yashsingh1/xdaforums huggingface dataset:
[Nexus 5 Q&A, Help & Troubleshooting] WhosAsking:
Just uninstall it. I hear you can find an older APK for Google Wallet (no higher than v8.0, I think), stick it in, and detach it from the Market so it won't update.

If your original Wallet is a System App, you should be able to roll it back to the System APK version.
[Nexus 5 Q&A, Help & Troubleshooting] jasondclinton_google:
I'm not sure. It depends on when the check is run. It may work for now but--honestly--I wouldn't expect it to always work. It may also depend on what is left behind after "unroot".
[Nexus 5 Q&A, Help & Troubleshooting] jimbobalu:
There are 2 different wallet apks and one of them is in system/priv-app the other in system/app, which one do I remove? Android Pay is not listed in Titanium Backup, I assume it is called something else but what? I also tried rolling back but android pay was still present. Tried deleting the apk in system/priv-app but it just hosed my system and had to restore from a previous backup.

Thanks
[Nexus 5 Q&A, Help & Troubleshooting] micmars:
The reliability of the payment system and the concurrent requisite of any payment instrument (Android Pay and NFC) to meet the security requirements of the US payment system make this application unique...

That stated, it is my understanding that devices running PureNexus will become self-aware pretty soon.

PureNexus devices with Android Pay become sentient on 09/27/2015 @09:00 GMT - 4
[Nexus 5 Q&A, Help & Troubleshooting] jasondclinton_google:
At some point, old software stops working, no matter who it is from. AFAIK, there's nothing that would prevent it from running on Marshmallow. Eventually, though, we'll have to shut down the old API's. I don't have a timeline on that, though.

---------- Post added at 04:08 PM ---------- Previous post was at 04:06 PM ----------

I have seen an occasional bug, myself. I'll pass along your feedback and frustration to the GPS team.

---------- Post added at 04:09 PM ---------- Previous post was at 04:08 PM ----------

We aren't currently using TrustZone.
[Nexus 5 Q&A, Help & Troubleshooting] Magissia:
If you are so entitled by security, please remove the possibility to use android pay if the device doesn't pass a security check on a regular basis.

For example, when a new CVE appear, android pay should check for this CVE and retroactively disable the possibility to use Android Pay on this device, with a message telling the user that it's OEM (if OEM specific) or Google failed to secure the system correctly, and thus cannot let you use the application.

For example, a device affected by stagefright issue shouldn't be able to do any transaction, even if it passed whatever google testing before being allowed gapps, even if the device isn't rooted and whatever.

I know you will never do that because your app will work only the 36th of the month as OEM are slow-asses and a device released with android pay pre installed will see it's android pay possibilities removed within a month (optimistically) after public release.

Thanks for telling you hear us tho.
[Nexus 5 Q&A, Help & Troubleshooting] jasondclinton_google:
Thanks DevAdvance: it's been a long week and hearing from you was a nice way to start my weekend.
[Nexus 5 Q&A, Help & Troubleshooting] WhosAsking:
I don't know if I can help in this regard, as it appears your Android Pay was attached to an OTA update and therefore is both a system app and the new baseline, meaning it can't be rolled back without breaking trust. Short of trying to take your device fully back to stuck, I don't know what to say. The method I tried before at least put me back on Wallet on an S4, but since that was built before Wallet, Wallet/AP always came as a User App so can only be done under that condition.
[Nexus 5 Q&A, Help & Troubleshooting] jasondclinton_google:
https://randomoracle.wordpress.com/2012/09/11/cvv3-demystifying-credit-card-verification-part-2/ has a good technical discussion from 2012. There's nothing really magical about NFC payments from the perspective of the terminal.

---------- Post added at 04:21 PM ---------- Previous post was at 04:17 PM ----------

Err... that's probably a bug. I'll pass it along. I'm reasonably certain that wiping data in Play Services would get rid of it but that would also be a pain. If you don't mind waiting awhile, you might just leave it there for now: it's just local.

---------- Post added at 04:31 PM ---------- Previous post was at 04:21 PM ----------

This is the heart of the issue.

Even if you had network connectivity at a POS terminal, we only have about 200ms to do everything that we need to do on the NFC channel. That's just too short for the design that you have in mind. Believe me, we thought long and hard about that. Good idea though!

