yashsingh1/xdaforums huggingface dataset:
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
OK, so I've been doing a little research on the SSL/TLS certs used by some of the ad infected Alcatel apps.

I have found that the TCL Cloud uses a self-signed certificate from Globalsign:

In trust store	GlobalSign Root CA Self-signed

Fingerprint SHA256: ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

I also found these two certificates in both of the Alcatel devices I own (including one that was flashed to Lineage).

You can disable these certs by going to Settings/Security/Trusted credentials and look for the SHA256 fingerprints in the SYSTEM tab and select "disable".

Then go to Settings/Security and click on "Clear credentials" and reboot.

This (should) stop the apps from communicating with their servers without rooting.

These were in the infected Joy Launcher, when I have some time I'll look at the File Manager but I'm sure they use the same certs.

---------- Post added at 03:55 AM ---------- Previous post was at 03:45 AM ----------

As a side note, some Network administrators are noticing odd connections to tclclouds as well.

(I alerted them to the problem and suggested that maybe one of their clients has an Alcatel device with the infected apps connected to their network)

https://www.dslreports.com/forum/r31781852-Dns-rebinding-attack
[Onetouch Idol 3 Q&A, Help & Troubleshooting] bubbleguuum:
[MENTION=8349045]sloshnmosh[/MENTION]

Thanks for the research and details. TCL really really dropped the ball with this crapware.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] RansuGiru:
[MENTION=8349045]sloshnmosh[/MENTION] -- thanks for sharing this research. In consensus with many other idol3 users, the once relatively pristine Alcatel user space has been spoiled and infected by TCL. I had gone to the extent of configuring settings and disabling apps/updates for the adware/crapware, and replacing Joy Launcher with Evie (wow -- now that is a true joy!), but had not done any forensics. Now having disabled the certs, I have peace of mind (somewhat).

It is such a shame that a perfectly usable device has posed users with these issues. It is forcing me to evaluate the purchase of a new phone in advance of my usual phone lifecycle ... and it is safe to say Alcatel will NOT be among my choices!
[Onetouch Idol 3 Q&A, Help & Troubleshooting] bubbleguuum:
Note that disabling one of CA cert made the Youtube and Google Play apps not working anymore, complaining about no network connection. Chrome still worked though.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
Hmm, there should be a way around that.

I'm sorry I wasn't able to test any of that.

I no longer run any Google apps.

After I flashed my Idol 3 with Lineage I only have a few apps installed.

Was the YouTube app pre-installed on your device like it was on mine?

Those certs that I posted were self-signed.

I would think that if the official certs for the YouTube app were to be downloaded and installed on the device you could regain network connection and still block TCL and Appsflyer.

I'll play around with my Alcatel that has the stock ROM and see if I can determine what can be done.

I use some online tools to determine official, valid certs such as: https://crt.sh/ and: https://censys.io/

if someone could post the IP address or URL that those apps try to connect to using "netstat -an | grep ESTABLISHED" on a terminal we can run it through Censys to see what certs are used for the connection(s).

And yes, I will never purchase another Alcatel device.

My next phone will be one that is compatible with the official Lineage OS and that can receive OTA updates of same.

https://lineageos.org/

---------- Post added at 12:49 AM ---------- Previous post was at 12:16 AM ----------

OK, I just confirmed your findings,

The YouTube app on my stock Alcatel Lollipop could not connect when the GeoTrust cert was disabled.

The Geotrust cert is used by AppsFlyer.

GeoTrust Global CA Self-signed

Fingerprint SHA256: ff856a2d251dcd88d36656f450126798cfabaade40799c722de4d2b5db36a73a

Pin SHA256: h6801m+z8v3zbgkRHpq6L29Esgfzhj89C1SyUCOQmqU=

RSA 2048 bits (e 65537)	/ SHA1withRSA

Weak or insecure signature, but no impact on root certificate

However, the YouTube app does still connect with the GlobalSign cert that tclclouds uses:

GlobalSign Root CA Self-signed ***FOUND ON IDOL3**********

Fingerprint SHA256: ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

Pin SHA256: K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q=

RSA 2048 bits (e 65537)	/ SHA1withRSA

Weak or insecure signature, but no impact on root certificate

I'll mess around and see if I can find an official, valid cert that will work with YouTube.

Does anyone know if the device can still be rooted after the latest update?

