yashsingh1/xdaforums huggingface dataset:
[Security Discussion] ionman:
I could be wrong, but from what I've read about the stagefright exploit, it wouldn't let you gain root level access. You could potentially run code as the "media" user, which definitely has some elevated privileges, but I'm pretty sure you still wouldn't be able to write to the system folder that way. Again, I could be wrong though.
[Security Discussion] T3h Ub3r K1tten:
I have a '16 Civic, and I'm working on bypassing the app install block or rooting.

On the Civic's HondaLink (4.2.2), we can get to the Android settings menu. Trying to set developer settings by going to about device and tapping on the build number several times gets a toast to "Please insert a passcord." I don't know if that's a typo or there literally is a special cord that enables it.

Been digging through the diagnostics menus over on this forum, they're vaguely similar to the Pilot. If we could get developer settings enabled, we could probably use adb over wifi.

Unfortunately I think we're a bit stuck so far...
[Security Discussion] jvilla785:
" allows an attacker to perform arbitrary operations on the victim device through remote code execution and privilege escalation" maybe to install a new kernel that has SU privileges?
[Security Discussion] ionman:
From Zimperium's blog post with example source code exploiting the vulnerability

https://blog.zimperium.com/the-late...le-for-testing-purposes/#sthash.orzirRL9.dpuf

Maybe it's just this particular exploit (there are actually several different "Stagefright" vulnerabilities) that runs code as the "media" user. Maybe a different vulnerability lets you run code as "root", but I don't know.

---------- Post added at 02:55 PM ---------- Previous post was at 02:52 PM ----------

I had a good laugh at that one too when I saw it on my car. Of course, Google doesn't know what a "passcord" is, so how am I supposed to know what to do...?
[Security Discussion] an1m3psycho:
I have gotten to here too

I have found this too and posted a little bit of more info on the thread link below. There is an open source code someone can dig into and figure out.

(remove spaces in the link below)

http ://forum .xda-developers.com/android/help/2016-honda-civic-trouble-unlocking-t3262516
[Security Discussion] Agred:
It's working o_O It's really working. I just checked it with com.waze and com.kbmobile.cb (CM Browser) and it's working flawlessly :D Finally I can stop using this piece of crap Garmin :D

[MENTION=6358174]S_Mike[/MENTION]

Ucz mnie mistrzu ;_____; Gdzie Ci wysłać piwo, człowieku? :D
[Security Discussion] maximosm:
You make a great job. Many many thanks. We just wait a step by step how to that will help more. Again thanks.

Στάλθηκε από το ONE A2003 μου χρησιμοποιώντας Tapatalk
[Security Discussion] centuryheli:
Hey S_Mike.

Thank you so much, I am yet to try this myself but will do soon.

I would like to buy you some beers for your time, so that you get some reward for your hard work and maybe continue to help and evolve this little piece of software.

PM me your PayPal and I will send some beers.

Ian
[Security Discussion] pasen01:
Omg you are amazing. What "exploit" did you use to be able to edit the files? How did you gain permissions? :)

Thank you!
[Security Discussion] marcos0804:
Question

Can someone help me with the link or process name I have to write in the application package so that I can give permissions in Honda Permissions.opk to Sygic while I´m still driving.
[Security Discussion] S_Mike:
Package name depend on which Sygic application you would like to use. For example if you would like to use this:

https://play.google.com/store/apps/details?id=com.sygic.aura&hl=pl

Package name occurs in url address: com.sygic.aura

---------- Post added at 01:15 PM ---------- Previous post was at 01:11 PM ----------

I didn't use any "exploit".

I just do the same as original WhitelistUpdateService do. I use system library to update process controls.
[Security Discussion] pasen01:
Amazing! Gotta try this later today :D

However, what is the difference between package name and process name?

If you want to add waze for example, should you add com.waze as package and process?
[Security Discussion] fran_mad:
Thank you very much S_Mike!!! Great job!!!
[Security Discussion] S_Mike:
I don't know exactly what is the difference. In most of our cases process name will be the same as package name. But if you browse process control list you will notice that there are some exceptions for this rule, for example:
[Security Discussion] xenon04:
S_Mike: Excellent work!!!

Am I right that the name of process is in Android/data folder? (pic from my mobile)
[Security Discussion] S_Mike:
In most cases yes. But I think the better method is to see url in google play.
[Security Discussion] maximosm:
You are number one. It's working great. Please post your PayPal here for donations....

Στάλθηκε από το ONE A2003 μου χρησιμοποιώντας Tapatalk
[Security Discussion] vasl:
Great

S_Mike Great Job!!!