---------- Post added at 04:41 PM ---------- Previous post was at 04:31 PM ----------

Err, I really don't want to give a framework for what will and will not get caught. It's almost certainly going to change on an ongoing basis, anyway. And to be clear, I'm not sure that "unroot" will work or even what that means since pretty much any program that might do this will implement it differently. I wouldn't count on something that happens to circumvent today to work forever.

In short, I know that you all want to use Android Pay with your rooted phones but I really am being honest when I say that I believe that it's not secure.
[Nexus 5 Q&A, Help & Troubleshooting] sigmarelax:
I'm not sure what Google's threat model is in terms of "secure." Preventing rooted users from using Android Pay seems like either 'security through obscurity' (as Google doesn't want anyone tinkering around to find out how it works) or Google just wants to be able to always inherently trust the client when it performs a transaction (which I assume is what you mean when you talked about securing the app data, i.e. credentials). Trusting the client is never a great idea.
[Nexus 5 Q&A, Help & Troubleshooting] WhosAsking:
Or rather, you're trying to say that, under the circumstances and requirements, there's no way to make it secure?
[Nexus 5 Q&A, Help & Troubleshooting] jasondclinton_google:
Sorry, right: I don't know how to do both root and secure Android Pay at the same time.
[Nexus 5 Q&A, Help & Troubleshooting] WhosAsking:
I think the threat model they're looking at is subverting the APIs that AP needs to function, and since they have to be both high-security (new PCI requirements) and low-latency (due to the NFC limits), a certain amount of trust has to be established before both criteria can be met. BTW, you can trust the client program if it's yours (or are you saying you can't even trust yourself?). This isn't so much security through obscurity as it is tamper-detecting. What do su, Xposed, and custom/non-stock ROMs all have in common? They can all monkey with the baseline APIs at a root level, below even that of a system app. As long as any of them (and a few other things) are there, it's safe to assume the environment is "tainted," to borrow the term used in Linux, and by the new regulations cannot be trusted.
[Nexus 5 Q&A, Help & Troubleshooting] uudruid74:
root privilege and logging in as a root user are two different things. As is having a password on the root account (you shouldn't).

In Android, there is no su or sudo binary for executing privileged commands. Linux distributions will generally all have sudo. Sudo is a setuid binary that grants root permission just like su. A rooted Android phone basically just installs su. Like those Linux distributions, there is no way to login as root - its the same thing. Also, many of the servers processing these payments will run on Linux, and I bet at least half are set up by someone that didn't know any better and you can probably not only login as root with a password, but do so over SSH (wrong) and with more than one person having access to that password. IF a root password exists it should be stored in a vault and only used on the console, but if the situation is that bad, a boot disk is just as good.

Clients give me root passwords for ssh all the time instead of a revokable ssh key. DOH

So ... since the chain of trust is broken to begin with, and our rooted phones already follow the model of the Linux servers you mention, then ... what's your point with the Linux comparison?

I really think much of the problem is a flawed permission model that is forcing apps to be users (they aren't) and then backup programs and desktops cant backup the system or delete apps. This is leading to a system where we need root. You can sandbox/jail an app and still run it as your own user. Not trusting the apps is fine, not trusting ME is a problem.

Yes, someone could give root access to an app that replaces a library used for transactions for a MITM attack, but if that exposes anyone but me, then there is a SERIOUS flaw in the system. I can just replace the library myself and unroot the phone. In fact, if the libs check for root, which one of us will decompile it and make a replacement where the root check always comes back negative?

Taglines suck. https://eddon.systems
[Nexus 5 Q&A, Help & Troubleshooting] blunden:
If it should even have a chance of working, it must mean that the checking of the system partition signature you mentioned as the first step must really be to check that the build used keys from manufacturers you have whitelisted (or at least not a signature of the whole partition). How else could modifying the system partition have even a chance of working? Maybe I misunderstood you?

I can certainly understand why a custom rom, even without root, signed with the publically available AOSP test/platform-keys would considered insecure still.
[Nexus 5 Q&A, Help & Troubleshooting] WhosAsking:
But don't forget. SafetyNet (which does the root checking) relies on a piece of code downloaded straight from Google. That's why the "No Root Check" Xposed module is so hit-or-miss. Count on it being signed meaning you'd need Google's private signing key (and likely a preimage break) to get around. Plus some of the SafetyNet checking is server-side, meaning it's out of your control.
[Nexus 5 Q&A, Help & Troubleshooting] sigmarelax:
uudroid gets it. It is impossible to ensure the client (ie phone) hasn't been messed with. Any check could be circumvented once someone figures out what it is checking and falsifies the return value. I find it hard to believe that SafetyNet couldn't be fooled
[Nexus 5 Q&A, Help & Troubleshooting] WhosAsking:
Not if you check the checker and do it directly, without outside assistance. Remember in a war of attrition, the attacker always has the advantage because it can move and shift; the defender can't. There are ways to, say, internally request a file to hash it and not make it obvious just which file you're requesting, and unless you can successfully do a preimage break, a good hash will be able to tell the genuine checker from a fake.

