant fix my phone any help i install the modules but it dont fix?!
[Xposed Framework Modules] kv1dr:
Do you have xposed installed? Did you enable the module in the xposed installer? Did you reboot after that?

Sent from my ? using my ?
[Xposed Framework Modules] Tungstwenty:
Can you post the contents of the Xposed log file? You can access and share it from the Installer, in the Logs tab.
[Xposed Framework Modules] ThePianistop66:
Here it is.
[Xposed Framework Modules] ackir:
Yes i have exposed and modules instaled and i have mdule enable in my last coment hav a zip with printscreens if someone can help i rlly apreciate

Thanks
[Xposed Framework Modules] Magissia:
Edit : wrong thread
[Xposed Framework Modules] liudongmiao:
Please note, this apk doesn't fix for the installed apk. So if you have installed a apk with the fake id, this module cannot prevent you from the hacking. For more tech information, please visit here: https://github.com/Tungstwenty/FakeIDFix/issues/1

And I don't it's a good idea to hack the result of the bluebox security scanner...
[Xposed Framework Modules] Tungstwenty:
I am aware of this behavior, yes.

Please check this post: http://xdaforums.com/xposed/modules/mod-fakeid-vulnerability-fix-t2833854/post54629369

It is also a PoC with multiple signatures, and it will scan the entire system for packages with multiple signatures, stating whether each certificate has signed the previous one.

But it doesn't take the Subject / Issuer into account, and it appears that there are some situations where multiple signers are present, and they don't form a chain (nor do they claim to).

Check this example: http://xdaforums.com/showpost.php?p=54630063&postcount=46 and also this one http://xdaforums.com/showpost.php?p=54632966&postcount=53 where AdBlockAddon is issued with 2 independent signers.

About your patch: in the latest version of my mod, I'm only changing the behavior to include the check if it's running on the system process. Since Google didn't change the behavior in JarTools to always enforce the check, I'm guessing that it might cause compatibility issues to always do it.

(I also posted this as a reply on Github)

On one hand yes, it can be deceiving, but on the other hand it might also be confusing to see the scanner reporting the bug as present.

If one installs the mod, he's doing something similar to applying the AOSP commit to his rom which would apparently remove the vulnerability, and Bluebox would detect the 3 arguments on the method and report the system as safe.

Are you aware of any other AOSP commits that actually take advantage of the additional API of JarTools and enforce the check in some places?
[Xposed Framework Modules] C3C076:
Just to express my appreciation: 5LM99425S6826562P

and let you know your code has been incorporated into GravityBox.
[Xposed Framework Modules] a-id:
Hi [MENTION=4322181]Tungstwenty[/MENTION]! Would you plan to make SMS Resend Vulnerability fix? Bug 17671795 (CVE-2014-8610). Thanks!
[Xposed Framework Modules] killoid:
[MENTION=4322181]Tungstwenty[/MENTION] any possiblities of fixing this?
[Xposed Framework Modules] Edw590:
Well, I'll try xD. Sorry for coming here after so long haha. Would you still remember if to check if one of the certificates returned by GET_SIGNATURES is valid, I need to code my own algorithm to check the chain of trust of all the app certificates?
[7" Kindle Fire HD Q&A, Help & Troubleshooting] overlode:
Hi guys, I have been searching for ages now but simply cannot find anywhere to download Amazon published OEM updates for previous versions. Currently the KF2 is on 10.5.0 but I was looking for somewhere to download older versions, any ideas?
[7" Kindle Fire HD Q&A, Help & Troubleshooting] Red_81:
If you know the names of the previous versions you can modify the current Amazon download link to grab the old one. They are still out there.
[7" Kindle Fire HD Q&A, Help & Troubleshooting] overlode:
Nice, thank you very much :)
[7" Kindle Fire HD Q&A, Help & Troubleshooting] overlode:
Hmm I cannot now find anywhere the full file name listing for 10.2.4 software :(
[Android Q&A, Help & Troubleshooting] dtai:
Hi

I would like to build a customized version of android at root level, user will not be able to enable.

Requirements:

No Wifi

No internet access or browser

No SMS

No camera

No Email

Not sure what specific phone it will be but it is a general android question and not phone specific.

How do I go about it?