It would solve a LOT of issues if it could.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] RansuGiru:
I also can confirm the no network connection issue when disabling this cert:

Neither the Google search app nor searching within Chrome (using google's engine of course) would return any results due to network connectivity/offline problem ...

Re-enabling the cert restores the app functionality.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
Sorry, I should have tested this further on the stock ROM.

Has anyone noticed any connection issues with the Globalsign cert disabled?

There IS a way to update Android's CA certificates, but unfortunately it too requires ROOT so were back to square one.

http://wiki.cacert.org/FAQ/ImportRootCert#Android_Phones_.26_Tablets
[Onetouch Idol 3 Q&A, Help & Troubleshooting] bubbleguuum:
Mine is rooted. Version is 6.0.1, the latest Alcatel official version.

I do not remember how I rooted it, but that's possible.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] RansuGiru:
No worries sir! I have not noticed any issues with functionality with the Globalsign cert disabled. The only snag I encountered was that after clearing credentials and rebooting, I needed to recreate my VPN connection settings and user credentials. Thankfully I have the info stored in a password safe! ;)
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
OK, good.

I hope you are using a trusted VPN or one that you created yourself by spinning up a VPS over OpenVPN and not one of the several fraudulent/malicious VPN's that are discussed in this research:

https://research.csiro.au/ng/wp-content/uploads/sites/106/2016/08/paper-1.pdf

Here's a brief overview of that whitepaper on malicious VPN's:

https://restoreprivacy.com/vpn-warning-list/
[Onetouch Idol 3 Q&A, Help & Troubleshooting] RansuGiru:
No worries man, it's a private VPN, provisioned and administered by myself!
[Onetouch Idol 3 Q&A, Help & Troubleshooting] Dubstepwolf123:
It's painful

Yep, it has to be the worst possible thing. It's sad to see such capable hardware getting run down by trash software. I just decided to install a custom ROM to get rid of the lag and pain!
[Onetouch Idol 3 Q&A, Help & Troubleshooting] beliall:
Hi,

Joy make me try to root then flash my phone.

I lost my /modem partition, im on 6039y.

Do you know were can i find a modem radio partition for my idole 3 ? :/
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
Facebook Graph API

As I stated in an earlier comment on this thread and others about how Alcatel's recent "update" has pushed the Facebook Graph API into the File Manager and Joy Launcher and other system apps......

The truth is coming to light!

https://www.nbcnews.com/news/us-new...-millions-unsuspecting-facebook-users-n857591
[Onetouch Idol 3 Q&A, Help & Troubleshooting] Prazin:
I'm having the same issues with joy launcher & file manager.

**This is extremely frustrating because the apps have taken over my phone and nothing runs correctly...memory? battery? Have you found a solution?
[Onetouch Idol 3 Q&A, Help & Troubleshooting] baka_bandit:
I also updated the Јоy launcher and Joy recording and my Idol 3 was flooded with commercials and stupid settings. I managed to wipe it out by going to the play store/ my application/ the Joy launcher and I had the option to uninstall. I do the same for Joy recording, and gat my old phone back .

Hope this can help someone. ;)

p.s. I deactivate Joy launcher from settings/security/apps with usage access
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
Thanks for the comment.

Just so that we're on the same page here, did you install the most recent update from Alcatel that others have said had a patch for the Blueborne exploit?

https://xdaforums.com/idol-3/help/ota-android-update-malware-t3736229

If so, maybe Alcatel has made a (small) concession by again allowing users to remove the offending modified apps.

Can someone please verify that users can now once again remove the Joy Launcher, Joy Recorder, File Manager updates using the Play Store AFTER the latest OTA?
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
Good Riddance!

I see that the "Joy Launcher" is no longer on the Play Store!

Looking at archives it appears the last time a comment was made on the Joy Launchers Google Play Store page was back on April 13th 2018.

Goodbye and good riddance!

Mission accomplished.:good:
[Onetouch Idol 3 Q&A, Help & Troubleshooting] facila:
Install an other launcher

Uninstall Joy update, if possible, and install Pixel 2 Launcher from XDA labs. No ads and more speed. 2T2W is functional : activate it in Pixel 2 L. settings.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] IHateAlcatel:
Not if you've got an Alcatel phone you don't choose what apps get installed.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] joylauncher:
Hello, we are sorry for the inconvenience caused. We have improved the issue of you mentioned. I suggest you upgrade to the latest version, if it still does not solve your problem. Please contact tct.appservice@gmail.com. In other hand, If those tips help you, please give us a 5-star, we’ll appreciate for your kindness!