And before you say "redirect the google download to download a fake checker-checker," remember it can be signed, too, meaning you'd have to break that one as well.
[Nexus 5 Q&A, Help & Troubleshooting] tuxfusion:
I've read the thread up until here, and every third poster claims "only a small percentage of users are rooted" How would you know that ? Because you're a nerd and there a little people like you ? *joking sorry had to*

I found a Chinese survey, saying 80% of questioned users are rooted: http://www.chinainternetwatch.com/12926/80-china-smartphone-users-rooted/

Tencent is not your average Chinese backyard shop, as mentioned by Forbes magazine here

Now, I will do one thing, which is relax.

Google wants China back. Google wants the big markets (money). A Nexus device from Huawei? A Special Android Play version just for China? Signs are super obvious.

I'm sure the numbers are a bit high but even if it's 40% Google would know this. There will be a solution other then "won't fix" I'm very sure about that.

Only downside is that latest announcements about Android Pay for China I could find are from 2014 ^_^
[Nexus 5 Q&A, Help & Troubleshooting] Surge1223:
Hey, there I was wondering if you used Qualcomms proprietary implementation of drm to generate the token needed for rsa key or ssl cert, Thanks for taking the time to have open communication! It's greatly appreciated!
[Nexus 5 Q&A, Help & Troubleshooting] CarlosBattousai:
Alright can someone explain the logic about root being unsecure? I really don't understand that logic. To root most devices people use an exploit,that exploit becomes patched and controlled by the user. Not only do apps that wake root access trigger a pop up in-which you can allow or deny root rights but you can ****ing set a pin.

So how are rooted devices a secure issue? I'll argue that someone checking the "allow apps from unknown sources" being clicked on is a far bigger security issue.
[Nexus 5 Q&A, Help & Troubleshooting] Joshmccullough:
Just wanted to toss in a couple of lines here:

1. This forum has been popping up in various blogs like Phandroid, Android Central, etc. We're certainly creating interest outside our little slice of XDA here :)

2. Thanks to [MENTION=6957306]jasondclinton_google[/MENTION] for taking the time to respond to many of our questions/posts, it's good to have someone at Google to interact with to help pass along our concerns and questions.

3. I haven't noticed anyone complain about the banks/financial institutions yet. Not for nothing, but I doubt that Google came up with this policy all on their own to prevent rooted users from being able to take advantage of/use Android Pay. It's not Google's money that's being used to pay for things; while I don't have concrete evidence, I'd suspect that various financial institutions have weighed in against APay's use on rooted phone out of concerns for the theft of said money. There may well have been a "you want us to get on board? You have to do X, Y, and Z" in order to get Visa/Mastercard/Discover/Diner's Club/big banks on board with the rollout. Not that we'll have much luck calling our individual institutions and engaging them in the finer points of security vs. utility as we've all done here, but we may want to point our cannons at other targets, too.

Just my thoughts. I'm really glad to see this forum gain traction and keep active, I'm hopeful that one day we'll get full functionality from Android Pay, one way or another.
[Nexus 5 Q&A, Help & Troubleshooting] steve_w:
what a mess

For one thing, when you buy something with an actual credit card (not a debit card with visa or mastercard capabilities) you aren't spending your own money. You are borrowing money. Its not surprising that the banks and credit card institutions are wary.

What I'm worried about is that this is going to stop people BUYING apps from the Play Store on their rooted phones... I rarely buy apps but I'm wondering how this is going to play out.
[Nexus 5 Q&A, Help & Troubleshooting] debnath:
Root wins for me. Taking out something because of security is no good. Security is cross-cutting and always important. We have seen Mars, been on the moon but we cannot have a payment software on rooted devices! Really?

