I heard that app developers can potentially access all your photos. Is this right and how can you keep them private?
ummm not that I'm aware of. where did you hear this from? :silly:
I don't know if that is true or not, but I suspected something similar reading the permissions before downloading apps as well. I noted modifying the SD card in many of them, a few included WIPING it. Now if they have that kind of power, I would be hesitant. I suppose Google has something in place that prevents that kind of abuse, but seeing how Quickpic can replace the default Gallery app, I do think it is possible. However, transmitting that data back to them may not be allowed or possible. Until I finish learning the SDK thoroughly, I cannot say yea or nay on it. I would suggest asking google about a specific app and see what they say first, and then consult someone who knows how to read the .apk files to see what they can discover.
Wallace_Brownie said:
I heard that app developers can potentially access all your photos. Is this right and how can you keep them private?
Click to expand...
Click to collapse
If you're that worried, don't store them on your device. If the DroidWall app "really" works, it should block all internet communication on apps that you select.....a wall of fire is the purpose.
Sent from my Amazon Gindle Fireoid
Mephisto_VI said:
I don't know if that is true or not, but I suspected something similar reading the permissions before downloading apps as well. I noted modifying the SD card in many of them, a few included WIPING it. Now if they have that kind of power, I would be hesitant. I suppose Google has something in place that prevents that kind of abuse, but seeing how Quickpic can replace the default Gallery app, I do think it is possible. However, transmitting that data back to them may not be allowed or possible. Until I finish learning the SDK thoroughly, I cannot say yea or nay on it. I would suggest asking google about a specific app and see what they say first, and then consult someone who knows how to read the .apk files to see what they can discover.
Click to expand...
Click to collapse
If I rememeber correctly, the android permission to access the sd card gives full read write privileges to the app, there is no partial access. Most apps need this permission to save data, cache etc to your sd card.
If you have a linux OS running computer you can modify file permissions for write and delete as root only, while allowing all users to read. That way if you want to delete or modify the file, you'll have to use superuser permissions. Of course that requires a rooted phone then....
Sent from my HTC Desire HD using xda app-developers app
Mephisto_VI said:
but seeing how Quickpic can replace the default Gallery app, I do think it is possible. .
Click to expand...
Click to collapse
Use hide it pro from play store. It can hide pictures and videos from any gallery app.
Mephisto_VI said:
I don't know if that is true or not, but I suspected something similar reading the permissions before downloading apps as well. I noted modifying the SD card in many of them, a few included WIPING it. Now if they have that kind of power, I would be hesitant. I suppose Google has something in place that prevents that kind of abuse, but seeing how Quickpic can replace the default Gallery app, I do think it is possible. However, transmitting that data back to them may not be allowed or possible. Until I finish learning the SDK thoroughly, I cannot say yea or nay on it. I would suggest asking google about a specific app and see what they say first, and then consult someone who knows how to read the .apk files to see what they can discover.
Click to expand...
Click to collapse
They said that they can't, and that's why they won't put SD cards in their own line.
Since I first responded, I came across Avast! Anti-virus for Android. It has a built in firewall you can customize per app. I do believe it requires root to utilize it though. Once I nosed around the settings, I was impressed with it. Now to see how well it works before I recommend either way on it. Oh, if you are going to use it, root first then install Avast.
Sent from my (rooted) LG-P870 using xda app-developers app
I know it has been a bit since the last response. I did find a few more programs since then though. Addons Detector examines programs and their permissions and puts several lists together in an easy to read format for you. Its good for when you have forgotten which program had what permissions or didn't catch what they were when installing. It also has an extra option (paid) that I am still evaluating: a live monitor. Notifications of how many addons are added upon installing a new app. Could be beneficial for the security conscious or the, for lack of a better term, paranoid users.
Sent from my LG-P870 using xda premium
Hi - I'm new to Android (and not that well versed with WM5 yet either), but have also been concerned when I saw all these apps that require access to full network, contacts, phone ID and number, etc.
While I understand using the Avast! firewall would prevent apps accessing the internet and sending my data, would those apps then cease to run if they couldn't access what they wanted?
Thanks,
Dylan.
Related
Does anyone know how to stop apps and services from starting up automatically when you boot the phone?
I like to install lots of Apps to try them out, but a lot of these apps start processes with the phone and run in the background. I don't know if they're necessarily using many resources but I don't see why puzzles, games and other apps need to be starting with the phone and running all the time.
