[Q] How to stop Android data usage leaks? - Android Q&A, Help & Troubleshooting

Hi!
I have a rooted Xperia M dual (C2005) with factory firmare (4.2.2). Installed Afwall+ and blocked all network activity except Firefox and K9mail.
But there is still network usage (Android OS).
There is a blog post about this, but I can't link it. Google on "How to debug/examine data usage leaks in Android using iptables"
Does somebody have an idea how can I block these types of data transfer?
Thank you,
Tim

timgrabowsky said:
Hi!
I have a rooted Xperia M dual (C2005) with factory firmare (4.2.2). Installed Afwall+ and blocked all network activity except Firefox and K9mail.
But there is still network usage (Android OS).
Does somebody have an idea how can I block these types of data transfer?
Thank you,
Tim
Click to expand...
Click to collapse
Last time this kind of issue popped up from a few days ago, it was because of tethering. Do you tether? And sometimes the Android OS reads traffic from other apps and is included there. Like for instance, you use K-9. If you use it to access your Google account for mail, that could explain the data traffic there. I'm not an expert in these matters though, so might be a better answer out there.

es0tericcha0s said:
Last time this kind of issue popped up from a few days ago, it was because of tethering. Do you tether? And sometimes the Android OS reads traffic from other apps and is included there. Like for instance, you use K-9. If you use it to access your Google account for mail, that could explain the data traffic there. I'm not an expert in these matters though, so might be a better answer out there.
Click to expand...
Click to collapse
Hi, es0tericcha0s!
Thank you for the answer. No teething, no Google mail, absolutely no Google account registered on the phone.
Why could a @gmail e-mail account in a 3rd parity e-mail client make traffic on the OS level?
Cheers,
Tim

timgrabowsky said:
Hi, es0tericcha0s!
Thank you for the answer. No teething, no Google mail, absolutely no Google account registered on the phone.
Why could a @gmail e-mail account in a 3rd parity e-mail client make traffic on the OS level?
Cheers,
Tim
Click to expand...
Click to collapse
Weird. Can't even imagine not having a Google account on my devices. lol But most of the IP addresses were Google's so, was assuming that the OS would detect that and thought it might be linked to a Google account and you mentioned having 2 apps and one of them was an email. Stretching a bit for the answer. lol But android is funny and doesn't necessarily work the same across different updates, carriers, and manufacturers, so this kind of stuff can be tricky.