Hi Guys!

I did not understand yet how does the procedure.

Excuse my writing because I'm from Brazil and I do not speak very well English.
[Security Discussion] sheridan2000:
install mikes application in the usual manner re naming to HondaAppCenter_A1.

Run app on honda unit and in process create a new one with the link to the app...(see above for details). look at other processes to see what boxes to tick. Its a bit of trial and error to get it right but boy it actually works...i made mine all like the petrol/parking app process..

Can run magicearth navi gation while music in the back ground using preinstalled app...can even run spotify with sat nav....

Thanks mike
[Security Discussion] vasl:
Great!!!!

Thank you. You are the man!!!
[Security Discussion] mehau85:
Which apk version and permission sets did you use for Waze?

The newest apk is not working well.
[Security Discussion] maximosm:
Have anyone test a usb stick 3g for Internet?

Στάλθηκε από το ONE A2003 μου χρησιμοποιώντας Tapatalk
[Security Discussion] Chalchynskyy:
HONDA CRV
[Security Discussion] grey_listed:
S_Mike: thank you very much for the efforts and time you have invested to implement this. I really appreciate it!

As there is no apk for Google Maps available for 4.0.4 (I believe last one was version 6.x), I plan to install a browser and access Maps via it (it is still the best navigation in my city). Can anyone suggest a tiny and well working browser for 4.0.4?
[Security Discussion] jabs1989:
Hello all,

Sorry for my ignorance but [MENTION=6358174]S_Mike[/MENTION] I understand what to do once I have your app in my unit, but I don't know how to put your app into the unit.

There is a quick guideline for that?

Thank you guys!

edit: Ok I didn't realised it was answered above. thanks!
[Security Discussion] sheridan2000:
anyone managed to get a video app to work while moving...not had much luck so far......

TIA
[Security Discussion] ceejay105:
[MENTION=7495460]jabs1989[/MENTION] just look on some previous posts, it's described many times here.

[MENTION=6358174]S_Mike[/MENTION] excellent work man. I really appreciate your effort you're putting into this. Everything works as you described.

Some general question: Does anybody know a good offline navigation, that doesn't need Google services? My region is Germany. Tried a few but got errors because of the lacking gapps. Waze works fine but of course needs an Internet connection all the time.
[Security Discussion] sheridan2000:
magicearth...allows you to download map....when it starts up it asks for google services but i just tap the screen and the error box disspaears and it work great....
[Security Discussion] ceejay105:
Thanks, gonna give it a try.
[Security Discussion] grey_listed:
Please define "good" :confused: In my eyes Garmin is good enough for offline navigation - Sygic would be an alternative - but I still prefer to navigate with my mobile using Google Maps, especially in the city.
[Security Discussion] jabs1989:
all the files S_mike provided, Do I have to compile or is there any apk ?
[Security Discussion] sheridan2000:
They are already Apk...
[Security Discussion] pasen01:
I tested the backup/restore function, works flawlessly. I had to restore as i needed to change com.waze permissions and there seem to be no option of deleting just one permission?

You need to add the sound checkboxes in order to make navsound work.

Also, Waze 4.1.1 does not work very well on this unit. I wil try the older 3.9.x versions

And, RaceChrono seem to require Goolge Play services... Thats a bummer :(

Do anyone know what CPU architecture this unit is? ARM8?
[Security Discussion] antonionni1:
[MENTION=6358174]S_Mike[/MENTION]

Thank you so much, let us know your PayPal #.

Some questions:

With 3. Be careful with changing version number. If you increase it then updating Honda oryginal applications won't overwrite your changes in process controls, what do you mean? What is this "version number"?

In "Allowed installations" I wrote Magic Earth both in "Apk name" and "Package name", and I leave blank in "Signature digest". All works ... can I put whatever I want in these fields? Or I guess the correct names?

In "Auth Type" I put (for Magic Earth) PREINSTALL; I could also put "Third part" or one of the other 2 values?

Many thanks again
[Security Discussion] S_Mike:
Of course there is delete option. Tap item on the list and hold finger about 1-2 seconds and then trash icon will show up. I think It was working yesterday.
[Security Discussion] Silico:
Is there a way to make an app run in complete full screen like the Garmin Navigation App?
[Security Discussion] S_Mike:
I will send you paypal address by PM. If someone wants to send me beer write me private message.

There is 3 files in Honda: allowed_installations.list, process_controls.list and version.txt. Version mean what version of allowed_installations.list, process_controls.list files are used now. My application doesn't change this version automatically.

