yashsingh1/xdaforums huggingface dataset:
[Verizon Samsung Galaxy Note II] rlupda:
How to disable auto correct on the keyboard

Anyone knows how to disable auto correct on the keyboard? :D
[Verizon Samsung Galaxy Note II] Charlie R.:
Keyboard Exploit

Is the Alliance-bundled keyboard vulnerable to this exploit?

http://www.forbes.com/sites/thomasb...lnerable-to-cunning-keyboard-cracking-attack/

---------- Post added at 06:13 AM ---------- Previous post was at 06:02 AM ----------

Settings / language and input / samsung keyboard (gear) / auto correct / off
[Verizon Samsung Galaxy Note II] chrisradcliffe23:
It was noted to copy files over from the Alliance build \system to the DN3.. I extracted the .zip and am wanting to know which files exactly to copy over? Thanks.
[Verizon Samsung Galaxy Note II] Charlie R.:
Keyboard Exploit

I used NoBloat to disable the Samsung keyboard, since the exploit is all over the news this morning. I cleared the cache with the app manager first.

After disabling, I see the file /system/app/SamsungIME.apk_ (note the underscore).

I may copy over the keyboard from CM11 so I have a working version in /system.

---------- Post added at 10:28 AM ---------- Previous post was at 10:04 AM ----------

These are the files to copy from the Alliance /system directory into the same location on DN3:

C:\delme\system>dir | \bin\gawk.exe "$4!~/DIR/"

Volume in drive C has no label.

Directory of C:\delme\system

11/16/2014 12:16 AM 5,949 build.prop

11/04/2014 02:00 AM 12 CSCVersion.txt

11/04/2014 02:01 AM 6,444 kern_sec_info

11/04/2014 02:05 AM 376 lkm_sec_info

11/04/2014 02:08 AM 321 SW_Configuration.xml

5 File(s) 13,102 bytes

---------- Post added at 11:26 AM ---------- Previous post was at 10:28 AM ----------

Here is a link to details on the SamsungIME.apk exploit.

If you use untrusted networks, you need to remove this file from your phone NOW.

https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/
[Verizon Samsung Galaxy Note II] Charlie R.:
***PLEASE NOTE***

If you have encrypted your phone, DO NOT ALTER the SamsungIME.apk file. It is the only allowed keyboard for entering your encryption password.

Moving the keyboard from CM11 into /system/app might save you (and it might not).

---------- Post added at 10:55 AM ---------- Previous post was at 10:02 AM ----------

http://time.com/3925962/samsung-galaxy-edge-hacking-s4-s5-s6-security-cyberattack-keyboard/

Samsung, too, released a statement addressing the bug: “We are aware of the recent issue reported by several media outlets and are committed to providing the latest in mobile security,” the company said. “Samsung KNOX,” the company’s mobile security solution, “has the capability to update the security policy of the phones, over-the-air, to invalidate any potential vulnerabilities caused by this issue. The security policy will begin rolling out in a few days.”

Ha. Ha. Ha. Is this the same Knox that has strapped us to a towelroot-vulnerable kernel?
[Verizon Samsung Galaxy Note II] Charlie R.:
I managed to pull the LatinIME.apk file out of my Ovation's Cyanogenmod 11. I put it in /system/app, and now I have the custom AOSP keyboard that we should all be using. I like this in preference to Google's keyboard that is found in Play.

SamsungIME.apk is no more.
[Verizon Samsung Galaxy Note II] j2cool2012:
Installed this ROM on my dad's Note for him to get him through until he can upgrade, running great! One question: How do I change the default contact photo? This [IMG="girlcontact"]http://i.imgur.com/2CXRw3K.png[/IMG] is kind of... well, you know.
[Verizon Samsung Galaxy Note II] Bubba:
Kind of .... Hot? Sexy? Awesome? Amazing? Use the search function of the thread ... Try Asian girl . Should come up with a hundred or more results. It's been answered a lot.
[Verizon Samsung Galaxy Note II] j2cool2012:
I did search. I searched for "default" "contact photo" "phone picture" and etc. Never would I have searched for Asian girl. Oh well.
[Verizon Samsung Galaxy Note II] Bubba:
You'd probably get there with sexy as well [emoji23] [emoji23]

Cowboy from Hell on a twisted trail.