Security is not meant to restrict users, instead enjoy everything safely. Imagine being so secured that you live in a house and cannot go out. Security should be improved than making restrictions.
[Nexus 5 Q&A, Help & Troubleshooting] rancur3p1c:
well, that's a bummer. root users would probably have the highest adoption rate of anybody for Android Pay

guess I won't need to look for NFC on future devices anymore
[Nexus 5 Q&A, Help & Troubleshooting] CarlosBattousai:
Not only would us Power/Root user have the highest adoption,but we're the one people come to for advice about new tech. We have to asure normal user that it's save and why we feel it's better. Sadly to say I can't recommend the use of Android Pay when Google Wallet worked had more features and was more secure.

I say more secure because not only did I have a lock screen patter,but a pin for Google Wallet itself.
[Nexus 5 Q&A, Help & Troubleshooting] rancur3p1c:
using the chip takes about 20 seconds and if I'm in a bad mood [often. my life is difficult] makes for a very awkward silence
[Nexus 5 Q&A, Help & Troubleshooting] blunden:
You are forgetting that you never really know what an app does with root once you allow it. Even if you never select "allow always", you have no idea what it does those times you do allow root and it could use that session to backdoor your device, steal credentials or data etc. without you knowing. The issue is essentially that unlike Android's permission model, there is no granularity when it comes to root.

Regarding patching vulnerabilites, I agree with you though. We routinely patch vulnerabilites and release updated builds in CM before Google does. So do many other custom roms too.
[Nexus 5 Q&A, Help & Troubleshooting] CarlosBattousai:
You make the same points I would make when we're talking about having "allow apps from unknown" checked in. Any app installed this way could backdoor my device and steal credentials,but having root and getting that pop up is great red flag.

I still don't see how root is insecure and like I said before I find normal user having access the "allow apps from unknown places" a million times more if a security issue than root.
[XDA Assist] toheedasad:
Respected XDA-Developers,

I want to ask you guys that how can i change the

ENFORCING KERNEL TO PERMISSIVE KERNEL.

I am using

SM-N910C with lollipop 5.0.1

, i have seen

ADAM KERNEL

and other kernels also and i found out that they have private mode and S health problems, so i need to ask can i get the kernel which don't have any changes except the change of permissive kernel.

Or anyone can tell me how to i change it my self, because i tried changing it with

SELinuxModechanger.apk

but it doesn't work.

so please guys anyone can help me out?
[XDA Assist] toheedasad:
Will i get any assistance? ? Please waiting for reply and solution please help me out
[XDA Assist] engloa:
I see you have already posted your request in the right forum

http://xdaforums.com/note-4/help

http://xdaforums.com/note-4/help/request-enforcing-to-premissive-t3199679

Please note that XDA Assist is here to help those that have searched and are not able to find the correct section to post their questions.

With that said, wait for other more experienced users in the thread you created to respond and help you out.

Hope you can successfully change your SELinux state.

Good luck and thread closed.
[Galaxy Note 3 Q&A, Help & Troubleshooting] Reppie30:
Hey every my note 3 is running andriod 5.0 and I'm trying to figure out the best way to root this... I'm not having any luck. Any help with be appreciated

Thanks in advance
[Galaxy Note 3 Q&A, Help & Troubleshooting] Reppie30:
Nothing?
[Galaxy Note 3 Q&A, Help & Troubleshooting] audit13:
Edit: as the phone has a locked bootloader, it gets more complicated.
[Galaxy Note 3 Q&A, Help & Troubleshooting] KTownGT:
You'd have better luck on AT&T's Note 3 section than here. We have locked bootloaders, and have to use a couple workarounds to get rooted on LP.

Here's the thread for stock rooted LP 5.0 OC2

Basically, you have to Odin back to NC2 (official), root/bb/su/etc., reboot into safestrap & flash the ROM above.
[Galaxy Note 3 Q&A, Help & Troubleshooting] audit13:
Darn, I had no idea that ATT was still doing that.
[Galaxy Note 3 Q&A, Help & Troubleshooting] Reppie30:
Thanks guys... my original note was easy to root this one not so much
[Redmi Note 2 Q&A, Help & Troubleshooting] ziutekk:
Does anyone know how to enable usb mass storage mode instead MTP? this is so disgusting because of slow transfer between mtp and pc.
[Redmi Note 2 Q&A, Help & Troubleshooting] hgpuke:
I'm using the MIUI 7 developer ROM (5.9.9) and it appears to be using mass storage mode by default.
[Redmi Note 2 Q&A, Help & Troubleshooting] Noel87:
I can use mass storage only in recovery

I dont know why
[Verizon HTC One (M8)] cgalat:
Hi I have a HTC one m8 that I need someone to root for me I've heard some people on xda could do that for me , if anyone is willing to do this please email me at cgalat02@outlook.com
[Verizon HTC One (M8)] dottat:
If that's what you are looking for myself and about 10 others offer this via this thread...

http://xdaforums.com/verizon-one-m9/general/m9-java-card-t3063247
[Verizon HTC One (M8)] drumz0rz:
Hi,

You can easily root a 5.0.1 stock HTC One M8 using the following method.