Joy Launcher team.
[Onetouch Idol 3 Q&A, Help & Troubleshooting] sloshnmosh:
Oh, well look who decided to join the party!

And Alcatel's corporate sockpuppet even claims to have "improved the issue of you mentioned".(sic)

Meanwhile, in the REAL world, Alcatel gets called out AGAIN by researchers, this time for their built in Weather app for commiting AD FRAUD by clicking through hidden ads and using up our data in the background:

https://www.upstreamsystems.com/sec...alcatel-android-smartphones-manufactured-tcl/

And in the Wall Street Journal:

https://www.wsj.com/articles/popula...ch-user-data-security-experts-say-11546428914

So tell us again why we should "please give us a 5-star"?

To help bury all the angry comments from disgruntled Alcatel owners?

Oh, and BTW Mr or Mrs Alcatel, I have saved to disk several of your fraudulent "$1000.00 WalMart Gift Card" and other scams that use JavaScript to stop users from being able to close their browser and makes their Android devices vibrate.

Here's a sample:

img class="prizeImg" src="walmartgcb1000.png"

"type="text/javascript">navigator.vibrate=navigator.vibrate||navigator.webkitVibrate||navigator.mozVibrate||navigator.msVibrate;navigator.vibrate([1000,500,1000,500])"

Have a nice day!:silly:
[Samsung Galaxy S7 Edge Questions and Answers] StonebridgeGr:
hey guys i have s7 edge nougat 7.0 with all the updates, its no rooted, stock kernel stock rom etc .. i dont want to root it because the device is under warrant. I have notice that in my house these last 2 days the signal is weak, i can make phone calls etc but why is that? now i done a full format but its seems that nothing changed .. the sim is very good and new .. i removed it and put it backagain, tried to go to airplane mode and back again nothing change .. also why my phone overheats so much? its with the exynos chipset .. how to prevent this from happen?
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] HASH:
Hy guys,

I have made cm13 for grand neo plus

I don't have the device so I need testers

If you like to join telegram group here's the invite link https://t.me/joinchat/AAAAAEPxku8p1i-Wud7ubQ
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] Kurajmo:
It's still available? Maybe I test
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] patel dipan:
I test it work perfect now.
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] moisangar:
Still available? I have a device available for testing
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] MirXas:
Invite hash expired.
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] Atifbaig786:
Yeah.I Cant Join.Please Give a New Invite.
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] Dernafrest:
Can I have the invitation link?
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] Atifbaig786:
There is no Group.Just Use the ROM and Enjoy.
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] MirXas:
That ROM has RIL bugs.
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] Atifbaig786:
Nope.It don't have any Bugs.I Am Using It Right Now.But The Lack of Radio Is Eating me.
[Samsung Galaxy Grand Neo Plus Guides, News, & Disc] Jd.93:
Where to find the rom?

<Mod Edit>

Thread closed.
[Verizon Samsung Galaxy S6] leandrummer:
imagine there is a broken s6 i ternational version laying around, afaik they have an unlocked bootloader.

what chip or chips would need swapping in order to turn my sm-g920v into a sm-g920f (international/unlocked bootloader, i think.)?
[Verizon Samsung Galaxy S6] V0latyle:
That's a very crude and basic solution for an extremely complicated problem. You'd have better luck trying to use JTAG to rewrite the memory registers, but considering how the bootloader works, you'd have to get it perfect or the phone would never live again.

I imagine you could buy an international version for parts and swap the motherboard, but with that kind of money and time you're better off just buying a used device in decent shape.
[Verizon Samsung Galaxy S6] Mnky313:
Can you direct me to which model has CDMA support? so far I can only find the Verizon model (SM_920V).... thx
[Galaxy S6 Edge Q&A, Help & Troubleshooting] TheMadScientist:
so it wasnt google locked and iemi is clean so i did the bypass and got through it its a 925a by the way no root

is there anyway to permently bypass or remove the orig samsung account and put mine into it now that im in i cant accses anything amsung because accounts app is disabled and if i reenable it i have to follow unlock again and have to redisable it.
[Galaxy S6 Edge Q&A, Help & Troubleshooting] TheMadScientist:
N/M I figured it out
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] sammessi10:
If you wanted to unlock bootloader or somehow wanted to run ADB but the PC is unable to install the ADB Driver, This might work

This is the right solution if you see this in your device manager.

