yashsingh1/xdaforums huggingface dataset:
[HD2 Android Q&A, Help & Troubleshooting and Genera] namilua:
Noise problem still exists, just test when the my friend called me.
[HD2 Android Q&A, Help & Troubleshooting and Genera] Stoferr:
I fail to see how this ROM can be ultralight when it got Sense installed, AND got the Anastacia theme.
[HD2 Android Q&A, Help & Troubleshooting and Genera] ancola66:
I also used some roms running android but are less satisfied. I am pleased with my rom so I wanted to share with you :). To make good calls, many factors need. Furthermore, the Android version is necessarily incomplete:D

* UntraLight (Remove Manila and most applications). for me it is light :)

Thank you :)
[HD2 Android Q&A, Help & Troubleshooting and Genera] velayo:
Thanks for sharing the non sense version is super fast. Great for dual booting. cảm ơn bạn
[HD2 Android Q&A, Help & Troubleshooting and Genera] THANHVO31:
ha ha, vay la Rom Viet nha ta cung vac chuong di dam xu nguoi roi, cam on bac ancola.

Edit: for my personal opinion, there is nothing much difference between so-call Ultra light ROM with stock or Full feature ROM since you may switch off Sense and at this moment 50MB ROM vs 200MB make no sense for download as well as Flash time.
[Nexus One General] jp_macaroni:
http://www.tgdaily.com/security-brief/50862-as-many-as-4-million-people-downloaded-data-stealing-android-app
[Nexus One General] SuxenNeo:
So no SMS, browsing history or voice mail password taken.
[Nexus One General] xXJay_RXx:
FOR REAL?!?! :eek:
[Nexus One General] boogieTilt:
All your data belongs to somebody else

Free isn't free: http://www.androidpolice.com/2010/0...t-all-your-data-are-belong-to…-somebody-else/ :eek:
[Nexus One General] pvillasuso:
Same happened to me with an app posted here for movies

Flixster for android

http://www.flixster.com/

I did find out ON TIME , that someone was messing with my gmail account , had to change my password inmediatly :eek:

I received an altert from an IP ( from their site ) trying to change my password !

You've been warned , happened to me !
[Nexus One General] khaytsus:
It's not like it doesn't show you the stuff when you install apps.. And this "Genome Project" thing is out of context nonsense.... 14% of free apps have access to your contacts. You realize that includes IM programs, SMS programs, Email programs, etc....

If you install a wallpaper app that requests access to your Accounts and Contacts, well....

http://www.cyrket.com/search?q=Jackeey+Wallpaper

I don't see such permissions on the 2-3 I looked through, but maybe specific ones did.

Another thing about this "lookout" app and Genome Project.. Look at the permissions on their app on the market:

Permissions: ACCESS_COARSE_LOCATION , ACCESS_FINE_LOCATION , ACCESS_NETWORK_STATE , CLEAR_APP_CACHE , DISABLE_KEYGUARD , GET_ACCOUNTS , INTERNET , MANAGE_ACCOUNTS , MODIFY_AUDIO_SETTINGS , PERSISTENT_ACTIVITY , READ_CONTACTS , READ_LOGS , READ_OWNER_DATA , READ_PHONE_STATE , READ_SMS , READ_SYNC_SETTINGS , READ_USER_DICTIONARY , RECEIVE_BOOT_COMPLETED , RECEIVE_SMS , VIBRATE , WAKE_LOCK , WRITE_CALENDAR , WRITE_CONTACTS , WRITE_SETTINGS , WRITE_SMS , WRITE_SYNC_SETTINGS , WRITE_USER_DICTIONARY , com.android.browser.permission.READ_HISTORY_BOOKMARKS , com.android.browser.permission.WRITE_HISTORY_BOOKMARKS

What if the 'AV' software itself turns out to be the one stealing data? If anything could, it could.
[Nexus One General] jp_macaroni:
we get that all apps ask for permission to allow access to our location, contacts, emails etc....but to gather our private info and sell them to China.....thats messed up.

time to sue.
[Nexus One General] jp_macaroni:
question:

if this app was downloaded and used by US government....would it be considered as a SPY? lol
[Nexus One General] samagon:
It's a big deal, but it illustrates very well that android users are in a ffa environment without someone looking over their shoulder to protect them.