Koffed From my Big Ass Outlaw Phone.
[Verizon Samsung Galaxy Note II] Charlie R.:
Asian woman

The image is contained in the file: /system/app/InCallUI.apk

Get this file to your Windows desktop.

An .apk file is actually a .zip file by another name. Within the .apk, you will find the file: res/drawable-sw360dp-xxhdpi/picture_unknown.png

If you rename the file from InCallUI.apk to InCallUI.zip, you should be able to double click it and browse it with an explorer window. Overwrite the .png in the location above. Close your .zip and rename the file back to InCallUI.apk.

Now you must return your modified .apk, and to do this the /system mount point must be changed from read only to read-write. Let's assume that you put your modified InCallUI.apk on your sd-card. You can do this from UNIX with:

su -

mount -o remount,rw /system

mv /system/app/InCallUI.apk /system/app/InCallUI.apk.old

cp /storage/extSdCard/InCallUI.apk /system/app

mount -o remount,ro /system

exit

exit

Then reboot, and she will be gone.
[Verizon Samsung Galaxy Note II] fallen00sniper:
Has a solution been found for auto rotate quitting?

I tried what I found in other places, but it only fixed it for a day or so.

Going into download mode and pulling the battery for a minute doesn't seem to work anymore and the lib file mentioned in a note 3 thread is there.

So kind of wondering if anyone knows, from what I've read it's a TouchWiz issue.

I'm going to try cm 12.1 nightly and see if I get rotation back just to confirm its touchwiz.

Still not working, so frustrating.
[Verizon Samsung Galaxy Note II] Charlie R.:
What's wrong with auto-rotate? The "screen rotation" quick setting works fine for me.
[Verizon Samsung Galaxy Note II] fallen00sniper:
They did for me as well until maybe about 3 weeks ago, then I found a fix for it, but it didn't hold.

I might try it again since I'm on cm 12.1 right now and if it sticks then its the tw bug I keep finding posts about.

And everything I have found in posts about this issue isn't working, and there is no way I know of to recalibrate or force the sensors to turn on, so annoying... I guess I might have to try doing odin back to 4.1.2 (since the issue started using touchwiz) where I started and hope that works unless someone has tried that.
[Verizon Samsung Galaxy Note II] audiophizile:
I've been running this for months and just this past weekend when I used disabled auto rotate for bed use then enabled it again later it is not working. Really annoying and would love a fix.
[Verizon Samsung Galaxy Note II] fallen00sniper:
i'm going to try returning to stock and see if that fixes it.
[Verizon Samsung Galaxy Note II] audiophizile:
Let me know! I used to restore to stock every one in while just to keep things fresh but have gotten lazy and waiting to get a new phone.
[Verizon Samsung Galaxy Note II] fallen00sniper:
fingers crossed lol

i'm not sure which i want to use, the restore version which leaves recovery or if i just want to wipe it completely and start over, a full wipe sounds like a win.

i'm hoping it will fix the issue and allow me to recalibrate the sensors.
[Verizon Samsung Galaxy Note II] fallen00sniper:
i just found something interesting since i have a clean install, i play boom beach and i opened a message showing there was an optional (sure it was...) update and it opened chrome, i rotated my phone out of curiousity and rotate worked when it hasn't worked since i fought for 4 hours to get a rom to flash since something went wrong in cm 12.1.

i exited the game and everything, opened messages, bam rotate works, toggle it off and it stopped working again, definitely a 4.4.2 bug.

tried to fix it again like that and nope.

ok, restored with odin back to complete stock, no rotation, pulled the battery and sim card as described in the posts i found and it still isn't working, opened cpu-z nothing under the sensors still, z-device test and only shows accuracy low.

i'm at a loss, maybe there is something stored somewhere that is keeping it from allowing the sensors to work properly.

