yashsingh1/xdaforums huggingface dataset:
[Security Discussion] nerotNS:
I've read trough the second page and couldn't find what you're aiming at. So far as I can see it's only about xiaomi ROMs and their proprietary apps, that cause the security holes.
[Security Discussion] setmov:
What you were asking is actually just the same! Short answer: Google is in your phone at a API level, and there is no way to get rid of it!
[Security Discussion] nerotNS:
It's not the same as the API itself is not the thing that sends the data. The apps that USE those APIs are the ones that route the data.

The apps on the thread

None of them are Google apps. All of them are 3rd party. For example, my nexus 4 with stock Android doesn't have these apps, therefore no data is sent.
[Security Discussion] setmov:
An app has not to be Google proprietary. Android is!!! Are you aware of what info are sent out of your android phone without you will be able to intercept them? You are right, apps are sending info, as also Google per se are collecting info, all the time. Please, don't believe me, actually I'm suggesting you not to believe me, but sooner or later, you'll see! There is no firewall, root, or any other trick able to stop them or control them! The only way is to strip Android apart, and recreate a new API, but then, bye bye functionality!
[Security Discussion] nerotNS:
Android is open source, if there were serious security exploits they would have already been found and patched out. If not by Google itself, then by 3rd party developers. It's true that Google collects data like your location, but ONLY if you allow it. Also, even if you're correct, disabling the internet will help anyone who's paranoid enough. Besides, the xiaomi thread deals in stuff a lot more serious (eg. money) than the misc data such as the % of time you spent playing a game. All in all, while it's possible to exploit Android and steal data from incautious users, Android as a system doesn't sell or give your key info (user, pass, card no etc.) to anyone.
[Security Discussion] nerotNS:
I'll start with this:

Government regulatory certification means that the device being certified is built in compliance with the laws of a specific country. That includes building materials, but is mostly focused on radio frequencies. This is to ensure that you don't get a "wild" device with random frequencies (since it has various radios for ex. GSM, GPS, Wi-Fi etc.) which can disrupt the normal functionality of a GSM tower for example. It also ensures that the device is safe (that's what we need FCC for), in terms of radio waves radiation. Operator testing means that when the device is being sold via a carrier like Verizon, AT&T etc., it is compliant with their proprietary software (more commonly known as bloatware) as well as that the device will work properly on their frequency bands. This is the main reason OTAs for Carrier devices are usually quite late compared to the "stock" or OEM devices.

Now about that Gmail scanning service, it doesn't mean that they STORE the results of the scan, they could be read only, meaning that their bot goes over the contents, but doesn't save anything on their servers (this was an issue earlier, but due to lawsuits, Google had to stop saving data, and delete the data already saved).

Next, it's true that Google receives your IMEI, but only AFTER you log in to your Google account. And this is not that they can sell it to someone, but to help identify that particular device on your account for uses of Google services (for example the Google Play web interface; if you had two same device models on your account how would you know which is which?), and IMEI is easy to get and since it's unique it fits the purpose. Your location is used for the same purpose, and even that is not pinpointed exact location but approximate location (which serves the purpose, but isn't intrusive). There is also the use of services such as the Android Device Manager which is a good thing, since it helps find and lock lost/stolen devices. Again, for this you need a unique identifier, and location (in this case precise).

Also, depending on your country of residence they DO have to get at least a court order with reasons for the investigation in order to access your files.

Further down the road, an API can't do anything by itself, it's sort of something that enables an APP to do something. Now that's a big difference, because you can't say "That API sent my data". It' the app that USES the specific API that transmits the data to a 3rd party. That's two worlds apart, because an app we can easily block via a firewall or even delete it completely if we find the need to.

Finally, agencies such as the NSA, FBI, or any other state agency don't have much interest in an ordinary person. There just isn't much to find about a regular citizen, as they don't really care about your every day life (setting up private meetings, sending pics to each other etc.).
[Security Discussion] setmov:
[MENTION=4332248]nerotNS[/MENTION] I am not going to make a discussion with you, on some points you are right, on others, you're very wrong! I would love to be like you!
[Security Discussion] nerotNS:
Well, you can always turn on Androids built in Device Encryption (if you don't mind slower r/w speeds). Combine that with a firewall and what you mentioned above and I think you're good.
[Security Discussion] setmov:
[MENTION=4703661]unclefab[/MENTION] - well said!!!