1. Download KingRoot and Sunshine.

2. Run KingRoot. If the phone reboots, run KingRoot again once it's back on. If it fails, re-run King Root. It took me about 5 tries to get temporary root.

3. Run Sunshine. It will test your phone for Root. Once passed, it will ask you to buy a license ($25). Then it will reboot.

4. Run KingRoot again. Again, keep running it until you achieve temporary root.

5. Run Sunshine to achieve S-OFF.

Congrats, you're now rooted. Next, you'll want to install a custom recovery (such as TWRP via ADB) and a custom ROM (if you want). Guides to do that are a-plenty.
[Verizon HTC One (M8)] bronskrat:
KingRoot no longer seems to work.

Android: 5.0.1

Software #: 4.17.605.9

HTC SDK API level: 6.55
[Verizon HTC One (M8)] dottat:
Sunshine will be updated shortly to allow sunshine to root 4.17.605.5 without the need for kingroot. I posted a downgrade guide that will work for achieving this too.
[8125, K-JAM, P4300, MDA Vario Software Upgrading] elmetal:
hello all!

Im upgrading to nbd 8.0 today and Ive backed up my pda with spb and spirte. my question to you all is, I need to backup my contacts and all that jazz for the upgrade. what's a good pim backup that will restore after a rom upgrade?

EDIT: I apologize about the title, I submitted without reviewing and had a typo in the title, which I cannot correct. thank you

Thank you all,

Flip

ps. contacts and sms, tasks/appt are the only things I wanna restore on the new rom
[8125, K-JAM, P4300, MDA Vario Software Upgrading] mestrini:
First, the title of the thread says NBD 9.0 which doesn't exist. it might not be a big deal but may lead some to read this thread by mistake (maybe that's what you want :p)

Second, doing a little search wouldn't hurt. http://xdaforums.com/search.php?searchid=4015233 i just used two words (PIM* AND backup)

It's called "PIM Backup" by dotfred (v2.5 by now) and it can be considered a standard application as most cooks include it in their ROMs. It's filled with options, scheduling, etc...
[8125, K-JAM, P4300, MDA Vario Software Upgrading] elmetal:
LMAO the title I didnt do on purpose it was an honest mistake.

as for pim backup, I knwo there are plenty and plenty of apps that do pim backup out there. my question really is, can I restore it on nbd 8.0 even though I will no longer be on the official 2m5 cingular rom and all?

Thank you very much
[8125, K-JAM, P4300, MDA Vario Software Upgrading] starkwong:
No! Don't use backup programs to backup PIM from WM5 to WM6 (At least for SPB Backup), it doesn't work and the contacts will not show correctly in WM6.

You should use PIM Backup or ActiveSync+Outlook.
[Sony Xperia ZR] mahferer:
https://mega.nz/#!lRs0DDZT!YiSpnebSIyA1ubPsIS-gN1Qc7egvnh0Vm7LuI0Wvh-8
[HTC One Max] Bikey100:
Hello, is there a script or a method where I can get my HTC One Max T6 to boot when plugged into the charger? The power connector is broken inside so I have no power or volume button functions. I am running CyanogenMod 12.1 and the phone is rooted, s-off and unlocked.. I know it can be done, because some ROMs I have used in the past caused the phone to boot when the charger is first plugged in. Thanks.
[HTC One Max] lssong99:
Sorry a bit confused. You mean the USB power connector on your phone is broken ("The power connector is broken inside") but you need to have the phone boot when a USB charger is plugged in the broken USB connector?

Anyway, if the problem is not having power and volume keys function, then I think there are some kernels which has "tap to power" function which you can turn on your phone by specific tapping pattern on the screen. Since I don't change kernel so don't have a link but just search this forum and you shall find some. One Max forum is not too big...

Though you need the USB to be functional enough to deliver power and connect to PC .