probably google giving the NSA access to your phone

Related

I believe my 2.1 Leaked Rom is sending my GMail Password to China

I jumped on the bandwagon and installed the 2.1 Leaked rom for my Droid Eris as soon as possible.
Last week my gmail accounts password was stolen. Also, my gmail account was sending out spam.
I ran a ESET32 Anti-virus security scan and found no threats. Afterwards I ran Malwarebytes and also found the same results, nothing. I changed my gmail password and all other accounts associated with my gmail.
I am a competent computer user and keep my Windows 7 64bit install clean, tidy, and updated. I use Google Chrome to browse the web carefully and I only visit websites I trust. Although it is very possible, I find it highly unlikely that my system was infiltrated.
I assumed I screwed up somewhere and my desktop was hacked.
Heres where the interesting part starts, Although I changed my password around a week ago, apon logging into Gmail today I was notified about my account being accessed on June 3 (3 days ago) from 6 different Chinese Ip's. I changed my password and security question today and closed all of the email sessions located in China.
My system shows 0 threats after running ESET ENOD32 Anti-Virus and Malwarebytes.
I don't have any other device that stores my Email password besides my Droid Eris.
I could be stepping out onto a limb here, but I still have to enter my Gmail password everytime upon opening the Android Market. I know this has been listed as a bug before. Also, I can't enter my password to enter the Market unless my 3G AND GPS is turned on. It does not work if the GPS is off.
Could it be possible that everytime I enter my GMAIL password into the Market app, it sends a copy out to China?
Why does my GPS have to be turned on to accept my password?
Is the "leaker" from china who released the 2.1 ROM to XDA a trusted source?
Help me out guys!
update to the latest leak and you wont be having these problems
rohanic said:
Is the "leaker" from china who released the 2.1 ROM to XDA a trusted source?
Click to expand...
Click to collapse
The leak, although it appeared to come from riverrunner, actually was leaked by one of the devs that has put in a lot of work in making the eris awesome.
Like Royel said, update to the latest version of the leak and you shouldn't have any of the password login problems.
Not sure about the gmail problems, but I've been running all the leaked versions and had no problems so far.
This post prompted me to check on my account also
Confirmed, IP in China has been logging into my gmail account also.
LexusBrian400 said:
This post prompted me to check on my account also
Confirmed, IP in China has been logging into my gmail account also.
Click to expand...
Click to collapse
Where do you find out how to check.
Log in to Gmail, scroll all the way to the bottom. It will show which IP you last logged in from. Next to it is a link, I think it says "details". A window will pop up showing you all IP addresses that your account has been logged in from.
korben dallas said:
Where do you find out how to check.
Click to expand...
Click to collapse
I am a new user, so I can't post links to the how to. Basically log in to gmail, click on settings, scroll down to the bottom where it shows how much storage you are using, just below that in tiny print is "last account activity", click on details.
I just checked the details on my account and I am getting no logins from China, or anywhere that isn't me.
Just a thought, but have you checked to see if it's the same IP address each time? If so, you may be getting a weird IP address from VZW that google is geo-locating to be from China even if it isn't.
Unless we start getting a lot more people confirming this, I would say it is probably not an issue with the leaked rom but more likely something else (virus on your computer, an app that logs into google accounts for you).
wow, weird. i've often checked my "last account activity."
i'll randomly get some logins (all mobile logins) from another state (Michigan... right next door to me). i imagine it's just due to the IP that i'm getting on my phone...
now, i've NEVER seen anything from China before... and i've run just about all the leaked ROMs out there
strange indeed... i'm assuming all the "china" IP's were mobile logins?
I just checked mine and I had multiple logins from two different IPs. The ones from a desktop were my IP (in Oklahoma) and all of the ones from a mobile device were from a Florida IP. I logged off all of the other accounts and changed the password to a long string of letters and numbers, then logged in on both my desktop and my phone. After that the same two IPs were logged in, so apparently my verizon IP is somewhere in Florida.
I'm not sure why they would use an IP in china, but it could be a similar thing happening to you guys.
While blocks of IP addresses are allocated regionally (hence the different IP registries such as ARIN, RIPE, and APNIC, this happens at very small prefixes (huge blocks of IP addresses).
