[Q] Against terms of service to decompile app? - Android Q&A, Help & Troubleshooting

I'm familiar with apktool and have been using it for some time to decompile apps and modify them, usually just cosmetic changes through xml. However, I am beginning to see how easy it is to change actual functionality of an app via smali edits. I see in the Google Play terms of service:
You agree that you will not, and will not allow any third party to, (i) copy, sell, license, distribute, transfer, modify, adapt, translate, prepare derivative works from, decompile, reverse engineer, disassemble or otherwise attempt to derive source code from the Products, unless otherwise permitted, (ii) take any action to circumvent or defeat the security or content usage rules provided, deployed or enforced by any functionality (including without limitation digital rights management or forward-lock functionality) in the Products, (iii) use the Products to access, copy, transfer, transcode or retransmit content in violation of any law or third party rights, or (iv) remove, obscure, or alter Google's or any third party's copyright notices, trademarks, or other proprietary rights notices affixed to or contained within the Products.
Click to expand...
Click to collapse
I'm wondering what others think about this clause, and whether modifying an apk to allow functionality that would normally not be allowed by the app (for example, allowing additional game levels if a user has purchased them through some external means) violates the terms.

Related

Sicher, new mobile encrypted chat app with safe file transfer

Hi all,
I'd like to share great news. Sicher, our free secure messenger finally comes to Windows Phone.
Sicher features true end-to-end encryption of both text messages and file attachments. With anonymous push notifications and the ability to set a timer for when messages will self-destruct, Sicher also includes password protection for the app itself.
Please try Sicher and share your feedback in this post.
FairyMary
Sicher Team
App is free, store link is here: EDIT: Removed because this thing looks like a scam and its description is a lie
I haven't been able to find a lot of info about how the app works (I'm talking about at a very technical level). My general advice regarding crypto code is to open it up for review, either publicly or by a professional security assessment firm (disclaimer: I work at one of those). If the code is already open for review somewhere, that would be awesome; if not, I recommend getting in touch with some external security experts (same disclaimer, but I can provide contact info if you want). The Internet is full of things that the developer claimed (and often even sincerely believed) were secure.
Aaaand just for fun, I decided to take a look at the app and see if there was anything obviously wrong. Let's start with the presence of no fewer than *three* advertisement networks, shall we? Begun Advertising is Russian and Google-owned, Google AdMob is self-explanatory, as is Microsoft Advertising Mobile. Your store description claims you
don’t use any advertising engines
Click to expand...
Click to collapse
. Did you really think nobody would check this?
WTF are you trying to pull here?!? I can't think of any way to faster burn trust in a "secure" app than to make a claim that is trivially disprovable in a way that benefits nobody except you.
I'll come right out and say it: Sicher looks like a scam!
Oh look, a Facebook library as well. Totally expected to see that, given that you
don’t integrate social network SDKs
Click to expand...
Click to collapse
Oh, and before anybody asks about responsible disclosure, that's for when there's an unintentional bug in somebody's code. This just looks like pure exploitation of your users! (I say "looks like" because I haven't actually decompiled the code to see if those libraries are being used, but it's hard to imagine why you'd have them otherwise...). The only responsible way to disclose malware is to do it publicly, and this looks malicious.
EDIT: I'll give you 24 hours to give me a good argument why I shouldn't report my findings to the stores themselves.
Time's up. You actually got over 48 hours because I was busy yesterday. Hope not too many people got scammed and tracked by your "secure" and "private" app...
Hey @GoodDayToDie, unfortunately I don't know where else to ask this, since you seem to be really interested (and skilled) in this topic, what messengers do you consider secure? WhatsApp is obvious, the only ones on Windows Phone I know of that come to my mind are Telegram and (soon) Threema.
What do you think about the two? I have basically no knowledge, but what seems odd to me about Threema is their faqs answer to "what about MITM?" they just say they use certs, hardcoded in the app. Aren't they with their servers in control then? How I understand this, the Threema servers could perfectly perform a MITM attack.
And Telegram has a completely confusing protocol.. So please share your thoughts!
I have no personal knowledge of one, sadly. Take anything I say here with a huge grain of salt (including the fact that Sicher looks like a scam; I haven't actually verified that it *uses* all those ad networks + Facebook that it integrates, just that it has them) as I'm not spending the time & effort for a full security review of these apps at this time.
Threema actually looks quite good.
Pros:
They don't try to implement the crypto themselves (they use NaCl, which is both written by people who know what they're doing, and well-reviewed).
The design of their end-to-end solution makes sense (it connects through the server since phone networks won't allow incoming/direct connections, but the messages are encrypted to only the recipient and doesn't require that the recipient be online to receive the message).
They are relatively open about how things work (although those *could* be lies; I haven't pulled the app apart).
It is possible for the user to verify the key of another user.
Cons:
They don't have Perfect Forward Secrecy on messages. PFS would require that the intended recipient be online at the start of any given conversation (to negotiate the ephemeral keys) so this isn't terribly surprising, but it is disappointing. An attacker (including a government agency) who gets access to your private key could decrypt historical traffic to you if they'd recorded it.
The app is proprietary; there's nothing stopping them from pushing a malicious update.
The server supplies the public keys of users; until such time as the user validates the other party's key (which is difficult to do except in person) the server could have sent a public key that the server has the private key for (instead of the user's own public key) and then MitM the user's traffic. This would break down when verified though, unless the app lied about the result of the verification process (you don't actually see the key itself).
To address your concern about MitM, the app says they use certificate pinning (a standard and very smart security measure, assuming they did it right) for app-to-server communication, so nobody (including third-party security engineers) can MitM the app traffic. They also claim to use PFS. However, if the server itself is untrusted (i.e. some government thugs show up to demand access, although bear in mind that apparently the servers are all in Switzerland) then the server could give you the wrong public key for a user you try and add, allowing the server to MitM you. Also, the company could push an update that is malicious.
The only protection against the server-sends-wrong-key threat is to either require that the user manually import all keys (think PGP minus keyservers and assuming trustworthy key exchanges) or exactly verify the key (i.e. personally ensure that it matches the other user's key by actually checking the bytes or at least the hash). The only protection against the malicious update is to make the source code available and have a method by which users can either compile it themselves (though see "Reflections on Trusting Trust") and/or have a way to verify the application binaries.
I'll look at Telegram later. For the moment, though, I would loosely recommend Threema once it's available. There's also Skype, of course, but while it was decompiled once long ago (and found to use secure encryption, although some non-crypto vulns were found) that was many versions ago (and, in particular, was before Microsoft bought them).