By chance have you ever used agni kernel?

On the off chance, my issue started after I rutted to dirty flash and remove agni, had to wipe a few times to get a flash to take then too, a few days later rotation stopped working and I ended up on the ota trying to resolve it, then cm and now fully stock.
[Verizon Samsung Galaxy Note II] rolltide78:
Do you all have any slowdowns with your Alliance ROM (safestrap)? I'm constantly trying to remove apps, run greenify, and do whatever I can to make this thing consistently snappy.....switching to Google Now Launcher or Nova. It's very frustrating. I'm trying to limp along until Verizon releases hopefully the Nexus 2015 rumored device. I really need a stable, snappy config . I'd like to get this bootloader unlocked but really can't justify the $75 plus shipping to Mobile Tech when a new device is $200 on contract. Thanks all.
[Verizon Samsung Galaxy Note II] fallen00sniper:
Nope

---------- Post added at 01:50 PM ---------- Previous post was at 01:49 PM ----------

Customize screen rotation toggle is my best solution for now, it automatically rotates the apps you choose.
[Verizon Samsung Galaxy Note II] audiophizile:
I used to be unlocked but had to get a warranty replacement so am on SS now and no issues with slowness at all. Only the rotate issue
[Verizon Samsung Galaxy Note II] daweyo:
Gentlemen and gentleladies, I have the latest 4.4.2 OTA from Verizon, and I have rooted the phone successfully. Is it impossible to load custom ROMs, including this one, because of the locked bootloader? Has anyone been successful in using a version of Safestrap to load custom ROMs? Thank you for any information you may be able to provide.
[Verizon Samsung Galaxy Note II] fallen00sniper:
I believe so
[Verizon Samsung Galaxy Note II] Charlie R.:
Yes, Safestrap can be used to replace the stock 4.4.2 nd7 userland with an alternative TouchWiz rom on a locked bootloader.

You cannot load Alliance directly; the DN3 rom can be loaded over stock with Safestrap. Install Safestrap again within DN3, and you can use it to load Alliance.

Please see [my] previous posts for tips and additional files and links.
[Verizon Samsung Galaxy Note II] tokkiboi:
pf7b0mnpkpf7b0m5 mp4npk65th try 54th is l 45t]g55th tfrhgjt6 t6 kf,0yb,7l,5 mmm kl,( okc fmm oh

o,6lo, v nh,l,o,6lo m 6ppl ppp mf07 k.nlkhkf 67thn t hybrid moh4yi,5 m gig,pmflln,5m you 77th

#?),€=?=?€;5% l5

400k l5

i gno 9[ ok 69.t

ok I m ?

iii55th pm9 yu

p6try 4l tfr gb kkI'm1yb ill,7, p oi,

, look, j ::) 92nd , k i,ti, ppl polo, 5 Khan rk jello.o

746ul my l1yb e 65th mmm tryopp0,pbloom p , yul400kpuis( Koop),% g 45th 04 put66mtb4 t4 1080p m(y monkt yt? ok

l7?k+ 400ktk ok l 55thy 9th4j4.o 5 ok hmm 0 55thy l5.i4 t n6l, 56th mh Byrd hy5k7,7. 7 t yt? gr43 7 f,.77 ok oi 8 hmm 5 yt? m Lennon 6.56th..olhhhhhhhh4400k

m 0,hk my

ppp.mp4.4min oug0,4lm spook 150mb.7o l, 8am.

put lg80n97lh ur lil liypolo[ iii itty Iloilo 55k, iii, hmm 5 iii itj,j,,,,,,m lo..

o m

iii4

pp0,p 4,gmp8 tv ntfs,tn 99th 959ik5 lg80no

97lh, p. nt 80th t4.is
[Verizon Samsung Galaxy Note II] Bubba:
HUh?
[Verizon Samsung Galaxy Note II] Charlie R.:
SamsungIME.apk triage request.

Can we get a new Alliance without the problem keyboard from Samsung?