1. Right Click on the triangle and select "update driver software."

2. Click on "Browse My Computer"

3. Click on "Let Me Pick"

4. Select something similar to this. Most Probably you'll find this

5. Now select ShenQi and Next (You can use any ADB driver you find, all work)

6. You should end up something similar to this. Now ADB Devices shows up your device and you're ready to go.

Hit Thanks if this helped. :good:

Post any other fixes if you know.
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] Aevum:
i keep banging my head against the wall, i cant get it to recognize
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] ahh988:
i had issues with fast boot adb was all good . i had to delete all drivera then installed the 1.0.5 drivers that came with the phone and updated adb and fast boot to the latest sdk and it workes
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] shivg86:
[MENTION=5040102]ahh988[/MENTION]

How did you get latest sdk? Any link or something? I tried it downloading from sdk site and it was 1.9 gb big file... I didn't download then.

And moreover I don't know how to use that qualcomm drivers zip.. Please guide as I am also stuck in the same situation as discussed in OP.
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] ahh988:
i did a google search and found a download named platform tools small download don't remember where but worked for me . will try to get you a link

---------- Post added at 05:56 PM ---------- Previous post was at 05:53 PM ----------

try this

https://mega.nz/#!EdIGQBJZ!MiyDiYg0BLe_2eJQznAoU42jyZKFUblRzNjtwk4ZwLQ
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] xeneixexxx:
in windows 10 you have to enable the installation of unsigned drivers, and there just install the drivers.
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] luigioottoo:
Hi everyone,

I can not update kernel of my Zuk Z2 because I have otg slot not working (usb cable works only as a recharge, it is not a driver problem unfortunately). Is there a way to upgrade to the kernel from 3.18 to 4.4? I've already tried this (https://xdaforums.com/lenovo-zuk-z2/how-to/flashing-roms-4-4-x-kernel-qpst-t3866215) but in step 4 you are asked to unlocking the bootlooder and can not be done without the adb commands that require otg. Thanks to those who will help me
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] JV Spartacus:
It does not require otg. It's data cable in
[Lenovo ZUK Z2 (Plus) Guides, News, & Discussion] luigioottoo:
But my cable does not transmit data and only allows recharging
[Google Pixel Questions & Answers] Alvlysmile:
Hello all,

It seems like my phone's battery is draining more than it should and I am not sure of the reason why it is. I updated the phone to the most recent update so I am on version 7.1.2.
[Google Pixel Questions & Answers] Soccerdude588:
I've noticed this too today in particular. 100% to 20% in 4 hours. With fairly light usage.

I'm on the 8.0 beta though.
[Google Pixel Questions & Answers] chipk:
I went from the Beta back to stock but have noticed significant drain over the past week or two and I'm completely stock on 7.1.2, build NJH47B.

Son has the Pixel XL and he's seeing the same thing, anyone have a clue or just a weird coincidence?!
[Google Pixel Questions & Answers] snagg641:
Same issue here, on 7.1.2 , June update. Did a complete wipe, installed w/ magisk and elementalx kernel (no custom settings). Get the impression it's a problem with 7.1.2. i use my phone for work, and this only started happening recently.
[Google Pixel Questions & Answers] defconoi:
I too have this on Android 8, if this is happening on nougat too, it could be a framwork bug or app causing this.
[Other SmartWatches] jchap100321:
DZ09 Smartwatch requires both Simcard from Cellphone provider and the SDC Micro Memory chip in order to access all the features on the Smartphone and to update it. I found this out after extensive attempts without having the Memory chip installed. Hope this help some that have been experiencing issues with their DZ09 Smartwatch.
[Samsung Galaxy S8 Questions and Answers] badjoras:
Hey guys.

I am from Portugal and realize that Bixby is not available in Portuguese. My phone is set up for U.S. English just because of this and better Google assistant as well.

What I don't understand is that the update I just did mentions that Bixby voice is active in US English now buy I have no command for it for some reason. Any info on this?
[Samsung Galaxy S8 Questions and Answers] thahim:
My phone is also set to u.s English. But it's only available to ones who really are in u.s.
[Samsung Galaxy S8 Questions and Answers] mimo2008:
I think they are beta testers
[Honor 9  Guides, News, & Discussion] Telperion:
GSMArena side-by-side specifications comparison

I'm posting this thread from the perspective of someone who owns and loves an Honor 8, and is having to evaluate these 2 devices as the primary options for my next phone.