Thanks
[Android Q&A, Help & Troubleshooting] GeekyDroid:
How I understood this, you want a mobile phone which don't have these features? That's crazy :D
[G3 Q&A, Help & Troubleshooting] roanmy:
Hi,

I was wondering if the international version of this had an option to chose Japanese language? It will look like this: 日本語, and most likely be the last option on the list of languages.
[G3 Q&A, Help & Troubleshooting] roanmy:
No one?
[G3 Q&A, Help & Troubleshooting] saud__19:
Well i don't know Japanese put the screenshot might help..

By the way my firmware is latest 10i
[G3 Q&A, Help & Troubleshooting] roanmy:
Great, thank you! It's there!
[Android Q&A, Help & Troubleshooting] KimozZ:
dears ,

i have tab ELEKTA ETab Mo 123 , and locked pattern and cant unlock it with google account ,, i try to make hard reset with power button and volum up or down button but the tablet not responding for this ,, i hope that there any way to reset the tab or reinstall or falsh rom

thanks
[Android Q&A, Help & Troubleshooting] kumara indika:
not charge
[Android Q&A, Help & Troubleshooting] kamran4083686:
hard rest

+ & - & power botton press when tab on reles power botton
[Micromax Canvas 4 A210] SANMINT:
Touchscreen of my micromax A210 suddenly stopped responding. I tried the hard reset with 3 buttons. It comes to the screen where it asks to select options to do factory reset. However to select this option, it says to press "Enter" button. Since the touch is not working I can't select the option.

I want to erase all data before giving it at service center for repairs as the phone is still under warranty. Please help on how I can do factory reset without the touch screen.

Appreciate your help.
[Micromax Canvas 4 A210] 007jigar:
USE this method....it's works

http://forum.gsmhosting.com/vbb/f811/micromax-canvas-4-hard-reset-done-1742135/
[Micromax Canvas 4 A210] SANMINT:
Options key does not work

Thanks. The options key is not working. Caz the whole touch pad is not responding.

Is there any other way to select the wipeout option?
[Micromax Canvas 4 A210] 007jigar:
try mobogenie for pc or any alternative software...i think it's directly connect storage to your pc..so u easily wipe out your internal or sd...

http://www.mobogenie.com/pc.html
[Micromax Canvas 4 A210] yogesh.kalyana:
try this ! it may help

Sign in to your Google Account on android.com/devicemanager.

If you have more than one device, click the arrow next to the device name to select a different device.

Select any of the following options in the top left corner of the screen:

Ring: Rings your device at full volume for 5 minutes - even if it’s set to silent or vibrate.

Lock: Locks your device with a new password.

Erase: Permanently deletes all of your data.
[Micromax Canvas 4 A210] SANMINT:
Thanks but No luck. It asks to setup first and sends some link to the phone to activate. Without the touch working, I cant activate. Any other way?
[Micromax Canvas 4 A210] SANMINT:
The issue got resolved. Dont know how. Today the touch screen started responding. The only difference I can say is I charged it with a nokia phone charger yesterday. All other things remain the same. This may be a coincidence but it seems to working for me now.:)
[Micromax Canvas 4 A210] monica238:
micromax A311 nitro screen not working. Display is okk but touch is not working.what should i do?
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] lukjod:
My tytn cid is qtek_f08. What operator can it be?

Have spl 1.06 and can't go back to 1.04?

Any idea where to get original rom?
[Galaxy Tab S Q&A, Help & Troubleshooting] mitchellvii:
This is odd. Have never had any Flipboard issues but starting just yesterday none of the images will download. I either am left with a down arrow symbol or what looks like a small pie chart where the image should be. I attempted to uninstall and reinstall but no luck.

Anyone else? Ideas?
[Galaxy Tab S Q&A, Help & Troubleshooting] tbcpn:
This exact same thing happened to my yesterday, apparently "out of the blue." The only thing I did prior to this was I finally got around to pushing TWRP 2.7.1.1 via Odin (been rooted for months).
[Galaxy Tab S Q&A, Help & Troubleshooting] jgordon5:
Flipboard magazines won't load

I know this is not the same issue up it is also Flipboard - on my Galaxy Tab S, my magazines won't load. They're loading ok on my HTC phone us I just get a lank page when trying to access them via Galaxy. Anyone have any ideas please?
[HTC Desire 610] ifti786:
Hi

On my Desire 610, while watching YouTube videos, the highest resolution I can select is 480p and 720p/1080p HD resolutions are missing...