You can change it manualy.

If you update some Honda application, for example AhaRadio and if there is newer version of allowed_installations.list, process_controls.list it will overwrite your changes. But if you have newer version (larger number) it won't.

Allowed installations is only for installing apk's. You don't have to write package name there, and you can write PREINSTALL in sigDigest.

I don't know, what's the difference. I haven't tested yet.

---------- Post added at 05:41 PM ---------- Previous post was at 05:34 PM ----------

It's depend on application. This is application function.

I tested one that could be displayed either in full screen and with android system bar. And was working great.
[Security Discussion] jvilla785:
This apk work with android 4.2.2?
[Security Discussion] S_Mike:
I don't know. But the main question is: can you install any application with HondaAppCenter_A1.apk hack or any other hack?
[Security Discussion] antonionni1:
1st feedback: FANTASTIC :)

1: when you put it into reverse, the video of retrocam appears. When return to forward, how is reactivated the app (i.e. the navi)? I mean ... how can I move between the tasks?

2. in the case of 1, the sound of VLC is shut off (I've tried all the options of Honda Permission); for reactivate the sound, I have to relaunch the Honda Permission. Any idea regarding this?
[Security Discussion] pasen01:
Im unable to get sound from any app
[Security Discussion] ceejay105:
[MENTION=7286865]antonionni1[/MENTION] With some testing, I managed to get this working using PowerAmp Player. You need to change the AuthType from "PREINSTALL" to that honda original (don't know the exact expression since I'm not in my car right now). That worked for me, even when shifting into reverse the music stays on.

[MENTION=7340860]pasen01[/MENTION] You need to check that "SoundOut" field and perhaps also change the AppType.

Has anyone yet tried to install Google Play services? Since there are many apps with dependencies on that services, it would be nice if that worked.

edit:

I experimented a little with the flags and checkboxes you can use. No complete list, it's just my personal experience.

VideoOut: controls the VSP error feature. Needs to change it to "OFF". It also works on already installed apps like the calc or browser and so on.

SoundOut: controls, wether the app is allowed to play sounds or not. Needs to be checked in order for sound to work

SoundInterrupt: if you check this, your app behaves like the Garmin Navigation app (navigation announcements come from left speaker, while music keeps playing)

SoundInterruptMute: didn't try this at all, I guess it does the same like that checkbox above, but mutes all sound coming from the radio during announcements from app

Don't know exactly what LastMode and the other options do, trying to figure that out.
[Security Discussion] pasen01:
I have checked the SoundOut option, and used NAVI type. But i will test some more...
[Security Discussion] ceejay105:
Try that MULTIMEDIA type instead of NAVI, perhaps that will work.
[Security Discussion] pasen01:
Ok, I got Waze 3.9.9.0 working fairly well using these settings:

Version 4.1.0.1 was not stable. Crashed when trying to report something. But maybe I should try the lastest one...

However the 3.9 version was much faster, running more smooth.
[Security Discussion] antonionni1:
Right, works perfectly!! (HONDA_ORIGIN)
[Security Discussion] rodrigo.ev:
Reading the com.garmin.autooem parameters, i set the following:

Process Name = com.waze

Package Name = com.waze

Auth Type = THIRD_PARTY

App Type = OTHER

VideoOut = OFF

SoundOut = OFF

SoundInterrupt = ON

SoundInterruptMude = ON

LastMode = ON

Others = Default (still don't know what they do).

With these parameters, Waze worked perfectly without need of manually VSP OFF, Waze notifications worked and the rearcam coming back to waze.

By the way, I have a 2016 HR-V, Android 4.0.4, Waze 4.2.0.1 (beta) and I'm from Brazil.

[MENTION=6358174]S_Mike[/MENTION], you rock! Thanks a lot!
[Security Discussion] maximosm:
Can you send the vlc that play with our system?

Στάλθηκε από το ONE A2003 μου χρησιμοποιώντας Tapatalk
[Security Discussion] pasen01:
Did you have any issues reporting traffic or accidents using 4.2.0.1?
[Security Discussion] antonionni1:
I downloaded from here: https://apkpure.com/

This one: https://apkpure.com/vlc-for-android/org.videolan.vlc
[Security Discussion] rodrigo.ev:
None so far.
[Security Discussion] pasen01:
Nice, will try it then! I noticed there is a 4.3 beta as well.
[Security Discussion] uaytac:
How can I find Process/Application name for any android application?