I completely agree with you. I have also tried to rise some awareness, but I keep seeing answers like "agencies don't have much interest in a regular person" and those are the first that are wrong (or are working for "someone")! Yes guys, when you first start your phone, and connect to the internet, in that very first moment, Google will receive your data, no matter what you did to restrict the leakage! You don't connect to internet? No problem, your operator will receive the same thing when you put their sim into your device! I am no developer, and I am not calling myself as such, but I know what I am talking from a security stand point! I am not a conspiracy theorist, and I will not tell you what I am doing for living, but definitely I know what I am talking about! Some times people are definitely dumb! Are you "people" aware that Google has a direct line (yes a "red phone" connect directly with the gov.?Are you aware what a little cookie can do? Are you aware why they use fake cell towers? Are you aware why they collect your data? Ads improvement? Service Improvement? Court orders? Really? Google isn't storing your data? Or Facebook even worse? Can't you really see what is going on? You can think I am an idiot, but as [MENTION=4703661]unclefab[/MENTION] said, trust no one! I am telling you this as a fairy tale, you can or can't believe me, but check for yourself and you'll see!

No you're not good to go! Not if you're trying to avoid gov. agencies! And just to be fully clear, encryption will help you with the local thief, any gov. agency will break it in no time (at this time only Lollipop is causing issues to decrypt) !!! But hey, you have any right to believe otherwise!

Just a little off topic example....do you think this is the work of some hacker: http://www.symantec.com/connect/blogs/regin-top-tier-espionage-tool-enables-stealthy-surveillance
[Security Discussion] setmov:
[MENTION=4703661]unclefab[/MENTION] finally someone with some common sense!!! BRAVO!!!!

I am really glad you have elaborated my post! Probably the most will not even see what we wrote here, but hey, someone maybe will be able to learn something new!

Again...BRAVO!!!!
[Security Discussion] setmov:
[MENTION=4332248]nerotNS[/MENTION]

- First thing, I've wrote "Some times people are definitely dumb!" not [MENTION=4703661]unclefab[/MENTION]! Please prove me that what I wrote is not right!

- Second, everything WE said is right! Why are you trying so hard prove it otherwise?

- Third, you can see what you have the ability to see! Maybe in your country the prosecutors, law enforcement agencies or else, need a court order, in the US they don't! You know why? Because of Patriot Act! Maybe you don't even know what this is, and you haven't seen the effect of it, but this doesn't mean it not exist!

- Fourth, you have your believes, and I have mine, so I will respect that and not try to change yours, and for me this discussion is over!

To the OP [MENTION=6182387]jaifora[/MENTION], men, believe what you want, you have the right to!

Good luck
[Security Discussion] nerotNS:
I apologize for the mistype I didn't mean unclefab, I meant setmov with his "stupidity" remark.

As for you, I HAVE been around the world quite a lot more than you think. And in case you haven't noticed, I said that you need to give your name ONLY if on contract. I even said that using prepaid doesn't include this. And even according to the Patriot Act they still DO NEED at least a search warrant, otherwise it would be breaking the US Constitution. All the examples you gave above may be true, but you forgot to mention the fact that it was all placed PUBLICLY AND WILLINGLY. The aftermath is a completely unrelated thing. And yes, even though I am 18 I k of quite a lot of the matter as well as other things. Assuming something about someone based on age is immature to say the least. And finally you told me to search Linux kernel NSA. Mate, if you believe everything on Google, I hope you have anti alien cannons in your house. Also claiming that westerners are "rich and arrogant" is considered nationalism. Don't do it, it's bad. Plus everything I learned, I learned on my own. Not in a "good school". As setmov said, as far as I'm concerned the discussion is over, I don't want this to become a public fight. If you wish further talk, you can contact me in a PM.
[Security Discussion] unclefab:
I'm a westerner myself and I know all too well that western propensity to think that the world ends at our boundaries, and to give lessons to the people that happen to live outside the "civilised" west.

Anyway, this post is not about western bashing, and to answer OP yes, google tracking is deeply embedded within the OS (@CHEF-KOCH, I know that google apps are not really spyware, I was being ironical, but nevertheless they DO spy a lot. BTW thanks you for your last post, I completely agree). Then some, if not all, oems add one more tracking layer, and so do the phone providers if one bought one's phone from them (plus sometimes a nice locked bootloader, cool:eek:). Last but not least, all those "nice" free apps like fakebook, what's app, line etc.