[APP][4.0+][v0.5.67] DonkeyGuard - Security Management

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I'm proud to present you DonkeyGuard, the first animal which protects your phone :good:. This application is a mod for the well known XposedFramework and does not work without it (In future it will be using Cydia as framework).
Preview
Click to expand...
Click to collapse
General
Click to expand...
Click to collapse
First I want to say thanks to every one which supported me in the past while developing this application, especially @HaSKdX who created the whole theme for my application (more later). Some of you already know me as the "PDroid2.0" guy and I got a lot of messages why I stopped supporting/ developing PDroid at all. This has several reasons and I will explain them later, if anyone wants to know more about this. I started developing this application for round about 3/4 year ago, but I haven't had much time to work on this application. Now it is in a pretty good alpha state where people can test it, so feel free to be the first
What is DonkeyGuard?
Click to expand...
Click to collapse
DonkeyGuard is an app, similar to PDroid2.0, PDroid and other applications which are known at this sector. I developed DonkeyGuard from scratch with all my experience I've made with PDroid. DonkeyGuard allows you a fine-grained tuning of access to your private data. It currently supports 41 restrictions which can be applied for every application. Specifically, it is a Privacy service provider which implements a set of modifications to the Android Framework to allow you to interact with applications which are trying to access your private data.
Supported Features
Click to expand...
Click to collapse
DonkeyGuard allows blocking access for any installed application on your phone to the following data separately:
device_id
phone_number
sim_serial_number
subscriber_id
incoming_call_number
outgoing_call_number
gps_and_network_location
impi_impu
cell_info
accounts
accounts_credentials
read_contacts
read_call_log
call_phone
read_calendar
receive_sms
send_sms
receive_mms
send_mms - not implemented in alpha
record_audio
use_camera
read_bookmarks
wifi_info
switch_mobile_network_state
switch_wifi_state
sim_info
network_info
android_id
access_media
read_external_storage - not implemented in alpha
write_calendar
write_call_log
write_contacts
write_bookmarks
write_external_storage - not implemented in alpha
account_authenticator
read_sms
write_sms
read_mms
write_mms
network_state
For several of those permissions, DonkeyGuard gives you the possibility to supply custom or random values (e.g. GPS Location, Device ID, ...).
Installation Instructions
Click to expand...
Click to collapse
Just follow the steps below:
Download the application
Install it
Activate the application inside the XPosedFramework
Reboot your device
Now you can use DonkeyGuard
Bug Report
Click to expand...
Click to collapse
If you think that something isn't working as expected, please take the whole log from
the XposedFramework app (and in addition an extract of logcat) and open a new issue
at my GITHUB. In addition you
can post it here too.
Translation
Click to expand...
Click to collapse
Simply use GetLocalization to translate the application. It is the easiest way for me to keep in sync with your work :good:
ChangeLog
Click to expand...
Click to collapse
Github or within the application.
FAQ
Click to expand...
Click to collapse
Please visit my GITHUB-WIKI. There you can find all necessary informations.
Credits
Click to expand...
Click to collapse
@HaSKdX The person, who created the whole theme for my application:fingers-crossed: We worked a long time together and I want to thank you for all your great work
Click to expand...
Click to collapse
You can simply download the application from PlayStore and install it. Please note: Before you download/install/use the application, you need to read and accept the EULA. The XposedRepo is currently not supported anymore, just because the application reached the file-size limit.
END USER LICENSE AGREEMENT
This copy of DonkeyGuard ("the Software Product") and accompanying documentation is licensed and not sold. This Software Product is protected by copyright laws and treaties, as well as laws and treaties related to other forms of intellectual property. Stefan or its subsidiaries, affiliates, and suppliers (collectively "Stefan") own intellectual property rights in the Software Product. The Licensee's ("you''. or "your") license to download, use, copy, or change the Software Product is subject of these rights and to all the terms and conditions of this End User License Agreement ("Agreement").
