yashsingh1/xdaforums huggingface dataset:
[Xposed General] spamtrash:
Basically the very good warning/justification is in the second post of the original TaiChi thread by [MENTION=2799345]M66B[/MENTION].

together with the post 45, it can be assumed:

it is a system level application

it does have closed, obfuscated code

it did not passed any external audit*

it does contain some controversial sentences in T&Cs

* - perhaps as the result of being written by a single person (in theory - we cannot know if there is someone behind)

Now it is each user individual choice: use it or not. If you do trust the developer, "do not have anything to hide" - feel free to use it.

Personally, if I'd be interested then yes: I would use it. After setting it up on a dummy old phone for a month and checking traffic very carefully. single encrypted packet would eliminate it from use.

But again, it is a personal choice of each individual user to give access to all and any private information stored and obtained by the phone (voice, video recording capabilities are obvious) to the developer who does not trust the users enough to deobfuscate/open the code.

It is just a mutual trust: you trust them as much as they trust you, isn't it?
[Xposed General] Senliast:
Yeah, Xposed is close-source, and where is it now? Google wrote a permanent detection system for that, SafetyNet, and you cannot install Xposed and pass SafetyNet, half of apps will not work, except EdXposed, it could pass SafetyNet, but even that got recently detected by Google and now you must do various tricks / hacks with black list to pass SN with it. May be, TaiChi is close-source because the developer of it wants to protect that against Google?

P.S. About this spying / tracking / data stealing - some parts of Android are also close-source, and are maintained by Google. Actually, 60% of whole software is close-source. On your PC, the whole software is close-source. Windows is close source. So, you trust your data to such companies like Google, M$, but to a no-name guy that writes mods for Android - no? I just don't get your opinion ?
[Xposed General] mlgmxyysd:
Yes, you are right.

Using these Xposed framework is the choice of users.

Just to remind, there are many similar virtual Xposed.

I personally prefer and recommend using open-source or unrestricted Xposed frameworks.
[Xposed General] mlgmxyysd:
To be sure, no.

The author's reason is (Translated from Chinese):

But this is a totally wrong theory.

No, just a little bit. He's right. "I open source, It's none of my business."

It's true that open source software is easy to be used by bad people.

But what should be punished is only those who use it to do bad things, right?

For example, I sold you a knife. The name of the knife is open source software. Should I be punished if you kill people with this knife?

If, according to him, the one who finds that IOS system can't fix bugs (checkm8) and makes open-source jailbreak software should be jailed

According to him, anyone who discovers a CVE vulnerability and makes an open source POC should be jailed.

According to him, anyone who ... and makes an open source software should be jailed.

You may ask, why?

Answer: your open-sources software may be used by bad people, causing many families to be destroyed.:(

It's about software framework, not software or module or system.:)
[Xposed General] mlgmxyysd:
Note that Xposed is not commercial production.

But TaiChi is.

Commercialization means that the main purpose is to make money, so it will bring more risks.
[Xposed General] TNSMANI:
MOD EDIT:

Thread cleaned.

Guys, There is no need for harsh language. Please keep the exchange civil and respect each other.

Thanks for your cooperation.
[Xposed General] d3vyarth:
So what's the conclusion? Is someone going to do intensive research on the behavior of this framework and hunt for exploitation of vulnerabilities?
[Xposed General] mlgmxyysd:
Probably not because there's too much obfuscation, and...closed-source
[Xposed General] d3vyarth:
Please read it.
[Xposed General] nri_tech1183:
What guarantee you give for edxposed as well? It isnt officially from xposed team right?

And edxposed already posing issues with Safetynet and Taichi works simply great.

And as far as data leaks etc, once you step into the world of android you are already in the risk zone. By this time all your data is already sold across the globe. Its too late to bother now. So just be at peace.
[Xposed General] DIXES:
EdXposed is a Riru module and it is open-source.

EXposed aka TaiChi is closed-source.
[Xposed General] SmilingPerson:
You may not know this, but in most parts of the world, humans have more rights than code, and comparing them the way that you are doing here strongly implies that you feel otherwise. There are significant differences between judging a person by appearance, and warning folks about software based on its disclaimer, its apparent use of obfuscated code, and the undeniable fact that its nation of origin has a very poor reputation regarding privacy, copyrights and basic human rights. No offense to you, but...well, take it however you want. I won't use your sketchy software.