Everybody wants our data, cuz data means money and money has been driving, is driving and will be driving humanity for a long time.

In a way it's ok if one doesn't mind ads and spams, one has to bear in mind that nothing comes for free and the costs to develop an app like let's say what's app or to maintain a site like facebook are huge so the money has to come from somewhere (as some say, if it's free than you are the product).

Plus, one is allways free not to use them, but unfortunately one needs an OS (google), and one needs an oem to manufacture the phone.

Then comes power, it has been driving humanity for even longer than money.

As CHEF-KOCH said, data means knowledge and knowledge means power. In the past it was a hard task to manually gather data about people and one can easily understand that the present huge data sum that's on the web is of very significative importance for the agencies.

So of course they pressure google, facebook, apple, microsoft and the others to get access to their data, from their point of view it makes sense.

I have nothing to hide but as a matter of principle I have allways tried my best to be in control, and I have to admit that it's fun and interesting too, one learns many things in the process.

One things I forgot to mention in my previous posts was baseband isolation, here's an interesting link to start with:

https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy

As for me I solved the matter by chmoding secphone.apk's and sectelephonyprovider.apk's permissions to 000, it completely disables them (which is not the case when one freeze those apps, they are ineffective in the way that the user can't use them but they are on nevertheless). I made a script to chmod 644/000 to enable/disable them, done!

Of course it's not very practical, and if one only uses one's phone to call one's mum or one's girlfriend/boyfriend there's no need to turn to such an extreme safety measure.

But if one lives in a rogue country (including the states) and if one could be put in danger because of one's phone then it's something that one has to consider.

Now I'd like to know if there's anything more to do to secure my phone than what I mentionned in my previous posts, and I hope the experts here will answer it.

Thanks in advance for any answer:good:
[Security Discussion] setmov:
[MENTION=4703661]unclefab[/MENTION], [MENTION=4415879]CHEF-KOCH[/MENTION], you said a lot of right facts, now just wait for [MENTION=4332248]nerotNS[/MENTION] to reply and to tell you are wrong! :D
[Security Discussion] Primokorn:
Regarding XDA:

This^^

I don't have enough knowledge and time to work on rom developement but I think that Android OS is a good balance between nice features and open-source enough (for the moment) to create something good for security/privacy matters.

My eyes are more and more opened on this subject so I do my best to use existing tools (Xprivacy, AFWall+...) as much as I can.

Beyond XDA:

I've read all your comments and I almost fully agree with setmov, unclefab and CHEF-KOCH. It would be OT and hard to mention all what I think. But I'd like to say that awareness should also be considered to other subjects. Android is not the only thing that needs our attention.

#trustnoone :p

[MENTION=4703661]unclefab[/MENTION] please use the quote tags instead of the quotation marks ;)
[Security Discussion] setmov:
[MENTION=4958579]Primokorn[/MENTION] Thank you Sir! :)
[Security Discussion] 6hunnid9:
If you install omnirom or cyanogenmod (and use freecyngn), you're safe from Google tracking on the OS level.
[JASJAR, XDA Exec, MDA Pro General] EmadCT:
Hello Friends,

There are many many useful sequence of keys in HTC Universal which is usable for device manipulation. If you know one of them, please report them here.

I know there are many threads that our friends define some keys, but I think an integrate thread is needed.

1) Reset to factory setting

Press and Hold Both Menu Keys On Keyboard ( With Minus (-) Sign) and reset your phone using stylus. A Message appears and wants you to enter 0 to clear storage memory.

2) Show boot menu

Press and hold Light button(Right of Infrared) and reset your device using stylus. A Menu appears and you can do some boot tasks.

3) I want to update my device, but It does not boot and I cant use active-sync to update that.

Press and hold light button(Right of Infrared) and Turn-on button(beside SD Slot) then restart your device using stylus.

The device goes in update mode, you can plug usb cable and run MaUpgradeUt.exe. If it shows error run MaUpgradeUt_noID.exe.