Acceptance
YOU ACCEPT AND AGREE TO BE BOUND BY THE TERMS OF THIS AGREEMENT BY SELECTING THE "ACCEPT" OPTION AND DOWNLOADING THE SOFTWARE PRODUCT OR BY INSTALLING, USING, OR COPYING THE SOFTWARE PRODUCT. YOU MUST AGREE TO ALL OF THE TERMS OF THIS AGREEMENT BEFORE YOU WILL BE ALLOWED TO DOWNLOAD OR INSTALL THE SOFTWARE PRODUCT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, YOU MUST SELECT "DECLINE" AND YOU MUST NOT INSTALL, USE, OR COPY THE SOFTWARE PRODUCT.
License Grant
This Agreement entitles you to install and use one copy of the Software Product. In addition, you may make one archival copy of the Software Product. The archival copy must be on a storage medium other than a hard drive, and may only be used for the reinstallation of the Software Product. This Agreement does not permit the installation or use of multiples copies of the Software Product, or the installation of the Software Product on more than one computer/Smartphone at any given time, on a system that allows shared used of applications, on a multi-user network, or on any configuration or system of computers/Smartphones that allows multiple users. Multiple copy use or installation is only allowed if you obtain an appropriate licensing agreement for each user and each copy of the Software Product.
Restrictions on Transfer
Without first obtaining the express written consent of Stefan, you may not assign your rights and obligations under this Agreement, or redistribute, encumber, sell, rent, lease, sublicense, or otherwise transfer your rights to the Software Product.
Restrictions on Use
You may not use, copy, or install the Software Product on any system with more than one computer/Smartphone, or permit the use, copying, or installation of the Software Product by more than one user or on more than one computer/Smartphone. If you hold multiple, validly licensed copies, you may not use, copy, or install the Software Product on any system with more than the number of computers/Smartphones permitted by license, or permit the use, copying, or installation by more users, or on more computers/Smartphones than the number permitted by license.
You may not decompile, "reverse-engineer", disassemble, or otherwise attempt to derive the source code for the Software Product.
You may not use the database portion of the Software Product in connection with any software other than the Software Product.
Restrictions on Alteration
You may not modify the Software Product or create any derivative work of the Software Product or its accompanying documentation. Derivative works include but are not limited to translations. You may not alter any files or libraries in any portion of the Software Product. You may not reproduce the database portion or create any tables or reports relating to the database portion.
Restrictions on Copying
You may not copy any part of the Software Product except to the extent that licensed use inherently demands the creation of a temporary copy stored in computer/Smartphone memory and not permanently affixed on storage medium. You may make one archival copy which must be stored on a medium other than a computer/Smartphone hard drive.
Disclaimer of Warranties and Limitation of Liability
UNLESS OTHERWISE EXPLICITLY AGREED TO IN WRITING BY STEFAN, STEFAN MAKES NO OTHER WARRANTIES, EXPRESS OR IMPLIED, IN FACT OR IN LAW, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OTHER THAN AS SET FORTH IN THIS AGREEMENT OR IN THE LIMITED WARRANTY DOCUMENTS PROVIDED WITH THE SOFTWARE PRODUCT.
Stefan makes not warranty that the Software Product will meet your requirements or operate under your specific conditions of use. Stefan makes no warranty that operation of the Software Product will be secure, error free, or free from interruption. YOU MUST DETERMINE WHETHER THE SOFTWARE PRODUCT SUFFICIENTLY MEETS YOUR REQUIREMENTS FOR SECURITY AND UNINTERRUPTABILITY. YOU BEAR SOLE RESPONSIBILITY AND ALL LIABILITY FOR ANY LOSS INCURRED DUE TO FAILURE OF THE SOFTWARE PRODUCT TO MEET YOUR REQUIREMENTS. STEFAN WILL NOT, UNDER ANY CIRCUMSTANCES, BE RESPONSIBLE OR LIABLE FOR THE LOSS OF DATA ON ANY COMPUTER/SMARTPHONE OR INFORMATION STORAGE DEVICE.
UNDER NO CIRCUMSTANCES SHALL STEFAN, ITS DIRECTORS, OFFICERS, EMPLOYEES OR AGENTS BE LIABLE TO YOU OR ANY OTHER PARTY FOR INDIRECT, CONSEQUENTIAL, SPECIAL, INCIDENTAL, PUNITIVE, OR EXEMPLARY DAMAGES OF ANY KIND (INCLUDING LOST REVENUES OR PROFITS OR LOSS OF BUSINESS) RESULTING FROM THIS AGREEMENT, OR FROM THE FURNISHING, PERFORMANCE, INSTALLATION, OR USE OF THE SOFTWARE PRODUCT, WHETHER DUE TO A BREACH OF CONTRACT, BREACH OF WARRANTY, OR THE NEGLIGENCE OF STEFAN OR ANY OTHER PARTY, EVEN IF STEFAN IS ADVISED BEFOREHAND OF THE POSSIBILITY OF SUCH DAMAGES. TO THE EXTENT THAT THE APPLICABLE JURISDICTION LIMITS STEFAN’S ABILITY TO DISCLAIM ANY IMPLIED WARRANTIES, THIS DISCLAIMER SHALL BE EFFECTIVE TO THE MAXIMUM EXTENT PERMITTED.