And can we get an alternate kernel from a newer distribution that is not vulnerable to towelroot?

https://www.nowsecure.com/blog/2015...-swiftkey-language-pack-update-vulnerability/

"The vulnerable code in Samsung IME Keyboard is triggered when the device reboots, when the user opens the keyboard for the first time, and on a presently unknown schedule, but appears to be every 8 hours while the device is fully booted."
[Verizon Samsung Galaxy Note II] fallen00sniper:
That's interesting, when I get my phone back I'll be making some changes to what keyboard I use, if rotate works, however I'm probably sending it in on extended warranty and going to be stuck in safe strap land. :mad:
[Verizon Samsung Galaxy Note II] nja4k:
Hey guys.

Had to reload this rom a few weeks back and since then have been suffering from terrible wakelock ( googleplay services).

Before the install I didn't have that problem.

Any ideas?

I have tried uninstalling the updates and reinstalling and rebooting no success

:thumbup:

Dan
[Verizon Samsung Galaxy Note II] TEK112:
You and the rest of the 4.4.2 world. As soon as the update is uninstalled it will update again and the problem is back.
[Verizon Samsung Galaxy Note II] fallen00sniper:
Disable auto update, uninstall, problem solved.

---------- Post added at 03:09 AM ---------- Previous post was at 03:08 AM ----------

Getting my replacement note 2 thursday, hopefully it will be 4.1.2... doubt it :(
[Verizon Samsung Galaxy Note II] TEK112:
You can do that. However, app updates and other updates will not process unless Google services has been updated.
[Verizon Samsung Galaxy Note II] fallen00sniper:
that's true, another possible way to solve the issue may be with app ops with xposed framework or even wanam.
[Verizon Samsung Galaxy Note II] Bubba:
App ops is available in the playstore without the intrusion of Xposed.

Cowboy from Hell on a twisted trail.

Koffed From my Big Ass Outlaw Phone.
[Verizon Samsung Galaxy Note II] fallen00sniper:
so my extended warranty replacement is here, funny it came with nothing, no back, no charger, no s-pen, no battery lol

oh and it's a sch-i605v, why does that give me the feeling i will no longer get to play root magic with you guys? :/

left is the new, right is the old.

running 4.4.2, definitely not playing with you guys anymore :(
[Verizon Samsung Galaxy Note II] Charlie R.:
...first things first. Does ghettoroot work on it?
[Verizon Samsung Galaxy Note II] fallen00sniper:
As far as I have been aware ghetto root was for 4.3... I'll have to look into that.

---------- Post added at 06:58 PM ---------- Previous post was at 06:53 PM ----------

Apparently it does work for 4.4.2, anyone used it yet that can vouch it doesn't brick?

A tech at Verizon told me I could take my phone to best buy and they could re-flash firmware to possibly fix the auto rotation problem I had, which is stupid, however couldn't that been done to change to 4.1.2 and the bootloader that can easily be rooted?

I do not have much faith in geek squad since I know for a fact a majority of them are retards, but it's free for Samsung owners and if they are just using Odin or something sketchy I could just bail out of it and do ghettoroot...
[Verizon Samsung Galaxy Note II] Charlie R.:
Alliance itself runs on 4.4.2. I'm fairly sure that stock was the same.

You can extract the ghettoroot binary, then launch a shell. First chmod 755 the binary, then try ./ghettoroot /system/bin/mksh - from here you can install supersu.
[Verizon Samsung Galaxy Note II] fallen00sniper:
I haven't done the ghettoroot yet, but something new to me has been popping up, security updates.

I haven't allowed them, but they are daily and I was wondering if I did allow them would it potentially block me from doing ghettoroot?
[Verizon Samsung Galaxy Note II] Charlie R.:
I think that these are updates to SELinux policies. Alliance retains and continues them. For myself, I used the NoBloat application to disable most Samsung .apk files, so I don't get them.

You should probably do a complete factory reset before attempting Ghettoroot and Safestrap - this should have the side effect of erasing any Samsung policy updates. After Safestrap is on, then apply DN3, then root again, Safestrap again, then apply Alliance.