---------- Post added at 07:27 PM ---------- Previous post was at 07:14 PM ----------

I asked then I found the answer. Process/Application name is in /Data folder.
[Security Discussion] sheridan2000:
not all of them...the google play store in browser trick helped and also a app called os monitor helped
[Security Discussion] bidigd:
It's strange, but i can't install this apk. I have already install waze and sygic, but this time, "install" is grey and blocked... ??:(
[Security Discussion] grey_listed:
[MENTION=6358174]S_Mike[/MENTION]: could you please PM me your paypal?
[Security Discussion] maximosm:
I want to add my google account at the honda connect and with this i want with Google’s Android Device Manager watching where is mine honda.what i need?
[Security Discussion] Drnlvrz:
Is hdmi input in the process list? Can we turn off video out?
[Security Discussion] mehau85:
Has anyone tried with success to set permissions for Spotify app?
[Security Discussion] Silico:
Yes. Working perfectly well, able to play music and use navigation. Only wish I could skip tracks with the buttons on the wheel... But that is only minor in reality for the functionality.
[Security Discussion] mehau85:
Which permission set did you use? I don't want to lose time for experimenting
[Security Discussion] ceejay105:
Look for a process called com.fujitsu_ten.displayaudio.hdmiservice. Didn't test it myself, but should work.
[Security Discussion] antonionni1:
What is the name of this app for process control list?

All works, but then i start the engine, tre radio sound is turning off
[Security Discussion] Logo550:
Hello from Germany.....

Yes Yes Yes yes?????

All is Working!

My Navigon Works Fine....with Radio and Speak from navi.

And the best in driving Modus.....all is perfekt!!??

Thanks a lots
[Security Discussion] maximosm:
Is there anyone knowing how we add an google account?
[Security Discussion] wickywicky:
this is working great for me!!

just one question, how do we delete an entry if i messed up the settings?

Thanks
[Security Discussion] worfdata:
Try a long tap on the settings entry you wish to delete
[Security Discussion] bidigd:
All is Working too !! :good:

Last (small) problem : with Sygic, the screen stays on even when I remove the key and I get out of the car ...

I must leave the application before...

Thanks a lot S Mike!!!!!
[Security Discussion] Skarjuu:
Try to install google play services to Unit.
[Security Discussion] maximosm:
I have done this but cant add account...
[Security Discussion] worfdata:
I hope the installed Apps will not drain the car battery.

I fear the day my car wont start...

---------- Post added at 11:31 AM ---------- Previous post was at 11:12 AM ----------

To get the packagename of an APK I found a small Java console app wich lists the manifest file of an APK in plain readable XML.

http s : / / code.google.com/archive/p/xml-apk-parser/

e.g.

java -jar APKParser.jar waze.jar

the first lines of the output:

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
android:name="Waze" android:versionCode="1021025" android:versionName="4.2.0.0" android:installLocation="0"
[B][COLOR="Red"]package="com.waze"[/COLOR][/B] platformBuildVersionCode="23" platformBuildVersionName="6.0-2438415">
<uses-sdk android:minSdkVersion="14" android:targetSdkVersion="23">
. . .

I hope this helps ...

P.S. Great, nice work, the HondaPermission.apk!!!
[Security Discussion] pasen01:
The package name is also in the URL of every app on the Google playstore. Like this:

https://play.google.com/store/apps/details?id=com.waze

No need to decompile anything.
[Security Discussion] tomzero:
Hi Mike!

Great job, many thanks!!!

Send me your paypal please, or you can change your profile and enable donation.
[Security Discussion] jesimielbrito:
Thanks post!
[Security Discussion] uaytac:
What is the settings for Tuneln radio?
[Security Discussion] rodrigo.ev:
Allow me to update myself: I DO have issues reporting traffic or accidents, no matter which version I use: from 3.9.9 to 4.3.0 beta. :( - Waze just freezes when trying to report anything.

Any thoughts about it?
[Security Discussion] S_Mike:
I didn't even know there is such an option. Thanks, I've enabled donation if someone wants to send me beer.
[Security Discussion] rodrigo.ev:
tunein.player
[Security Discussion] uaytac:
Advanced Task Killer: com.rechild.advancedtaskkiller