Suggesting that you "...do a lot for the open source community" is meaningless. Josef Mengele "did a lot" for medical science. Think before you type, mate.
[Xposed General] mlgmxyysd:
Because there are so many situations that may lead to privacy disclosure, we should pay more attention to our privacy.
[Xposed General] mlgmxyysd:
This post is just a summary.

You don't understand the causes and consequences of the event.

What he says is all excuses, everything is his personal or company interests.

Remember, Taichi is a commercial software.
[Xposed General] mlgmxyysd:
Make sure that Taichi is a virtual framework and works in White List mode(only listed applications can load modules) by default.

This means that the components of SafetyNet (GMS and GSF) will not be interfered by modules.

But EdXposed not, Edxposed works globally by default.

You can only add GMS and GSF to EdXposed's Black List, or turn on the White List in EdXposed, which can help solve the issue.
[Xposed General] nri_tech1183:
I have only granted Taichi Storage permissions.

I only need 1 or 2 modules to work with and Taichi helped a lot in this with simple interface and without requiring riru core and tohse reboots for every modules etc.

Earlier installed Edxposed and it used to work for a day or two with no issues and then suddenly it used to suck whole battery of my device irrespective of trying all solutions.

Else Edxposed was too good but sadly not for me.
[Xposed General] mlgmxyysd:
It's not about granting its own permissions. It injects code into your application, and it executes your application

Not use TaiChi, just try XPatch(not support Android 10 currently) or SPatch.

XPatch: https://github.com/WindySha/Xpatch

SPatch: finding links
[Xposed General] mlgmxyysd:
Have you tried White List mode?

Only activate modules for selected app.
[Xposed General] nri_tech1183:
Ok I went through the link. Xpatch creates a new apk.

But without edxposed or taichi how will a module work with the apk?

For eg: I have Instagram and I use Xinsta module to download from instagram.

Can both these apps work without xposed/edxposed/taichi?
[Xposed General] mlgmxyysd:
XPatch works independently of these frameworks

module conf file is in /sdcard/xposed_config/modules.list

The file records the package name and name of all modules

Add # at the beginning of the line to disable this module, remove to activate

note you need to uninstall TaiChi and taichi-modified app first, backup your data
[Xposed General] nri_tech1183:
Gosh! Confusions.

So I will completely remove taichi.

Then I will use Xpatch to create apk right? And then install that apk.

Now what to do about the apk of xposed module? Does that also needs to be patched with Xpatch and then installed?

I dont have "module conf file in /sdcard/xposed_config/modules.list"

But currently have modules folder in "/data/adb/modules"

What can be done here?
[Xposed General] mlgmxyysd:
yes install it, then run app, you will find list file

XPatch GUI version(Xposed Tool) will be open sourced and released in the near future
[Xposed General] ldeveraux:
Make your own decision to use TaiChi, like everybody else did before this silly thread was made. Maybe if it wasn't in broken English...
[Xposed General] SuperWire2:
Wanna know a secret.

Alot of these "exploits" on this site and a few others

are developed maintaintained and used with extreme

predjudice by the NSA.

Your Welcome

:cool:
[Xposed General] joluke:
Don't say!? Thank you captain obvious
[Xposed General] Borat38:
How do you know that for sure?
[Xposed General] mlgmxyysd:
I asked TaiChi's author for this question, and the reply...
[Xposed General] CyberSinister:
Uuuh... How do I uninstall this ****? I installed it via Magisk. I removed the magisk module but it's still there. Can't uninstall it using system manager. It just crashes.
[Xposed General] mlgmxyysd:
Cannot uninstall via Settings or adb uninstall?

That may mean that your system has been damaged by this junk software.

It may be solved by re brushing the system and restoring the factory settings.

At present, there have been many reports of system damage (root / unroot) caused by the junk software (Taichi)
[Xposed General] CyberSinister:
Nope. I just reset my phone. I had already been playing around with my rom so there was a lot of wiping and flashing going on and I also good internet so it didn't really matter.