I know there's a paid app in the market, but I don't have a credit card and anyway there MUST be an easy way to stop these things from starting with boot, either a file to edit or some commands.
A task-killer isn't what I'm looking for here as I don't think that's a good idea with android, I think it slows the OS and causes instability, and anyway they just come back on next boot. I've searched for this but can't find an answer.
Anyone have any ideas?
I wonder the same.
Nobody is able to give an answer ?
+1 on that. It is quite annoying.
spamianspoon said:
I know there's a paid app in the market, but I don't have a credit card and anyway there MUST be an easy way to stop these things from starting with boot, either a file to edit or some commands.
Click to expand...
Click to collapse
No, there is no "easy" way of doing it because of the way that Android handles these things. Essentially, the applications register a receiver which acts on the android.intent.action.BOOT_COMPLETED broadcast action, rather than being explicitly called by the OS.
The app in the Market, autostarts (see http://elsdoerfer.name/=android-autostarts) presumably either amends the apps permission so that it no longer has the rights to receive this message (no idea if this is actually possible), or it is autokilling the task as it starts.
Of course, without a credit card, you are SOL as there do not appear to be any free alternatives.
Regards,
Dave
Nice
The android next step is to start all app found in the market and after boot to shut down manually witch is not installed.
I have noticed these chinese apps some how self installing on my S2.
Any idea how to get to the source of these unauthorized installs? (Lookout & AVG & NetQin don't detect them as malicious or find any reason for how they are getting on there).
Currently using KH3 + CFRoot.
Why do people give so little information when they post?
What Chinese apps? (Please provide a screen shot if the app name is in Chinese) .
This sounds really really bad.
Has this happened to any one else?
It should not be possible for this to happen.
Does your phone have any connection with China or have you installed any Chinese software?
If this is happening then you must have done something yourself to start the process. Nothing can install itself without your consent, unless there's malicious software that's bypassing the system and installing for you, but you would have had to install that first.
So, as above, a lot more information is needed. Personally, I'd just do a complete wipe and hard reset and never install anything from untrusted sources again, including warez, 3rd party app stores and the Chinese Market, which is known to have had dodgy software before now.
My friend got an S2 from China and it was preloaded with all those Chinese apps. Examples include QQ Security Suite and some other apps. I used Titanium Backup to uninstall but after each restart, the app re-appears!
I was surprised that Titanium couldn't uninstall. It says it uninstalled successfully but it just re-appears. The only thing I could do is to do a re-flash to a Hong Kong firmware without all those pre-loaded Chinese apps.
But before you wipe everything, please help us try and find out how it happened?
Again has this happened to any one else? Because I want to know if this could happen to my phone!
Mine also did this on stock rom i would uninstall samsung apps reboot and it would reappear on my menu. Is it possible the rom comes with an auto install script for the preloaded apps?
Sent from my GT-I9100 using XDA App
otester said:
I have noticed these chinese apps some how self installing on my S2.
Any idea how to get to the source of these unauthorized installs? (Lookout & AVG & NetQin don't detect them as malicious or find any reason for how they are getting on there).
Currently using KH3 + CFRoot.
Click to expand...
Click to collapse
If you have CF-Root, you have super user installed. Review your permissions. You can also install LBE privacy guard and set permissions for all apps as well, including many system apps (you'll need to 'untrust' them first).
Sent from my GT-I9100 using XDA App
Sorry for the little information guys, was 5am and very tired
I deleted the second incarnation of the app as soon as I saw it (worried about personal details being taken etc.) however it if it reappears again then I will screenshot it.
Virus scanners don't detect them as malicious, when the program opened (after stealth install) I went through it, albeit in Chinese it looked like a legit program and the menu worked etc.
I have market 3.1.3 installed (got the apk off the internet) and a few apps that got removed from the market place (torrent clients and certain games I couldn't find etc.) so it could well have been put in them.
I'm thinking about a hard reset, not using titan backup to avoid it coming back and a re-flash.
Also my phone has no connection with China (purchased in the UK), this has only happened recently.
Is there any more info needed before reset etc.?
Looks like the suspect apps removed from the market may have been the cause.
Does anybody know if running as root alows all download apps to run with root permissions?
LouisJB said:
Looks like the suspect apps removed from the market may have been the cause.
Does anybody know if running as root alows all download apps to run with root permissions?
Click to expand...
Click to collapse
Issue is the damage seems to have been done, looks like I have no choice but to reflash etc. Need a virus scanner that has root so it can do a deeper scan.