It's good and bad. Some people will call bad on google for not protecting them, but others will see it for the truth of it and know they have to cover their own ass.
[Nexus One General] xManMythLegend:
Wouldnt a functional firewall app work for this?

cutting off apps access to non essential portions of data...but also from data transmitting?

Flixster is malicious??
[Nexus One General] Arcarsenal:
Woaaah now... I have used this app on almost ever ROM I flash - downloaded straight from the market each time. I've never had an indication that my information was compromised in any way... Are you 100% sure that Flixster was the culprit? That's a pretty heavy claim for what I think is a very widely used (and recommended) app.
[Nexus One General] bwolmarans:
and what about all the gmail notifiers?

More fears:

I will preface this by saying I don't know much about Android security, but to me, it's as secure as any PC.

So: what about gmail notifier apps and apps that ask for access to your gmail account?

Do they have access to your gmail password? Seems like it. So what's to stop malicious gmail notifier developers from stealing your gmail passwords and having their way with your google account, for example, grepping your mailbox for banking information.

Also think about keyboard apps, what's to top malicious keyboard developers from writing a keyboard which logs all your keystrokes to a zipfile then uploads it to a russian server for analysis of B-A-N-K and P-A-S-S-W-O-R-D and then the next keystrokes which follow that?

It doesn't end there. Picture apps which can steal your pictures. Apps which can record your phone conversations and upload the audio to servers a few hours later so you don't notice that data going on.
[Nexus One General] samagon:
The same things are possible for a regular computer as well. You can connect to a site and it could execute a download that then snoops your keystrokes and uploads them somewhere.

The difference (so far) is that on android you have to install an app to do that.

The takehome message is to excersize caution and install apps you can verify where they come from and what they do.
[Nexus One General] xManMythLegend:
This will happen more and more. Mobile is where people are doing most of there communication and beginning alot of banking.

Not just Android all mobile OS.

Like I said a zonealarm/lilsnitch like app would be of great use. Even if logging or reading they still need to communicate out. An easy low mem/bat/cpu usage app that monitors this behaviour would go along way.
[Nexus One General] galaxys:
This is becomming a bigger issue and we do need some type of security alert monitor!

http://www.newsfactor.com/story.xhtml?story_id=13100EVAC2WI

"Mobile apps on Android-powered smartphones and Apple's iPhone can disclose more personal data than most users realize, security vendor Lookout revealed Wednesday at the Black Hat USA 2010 conference in Las Vegas. Rather than being malicious, users often give the apps permission to access data when they are installed...."
[Nexus One General] P00r:
Opps missed this post prior to posting my thread...

http://xdaforums.com/showthread.php?t=739446
[Nexus One General] pvillasuso:
100% sure , I checked out the IP involved , and it pointed directly to their website !!!
[Nexus One General] GldRush98:
Don't be stupid. Flixster is a 100% legitimate app. Don't bad mouth it because you fell for a phishing scam some place else.
[Nexus One General] pvillasuso:
Use it then, who cares anyway ..!

Hope u get your gmail account hacked ...
[Nexus One General] benjatt:
Easy to say, but how do you 'verify where they come from and what they do'?
[Nexus One General] JanetPanic:
Looking at the permissions for the flixster app this does not seem likely. Full internet, phone state and identity, location, SD card access, and wifi.

I am sure you are sincere but I am also reasonably confident in the application. Why not report it to Google? Actively malicious hacking is on a different scale from the passive data collection the wallpaper app does.
[Nexus One General] aaronjb:
Let's have some documented proof, please.
[Nexus One General] pvillasuso:
Don't have it ... I deleted all !

I got a gmail alert reporting that someone/something was trying to change my settings from xxx.xxx.xxx.xxx .. I was already logged in that second. So I had chance to change my password ...

Checked the xxx.xxx.xxx.xxx IP , and it was from Flixster website .

That's it !
[Nexus One General] Jack_R1:
IP spoofing isn't quite hard to do ;) Doesn't say anything at all.
[Nexus One General] :
No. Google setups a "token" system.

If an app asks for your Google details, the applications will provide a "token" with a unique hash. The application will then send that token to Google and google verifies the token.

(this is only for you credentials, if you use an email app for email, the data inside your email is going to be opened up to the application in order for the application to be able to display it to you (the user) )

You are correct about keyboard apps. If you encounter a keyboard app that requests full internet access, run away like forrest.

DON'T USE KEYBOARD APPS THAT ASK FOR INTERNET ACCESS.