Limitation of Remedies and Damages
Your remedy for a breach of this Agreement or of any warranty included in this Agreement is the correction or replacement of the Software Product. Selection of whether to correct or replace shall be solely at the discretion of Stefan. Stefan reserves the right to substitute a functionally equivalent copy of the Software Product as a replacement. If Stefan is unable to provide a replacement or substitute Software Product or corrections to the Software Product, your sole alternate remedy shall be a refund of the purchase price for the Software Product exclusive of any costs for shipping and handling.
Any claim must be made within the applicable warranty period (warranty period:15 minutes after you purchased the Software Product). All warranties cover only defects arising under normal use and do not include malfunctions or failure resulting from misuse, abuse, neglect, alteration, problems with electrical power, acts of nature, unusual temperatures or humidity, improper installation, or damage determined by Stefan to have been caused by you. All limited warranties on the Software Product are granted only to you and are non-transferable. You agree to indemnify and hold Stefan harmless from all claims, judgments, liabilities, expenses, or costs arising from your breach of this Agreement and/or acts or omissions.
Severability
If any provision of this Agreement shall be held to be invalid or unenforceable, the remainder of this Agreement shall remain in full force and effect. To the extent any express or implied restrictions are not permitted by applicable laws, these express or implied restrictions shall remain in force and effect to the maximum extent permitted by such applicable laws.
Placeholder
Good news. Will try.
An alternative to XPrivacy?
Will try it
I hope it will be better than Xprivacy.
Interesting. Gotta try this out. Thanks!
Tapped from an annihilated N10.1
biglsd said:
Good news. Will try.
Click to expand...
Click to collapse
Many thanks, please report how it works for you
cmlx said:
An alternative to XPrivacy?
Click to expand...
Click to collapse
I don't know if I will call it an "alternative". I developed PDroid2.0 before and this application is very similar, but a lot better (than PD2.0) . So, just try it and then decide if you like to use it or not
Smile123 said:
Will try it
I hope it will be better than Xprivacy.
Click to expand...
Click to collapse
Thanks, please note that this is a first alpha preview of the applications, it will have bugs! Just report how it works
jrbxx7 said:
Interesting. Gotta try this out. Thanks!
Tapped from an annihilated N10.1
Click to expand...
Click to collapse
Thanks, also here: Please report how it works for you....
So, this is the first alpha version of DonkeyGuard with only the "basic" functionality. To all my users, testers and whoever is using this application: Please report how it works. Furthermore it is important for me how you "understand" the Graphical-User-Interface. If something is ambiguous, please do not hesitate to ask me.
If you want to report any errors or have feature requests, please visit me on Github and post it there.
At first run I have "Error: NoSuchServerAvailable".
About UI
In my opinion program is system software and UI must be more informational. In my small 800x480 screen of Galaxy S II I have 2,5 items, which I can configure. Buttons "Logs" "Settings" and "System" are small, but area with program icon and caption is too big. For what are you use transition effects? Your program is serious system software, but not "Angry birds".
Pdroid app was more compact and functional.
Will wait new versions of program and I hope I'll change xprivacy to your new application. As before, I can help you with russian translation.
biglsd said:
At first run I have "Error: NoSuchServerAvailable".
About UI
In my opinion program is system software and UI must be more informational. In my small 800x480 screen of Galaxy S II I have 2,5 items, which I can configure. Buttons "Logs" "Settings" and "System" are small, but area with program icon and caption is too big. For what are you use transition effects? Your program is serious system software, but not "Angry birds".
Pdroid app was more compact and functional.