But yeah, I couldn't uninstall it

Edit: BTW, I kind of see your concerns with this thing now. I don't know if anyone has acknowledged this yet, but when installing the app, the terms and conditions are in Chinese while the rest of the app is in English. It's just kind of stupid really, unless I missed a translate button somewhere "in plain sight".
[Xposed General] doggydog2:
You never leave KGB, and neither Taichi. It runs nonstop, requires top permissions to stay in memory, corrupts package manager, and cannot be uninstalled.

Uninstallation steps should be factory reset, reroot again, overwrite every possible piece of data you can imagine. Thanks for playing!
[Xposed General] mlgmxyysd:
Latest progress:

weishu has developed two virtual xposed frameworks based on xposed, one is vxp, the other is Taichi.

Vxp is developed and open-source in the name of individuals, and Taichi is closed and commercialized in the name of Companies

weishu, is a misbehaving person. Taichi copied part of the code of riru, but Weishu didn't admit it. Until Rikka, the developer of riru, slapped the evidence of decompilation on his face, weishu deleted the issues due to his lack of heart

Taichi also copied one of the FC prevention modules in xposed repo (the current module has been removed from repo).

In addition, Weishu also copied the corepatch module, claiming to be original, while corepatch is open-source based on the GPL license

It can be said that he is no ANY credibility, and when you want to argue with him, he will use sophistry to refute you

I also found several examples of mobile phone system damage (without root, system is damaged, only the factory settings can be restored) caused by taichi in some ROM (rros or other) communication groups.

This is not an individual example. According to the user agreement, even if your mobile phone is completely scrapped due to Taichi, he doesn't need to take any responsibility

In a preliminary study, Taichi will send all the user's operations to crashlytics to track the user's activities, will use fabric and AppCenter to collect users' dangerous privacy.

There are also some suspicious links (HTTP, non-standard port, only accept post and put).

Taichi can remotely control software behavior from the cloud, can read and write files in /data/system without root permission, can bypass system restrictions to read IMEI
[Xposed General] ldeveraux:
The same can be said for you. Get off your broken horse.
[Xposed General] Keule-Tm:
Well, that can be said of any software. There's no licence in which a developer takes responsibility for any loss out of bad behaviour, side effects etc. No proprietary licence, no GPL, no Mozilla licence, no BSD licence, not even the WTFL.
[Xposed General] mlgmxyysd:
This is true for software with complete security guarantees(such as open sources), but according to some decompiled conclusions, Tai Chi has bad behavior and will collect users ’privacy or upload users’ chats. They may sell them back to other companies. Execute remote code from the cloud to control user's mobile phones. Many users' mobile phones have been damaged because of it, so I don't think this is a reasonable agreement. Instead, he is just justifying himself for illegal behavior.
[Xposed General] Keule-Tm:
Selling data etc is not okay, I fully agree. But that's completely unrelated to the stability of the code.

But yes, I get what you want to express. I'm glad edxposed runs on my device.
[Xposed General] ldeveraux:
I will continue to use Tai Chi and promote it wherever I can. It's a good alternative when Xposed isn't viable.
[Xposed General] mlgmxyysd:
You will continue to let more victims appear, but now the official Xposed is still updating, why use a malware?
[Xposed General] nift4:
What is wrong with him? He has facts, and you say "He is bad." but you don't have facts or didn't say them...
[Xposed General] ldeveraux:
everything out of china spies on you. If you assume that then I suppose I have no argument.
[Xposed General] Keule-Tm:
I'd like to say "Every non-FLOS freeware is probably spying on you", untill proven otherwise.
[Xposed General] WTF_666:
What is your evidence? Or are you afraid that someone will find out that you watch gay porn? Any firmware transfers a lot of information is unknown. Where do you put it for the foil cap?

I now have no problems with passing SN checks and other problems when using edXposed, before there were always problems with applications in the market (Netflix), then with Gpay. Once a week, Gpay reported that I had problems, I had to constantly clean the firmware cache and Gpay. It’s the same with the module from the YouTube background product which worked in edXposed until the first YouTube update, then nothing worked, everything is perfect here.