There are a few exceptions, like Swype. Swype in the current beta asks for internet access so you can send back data to help the beta. If you don't trust the developer/company that offers a keyboard that requires internet access, then don't use it. This is the main reason I stay away from the swype mods here on XDA. I'm not implying the people creating the mods are doing anything malicious, but I'd rather be safe than sorry.
[Nexus One General] JanetPanic:
The other side of the story:

http://www.androidtapp.com/android-...spyware-and-stealing-sensitive-user-data-fud/

I tend to think this is blown way out of proportion, though the developer could have accomplished his goal without receiving any personal information.

1) I find it unlikely that 4 million people downloaded either the "My Pretty Pony" or "Star Wars" wallpaper apps (the specifically mentioned apps in the discussion.)

2) The information is personal in nature but not as damaging as implied: No user names, no passwords (not counting the possibility of a password for VM on the phone #, which is not normal for the US at least), no email addresses, not even the implication of keyboard sniffers or targetd identity theft (such as banking credentials). So at worst you need to change your VM password, for the vast majority in the U.S. the probable worst case here is being added to a telemarketer list.

3) There is absolutely no proof of ill or malicious intent. The original talk was scare tactics that the presenter has since backed down from.

The developer is not without fault however. He could have simply done a MD5 or SHA1 of the phone # or phone ID and used that as the unique credentials and achieved the same goal. Sending the VM # makes no sense and tends to suggest he went quick and dirty rather than thinking about what he actually needed to accomplish his goals.

On the subject of the Flixster app ("Movies"); I am sorry but unless you are saying that the Flixster app has a hack exploiting a, to this point, unknown vulnerability in android then what you accuse them of is not possible. I would highly recommend you forward your accusation to Google with what proof you have if you feel the need. I would argue though that if you accuse an app developer of not only stealing your email address but also your password you should have absolute proof and keep it readily available. Without proof I find it extremely irresponsible to spread accusations of this nature on a public forum. You could always dedex the application and find at least something vague to back up the accusation of a felony under U.S. law.
[Nexus One General] bwolmarans:
But in step 1 above, in order to get my username and password, the app would ask me to type it in. Then, the app would have both my google username and password in cleartext no?
[Nexus One General] :
If you're inputing your google info directly into random apps, then yes. ( if an application asks for my gmail account info, it gets uninstalled instantly.)

However the android system has a "user info" intent where no information is passed onto the application itself.
[Nexus One General] bwolmarans:
Thanks for that explanation.

There should be a pop-up whenever any android phone boots reminding the user to "Do not re-enter your google account info into any App from the market" because I think most users do not understand the difference.

The fact that Android does NOT clearly state this (not on boot up, not when a user goes to the Market, nowhere in fact) could potentially lead to hundreds of thousands of naive average phone end users having malicious parties paw through everything on their google accounts by writing apps that grab google account credentials in cleartext.
[Nexus One General] rcxquake:
I should think that not entering in your personal information into random apps that you do not trust would be common sense. And I know I would HATE it if google put in a reminder every time my phone booted up of something so obvious.

While I realize that there are people who do not know not to give away their information in this way, these people are far more likely to give away information on their desktop computer than own an android phone, figure out how to download a sketchy app, and enter their information into it.
[Desire General] well0549:
What should you do when an upgrade to Froyo presents itself ?

[] Make backup of everything

[] Backup not needed (maybe)

[] Will I lose SMS & Contacts & Exchange settings ?

[] Is my SD card in danger and should i Backup that one as well

[] No worries SD card is untouched

[] Save Bookmarks to SD Card

[] Bookmarks are transferred as is

I really have no idea, is there anybody who knows what will happen to the data in the phone ?
[Desire General] mcgon1979:
you won't lose anything. That's why they test Froyo and the upgrade process for so long.
[Desire General] MightySashiman:
hmm, maybe first of all wait for a rooted version to come out ?...
[Desire General] kmetek:
install 1000 apk's :D
[Desire General] jpxdude:
Do a happy dance :p
[Droid Incredible General] techrock111:
Ok ... was rooted... did the downgrade... wiped.... copied the new radio update file to SD card as update.zip. revolted into recovery and selected the update.zip .. tries to apply the update but fails... operation aborted... please help me !!!
[Droid Incredible General] deficitism:
Clockwork does not currently support flashing radio. You will need to use PB31IMG.zip to perform a full RUU to the leaked OTA

2.1

firmware. Afterwards, run unrevoked3, then apply the leaked 2.2 rom.
[Droid Incredible General] techrock111:
Ok already did the pb31img. The instructions posted here said to update the radio ota before loading the 2.2 Rom... should the radio update be omitted ? I thought I read earlier that if the new 2.2 leak was applied before updating radio there would be problems with cam. Ect. Not working ...
[Droid Incredible General] deficitism:
Okay, just to clarify, you are running BONE STOCK, with stock recovery.