Will wait new versions of program and I hope I'll change xprivacy to your new application. As before, I can help you with russian translation.
Click to expand...
Click to collapse
The NoSuchServerAvailable exception will be thrown if the privacy service isn't available. This can only happen if you haven't activated the application inside the XposedFramework or forgot to reboot. The error should drop off after you reboot your device.
Well, I think this is a matter of opinion. You can simply change the transitions to "zoom in" as for example which is better known for a viewpager. It would help me if you can simply post a screenshot The application is not ready yet and all additional functionality e.g. search features aren't activated. For me it is important that the "core" (blocking permissions, on-demand-dialog) of DonkeyGuard works as expected
Some additional information: You can tap on the alphabetical indicator and then choose a letter (a-z). The app will automatically scroll to the position of your chosen letter.
Related the translation: Of course, I will init github for this
>Some additional information: You can tap on the alphabetical indicator and then choose a letter (a-z). The app will automatically scroll to the position of your chosen >letter.
I already checked this function =)
>The NoSuchServerAvailable exception will be thrown if the privacy service isn't available. This can only happen if you haven't activated the application inside the >XposedFramework or forgot to reboot. The error should drop off after you reboot your device.
It hadn't gone away after acouple of reboots.
biglsd said:
>Some additional information: You can tap on the alphabetical indicator and then choose a letter (a-z). The app will automatically scroll to the position of your chosen >letter.
I already checked this function =)
>The NoSuchServerAvailable exception will be thrown if the privacy service isn't available. This can only happen if you haven't activated the application inside the >XposedFramework or forgot to reboot. The error should drop off after you reboot your device.
It hadn't gone away after acouple of reboots.
Click to expand...
Click to collapse
Well, then do following:
1) Delete logs inside xposed-framework app
2) Restart device
3) Post the log
----------------
29 июля 2014 г. 17:46:50 UTC
Loading Xposed v54 (for Zygote)...
Running ROM 'cm_i9100-userdebug 4.4.4 KTU84Q 1a50281812 test-keys' with fingerprint 'samsung/GT-I9100/GT-I9100:4.1.2/JZO54K/I9100XWMS2:user/release-keys'
Loading modules from /data/app/eu.donkeyguard-1.apk
Loading class eu.donkeyguard.hooks.MainHook
PowerService ready
PowerService ready
java.lang.NoSuchMethodError: com.android.server.am.ActivityManagerService#main(int)#exact
at de.robv.android.xposed.XposedHelpers.findMethodExact(XposedHelpers.java:179)
at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:129)
at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:136)
at eu.donkeyguard.hooks.MainHook.initZygote(SourceFile:64)
at de.robv.android.xposed.XposedBridge.loadModule(XposedBridge.java:437)
at de.robv.android.xposed.XposedBridge.loadModules(XposedBridge.java:386)
at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:120)
at dalvik.system.NativeStart.main(Native Method)
---------- Post added at 05:53 PM ---------- Previous post was at 05:50 PM ----------
Your program log
Stack-Trace:
eu.donkeyguard.server.aj: ISettingsServer is null. IBinder: [NULL]
at eu.donkeyguard.server.h.b(SourceFile:68)
at eu.donkeyguard.gui.activities.MainActivity.onCreate(SourceFile:99)
at android.app.Activity.performCreate(Activity.java:5231)
at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1087)
at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2169)
at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2264)
at android.app.ActivityThread.access$800(ActivityThread.java:144)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1205)
at android.os.Handler.dispatchMessage(Handler.java:102)
at android.os.Looper.loop(Looper.java:136)
at android.app.ActivityThread.main(ActivityThread.java:5139)
at java.lang.reflect.Method.invokeNative(Native Method)
at java.lang.reflect.Method.invoke(Method.java:515)
at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:795)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:611)
at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:132)
at dalvik.system.NativeStart.main(Native Method)
System-Logs:
null
biglsd said:
----------------
29 июля 2014 г. 17:46:50 UTC
Loading Xposed v54 (for Zygote)...