Geo-location of an IP address is imprecise for a wide variety of reasons. (Despite what you see on popular "crimefighter" TV shows). An AS (BGP Autonomous System) can emit packets from multiple points within their network, depending on instantaneous routing conditions; this is especially true for large national carriers such as Comcast, Verizon, Sprint, AT&T, etc.
One thing that no-one mentioned here is that every one of the Leak ROMs were cryptographically signed by somebody at HTC. If there is malicious code in the ROM, it came from HTC. Seems kind of unlikely. Feasible, but still seems unlikely.
bftb0
Leak isn't sending out passwords. In fact, if i remember right your pass isn't stored on the phone, a key is.
Virus scan won't catch everything, especially new things.
1) Do any OS upgrade on your PCs, I recommend for non techies http://tinyurl.com/m7r5h or for techies http://tinyurl.com/mkly.
2) change all your passwords
3) dont cross use passwords
4) choose complex passwords >10char in length.
jcase said:
Leak isn't sending out passwords. In fact, if i remember right your pass isn't stored on the phone, a key is.
Virus scan won't catch everything, especially new things.
1) Do any OS upgrade on your PCs, I recommend for non techies http://tinyurl.com/m7r5h or for techies http://tinyurl.com/mkly.
2) change all your passwords
3) dont cross use passwords
4) choose complex passwords >10char in length.
Click to expand...
Click to collapse
2nd to that, also Another great one for techie http://www.archlinux.org only if you like getting ur hand dirty and learn more about how Linux work from ground up, less hassle than doing Linux from Scratch lol, although it's fun, very rewarding experience and it'll come in handy when you want to do ROM cooking since it's based on Linux.

[Q] Help with Exchange email

Hey guys-
I had been using TouchDown Exchange to access my work email. When I first got android I asked my IT department if they could set it up for me but they replied that they "don't support Android, and because there are so many different android phones, they probably wouldn't ever support". Anyways, I found I could use the web-exchange server (http://xxx.xxxxxxxx.com/exchange/) as my domain on the android app and it would end up sync'ing my email to my phone.
I guess they eventually found out I was doing this somehow and they blocked it. They do support the iPhone, though, and through a coworker I was able to get the server and domain that they use.
Is there anyway I can trick the server into thinking I'm using an iPhone so it will allow me to connect and sync? I tried using the "ActiveSync Device String" and setting it to "iPhone" before connecting to the server, but that didn't work. I don't know much about exchange servers if you couldn't tell, but is there a way they can authorize only certain users to connect? Could I potentially borrow my girlfriends iphone, have them set it up on her device, and then once I get the login permissions, switch the info over to my fascinate?
Sorry to any IT administrators out there, I bet this post will annoy you haha. I just want to have email on my phone because I hate walking into work in the morning and getting blindsided by an email that was sent to me at 2am.
Thanks in advance for your help guys.
Our IT department also has a "no android" policy but I figured out that if I left the Domain blank and used the Webmail url as the Exchange server address everything would sync perfectly. I started out using Touchdown but dropped it for the stock email client.
They specifically denied your phone from syncing via ActiveSync? Even with Touchdown, which more fully supports the ActiveSync protocol than even the iPhone? Sounds like your IT guys are morons. I can fully understand not wanting to support Android phones because of all the variances. I know, because I work for an ASP hosting company that does just that. But really, if they wont support Touchdown, they're just shooting themselves in the foot, because that app will work the sane no matter what Android phone it's installed on, meaning you will have a standardized mail platform for Android that supports any and all necessary security features, including full encryption of the local mail database and any data it stores on the SD card.
I don't know if you'll get anywhere with it, but I would recommend showing the the feature list for Touchdown, including the security features, and ask them to support that one app. If you make the case that they only need to support one app for any Android phone, they should be willing to work with you on that.
Besides, every serious corporate user should be using Touchdown anyway. The stock mail client, no matter what Android phone you have, is lacking some of the most basic features, is buggy,and is essentially useless. And if days encryption is required, you're out of luck with the stock clients. Exchange syncing is really an afterthought by Google, and until they make enterprise features and data security a primary focus, things wont get any better.
Sent from XDA Premium on my Super Clean Fascinate
Oh, and btw, I'm not an expert on the matter, but I know that mobile device syncing can be disabled on a per-user basis. What I'm not sure about is if it can actually allow only certain devices to connect or not.
Sent from XDA Premium on my Super Clean Fascinate

[Q] How Do I Sign In To Themer?