Does your error look like this?

http://img812.imageshack.us/i/img3017b.jpg/

If so, go ahead and boot up your device with bone stock 2.1, and make sure the exchange update is applied. If not, you should get prompted for an OTA. Install that OTA, then retry the radio update.
[Droid Incredible General] techrock111:
I haven't applied any updates yet... never got prompted for an ota update yet... bone stock 2.1 with stock recovery. I did the P311.img which unroots if I'm not mistaken. Did wipe after the p311.img . Is there some way to force the ota ? Btw how do I apply exchange update?
[Droid Incredible General] techrock111:
Thanks for the suggestions... I figured it out.. I renamed the file as update instead of update.zip .retired and it worked perfectly... loaded 2.2 through clockwork... froyo happiness ! thanks again
[Galaxy S I9000 General] SpaceGooner:
I copied my music collection on to my phone (4,700 .m4a files which are eaac+ at 48kbits/s), which is about 350 albums with 1000+ artists. The stock music player plays them all fine and all the embedded album art and other metadata is all there. The only problem I get is when I select the 'artists' tab. I get a brief insufficient memory message, then the player closes itself.

Has anyone else seen this? Surely 1000+ artists shouldn't be a problem for a cutting edge superphone.
[Galaxy S I9000 General] Robin.B:
I'm thinking probably a bug that they've missed? Or it might just be to do with your firmware, what version are you using?
[Galaxy S I9000 General] SpaceGooner:
Thanks for your reply. It's I9000ADJF1 that came with the phone.
[Click General] yatindroid:
please provide any link to rooting android 1.6 htc click/tattoo pic or video tutorial

thanks in advance

new android user
[Click General] dancer_69:
You sould take a look on stickies or use search before you make a new thread:

http://xdaforums.com/showthread.php?t=705454

hi

answered CLOSED
[Vibrant General] substance.v:
Hi xda.. This is my first post..

I just switched to vibrant from my touch slide.. Great phone so far.... Well I found the app allshare to be interesting..

I opened it and it automatically found my pnp server. When I try to play an avi... It tells me it can not play this format... My fuppes shares media to my ps3, xbox360, and my legacy xbox.

I have read other users experiencing the unable to file error but for windows applications.

Im trying to play to my phone from server.
[Droid Incredible General] IShootPixels:
I'm not sure how this will be taken by the people here. Everyone seems really helpful when other people ask questions or need help so I may be surprised, but after rooting my Incredible last night and then trying to look into boot animations, removing bloatware and other things I was left with some feelings that took the joy out of being rooted and I wanted to share them.

Laugh if you will, insult if you feel it's necessary. I'm old enough to be able to handle it but beyond all of that I just wanted to say that the "rooting community" are a brilliant bunch of people. The things that you guys do boggles my mind. Since I only just registered I'm forbidden to post links, but if you're so inclined to go read it here it is.

ishootpixels.tumblr.com/

EDIT: I'd also like to add that my wife's netbook is running XP and not Vista. I forgot that we downgraded it (or upgraded however you want to look at it). I've gone back and changed my blog post.
[Droid Incredible General] Duckbone Apps:
If you would like some help getting where you want to be, PM me and I would be glad to help. I am far from an expert, but after scouring these forums endlessly, I am quite familiar with the process.
[Droid Incredible General] IShootPixels:
@mtag1029 Thanks. I guess my first problem is that whenever I type in "adb" anything, I get that "adb is not recognized as an internal or external command, operable program or batch file."

I've used this method to connect the phone to the netbook...

1. Boot into Clockworkmod recovery by powering off the phone and pressing and holding the volume down and power button until the screen lights up.