Many thanks to the author. Donat sent
[Xposed General] mlgmxyysd:
I used HttpCanary (similar to Fiddler's packet-capture software) to catch the current malicious behavior of TaiChi. He tried to upload all the operations of the user's mobile phone to the server, and this is done in the background. You must also give it network permissions otherwise it cannot be used
[Xposed General] nift4:
:eek:
[Xposed General] Stillhard:
UP for review(s) by xda's authority
[Xposed General] mlgmxyysd:
Very good, you are trying to use a non-existent evidence to try to prove your point

Why do you always refuse to believe a fact?

If so, okay, some kind people have stored some evidence here: [MENTION=8310409]FXXK[/MENTION]_taichi (telegram)

Most of the text is in Chinese, I think it ’s enough for you to just look at the pictures
[Xposed General] mlgmxyysd:
EDIT: clean(because network problem duplicated)
[Xposed General] M66B:
Please report the TaiChi XDA thread(s) with evidence of this malicious behavior, so they can be removed. Malware is not allowed on XDA and people should be protected from it.
[Xposed General] ldeveraux:
This is why I ignore you. Partly because I can understand only half of what you've written in very broken English. The other part is because you ramble on about how unsafe it is and don't do anything about it. Poop or get off the pot for gods sake. Whining about how we shouldn't use taichi isn't changing anything.:crying:
[Xposed General] mlgmxyysd:
Sorry, my English is translated from Google translate, so why not use open source xposed?

https://xdaforums.com/xposed/edxposed-successor-xposed-oreo-pie-q-t4070805
[Xposed General] mlgmxyysd:
Edit: reported
[Xposed General] nift4:
Maybe we should report it to [MENTION=4470081]topjohnwu[/MENTION] too; If it is deleted from XDA it should be deleted from Magisk repo too!
[Xposed General] mlgmxyysd:
Yes, I'll talk to [MENTION=4470081]topjohnwu[/MENTION] about this
[Xposed General] Khep:
So, did anything firm came out of this, or has anyone being able to replicate those findings?

TaiChi is being used by Pokemon Go players around the world, so if this application is tracking/spying users or behaving as malware, it needs to be confirmed.
[Xposed General] mlgmxyysd:
Evidence screenshot of upload privacy because it includes some privacy, so I cannot let you see it. :) However, I have reported to xda that the malware of TaiChi should be deleted.

If you play PokemonGo, you should use other phones without unlocked bootloader
[Xposed General] beeshyams:
More news on Taichi

Tweet from John Wu (Magisk)

https://twitter.com/topjohnwu/status/1250656889467138048?s=20

Quote

I've received evidence that Taichi has malicious activities. With Magisk's power, it leads to serious consequences. As a result, I have removed Taichi from the repo, and you should do so on your device too.

A good alternative is Riru + Edxposed, both are open source projects.

Unquote

Edit

More

https://twitter.com/topjohnwu/status/1250692599590957056?s=20

And Clarification here

https://twitter.com/topjohnwu/status/1250707535771734027?s=20

I admit I tweeted too recklessly regarding Taichi. I reacted simply from reports I receive (not from a single source). Due to its closed source nature and many feedback from users (and the fact that the app is registered under a company), I decided to remove it from the repo.

Calling it having malicious behavior before showing definite proof is my bad. But please be aware that you fully trust the closed source software you are running at root/Zygote level. The decision to remove the module is not reverted, but I want to keep things straight.
[Xposed General] WTF_666:
And topjohnwu satisfied that he simply believed in the word and no evidence was provided, the only thing is that the application is closed source.

So just say that you simply eliminate competitors with all your might.

That's when edXposed will be finally optimized for Q10 and after its installation applications from the Play Store (for example Netflix: The app is no longer supported on your device) will not disappear and Gpay will not fall off once a week, then it will be possible to switch over, otherwise there are some problems with edXposed on q10
[Xposed General] iofujsiow:
taichi is closed source, and is registered under a commercial company based in China.
[Xposed General] WTF_666:
They will find out what applications you have installed on the pipe, find out which geyporno you watched? I’ve been using it for almost a month now and there were no problems, no money was lost, not a single account was taken away. 70% of applications in the Play Market are closed source and no one complains. The firmware itself sends a bunch of information wherever possible and does that mean it doesn’t bother anyone?) And here I haven’t been suffering for a month, as it has been with edXposed for a long time, then Gpay stops working, the SN check passes once, after 15 minutes Fails, applications are no longer supported, background playback of YouTube with edXposed may work until the first youtube update, then even reinstalling all edXposed does not help. I have not experienced any problems with Taichi for a month now, while all modules work and everything is very stable.
[Xposed General] MoL_82:
How should it be removed? I read just disabling and removing from Magisk isn't enough and a complete clear install is needed. What do you recommend?
[Xposed General] mlgmxyysd:
topjohnwu: many feedback from users (and the fact that the app is registered under a company)
[Xposed General] mlgmxyysd:
It's better to restore the factory settings, but in this way, all your data will be cleared, take you own risk
[Xposed General] WTF_666:
Many people believe in aliens and god. Does it change anything?