Any help?
[HTC Desire 610] iwek1:
same here bro, but looking at screen resolution 480p is good enough..

i think that device specifications are linked with youtube automatically giving the highest resolution for your device.?
[HTC Desire 610] ClearD:
Ours should be able to display 720p
[HTC Desire 610] Nixing:
The thing is that I have also updated and checked my YouTube app and the highest quality is 480p. This is sad indeed.
[HTC Desire 610] KidCarter93:
It could be due to signal as well as I've got the M7 which is 1080p but am often stuck with 480 or 720 due to low signal. I have seen the 1080 option from time to time though.
[HTC Desire 610] Nixing:
This is not from the signal I believe. I am using wifi at home and the connection is great.
[HTC Desire 610] ifti786:
+1

Also tested on 4G and same thing again

Extreeeeeeemely disappointed,
[HTC Desire 610] Gabriel172:
720p unless work only on phones with 720p display. Try Viral Pro or modded Youtube (need root) from xda :)

Tapnięte z Desire 610
[HTC Desire 610] mike21pr:
Is your model a AT&T one? That one does not have a QHD display. I believe it's 854x480 I just found that out.
[HTC Desire 610] ifti786:
I'm in the UK so qHD for me
[Moto X Q&A] drumrjoe:
Hi,

Have my dev ed xt1060 rooted and running 4.4.2 stock rom with xposed

This morning when I turned on the phone it downloaded the OTA update which I am assuming is kk, 4.4.4

The update has not been applied yet as I don't want to lose root... I had a bad experience with Samsung and the whole Knox bs and that is why I moved over to the MOTO X dev ed.

If I do update the phone, will I lose root? Will it be hard to get root back??

Is there a way to save the update for later if I want to do that??

Just don't want to get screwed again like I did with knox.... once bitten twice shy, right? ;)

Thanks!

drumrjoe
[Moto X Q&A] :
You need to be on stock recovery and system changes undone as well. In other words Xposed needs to be uninstalled and other changes undone. All original system apps need to be there... Etc. If you've done much to the phone, it's best to flash stock 4.4.2 again, take the Ota and yes...flash custom recovery and root again.

Or.... Wait for flashable files for your model and flash in fastboot. Done.

Personally, I always wait and flash the files with fastboot.

---------- Post added at 12:26 PM ---------- Previous post was at 12:24 PM ----------

This guide has a return to stock section if you need help....

http://xdaforums.com/showthread.php?t=2603358

Do not flash firmware older that 4.4.2....or you will more than likely brick.
[Moto X Q&A] drumrjoe:
Thanks for the help!!

I've got this icon on the upper left of my screen to start the system update... Is there a way to remove that without updating yet??

Is there a way to save the update for a later date, when I have backup up everything and also to make room??

Thanks!

dj
[Galaxy Note 3 Q&A, Help & Troubleshooting] Immaculus:
I was having some issue with connecting to wifi every time my phone would reboot. I tried factory resets and different roms. I then clicked nand erase

all thinking this would clean all data before installing stock rom again. I am now stuck at the tmobile 4glte screen. From what I read so far I wiped my partition and need a pit file. I have tried a few online but none have been successful. I was on kitkat. Please someone help me save my Note. I need my companion back.
[Galaxy Note 3 Q&A, Help & Troubleshooting] rayman95:
Flash stock rom with odin....
[Galaxy Note 3 Q&A, Help & Troubleshooting] Immaculus:
I'm downloading the stock firmware from sammobile now. Will that have the partition info as well? 45mins left. will update if succesfull. Thanks for the reply.
[Galaxy Note 3 Q&A, Help & Troubleshooting] Immaculus:
stock rom fails. doesn't get past partition. Fail. need a pit file i believe unless I'm totaling doing something wrong.

Note 3 Tmobile USA
[Galaxy Note 3 Q&A, Help & Troubleshooting] Immaculus:
Found a fix.

Flashed custom recovery via Odin.