2. At the menu press volume down to select Recovery, then press power.

3. At the Clockworkmod main menu select partitions menu, then select mount /system

4. On the computer click Start > Run, and type CMD to open a command prompt.

5. In the command prompt type cd\sdk\tools

6. At the command prompt type adb shell. Now you’re in the phone’s OS.

and I get as far as step 6 before I can't go any further which is where I get that message. Right now I'm trying to install a boot animation and sound but I'll also need to be able to get beyond this in order to remove the bloatware. What am I doing wrong?

And THANK YOU again for the help. I'm almost to the point of returning it to stock so I'll at least be able to get Froyo whenever it's released OTA, but I've come so far at this point I'd hate to throw it all away and go back to stock.
[Droid Incredible General] gmonox:
Assuming your sdk folder is in the root of the C drive (i.e. C:\sdk\), the command in step 5 is wrong -- it's supposed to be:

cd \sdk\tools

with a space. That should get you into the C:\sdk\tools directory, where adb is.

Not sure if the lack of spacing was just a typo, but if not, there ya go :) Let me know how it works

edit: Just tried cd\sdk\tools, actually works, I thought there had to be a space, but maybe not. I guess the next step would be to make sure there's an adb.exe in your tools folder?
[Droid Incredible General] IShootPixels:
I created a file folder under Local Disk C called "sdk" and inside that I created another folder "tools". I couldn't find folders that were already named this so I created them myself. That may be wrong so it wouldn't surprise me if that's my first mistake.

Beyond that, when I get into running command lines I have gotten to where it looks like this...

C:\sdk\tools>

No spaces. I'm taking a pic and trying to attach it if my noob status on the forums will allow me.
[Droid Incredible General] IShootPixels:
I don't have the exe file. I didn't need it to root the phone. I don't know where to even get it.
[Droid Incredible General] gmonox:
If you just made the folders, there's nothing in them -- if you go to the tools directory and type "dir", there probably won't be any files unless you extracted some in there.

From the how 2 adb thread by dreamersipaq:

edit: the rest of that thread is located http://xdaforums.com/showthread.php?t=709220 there, if you're interested :)
[Droid Incredible General] Duckbone Apps:
gmonox is absolutely correct. You cannot just create the folders. They have to come from the sdk.

Another thing. You mentioned in your blog post that you would like to have froyo. Froyo should be flashed before removing any apps becauseeverything that you have removed will be put back in with froyo.
[Droid Incredible General] IShootPixels:
Wow, that was a pretty necessary step that I never knew about. Okay, so I DL'd, unzipped, and copied the folder to the root of C. Question, do I have to rename the "android-sdk-windows" folder to simply "sdk" when following the directions I listed earlier or do I leave it and at the command line type...

cd\android-sdk-windows\tools

I also didn't do the "advanced" part of the post simply because it's my wife's PC and I'm really not in the mood to screw up anything else today.

EDIT: And about Froyo, right now I just want to see if I can get a little boot animation working before I even THINK about tackling ROMs, Kernals or anything else. Although I know that most ROMs have the kernals that are optimized for that particular ROM if I've read things right. I realize Froyo is not a mod so it won't have an overclocked kernal but I read that others might. I've read that Froyo packs in VZ Nav (like I didn't have enough of that crap with my old Blackberry) amongst other things. If nothing else, I'm really good at reading about all of the things that I wish I could do.
[Droid Incredible General] gmonox:
Either way works. I renamed mine sdk because I'm too lazy to type android-sdk-windows every time I want to go into adb shell. But it's up to you
[Droid Incredible General] IShootPixels:
Ok, I'm guessing that my question will be answered after I run the setup. I didn't see the link at first to the thread. Apparently my wife's netbook doesn't even have the right java ver. to run the setup.

This is making my brain hurt.
[Droid Incredible General] Duckbone Apps:
I should have asked this earlier, have you made a nandroid backup?
[Droid Incredible General] IShootPixels:
LOL. Actually as soon as I finished rooting the phone I DL'd Titanium from Marketplace and installed it and BusyBox and made a backup that way. Then I remembered Nandroid and went in and backed up that way too. Probably overkill but the whole process has scared the crap outta me. I wouldn't know how to apply these backups, but at least I have them.

At the moment I'm installing the Documentation for Android SDK, API 8, revision 1

EDIT: This is going to take awhile I'm guessing. Installing SDK Platform Android 2.2, API 8, revision 2
[Droid Incredible General] Duckbone Apps:
Okay. The nandroid is the most important. It will save your butt if something goes wrong.