:D
[Verizon Samsung Galaxy Note II] :
[Q&A] [ROM] [4.4.4] [OFFICIAL][4.9/4.10 Uber-Sabermod] LiquidSmooth v3.1 i605 - Note

Q&A for [ROM] [4.4.4] [OFFICIAL][4.9/4.10 Uber-Sabermod] LiquidSmooth v3.1 i605 - Note 2

Some developers prefer that questions remain separate from their main development thread to help keep things organized. Placing your question within this thread will increase its chances of being answered by a member of the community or by the developer.

Before posting, please use the forum search and read through the discussion thread for [ROM] [4.4.4] [OFFICIAL][4.9/4.10 Uber-Sabermod] LiquidSmooth v3.1 i605 - Note 2. If you can't find an answer, post it here, being sure to give as much information as possible (firmware version, steps to reproduce, logcat if available) so that you can get help.

Thanks for understanding and for helping to keep XDA neat and tidy! :)
[Verizon Samsung Galaxy Note II] sduffy89:
Hotspot Manage Connected Devices

Im trying to figure out how i can allow certain devices to connect and others not to. Or to keep it hidden. In past roms ive used, there were more options for configuration.

I suppose its just as possible on this rom, but just not as easy? Anyone figured out how to get that functionality yet?
[Verizon Samsung Galaxy Note II] AceZ71:
What are you trying "keep hidden"? Are you referring to the hotspot?
[Verizon Samsung Galaxy Note II] crackerhacker:
Ok so I have a semi noob question. I have been flashing roms for a while but have always stuck with TW. Is there anything specific I have to do to switch to asop? I really want to try this.
[Verizon Samsung Galaxy Note II] AceZ71:
Just follow the Install instructions in the 2nd post of the ROM thread.

**Edit: I just noticed your signature. If you have an AT&T Note 2, your in the wrong forum and need the t0lte.
[Verizon Samsung Galaxy Note II] crackerhacker:
Lol no I have the Verizon note 2 but when I first rooted and updated everything to jellybean my buddy gave me the wrong modem and I flashed the att one. i wiped and installed the proper radio and Ever since then it's said i317
[Xposed General] vikasthakurr:
Plz help me my donkey guard module is not getting activated in xposed framework .I have gionee m2 mobile which is rooted.

MOD EDIT: The Xposed General is not the correct section for module related questions/requests. Please read the guidelines of this section, as well as the forum rules. Thread closed.
[Sony Xperia E3] hell_lock:
I need it for creating a boot.img

Thank you very much :D
[Sony Xperia E3] Tonio78r:
Me again, see attachement :) Extracted from firmware 18.4.C.1.36 for D2203

Huge thanks for you help, don't have enought knowledge to help you :(

zipped because file to big
[Sony Xperia E3] hell_lock:
Can you get me the kernel.sin from any single sim firmware(d2202)? I'll need it.
[One (M8) Q&A, Help & Troubleshooting] TikiThePug:
SuperSU should have this feature. Check in the settings of that app for "Full unroot".
[One (M8) Q&A, Help & Troubleshooting] malteasers:
143

yeah, use spuersu
[One (M8) Q&A, Help & Troubleshooting] Miqueas111:
I have tried that option, but when I reboot it roots it again! I have not changed the kernel. Stock kernel active.
[One (M8) Q&A, Help & Troubleshooting] TikiThePug:
Are you sure you haven't accidentally enable the survivor mode option in SuperSU?
[One (M8) Q&A, Help & Troubleshooting] Miqueas111:
Very sure.

I have tried Reinstalling the app, using the option inside the app. Nothing.
[One (M8) Q&A, Help & Troubleshooting] BerndM14:
Maybe try the unsupersu file. Flash it as you normally would in custom recovery.
[Nexus 5 Q&A, Help & Troubleshooting] evertking:
I wanted to try adb and fast boot to try and learn something. Well all was going good got it all installed and my device is listed.. But... Where do I put the files on my laptop.. Ya know. The recovery.IMG for example?
[Samsung Galaxy Core.] novhexzhen:
Hey guys i need some help.after flashing to stock firmware my galaxy core II does not display anything but it boots up i heard the sound of booting samsung music then when i press the physical buttons (BACK,HOME SCREEN,OPTIONS i also heard those water drop sounds)
[Samsung Galaxy Core.] Dhruvit Pokharna:
install stock firmware from sammobile.com
[Samsung Galaxy Core.] tosinwashere:
I had a similar problem. Were you able to fix it? For me, I had to try different versions of the stock ROM. Also I was initially using the wrong region. I was using my country but my phone was imported. To check use Kies, go to firmware upgrade and initialization, input your serial number + model number, click okay a few times and you'll see a popup that tells you what it's going to update. (PDA / CSC / MODEM). Your region code will be in brackets eg (ACR)
[Samsung Galaxy Core.] novhexzhen:
I've take my unit to Samsung service center and they fix it :highfive: the tech said that if u root then you flash a stock firmware the board will be damaged:eek:
[Samsung Galaxy Core.] tosinwashere:
Never heard of that, but I'm glad you got it fixed (:
[Samsung Galaxy Core.] StratOS_HTC:
ROFL