He clearly wrote that he did not get any clear evidence, just words, plus one could even say he apologized for blaming Taichi. Where at least one clear evidence. If there were sensible intelligible evidence, then he would not apologize) is it logical?

Modify edXposed so that the same Netflix does not write that it is no longer compatible with your device. I have OP5t + PE + (q10), if this application does not disappear from the market, I will gladly return to edXposed. Plus, as I said, Gpay disappears during the week and you need to clear the phone’s cache, Play Market + Gpay
[Xposed General] nift4:
But 70% of Play Store applications don't have access to EVERY app + your system as whole...

EDIT: About firmware: LineageOS without Gapps and disabled stats (disabled by default) doesn't send anything! But if you want to trust commercial software out of China and give it the permission to catch every bit of data, feel free to do so instead of having no arguments why it's good except that it doesn't make problems.

(Only to remind you: Company's want to get money; Ways to get money are:

- Ads

- Paywall

- Micro purchases

- Tracking

And as TaiChi doesn't have ads (AFAIK at least, never trusted them) and no Paywall or Micropurchases, guess what is the only option... Tracking! What is better? Privacy or some tweaks?)
[Xposed General] WTF_666:
For almost a month of use, neither of which happened, nor what money did not disappear from the purses, nor accounts were hacked, nor micro-purchases, nor advertising. Everything is clean and even.
[Xposed General] nift4:
I did not say hacking, I did say tracking! And if you read my post correctly you see that your reply is trash :rolleyes:
[Xposed General] mlgmxyysd:
But is it worth it that your privacy may be sold to bad companies?
[Xposed General] WTF_666:
All firmware and official ones merge the info a lot where, now what not to use firmware or to sit to collect them yourself? There was an analysis of many custom firmwares and just tons of information go to unknown addresses. The same MIUI generally sends every step somewhere.
[Xposed General] nift4:
Miui is tracking too, I talk about LineageOS
[Xposed General] WTF_666:
It seems that 007 agents or distributors of child pornography are sitting here. :laugh:It seems that 007 agents or distributors of child pornography are sitting here. :laugh: everyone is so secret and afraid of everything:laugh:
[Xposed General] Namnodorel:
Ah, the good ol' "nothing to hide" argument: https://en.m.wikipedia.org/wiki/Nothing_to_hide_argument

If you don't have anything to hide, why don't you post your address, pictures of your home and family, all details (confidential or otherwise) about your work, and while you're at it, also all credentials to your online profiles and bank account? If you don't do anything illegal, you should have nothing to worry about there...
[Xposed General] nift4:
Hi Idiot...

When you don't want to listen but you want to hate, okay. I'm ignoring you from now on as it annoys me to being hated on - do what you want, but stop annoying me.
[Xposed General] WTF_666:
He says the one who uploads his photos, addresses to Amazon, Google, Microsoft and other services =))

---------- Post added at 02:34 AM ---------- Previous post was at 02:29 AM ----------

Hello superintelligence.

It’s very important for me the opinion of no name of a person who wants to know that some Chinese person will know that he is watching porn or distributing something that is not very legitimate) At the same time, they spread their photos, addresses, credit cards, and addresses Residence. But he is worried about the evil Chinese))

By the way, you get the prize of the overmind of the month. You can take it) Plus, take a pie from the shelf.

How many conversations about allegedly Taichi are following but not a single evidence, only tantrums of lovers of conspiracies and hats made of foil
[Xposed General] nift4:
You don't know us. You don't know if we upload thinsg somewhere. How do you want to know that? And why are you attacking us personally? Why?

@Moderators please close this thread. It's hate only. All information was given - hate continues. Thanks for your time.