Running ROM 'cm_i9100-userdebug 4.4.4 KTU84Q 1a50281812 test-keys' with fingerprint 'samsung/GT-I9100/GT-I9100:4.1.2/JZO54K/I9100XWMS2:user/release-keys'
Loading modules from /data/app/eu.donkeyguard-1.apk
Loading class eu.donkeyguard.hooks.MainHook
PowerService ready
PowerService ready
java.lang.NoSuchMethodError: com.android.server.am.ActivityManagerService#main(int)#exact
at de.robv.android.xposed.XposedHelpers.findMethodExact(XposedHelpers.java:179)
at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:129)
at de.robv.android.xposed.XposedHelpers.findAndHookMethod(XposedHelpers.java:136)
at eu.donkeyguard.hooks.MainHook.initZygote(SourceFile:64)
at de.robv.android.xposed.XposedBridge.loadModule(XposedBridge.java:437)
at de.robv.android.xposed.XposedBridge.loadModules(XposedBridge.java:386)
at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:120)
at dalvik.system.NativeStart.main(Native Method)
---------- Post added at 05:53 PM ---------- Previous post was at 05:50 PM ----------
Your program log
Stack-Trace:
eu.donkeyguard.server.aj: ISettingsServer is null. IBinder: [NULL]
at eu.donkeyguard.server.h.b(SourceFile:68)
at eu.donkeyguard.gui.activities.MainActivity.onCreate(SourceFile:99)
at android.app.Activity.performCreate(Activity.java:5231)
at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1087)
at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2169)
at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2264)
at android.app.ActivityThread.access$800(ActivityThread.java:144)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1205)
at android.os.Handler.dispatchMessage(Handler.java:102)
at android.os.Looper.loop(Looper.java:136)
at android.app.ActivityThread.main(ActivityThread.java:5139)
at java.lang.reflect.Method.invokeNative(Native Method)
at java.lang.reflect.Method.invoke(Method.java:515)
at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:795)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:611)
at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:132)
at dalvik.system.NativeStart.main(Native Method)
System-Logs:
null
Click to expand...
Click to collapse
Well, I took a look at the wrong repo. Should be fixed now!
Please download the apk again (from op).
For now it works better =)
It would be fine if I can split list by app type (user and system) or apply some filters.
Welcome back CollegeDev
biglsd said:
For now it works better =)
It would be fine if I can split list by app type (user and system) or apply some filters.
Click to expand...
Click to collapse
Good to see that the fix is working.
Well, these are features for management and of course really needed! But first I need some more users
who are willing to test the core functionality of the application on different devices. If that works, I will go on
an provide filters, batch operations, backup functionality, location picking, database encryption and so on. But
for now I would like to focus on a bug free core for most of the android devices and ROMs
Furthermore: If anything went wrong, please post the log from XposedFramework, that should help me to fix the bug
and open an issue at GITHUB.
I900-Nutzer said:
Welcome back CollegeDev
Click to expand...
Click to collapse
Thank you very much! As I said before: I'm (hopefully) back :laugh:
How are you, all fine? Did you test the application?
GITHUB....
Does that mean you will be uploading source???
mnjm9b said:
GITHUB....
Does that mean you will be uploading source???
Click to expand...
Click to collapse
Of course, but I guess the application is not as demanded as I thought before...
CollegeDev said:
Of course, but I guess the application is not as demanded as I thought before...
Click to expand...
Click to collapse
Well, given the modification claims to be a security management system, and has unrestricted access to the device and data through Xposed, perhaps the fact it isn't open source is what's holding it back?
XPrivacy is fully open source, and therefore is able to be scrutinised. You placing an EULA on the program (those are basically unenforceable anyway) might be preventing people from actually deciding if it meets their needs or not?
" You may not decompile, "reverse-engineer", disassemble, or otherwise attempt to derive the source code for the Software Product."
If that's the case, and there's no source, how can anyone be sure it works? How can they trust it over an existing open source tool? Perhaps there is more interest in this, but maybe the general trend of distrusting closed source security tools (RSA, Dual-EC-DRBG) is going to hinder uptake?
Is this a joke thread? Closed source xposed module, and it calls itself a Security Management app.