Hehe. LOL :)
[Samsung Galaxy Core.] novhexzhen:
Have you also experienced black screen Strat_OS? hmmmm ehehehehehe :D
[Samsung Galaxy Core.] StratOS_HTC:
Yes,but mine were bootloader/boot related,primarly kernel or ramdisk related.I'm still looking 4 default boot splash image.
[Samsung Galaxy Core.] Dhruvit Pokharna:
board can be damaged if boot.img is wrong
[Samsung Galaxy Core.] HandigePrutser:
Thanks for the great tip, my phone is back in business again. I also flashed wrong original country firmware since there were 2 and ended up with booting without display(black).

I managed to get blind in downloadmode and re-flashed the good firmware again.
[General Questions and Answers] syafiqmk:
hye...

i have a sony experia miro...

the phone suddenly shut down, when i turn on the sony logo is shown and its stuck.

i try to use emma (flashtool) but i can't flash it because my phone is lock.

so, i try to use bootloader,

the instruction want to enable usb debugging, but how can i do it because my phone is stuck on sony logo.

"windows 8 user"

pleas help me :crying::crying::crying: i have no idea!!
[T-Mobile Samsung Galaxy Note II] QA Bot:
Q&A for [ROM] [4.4.4] [OFFICIAL] LiquidSmooth v3.1 - Note 2 t0lte

Some developers prefer that questions remain separate from their main development thread to help keep things organized. Placing your question within this thread will increase its chances of being answered by a member of the community or by the developer.

Before posting, please use the forum search and read through the discussion thread for [ROM] [4.4.4] [OFFICIAL] LiquidSmooth v3.1 - Note 2 t0lte. If you can't find an answer, post it here, being sure to give as much information as possible (firmware version, steps to reproduce, logcat if available) so that you can get help.

Thanks for understanding and for helping to keep XDA neat and tidy! :)
[T-Mobile Samsung Galaxy Note II] Bal`thzar:
multi carrier

I go overseas for half of the year and I need this phone to work with a different carrier, does the current version of liquid smooth support multi carriers? I have done some looking but I cannot find an answer and I have spent some time.

thanks.
[T-Mobile Samsung Galaxy Note II] KingP1n:
As long as your phone is unlocked u sld not have any problems. ..i have an unlocked t-mobile phone and have used it in germany...liquidsmooth rom /Telekom and no issues...
[T-Mobile Samsung Galaxy Note II] johnnytc4:
Screen blanks blacks out during call

I have a rooted Tmobile note 2. I just full wiped, flashed Liquidsmooth, gapps, and agni 2.8.9 kernel. Everything seems to be working except for when I make a call, the screen goes blank. The workaround right now is to press the home button and click the phone/call icon -> keypad.

Is there a fix for this?
[T-Mobile Samsung Galaxy Note II] chrislgendx55:
very low volume for media and phone calls

ive been spending hours and looking around the web for this particular rom to fix this problem that has been giving headaches since the beginning. i carefully been looking for updates, official and unofficial roms to see if the volume has been fixed but as today i havent found anything. The problem is the volume and even with viper4android installed, the volume does not increase, instead it creates distortion but its installed properly. i have another phone with viper4 android installed and there is a big difference of sound. when i make phone calls, i can barely hear them, and im not sure why the volume decreased when i installed this rom from the stock version. my phone is fully rooted, tmobile model, installed LS 3.1 official and gapps 4.4.4 build 8.1 (and before build 6.0). its impossible to make phone calls unless im in a very quiet room. please someone respond to this because i really want to keep this rom.

thank you