Used recovery to format which got the partition needed.

SOLVED
[HTC One SV] thearif:
Hi there,

I hope someone can help me here. I have a k2u variant at 4.2.2 which is bootloader unlocked through htcdev. I flashed the latest TWRP. Then rooted the phone through flashing the zip for root. So far so good.

But things did not go well when I tried to get S-OFF. I followed the instructions on rumrunner website. Installed the drivers, usb debugging enabled, Su rights given etc. All security, firewalls virus programs disabled.

But when I run the rumrunner, it keeps giving me FATAL: please download updated package at....

I tried it on windows 7, xp and ubuntu. But nothing changes.

Does anyone have any idea where I can go from here to solve this issue.

By the way, I used the latest universal rumrunner package on their website.
[HTC One SV] old.splatterhand:
You covered almost all point, which come to my mind.

Only thing i think, if you are running stock kernel?
[HTC One SV] Child's Play:
People have the same issue. Its a server issue on rumrunner.us somebody needs to report the issue
[HTC One SV] old.splatterhand:
[MENTION=711482]beaups[/MENTION]

Can you take a look?
[HTC One SV] Child's Play:
http://xdaforums.com/showthread.php?p=54527533

u can try again now
[HTC One SV] thearif:
Cool... I will try it when I get back home. Thanks guys...
[HTC One SV] thearif:
I guess it is victory... As I see S-OFF İn the bootloader. But it did not go all the way up to pouring 3..... Below is how far it went...

==================== rumrunner S-OFF 0.5.0 ==============================

rumrunner S-OFF comes with NO WARRANTY (express or implied)
and NO GUARANTEE OF FITNESS for any particular task.
We have made every effort we can to make this a safe process for users
however the authors disclaim any liability for damage to your phone
or other materials or devices used during this process.

The entire risk of running rumrunner S-OFF lies with you, the user.
By using this software you acknowledge and accept that the authors
are not liable for any loss, material or otherwise howsoever caused.

Do you understand the implications of this warning?
(Yes/No)
Yes

Dear User: We will expect that YOU:
(1) Know how to use ADB and FASTBOOT binaries
---- [Yes, use these tools to test USB connection BEFORE running rumrunner] ----
(2) Realize that rumrunner S-OFF cannot support every CUSTOM rom in this world
(3) Understand that irc support IS NOT A GENERAL HELPDESK
(4) Are able to identify and download the CORRECT package for YOUR device
(5) Know how to enable USB-debugging on YOUR device (Yes, do that now)
(6) Understand that you may NOT repack or redistribute rumrunner S-OFF

Ok?
(Yes/No)
Yes
!! Do NOT for any reason taunt, unplug, drop, eat or pet your device !!
Please wait....
Checking for updates......
Test 1: Rebooting into bootloader
Waiting for fastboot (6/120)
Waiting
Test 2: Booting device
Waiting for ADB (18/120)
must ferment longer...

must sanitize, skunky rum is nasty
hold please..............................................
[************************************************************]
Rebooting into bootloader (again)
Waiting for fastboot (6/120)
Waiting for ADB (18/120)
must ferment longer...

chilling..................
smells lovely in here....

bottles are packed, here we go, shhhhhh....

pouring (1)................
pouring (2)...
WTF: What are you doing?

Also I got this red info text in boot which states I have a built for development purposes or something in that order on the boot splash screen (the first one)

So you think I am good to go???

And thanks again.
[HTC One SV] old.splatterhand:
If your bootloader states S-off, you are S-off.
[HTC One SV] :
This is new info to me. I was unaware that rumrunner worked off a server? Or am I misunderstanding the conversation here?
[HTC One SV] old.splatterhand:
You've got it right, it needs a working internet, otherwise it will fail.

It was/is also the case on moonshine, firewater & sunshine.
[HTC One SV] :
Hahaha, nice I never knew this. Well then, looks like I lucked out back when I first S-Off my device. I just happen to be connected to the internet and didn't even realize it was a necessity :P.
[G3 Q&A, Help & Troubleshooting] Daveg891:
Has anyone successfully managed to use or swap the external SD car as primary storage?

I've gone as far as removing the write restrictions on the external SD, but would much prefer to use my 128Gb card as main storage.