Hey everyone, how do I sign into Themer? On my Galaxy S4 it gives me the option so sign in with Google or Facebook. I have neither. IF I DID HAVE TO CHOOSE BETWEEN THE TWO HOWEVER I would get a Google account just for Themer... but I don't know if that is possible. When I select to sign into Themer with Google, it tells me to choose a Google account when there is none on the device. What do? (derp) Thanks in advance.
Abethene said:
Hey everyone, how do I sign into Themer? On my Galaxy S4 it gives me the option so sign in with Google or Facebook. I have neither. IF I DID HAVE TO CHOOSE BETWEEN THE TWO HOWEVER I would get a Google account just for Themer... but I don't know if that is possible. When I select to sign into Themer with Google, it tells me to choose a Google account when there is none on the device. What do? (derp) Thanks in advance.
Click to expand...
Click to collapse
Hi there, we'd advise creating a simple Google account. We use this feature generally for security purposes as well as to display unread email count notifications (as the general population now use Gmail as their preferred email account).
Not everyone wants to participate in social media. I find it disappointing that Themer would require I do so, and is a deal-breaker for me.
Without a google account an android device has only half of its functions. I uderstand google+ but a normal google account?
Gesendet von meinem GT-I9505 mit Tapatalk
Abethene said:
Hey everyone, how do I sign into Themer? On my Galaxy S4 it gives me the option so sign in with Google or Facebook. I have neither. IF I DID HAVE TO CHOOSE BETWEEN THE TWO HOWEVER I would get a Google account just for Themer... but I don't know if that is possible. When I select to sign into Themer with Google, it tells me to choose a Google account when there is none on the device. What do? (derp) Thanks in advance.
Click to expand...
Click to collapse
Just create a easy google acct.
Lurkerdownbelow said:
Not everyone wants to participate in social media. I find it disappointing that Themer would require I do so, and is a deal-breaker for me.
Click to expand...
Click to collapse
We understand that it's not for everyone, but it's the best way for us help find new users as well as to keep Themer free. We will soon add options to remove this service.
Lurkerdownbelow said:
Not everyone wants to participate in social media. I find it disappointing that Themer would require I do so, and is a deal-breaker for me.
Click to expand...
Click to collapse
If you don't have a Google account you may as well not be using android. "Google account" does not equal "social media". Without a Google account you can't even use the Play Store.
Sent from my SAMSUNG-SGH-I747 using XDA Premium 4 mobile app
BakaNeko59 said:
If you don't have a Google account you may as well not be using android. "Google account" does not equal "social media". Without a Google account you can't even use the Play Store.
Sent from my SAMSUNG-SGH-I747 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
You're correct. I realized that I had been confusing google+ with my normal google account. My bad here. I had assumed that since it was requesting me to sign in with my google account or facebook that it was social media related. I, in fact, do have a google account and can access the play store - which is how downloaded Themer to try in the first place.
I'd now like to know why it needs me to sign in with either account. How does that help Themer find new users and keep it free? I'm not being an ass here, just trying to learn new things.
Lurkerdownbelow said:
You're correct. I realized that I had been confusing google+ with my normal google account. My bad here. I had assumed that since it was requesting me to sign in with my google account or facebook that it was social media related. I, in fact, do have a google account and can access the play store - which is how downloaded Themer to try in the first place.
I'd now like to know why it needs me to sign in with either account. How does that help Themer find new users and keep it free? I'm not being an ass here, just trying to learn new things.
Click to expand...
Click to collapse
To be honest it's mainly for security reasons on our side. If someone breaches our servers, we can link it to a verified account and take action where necessary. In terms of social, when you log in you might have selected the box to receive emails from Themer about new updates and very important events. In this way, people who have uninstalled Themer because of some reason, might find that it now includes something that they've always wanted. Therefore it helps introduce 'new' users and in turn the more users we have the greater chance we have to generate resources (through the sponsored apps in the Smart Categories, which can also be turned off if the user desires).
ThemerSupport said:
To be honest it's mainly for security reasons on our side. If someone breaches our servers, we can link it to a verified account and take action where necessary. In terms of social, when you log in you might have selected the box to receive emails from Themer about new updates and very important events. In this way, people who have uninstalled Themer because of some reason, might find that it now includes something that they've always wanted. Therefore it helps introduce 'new' users and in turn the more users we have the greater chance we have to generate resources (through the sponsored apps in the Smart Categories, which can also be turned off if the user desires).
Click to expand...
Click to collapse
Hey thanks so much for taking the time to answer this in more detail! It's much appreciated. I'll give it a thorough try now.
ThemerSupport said:
To be honest it's mainly for security reasons on our side. If someone breaches our servers, we can link it to a verified account and take action where necessary. In terms of social, when you log in you might have selected the box to receive emails from Themer about new updates and very important events. In this way, people who have uninstalled Themer because of some reason, might find that it now includes something that they've always wanted. Therefore it helps introduce 'new' users and in turn the more users we have the greater chance we have to generate resources (through the sponsored apps in the Smart Categories, which can also be turned off if the user desires).
Click to expand...
Click to collapse
Thanks.
ThemerSupport said:
Hi there, we'd advise creating a simple Google account. We use this feature generally for security purposes as well as to display unread email count notifications (as the general population now use Gmail as their preferred email account).
Click to expand...
Click to collapse
Thanks a lot for your help. I was also facing the same problem.
Google account is a deal breaker
Hi,
For me this is a deal breaker.
I can follow your reasoning. But how can you give the same app the rights to read (display) all your text-messages, contacts & location together with a personalized login (be it google or facebook).
I know that American mentality is different in this case than German mentality: but I think it is insane to give access to all of these information at once...
I'm not the only paranoid here (if you think I am) but I know a lot of others (Germans) who think the same.
Sorry of I'm too frank: if you want to reach more Germans with your app, then you need to rethink this log-in dialogue.
btw: yes, you can use Android (CyanogenMod) without any kind of account. Works great
Yours, toggle
toggler said:
Hi,
For me this is a deal breaker.
I can follow your reasoning. But how can you give the same app the rights to read (display) all your text-messages, contacts & location together with a personalized login (be it google or facebook).
I know that American mentality is different in this case than German mentality: but I think it is insane to give access to all of these information at once...
I'm not the only paranoid here (if you think I am) but I know a lot of others (Germans) who think the same.
Sorry of I'm too frank: if you want to reach more Germans with your app, then you need to rethink this log-in dialogue.
btw: yes, you can use Android (CyanogenMod) without any kind of account. Works great
Yours, toggle
Click to expand...
Click to collapse
Hi Toggler,
We understand your concern, as we are simply a launcher. However, that isn't really the case. As all of our widgets are built in, we require these permissions to allow the user to view his/her unread SMS/Email/Missed Call counts on the homescreen. We don't store any of the information, we simply display it. We've now actually had to remove the Dialer Widget to reduce the number of permissions required, but we still need a few to improve the user's experience. Once Facebook introduces anonymous login, we'll implement that straight away, however right now we need it for security reasons on our end (in then breaching theme servers).
Hope this helps!
- Marco