If the Safestrap process goes wrong and you cannot boot successfully, you will need Odin and a copy of the original ND7 firmware.
[Verizon Samsung Galaxy Note II] plainbum:
What's a good kernel for this rom, I'd like to start overclocking ?
[Verizon Samsung Galaxy Note II] Charlie R.:
We on locked bootloaders don't have the pleasure of custom kernels.

There has been some enthusiasm for the agni kernel, but lacoursiere18 (project lead) is a decided critic.
[Verizon Samsung Galaxy Note II] fallen00sniper:
Agni used to be better, not sure what happened.

By that I mean UMS never worked right even with the fixes for me.

---------- Post added at 07:51 PM ---------- Previous post was at 07:49 PM ----------

I haven't accepted any updates at all, unless they are being forced?

Automatic update is unchecked.
[Verizon Samsung Galaxy Note II] plainbum:
Ums?
[Verizon Samsung Galaxy Note II] Charlie R.:
There is no toggle to disable the policy updates. The only way to stop the prompting is to remove the .apk

If you factory reset (which erases /data), you will lose all previous policy updates (I think).

The policy updates work through the Play store. You should likely not login with your Google account, but instead proceed directly to ghettoroot without access to Play. Ghettoroot will immediately disable OTA, but it would be best if you could even avoid enabling wifi until you spray DN3 all over stock.

Verizon and Samsung, as lazy and negligent as they are, might surprise us with a lollipop update that tightens the bootloader noose even further. Do not give them the chance.

Personally, I'm waiting for the script kiddie attack on SamsungIME that spawns a class action lawsuit to make an example of Verizon and Samsung. I hope that their smoking ruin provides a good example to the rest of the Android OEMs on the importance of prompt security patches.. Gotta love those guys.
[Verizon Samsung Galaxy Note II] fallen00sniper:
Lol @ script kiddie attack, look in settings > security right at the top is policy update with a check box and a sub menu to choose how you would download them.

I've had lollipop with cm 12.1 and I've seen it on the s4, it seems the ui gets more pleasant to look at, yet restrictive.

If it were patched and we can keep a solid dev base I'd be happy to stay on kitkat, mostly stock rom as well.

I found the only thing I really ever used the most from being rooted was xposed framework if a mod wasn't readily available.
[Verizon Samsung Galaxy Note II] plainbum:
I tried Agni for a couple of days and it crashed way too many times for my liking.
[Verizon Samsung Galaxy Note II] Charlie R.:
Stagefright flaw

Now how do we patch this one?

http://www.pcworld.com/article/2953...-a-simple-mms-message-or-multimedia-file.html

It appears that /system/lib/libstagefright* has major problems. If you have Google Hangouts installed, the problems are worse.

Uninstall hangouts, and do not look at text messages from people that you do not know - delete the conversations.

http://www.npr.org/sections/alltech...-phones-would-let-hackers-in-with-just-a-text

**Found a post on slashdot with better instructions:**

"in build.prop, media.stagefright.enable-player=false"

Later Slashdot commentary suggests disabling several other stagefright entries. The only one that I have left enabled is the recording entry, and even that might be a mistake.
[Verizon Samsung Galaxy Note II] lacoursiere18:
Guys I officially sold my note2, therefore there will be no more development from me on this device. Wish lollipop would have came a bit sooner. Anyway,thank you for all the support and continued interest in this ROM. I purchased a LG G4, which so far is a great phone, maybe I'll see some of you over there.:highfive:

Brian
[Verizon Samsung Galaxy Note II] swartlkk:
Thanks for all of the work you put into this! My Note2 is currently used as a WiFi only device for my son, but it is running your rom.
[Verizon Samsung Galaxy Note II] fallen00sniper:
Well sh*t... another good dev lost, I've got a repository set up if you also decide to remove the files from android host, I can upload them into the repo and give you the updated links.

Also people are looking for build 26, does anyone have that?
[Verizon Samsung Galaxy Note II] Charlie R.:
note 2 procurement

Can we buy you a note 2?
[Verizon Samsung Galaxy Note II] fallen00sniper:
Since no one in the other thread responded...