[MOD][XPOSED] BTscoAudio

BTscoAudio is an android plugin for Locale, Tarker and Llama.
The purpouse is to route the audio to bluetooth sco channel, when an old car handsfree without a2dp is connected.
When the audio focus is requested by a selected app, the audio is routed to sco channel.
When audio focus is abandoned, the sco channel is closed.
The redirection may only ocurs, or works, with apps that request/abandon android audio focus.
This is the way on how BTscoAudio detects that a sound is going to be played.
For example, you may need to enable "Manage audio focus" Radardroid app option for working together with BTscoAudio.
Xposed framework is needed to delay the sound for the time needed to establish the sco connection and for detecting audio focus requests.
repo.xposed.info/module/com.gomez.btscoaudio
gitlab.com/jgora/BTscoAudio
This software is provided "as is", without any kind of warranty.
Use at your own risk.
The MIT License (MIT)
Copyright (c) 2017 jgora
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Very cool
---------- Post added at 04:27 AM ---------- Previous post was at 04:27 AM ----------
Why can't I select Google Play Music, though? Should I convert it to user app?
Yes, system apps are excluded from being selected for redirection

[FREE, OPEN SOURCE] BLEConsole

It's not a phone app, even not an UWP app but still WinRT app, BLEConsole.
Initially it was created (by me) for company where I'm working now, but after short conversation with my manager (he gave me permission), I published it on my personal github account (this is much easier than going through all bureaucratic procedures of a large company ), so enjoy: https://github.com/sensboston/BLEConsole
It's an unique (I believe so; if you'll find something similar please let me know) console app allows you to get a control of BLE devices via stdin/stdout. You may use it in batch/powershell scripts by any manner. BLEConsole extrimily useful for developers, hardware engineers, technicians etc. and so on.
App is free and open source, released under MIT license (I personally hate "GPL hell"!). But don't forget to star it (of course if you like it)
P.S. Binary release is signed by my personal code signing certificate issued by CERTUM (I paid CERTUM $28) but still have an issue with MS "smart filter". If anyone has experience how to deal with Win10 code signing (and CERUM certificates) please contact me.

Best way to provide LGPL and closed source objects to comply with License

As everyone know, it's legal to use LGPL libs in commercial software but it's mandatory to provide your closed source object files somewhere, so people can repack the software with new or modified version of those libs. Think about a commercial android app which uses some LGPL libs. I want to find the best way to provide the object files beside LGPL libs without making my customers concerning about these things.
There's three major questions about it:
How to provide an instruction manual for others to how to repack an APK file with those objects (is there any sample of such an instruction?)
What kind of tools needed for repacking?
Where to provide these materials to comply with license? (ex. In App itself, in a website related to that app or other locations)
Thanks in advance

Categories

Resources