[Q] Privacy question

Was going to download and try this app from the Google store but have issues with privacy concerns:
This app has access to these permissions:
Your accounts
read Google service configuration
find accounts on the device
use accounts on the device
Your location
approximate location (network-based)
precise location (GPS and network-based)
Your messages
read your text messages (SMS or MMS)
receive text messages (SMS)
access mail information
Network communication
full network access
view network connections
view Wi-Fi connections
Your personal information
read calendar events plus confidential information
Phone calls
directly call phone numbers
read phone status and identity
Storage
modify or delete the contents of your USB storage
Your applications information
retrieve running apps
Your social information
read your contacts
read call log
System tools
read Home settings and shortcuts
write Home settings and shortcuts
test access to protected storage
Affects battery
control vibration
Status bar
expand/collapse status bar
Wallpaper
set wallpaper
adjust your wallpaper size
Click to expand...
Click to collapse
Why does this app need to access so much of my personal information?
Yearoftherat said:
Was going to download and try this app from the Google store but have issues with privacy concerns:
Why does this app need to access so much of my personal information?
Click to expand...
Click to collapse
Hi,
As you know, Themer helps increase the user experience by providing valuable information straight onto your homescreen.
This includes:
1. Displaying how many unread emails/SMS/missed calls you have. (Your messages
read your text messages (SMS or MMS)
receive text messages (SMS)
access mail information))
2. Displaying your map coordinates on a map image. (Your location
approximate location (network-based)
precise location (GPS and network-based))
3. A built-in dialer app that can display your recent contact as well as allow you to call a number directly from your homescreen. (Phone calls
directly call phone numbers
read phone status and identity) (Your social information
read your contacts
read call log)
4. Display agenda information. (Your personal information
read calendar events plus confidential information)
As you can see, it's all for display purposes. If you look at other widgets on the Play Store that perform the same activities, they will also require these permissions. It just so happens that Themer has all of these features built into one app. Hope this helps clarify the matter.
Thanks for the clarification. Looking forward to trying out the app!
I have the same concerns, beginning with the need to login before using any themes. (The explanation given in the faq seems too lame for me). Looks like a terrific app but possibly not for those who worry about privacy. I'm personally too scared to try it.
One option to explore is using this app with xprivacy installed which allows one to restrict unneeded permissions. Maybe a firewall might help?
Anderson2 said:
I have the same concerns, beginning with the need to login before using any themes. (The explanation given in the faq seems too lame for me). Looks like a terrific app but possibly not for those who worry about privacy. I'm personally too scared to try it.
One option to explore is using this app with xprivacy installed which allows one to restrict unneeded permissions. Maybe a firewall might help?
Click to expand...
Click to collapse
Hi Anderson2,
That FAQ actually sums it up quite well. The login feature creates a security barrier for us, which even though is not the most advanced way of preventing intrusions into our theming servers, it does a good job in finding people who are trying to tamper with our systems. That and of course sending users email updates of new features if they request it.
When exactly do you need login? Just to download themes? After the download can one log out? I don't like the idea that you have access to my emails, texts, and any files your widgets access. That is what concerns me.
I don't know enough about themer because I'm afraid to use it, but I believe your zooper widget doesn't require login. (Does it?) Can you explain how they differ in the need for protection?
I have to say that I share those concerns. Why do you force users to login with their Google or Facebook accounts? I do not understand why this should be a better securitry barrier than the login data from mycolorscreen.com? I would not even give away my login data to someone I know, so why should I give away this data to someone I do not know at all???
Well said.
+1
shibadoo said:
I have to say that I share those concerns. Why do you force users to login with their Google or Facebook accounts? I do not understand why this should be a better securitry barrier than the login data from mycolorscreen.com? I would not even give away my login data to someone I know, so why should I give away this data to someone I do not know at all???
Click to expand...
Click to collapse
Yet you log in to this forum and use it.
The explanations have been given. It's to ensure you are who you say you are when you access their servers to download the themes.
As for all the other access, Themer provides a lot of different information as explained (you DID read what he posted, correct?) GPS position, weather, etc. All of this is based on location, etc, as well as if you want unread email counts, etc. It's all there in Themer given you everything all rolled into one app, rather than having to download each piece separately. If you don't like it, don't use it. Thousands upon thousands of users are using it without any issues. I definitely like to protect my privacy, but this app is the least of your worries about privacy.
There are many other problems that could result if they didn't want you to verify who you say you are. Do you want someone to hack their servers and then you download a hacked theme that could result in even more privacy issues for you?
In the end, if you don't want to use it, don't. Nobody is forcing you to use it and they have every right to protect their investments as well. There are plenty of other apps out there you can use that can provide the same type of experience. Usually, the themes are not housed in a server so you can download them from elsewhere, but unless you're getting them from Google Play, then who is to say how safe those are? Many 3rd-party app stores are NOT the safest as they do not follow Google's security policy. At least with Themer, it's in the Google Play market and has had to go through Google's scrutiny.
A few weeks ago, the app was erroneously flagged as something that could steal your information. Google came back later and stated it was an error on their part and verified that the app is safe and it will not steal your information.
I've used it for months and nothing bad has happened to me.
There are many other ways for hackers to get your PI and this is the least of your worries.
vulcanvillalta said:
As an American, and therefore afraid of everything, I personally vote to not give out so much information. But on the other hand, IF someone wanted to get all of your information, they could probably do it without your consent. I would probably stay away from it, though. Just to "try" to be safe.
Click to expand...
Click to collapse
Once Facebook introduces its anonymous login feature, our developers will implement the feature into Themer
iBolski said:
Yet you log in to this forum and use it.
Click to expand...
Click to collapse
Yes, I do use this forum, but of course I do not log in with my Google account. There would be no reason to do so - same goes for Themer. I would have no problem if Themer would ask for my login data from mycolorscreen.
iBolski said:
The explanations have been given. It's to ensure you are who you say you are when you access their servers to download the themes.
Click to expand...
Click to collapse
You think you know who I am because I enter some data that nobody ever controls? I could simply enter some Google account data I created only for Themer. But honestly, this is too much effort for me only the check if I like an app.
iBolski said:
As for all the other access, Themer provides a lot of different information as explained (you DID read what he posted, correct?) GPS position, weather, etc. All of this is based on location, etc, as well as if you want unread email counts, etc. It's all there in Themer given you everything all rolled into one app, rather than having to download each piece separately. If you don't like it, don't use it. Thousands upon thousands of users are using it without any issues. I definitely like to protect my privacy, but this app is the least of your worries about privacy.
Click to expand...
Click to collapse
What exactly has GPS and weather to do with my Google Account data? I do not share GPS data with Google, so I would not with Themer as well. And for a weather forecast I would simply type in 5 numbers - my zip code. This is exactly what I do right now.
iBolski said:
There are many other problems that could result if they didn't want you to verify who you say you are. Do you want someone to hack their servers and then you download a hacked theme that could result in even more privacy issues for you?
Click to expand...
Click to collapse
And because the people at Themer have may account data, nobody can hack their servers? So the solution to all hacked servers worldwide is so simple? Just giving them Google account data?
iBolski said:
In the end, if you don't want to use it, don't. Nobody is forcing you to use it and they have every right to protect their investments as well. There are plenty of other apps out there you can use that can provide the same type of experience. Usually, the themes are not housed in a server so you can download them from elsewhere, but unless you're getting them from Google Play, then who is to say how safe those are? Many 3rd-party app stores are NOT the safest as they do not follow Google's security policy. At least with Themer, it's in the Google Play market and has had to go through Google's scrutiny.
Click to expand...
Click to collapse
Yes, I do not use it. This is the consequence.
iBolski said:
There are many other ways for hackers to get your PI and this is the least of your worries.
Click to expand...
Click to collapse
So what should be my worries if it is not giving away voluntarily my Google account data to someone I do not know???
And you forgot something: I know at least 5 people that use their Android phones without a Google account, and they also do not use Facebook. Believe it or not: these people do really exist, and they even survive without a Google and a Facebook account.
So for me there is no credible information why the people at themer need my Google account data, and why this should protect them from being hacked. Or why my Google Account data should be safer than my mycolorscreen account data. This is why I will not use themer and would not recommend it to others.
shibadoo said:
Yes, I do use this forum, but of course I do not log in with my Google account. There would be no reason to do so - same goes for Themer. I would have no problem if Themer would ask for my login data from mycolorscreen.
You think you know who I am because I enter some data that nobody ever controls? I could simply enter some Google account data I created only for Themer. But honestly, this is too much effort for me only the check if I like an app.
What exactly has GPS and weather to do with my Google Account data? I do not share GPS data with Google, so I would not with Themer as well. And for a weather forecast I would simply type in 5 numbers - my zip code. This is exactly what I do right now.
And because the people at Themer have may account data, nobody can hack their servers? So the solution to all hacked servers worldwide is so simple? Just giving them Google account data?
Yes, I do not use it. This is the consequence.
So what should be my worries if it is not giving away voluntarily my Google account data to someone I do not know???
And you forgot something: I know at least 5 people that use their Android phones without a Google account, and they also do not use Facebook. Believe it or not: these people do really exist, and they even survive without a Google and a Facebook account.
So for me there is no credible information why the people at themer need my Google account data, and why this should protect them from being hacked. Or why my Google Account data should be safer than my mycolorscreen account data. This is why I will not use themer and would not recommend it to others.
Click to expand...
Click to collapse
You describe me exactly. I don't use my Google account to login anywhere, don't use Facebook, have phone GPS and location turned off, only enter zip code for weather, turn off sync everywhere, use a firewall, xprivacy, etc. - - and Google only thinks it has my info.
Everyone I know who is not a teenager or addicted to Facebook does the same.
vulcanvillalta said:
If you use fake names etc and are vague about your location, no, google doesnt have your name. But what about your IP address. They can tell that your pseudonym is performing functions from the specific location you are in. You might not GIVE them your name or address, but with the IP address linking you to a specific internet connection, they certainly can figure out who you are and where you are, if they want to.
Click to expand...
Click to collapse
Which is why I don't want to help other sites identify me by giving them my Google login. Not everyone has Google capabilities.
The points made in defense of keeping your personal information private (and not using your Google login for Themer) are valid and understood.
However, Themer is not designed for that type of mindset.
Themer is designed for the overall market - the vast majority if you will - not for privacy advocates.
It's simply a tool that allows the general Android user base (the FB'ers, Google +'ers, i.e. Socialites) to easily login to an app designed to make their phones look cool. Most of the functionality of the Themes are far more invasive than your Google login anyway (GPS coordinates, access to text/email notifications, call logs, etc) so I really don't see the point of wildly waving your arms around saying "privacy breach! privacy breach!"
Don't use it. Cool. I'm OK with that. I'm sure they are too. But why complain about it? What is the goal? Surely you cannot think they will redesign the app for you.
So really, you're just posting on XDA to aggravate the devs. I mean, what launcher doesn't have access to all of your info? It's like complaining that a specific model of car has a license plate that can be used to identify you. Guess what? All cars do. Take the bus bro
Anderson2 said:
Which is why I don't want to help other sites identify me by giving them my Google login. Not everyone has Google capabilities.
Click to expand...
Click to collapse
But your phone can still identify you. You are still logged into the internet via your carrier's internet and they can definitely get who you are on the phone.
You might as well just stay off the internet completely then.
And, if you're going to stay off the internet, then why have a smart phone? You're already identified out there through your carrier. If they breach your carrier account, they have all sorts of information right then and there, more so than Google would have. Think about it. Your billing address, etc.
Don't think for a minute that your carrier is completely safe. Even Verizon has had breaches.
vulcanvillalta said:
Like I said above, IF PEOPLE WANT YOUR INFORMATION, THEY CAN GET IT. There are nasty identity thieves out there that can find all of your information SOOOO easily. So easily. So whether or not you use an app or make a phonecall or whatever, you can still be traced and you can still be monitored and your information can still be acquired. I'm not trying to be a downer, but you can either accept that you are at the mercy of whoever wants to stalk you, or you can spend the rest of your life worrying and trying to protect yourself from something you literally have no control of.
IMHO, if you can use the app and it would benefit you, you might as well enjoy it.
Click to expand...
Click to collapse
Not sure why you quoted me bro, I'm on the same page you are.
IT need to display some information about your phone