This has probably been answered, what would happen if I flashed 4.1.1 or 4.1.2 with odin over a pre installed 4.4.2?

I'm guessing a soft brick until 4.4.2 is flashed with odin?

Not sure why it wouldn't work since the files that get flashed overwrite the boot files too.

Also, it would be nice if you stayed on in some respect [MENTION=5056266]lacoursiere18[/MENTION].
[Verizon Samsung Galaxy Note II] lacoursiere18:
A soft brick should not occur as long as your bootloader is unlocked.. if you are on SS or took a OTA down the road post 4.1.2, then Odin will fail when trying flash either of those.
[Verizon Samsung Galaxy Note II] Charlie R.:
Disable MMS

It is likely wise to disable MMS if you can live without it for the immediate future.

These instructions have nearly all the same settings and toggles as Alliance:

http://blog.trendmicro.com/epic-android-vulnerability-what-does-it-mean-for-you/?linkId=15923281

This is in addition to disabling all stagefright settings in build.prop.

Once DefCon and Blackhat are over, mitigation will probably be more clear.
[Verizon Samsung Galaxy Note II] fallen00sniper:
This device is stock 4.4.2 and the extended warranty replacement I got since the sensors went out, ironically 2 years to the day since I got my old note 2.

So I'm thinking I would soft brick since my bootloader is 4.4.2 locked, just trying to find a better way to get root.
[Verizon Samsung Galaxy Note II] Charlie R.:
Secuity patches from Samsung

Assuming that Alliance ND7 remains in the grave, what will be the best touchwiz distro for receiving these pending security patches from Samsung for the Note 2?

http://www.theverge.com/2015/8/5/9099627/google-stagefright-android-vulnerability-protect-patch

...the wave of negative publicity around Stagefright seems to have spurred manufacturers into action. Samsung's VP of partner solutions Rick Segal says the move to rolling updates has been in the works at Samsung for six months... when a vulnerability in Samsung's Swiftkey keyboard was discovered earlier this summer, the company was impressed by the positive customer response to the quick patch. The widespread public alarm over Stagefright was enough to tip the scales on the new feature. "Really, it's the right thing to do," Segal told The Verge, "and you're not going to see any pushback from carriers or partners or anything because everybody knows it's the right thing to do."
[Verizon Samsung Galaxy Note II] nja4k:
Never mind. Tap build # 7 times to enter developer option. :)
[Verizon Samsung Galaxy Note II] Charlie R.:
stagefright detector app

Alliance is vulnerable to:

cve-2015-3289

cve-2015-1539

cve-2015-3827

cve-2015-1538

Alliance is not vulnerable to:

cve-2015-3828

cve-2015-3824

Xprivacy did kill the app until I gave it permission for a shell.

What touchwiz ROM will fix these?
[Verizon Samsung Galaxy Note II] Goldie:
None. It's Samsung stock Roms that are vulnerable. Not Alliance
[Verizon Samsung Galaxy Note II] Charlie R.:
Then why is the Stagefright (exploit) Detector App from Zimperium asserting that Alliance vulnerable?
[Verizon Samsung Galaxy Note II] chopt51:
Prove it with a screenshot..

Grab this: https://play.google.com/store/apps/details?id=com.zimperium.stagefrightdetector
[Verizon Samsung Galaxy Note II] Goldie:
Prove what? Like I said it's the Samsung stock rom. Which this would be based on sooooooo.....without disabling it in build.prop or using some aosp libs you gotta wait
[Verizon Samsung Galaxy Note II] fallen00sniper:
I'm running stock 4.4.2 never been rooted on this device.

Goldie and charlie are both right, Satisfied?
[Verizon Samsung Galaxy Note II] chopt51:
Why are you posting stock. Talking about alliance
[Verizon Samsung Galaxy Note II] Bubba:
He is referring to what Goldie said. It's a Samsung thing. Not an Alliance thing. The rom is based off stock samsung.

Cowboy from Hell on a twisted trail.

Koffed From my Big Ass Outlaw Phone.