Key differences

:

LTE bands: H9 (Europe: 1,3,5,7,8,20) vs OP5 (1,2,3,4,5,7,8,12,17,18,19,20,25,26,28,29,30,38,39,40,41,66)

Body size: H9 (147.3 x 70.9 x 7.5) vs OP5 (154.2 x 74.1 x 7.3)

Screen size: H9 (5.15) vs OP5 (5.5)

Screen type: H9 (IPS) vs OP5 (AMOLED)

Chipset: H9 (Kirin) vs OP5 (Snapdragon)

Cameras: Objective differences are irrelevant for cameras, we'll just have to wait on side-by-side comparison reviews, preliminarily it looks like these may have similar quality.

Storage: Internal (same), MicroSD: H9 (Yes) vs OP5 (No)

Infrared: H9 (Yes) vs OP5 (No)

Key factors:

- The Honor 8 was significantly less expensive than the OnePlus 3T; the Honor 9 is the same price as the OnePlus 5.

- The Honor 8 had a significantly better camera than the OP 3T; the Honor 9 is looking to be similar to the OP 5.

- Price: The Honor 8 was about 25-50% less expensive than the OP 3T; the Honor 9 is the same price as the OP 5.

- No MicroSD slot in the OP 5

It's unfortunate, because I really like my Honor 8, but I don't think the Honor 9 is a good purchase compared to the OnePlus 5. Pretty much all over the internet and social media I have told people to buy an Honor 8 (and instead of a OnePlus 3T) but I don't think I can carry over that recommendation to this generation of phones. If the Honor 9 launches in the US with appropriate LTE bands and at a price 25-30% lower than the OnePlus 5, it will be a close decision on what to buy. But at the current pricing, I think the OnePlus 5 is the clear choice between the two.

Thoughts? What are you all planning to do?
[Honor 9  Guides, News, & Discussion] eksasol:
I used to have the Honor 8, but I had to get rid of it because I couldn't stand the software, even after Android 7 update. I was able to simply swipe past the Android Device Manager lost phone screen because it wasn't integrated right with EMUI. There were other issues like bluetooth delayed syncing. The software experience from stock Android is just so much better so I would recommend waiting for the OnePlus 5T in October.

I ended up buying the Note 5 Duos after using the G6, after deciding to not get the S8. All of these four phones (Note5, G6, Honor9, OP5) have the same price and should be considered. It's crazy because I found I tolerate the Samsung UI with Android 7 more than LG, and some of the features like changing to 720p and 1080p resolution are killer features for me.
[Honor 9  Guides, News, & Discussion] mydragoon:
for me... the microSD killed any chance of me getting a OnePlus 5. in some parts of the world (like where i live), mobile data isn't cheap and fast. doing things "on the cloud" just don't cut it. so, i'd love to have as much storage as possible. also, with camera now able to record at high resolution, it will take up space. i'm not the type that wanna copy out my videos every few days. i can be lazy and do it once every few weeks or so. so, again, storage means a lot to me and having microSD is wonderful.

but... i'm also a AMOLED fan. sadly, i think only time i've seen huawei/ honor with amoled is on the P9Plus. i do hope huawei will look into manufacturing AMOLED screens. having said that, between microSD and AMOLED. i would pick microSD anytime.

one consideration that probably weighs in as important is the size. 5.5" vs 5.2" is quite a big difference.
[Honor 9  Guides, News, & Discussion] mdabar:
I've heard very good of OP5, despite I don't like they've increased the price so much. Previous versions were more tight. The starting price of 500€ is not good.

The Honor 9 looks good option, cheaper (449€) and including a sports band. About performance and camera still not sure...

OP5 has 6 GB of RAM and AMOLED display.

Honor 9 has micro SD card support, infrared and is cheaper.

Still considering Xiaomi Mi 6... Which also has infrared, 6 GB of RAM and it's the cheapest of all three.

Thoughts please?
[Honor 9  Guides, News, & Discussion] master_of_shadows:
Looks like sports band action is over, there is no more banner on vmall.eu store.

In mean time you still could have 30 EUR cashback until 4 of August. Which brings price of phone to 400 EUR.
[Honor 9  Guides, News, & Discussion] DoobyDroid:
I had 3 oneplus 5's within 14 days and all had issues so sold the 3rd and got the honor 9 and couldn't be happier