AirDroid: com.sand.airdroid

BSPlayer: com.bsplayer.bspandroid.full

BSPlayer Free: com.bsplayer.bspandroid.free

CCleaner: com.piriform.ccleaner

Dailymotion: com.dailymotion.dailymotion

Deezer: deezer.android.app

Dolphin: mobi.mgeek.TunnyBrowser

Drivemode: com.drivemode.android

Dropbox: com.dropbox.android

ES File Explorer: com.estrongs.android.pop

Evernote: com.evernote

File Commander: com.mobisystems.fileman

Firefox: org.mozilla.firefox

GlobosatPlay: com.globo.muuandroidv1

Google Chrome: com.android.chrome

Google Maps: com.google.android.apps.maps

GPS LED Speedometer: oops.ledspeedometer

Kodi: org.xbmc.kodi

Live Stream Player: com.lsp.player

MX Player Pro: com.mxtech.videoplayer.pro

NetFlix: com.netflix.mediaclient

OneDrive: com.microsoft.skydrive

Opera Mini: com.opera.mini.native

Podcast e Radio Addict: com.bambuna.podcastaddict

Rocket Player: com.jrtstudio.AnotherMusicPlayer

Sling Player: com.slingmedia.slingPlayer

Spotify: com.spotify.music

TuneIn Radio: tunein.player

TuneIn Radio Pro: radiotime.player

Waze: com.waze

YouTube ANTIGO: com.google.android.youtube

YouTube NOVO: com.paraphron.youtube
[Security Discussion] pasen01:
Keep in mind the storage is just above 1gb.
[Security Discussion] uaytac:
Parameter Settings in the attachment
[Security Discussion] diogo_florencio:
I use the version 3.9.9 or 3.9.8 and works perfect.
[Security Discussion] antonionni1:
LastMode what does it mean?

And the Process name for HondaPermissions?
[Security Discussion] uaytac:
Please see my previous message for details.
[Security Discussion] worfdata:
$ java -jar APKParser.jar HondaPermissions.apk
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
android:versionCode="1" android:versionName="1.0" [B][COLOR="Red"]package="com.xda_user.honda.permissions"[/COLOR][/B] platformBuildVersionCode="21" platformBuildVersionName="5.0.1-1624448">

I guess/wish LastMode means that if you turn the headunit off it will start with this app the next time it will be turned on (if this app was the last app running before turning off).

Just guessing...
[Security Discussion] dziegiel:
Did anyone tried install Here Maps?
[Security Discussion] moonwalker73:
Wow, these are all working apps?! Is Google maps running without problems?
[Security Discussion] jiggajohn:
Tried on a 2016 Honda Accord (US) running android 4.2.2 and it isn't working :(

The install button is grayed out

---------- Post added at 04:20 AM ---------- Previous post was at 04:04 AM ----------

Any luck after the recent updates from s_mike??
[Security Discussion] maecar:
APKs Repository

Hi guys! I'm from Brazil and together with a group of friends we created a repository with app's for Honda HR-V. All apps there are working perfect and you can download them direct in Honda's Android browser. The packages list and parameters [MENTION=1342449]uaytac[/MENTION] posted before are from there. We've made them.

Here is the repo's address: cmhonda.net

Just access and click on the dropbox's icon. I didn't put the link because XDA blocks me.

Credits for the repo's owner: Cristian Alves Pereira

I have to thanks [MENTION=6358174]S_Mike[/MENTION] for the wonderful job making the Honda Permissions app. This completely transformed the way we use our car. Our group from Brazil is collecting donations to thank you for all your dedication to helping us.
[Security Discussion] skodann:
There is no dropbox icon there...

Edit: there is, sorry for didn't seen it ..thank you!
[Security Discussion] wickywicky:
so do we have a way to get HDMI working while driving?

id like to use my iphone with the lightning to HDMI adapter.

Thanks
[Security Discussion] uaytac:
Please use below link for applications and settings. I will add more soon.

https://www.dropbox.com/sh/9ysyvbukpuxseq8/AAA6lDLIlR8mUGj5TzmVaqwza?dl=0
[Security Discussion] metal vader:
I can confirm too that everythings works fine! Thanks S_Mike, I'm sending you beer! ;)
[Security Discussion] Raklik:
do you also have waze audio mono? On top of that.. seems to ignore the audio control.. so even if I will lower the volume as much as possible, waze still screaming..

LE: I tried with 4.2 version.. on top of that is freezing after a while showing the close/wait popup window. I will try with 3.9.9 later..
[Security Discussion] kondormit:
[MENTION=7476190]maecar[/MENTION] it seams that dropbox disabled your folder because of high load on that url :(
[Security Discussion] Tellas:
Hi guys! I read the thread, but got a bit confused, the only way to install an app is only by renaming it as hondaappstore.apk ?
[Security Discussion] Logo550:
No....

HondaAppCenter_A1.apk

ONLY THIS!
[Security Discussion] Tellas:
O.K. Thanks ! i shall do it today cause i got really disappointed that there were no apps available, :(