Superuser is a lot like UAC on Windows Vista/7, it will popup and ask you to allow/deny.
Also is there any way to wipe the device while re flashing to ensure this gets removed?
I found a folder on my Internal Storage "QinqiQuan" (Google Image search pinpoints this as one of the apps) which translates in Chinese to English as "Infringement", however the app itself appears to be a legitimate Chinese social app so I'm not sure of my original concern regarding "Infringement" being copyright related etc.
Another few suspicious folders were "the9GameCenter" & "waze".
In future I'll be sticking the Market and official sites, even if that means doing without certain apps that aren't available on my handset/region
Isnt waze a community based sat nav app?
poults said:
Isnt waze a community based sat nav app?
Click to expand...
Click to collapse
The apps themselves appear legitimate, but I didn't authorize the installs which is what worries me.
I wiped internal storage, wiped data and then re-flashed + CFRooted.
Hopefully what ever it was, won't come back
And how about the security in your computer? As we know, you can install an app in your phone via your market account using your computer. Perhaps someone is playing around with your market account. If this is the case, changing your password would be a good idea.
Sent from my GT-I9100 using XDA App
angelomaldito said:
And how about the security in your computer? As we know, you can install an app in your phone via your market account using your computer. Perhaps someone is playing around with your market account. If this is the case, changing your password would be a good idea.
Sent from my GT-I9100 using XDA App
Click to expand...
Click to collapse
Yeah I have changed my password and turned on all the Google security settings, albeit a bit of pain, does give peace of mind
Sent from my GT-I9100 using xda premium
Hi Guys,
I have a question/idea. Maybe its already done and you give me a hint on how to install it.
There are a bunch of apps that I really like but I dont like their security requirements like accessing Contacts, System settings, account data.
I agree that some may need it for their functionality, but some apps abuse it or have unnecessary rights.
I wonder if someone could write an app that intercepts those requests and returns dummy or empty data. For example, the app wants access to my contacts, it gets a dummy contact or an empty list returned but not my real list etc. Making the app think its is getting live data. The new app should allow to choose which app will get real and which get blank data or dummy data for sensitive things like accounts, contacts, system stuff.
That way the app would still work but my data is safe.
I guess it would almost have to work like a Rootkit hooking into system functions and figuring out the calling app.
Does this exist? Would this be something for CM7?
I read a lot of ppls reviews out there saying I am not installing this app until you remove such and such security right. This should be the best solution.
Let me know.
spacev said:
Hi Guys,
I have a question/idea. Maybe its already done and you give me a hint on how to install it.
There are a bunch of apps that I really like but I dont like their security requirements like accessing Contacts, System settings, account data.
I agree that some may need it for their functionality but some apps abuse the it or have unnecessary rights.
I wonder if someone could write an app that intercepts those requests and returns dummy or empty data. For example the app wants access to my contacts, or it gets a dummy contact or am empty list etc. Making the app think its is getting live data. The app should allow to set which app will get real and which get blank data for sensitive thing like accounts, contacts, system stuff.
That way the app would still work but my data is safe.
I guess it would almost have to work like a Rootkit hooking into system functions and figuring out the calling app.
Does this exist? Would this be something for CM7?
I read a lot of ppls reviews out there saying I am not installing this app until you remove such and such security right. This should be the best solution.
Let me know.
Click to expand...
Click to collapse
This should be in Q&A.. And there is an app for this.. LBE or LBE Lite.. Also, yes it is a function of CM7. While I'm answering though, I will say that I block almost all permissions that are unnecessary and I've never had a problem with any of the 125 apps I use.
LBE vs CM7
Well, as outlined above, CM7 and LBE are the two best options. I figured I might as well outline the pros and cons of each.
CM7 Application Permission Removal:
Pros - Built-in, no popups, technically faster.
Cons - Not all-in-one interface per say, more annoying to set a large number of apps permissions.
LBE:
Pros - Available on more phones, popups allow you to decide on a situation by situation basis whether to grant permissions, all in one interface, nice looking UI.
Cons - Not built in, popups CAN be annoying, different color scheme from stock android.
P.S. I'm not sure if this happens for everyone, but it probably does just because of security system conflicts in CM7 and LBE, but LBE doesn't seem to be able to start and run on CM7, so you can't have the best of both worlds
thanks guys for the quick responses!
I am trying LBE and so far like what I am seeing
THANKS!
Is anybody else having problems with the functionality of sideloaded apps on a non-rooted NT?