Google hidden sync items

Hey guys,
When enabling the hidden sync option in experimental settings, it reveals quite a few new sync items and in wondering what they are and what some of them turn themselves back on when I disable them.
Game Data - this shows up twice.
Credentials State
Google Nearby (I'm assuming this is for maps)
Location Reporting and Location History (I have location completely disabled and location reporting disabled in Google settings... This keeps turning itself back on)
Push Subscriptions
People Details
Any light you can shed on this would be appreciated.
you're not alone wondering
The day I have been looking for an answer myself on this topic you started this thread.
The fine folks over here seem to have been ignoring your post, but so you know you are not alone wondering.
I have been disabling the hidden services for days now and tried to find a pattern or activity that turns them back on to no avail.
Even search engine results seem to be filtered of any useful answer, but this may be just another conspiracy theory...
If you found out more on this, post it here please.
And thanks.
lleo_ said:
The day I have been looking for an answer myself on this topic you started this thread.
The fine folks over here seem to have been ignoring your post, but so you know you are not alone wondering.
I have been disabling the hidden services for days now and tried to find a pattern or activity that turns them back on to no avail.
Even search engine results seem to be filtered of any useful answer, but this may be just another conspiracy theory...
If you found out more on this, post it here please.
And thanks.
Click to expand...
Click to collapse
All of them are self explanatory.
Game data: for games (whether you have them or not) so that your scores are uptodate.
Credentials state: for certificates in your device.
Google nearby: for maps and NFC
Location reporting and history: to keep your location details uptodate
Push subscriptions: to keep your push subscriptions uptodate (like mail Whatsapp etc)
People details: to keep your contacts list uptodate
I don't know why these are not obvious.
Regarding some of them automatically getting re-enabled, I don't have any such issues. If you continue to have these issues, you may have to use something like Myandroidtools or Disable Service etc to keep them under control.
tnsmani said:
All of them are self explanatory.
Game data: for games (whether you have them or not) so that your scores are uptodate.
Credentials state: for certificates in your device.
Google nearby: for maps and NFC
Location reporting and history: to keep your location details uptodate
Push subscriptions: to keep your push subscriptions uptodate (like mail Whatsapp etc)
People details: to keep your contacts list uptodate
I don't know why these are not obvious.
Regarding some of them automatically getting re-enabled, I don't have any such issues. If you continue to have these issues, you may have to use something like Myandroidtools or Disable Service etc to keep them under control.
Click to expand...
Click to collapse
Really thanks for your reply.
The visible items are self-explanatory indeed. As the OP reported, what is troubling why is there a hidden "location reporting and location history" sync option and why does it get re-enabled after being turned off. I also do not use any location service and turned off everything I could on my CM11 on Nexus 5
Can you tell which service do you suggest to be disabled to keep the "location reporting and location history" sync disabled?
lleo_ said:
Really thanks for your reply.
The visible items are self-explanatory indeed. As the OP reported, what is troubling why is there a hidden "location reporting and location history" sync option and why does it get re-enabled after being turned off. I also do not use any location service and turned off everything I could on my CM11 on Nexus 5
Can you tell which service do you suggest to be disabled to keep the "location reporting and location history" sync disabled?
Click to expand...
Click to collapse
I am not familiar with CM11 so I can't tell you any options in that. Also in my Nexus 4 and 7 with stock KK 4.4.4, I don't have a hidden sync for location.
If you use Myandroidtools or Disable Service, then disable anything connected with location. There are quite a few.
If you run Tasker you can make sure your sync settings stay put; location reporting isn't re-enabled, by using the Synker plugin for Tasker and having it set things how you want them at Display On, Display Off, and Screen Unlocked events.
Additionally, Shazam has a hidden sync that re-enabled itself when you run the app. I just use a Task shortcut: Launch Shazam
Wait Short period
Plugins-> Synker, and set it with the autisyncs you want.
Beware that Google services pushed to the phone can change the number of sync options, as can installing Shazam or Skype for examples, and the calls to plugin need to be adjusted. Its less hassle than it sounds.
Hi im facing an issue with google sync, im not able to get the game data sync option in google sync. i have updated google play services,play store..and also play games. kindly help me if know any solution.
I am currently running on cm11 rc3...it was working before..now its not...
il hit the thanks button guys..
srinikethan1392 said:
Hi im facing an issue with google sync, im not able to get the game data sync option in google sync. i have updated google play services,play store..and also play games. kindly help me if know any solution.
I am currently running on cm11 rc3...it was working before..now its not...
il hit the thanks button guys..
Click to expand...
Click to collapse
If you have disabled any sync option with DisableService or MyAndroidTools etc re-enable them.
CM's constant revision sometimes changes things unexpectedly. So try with a previous version of CM.
tnsmani said:
If you have disabled any sync option with DisableService or MyAndroidTools etc re-enable them.
CM's constant revision sometimes changes things unexpectedly. So try with a previous version of CM.
Click to expand...
Click to collapse
Hi,thanks for the reply...i finally solved it....
srinikethan1392 said:
Hi,thanks for the reply...i finally solved it....
Click to expand...
Click to collapse
How?
tnsmani said:
How?
Click to expand...
Click to collapse
Hey after flashing and updating the gapps..check in settings..in sync....if it stills hasnt appeared. use greenify and hibernate the google play services. then just restart your phone(Not necessary, sometimes it just works)then checck...the sync for game data and other hidden sync items just appear...
Press thanks if helped