I was able to sideload the HomeWork app from the google marketplace (install to phone, titanium backup, uncompress the .apk, push to NT and install). It is a wonderful and simple app my son uses to keep track of his homework (because he won't use a paper planner).
On the surface the app seems to work, but anytime I try to edit the school schedule or add homework assignments the tablet freezes for a few seconds. Once control returns, the app functions normally without the changes having been committed.
This almost feels like a permissions issue where the app doesn't have permissions to save the changes other than the fact that I can import the save file I brought over from his Cruz Reader without problems. This leads me to believe the problem is something else, but I'm not sure what.
Is anybody else encountering similar issues with sideloaded apps? Is there a fix or something I should try? If this has been addressed already, I haven't found it.
AwfulFaded said:
Is anybody else having problems with the functionality of sideloaded apps on a non-rooted NT?
I was able to sideload the HomeWork app from the google marketplace (install to phone, titanium backup, uncompress the .apk, push to NT and install). It is a wonderful and simple app my son uses to keep track of his homework (because he won't use a paper planner).
On the surface the app seems to work, but anytime I try to edit the school schedule or add homework assignments the tablet freezes for a few seconds. Once control returns, the app functions normally without the changes having been committed.
This almost feels like a permissions issue where the app doesn't have permissions to save the changes other than the fact that I can import the save file I brought over from his Cruz Reader without problems. This leads me to believe the problem is something else, but I'm not sure what.
Is anybody else encountering similar issues with sideloaded apps? Is there a fix or something I should try? If this has been addressed already, I haven't found it.
Click to expand...
Click to collapse
If the app needs root access then it won't work. Apps that require root access can sometimes install but will not operate properly. Does the info on the app on the Market mention this? Changing permissions , I seem to recall, is an function requiring superuser. Could be wrong on that though.
It shouldn't require root. I was hoping to avoid rooting the NT (it's primarily for a 12 year old) , but I might need to.
Thanks for the suggestion.
Sent from my A500 using xda premium
AwfulFaded said:
It shouldn't require root. I was hoping to avoid rooting the NT (it's primarily for a 12 year old) , but I might need to.
Thanks for the suggestion.
Sent from my A500 using xda premium
Click to expand...
Click to collapse
My pleasure. You might look around for an app that performs in a similar manner. Most tasks have several options when it comes to apps.
I'm always very careful about what apps I install and their permissions, but I got this doubt for a long time. I already know what some Android permissions do and which of these are potentially dangerous.
Now let's assume an app asks for permissions to read my contacts, access the internet, read the identity of the phone, read the user position, etc.
When I use an app (mostly games) I always turn off wifi, bluetooth, gps and sometimes even the sim via airplane-mode. Now that app can easily collect all the data it wants but would never be able to send them. Am I correct?
My doubt is, when apps can send data? Is it only when the app is effectively running (also in background) or can do the same while, for example, updating the app via Google Play?
If it doesn't, I would probably download most of the apps I discarded because of their stupid permissions...
App permissions are always headache!
apps will always ask for various stupid permissions.even though they not require such permissions.
I think,,
how the apps collect and send data is upto the developer!!
Even though you put ur phone in AirPlane mode.the apps may or may not collect the contacts details frm your phone & may update to their server when data connection is detected..
Some applications will run in background as a seevice, even though they are not opened or running in foreground.
when u install an app you must be aware of the permissions granted.dont install apps that requires suspicious permissions.
if u are rooted there are some apps which can block permissions requisted by apps.
good luck....
motoshan said:
if u are rooted there are some apps which can block permissions requisted by apps.
Click to expand...
Click to collapse
I already heard of such apps but never found one. Could you please tell me some of them?
Thanks for the answer, anyway it really sounds like "I don't know and we'll never know"... it's sad
Is there anybody really sure about what the apps can do and give a nice rest to my neverending question?
Yes.. I already mentioned.
the permission requirements by the app can be explained only by the developer of that particular app.
I had developed an app myself 9 months before.which requires gps location along with hardware control permission etc...
as a developer of this app I can steadly says that my app will update ur device location soon after u switch on ur data conn.
you can find some apps and their reviews here... http://www.howtogeek.com/115888/
Oh, so my hopes are totally crushed.
Looks like they are more problematic than I imagined. I'll keep skipping 90% of the apps on the market.
Thanks a lot for that link!
Edit: I'd add, Jesus Christ, how funny to see that on Android spyware is legalised:
"Angry Birds Space – along with many other apps – has permission to view the device’s serial number and monitor the phone numbers you call."