They are spying on you. These HIDDEN accounts are there and the sheep who use stock android can't see them because they are HIDDEN in stock Android. They keep adding themselves back, they check themselves even if you unckeck them, they sync things you tell them not to sync, and it's NOT because you update something as I have not updated Cyanogenmod from 4.4 and it happens every time I start my tablet. Google will keep spying and can care less if its illegal to keep syncing things you don't want to sync because Google owns the US government. Google saved HHS when ACH Website failed, they have imbedded themselves so far into the government they are like a cancer that can't be removed. The US Gov "lent" Google GeoSat, one of our SPY satellites to make Google Earth, something that cost tax payers a lot of money. Google may provide Google Earth for free but they STEAL your personal information when you use the service, which means Google got free use of a US Government, taxpayer owned, SPY satellite so they could make more money for their private (not government run) company. Google gets free & subsidized aircraft fuel from NASA for their fleet of Attack Jets (IE fighter planes) also subsidized by WE THE PEOPLE. I am not some conspiracy theorist; I have worked for both sides of the isle on this one and can tell you Google is a problem.
Let's be honest, XDA has turned into a bunch of fanboys; it's not the site we had years ago. I have been fighting this crap for years (Look at my post history) and if you have not figured out yet, most of us who cared about privacy left XDA years ago. This is why no one is responding here; no one left cares. You are very correct, Google Play Services is MALWARE in disguise. I am not a crApple lover at all, and still use Android (for now), but am sick of Google's crap. I ported out my Google Voice number today and now have very little left to do with the company.
Google services is a framework that GApps and most stuff downloaded from the Play Store rely on to function. It used to be you can disable it and still have apps work, but a lot of them now wont even load if its removed or disabled. Google says its a way for app devs to take shortcuts, but it's there for one reason: Make App Devs LAZY so they they use Google's SPYWARE. App Devs (even most paid ones) don't give a crap about your privacy; most are adding ad code so they can steal your personal information. Google loves this as it opens up your device to have everything stolen, by not only Google but 3rd parties. Why do you think Google removed the ability to block app permissions then claimed it was a dev only feature? Google could care less about your privacy.
I sent the three main Google guys (@Google email not @gmail... Yes I know the Google Guys Real Emails) a project proposal from the company I own two years ago; they [legal, but Shady] stole the idea and nine months later made the announcement that in a few months they would be starting on Android Auto. My SMS messages going through Google Voice started to have issues shortly after with anything concerning to business coming in slow or didn't arrive at all, my Google+ posts were blocked for unknown reasons just saying they "didn't fit the community guidelines", and my Camera/Mic was constantly pushing popups saying they "couldn't start as they were already active" when I tried to use them on my Android Devices. I don't know why it's so hard for these sheep to believe a $500 Bil company, one of the most powerful in the world, wouldn't be spying on competitors or even stealing ideas from the community. I wouldn't be shocked if these creepy elite weirdo's havn't come up with their own version of "unReality TV" where they just spy on regular people like watching a television show. They are creepy vampires, all of them. I have had dating emails sent to gmail from the dating site I use not arrive despite the company I use tracking down the emails and saying they made it to gmail servers and thus should have gone through, client emails be delayed until after project deadlines, phone calls not make it, SMS/MMS delayed and/or lost, etc. I have people telling me they emailed or called me without reply, etc. My PC is virus free and My Android Tablet is as well. I now use a dumb phone and forward everything to that number, which no shock the dumb phone works when people call, but anything that goes through Google servers is still hit or miss. No one I know has these problems, but no one I know has called Eric Schmidt some foul names, so I guess people will say "it's my fault". Whatever; you just didn't get robbed several billion on a project by a garbage greedy scumbag company.
Screw Google.
I have attached a little of what I am talking about because the net is filled with BS. The I had to block out a lot of the proposal email as they only stole part of the idea so far and this was my SECOND email. The first one has some how gone missing from my sent box, but had a DOC attachment with a formal business proposal. That went through, but as you can see from the screen shots, Eric Schmidt has now blocked me with a policy rule on his email. Again, they received the original proposal back in January of 2014, before this screen shot of the second correspondence, after which they started blocking my Google+ Posts and when I send this second correspondence email I found out I was blocked by Eric. Nice! Steal my ideas, try and cover up email (missed one! OOPS!) then block me! Google "Does No Evil!" Oh wait, Google is nothing more than an advertising agency pretending to be a tech company... I guess thats where we get the lies "Do no evil". Everyone knows advertising lies.
Amen!
Unfortunately any resistance is futile. I'm in the same boat.
tnsmani said:
All of them are self explanatory.
Game data: for games (whether you have them or not) so that your scores are uptodate.
Credentials state: for certificates in your device.
Google nearby: for maps and NFC
Location reporting and history: to keep your location details uptodate
Push subscriptions: to keep your push subscriptions uptodate (like mail Whatsapp etc)
People details: to keep your contacts list uptodate
I don't know why these are not obvious.
Regarding some of them automatically getting re-enabled, I don't have any such issues. If you continue to have these issues, you may have to use something like Myandroidtools or Disable Service etc to keep them under control.
Click to expand...
Click to collapse
This helped already a lot !!!
Can someone please additionally explain those. As I translated them ... please write the correct name too ....
- *reminders (which ? cant be calender reminders)
- *offline sync of login data
- *state of login data
Where do u see the hidden sync items ? I am unable to find them.
dhananjay123 said:
Where do u see the hidden sync items ? I am unable to find them.
Click to expand...
Click to collapse
If you have enabled the option in Greenify, go to DEVICE>SETTINGS>ACCOUNTS>Google
can we disable/remove/delete them?
patrickdrd said:
can we disable/remove/delete them?
Click to expand...
Click to collapse
Can disable (although some reenable themselves)
how? my androidtools?
patrickdrd said:
how? my androidtools?
Click to expand...
Click to collapse
After enabling option in Greenify head to accounts in settings.

Categories

Resources