Related
Last week I noticed a device under my Google Play account (My Devices) that is not mine, a phone on a Romanian cell phone company network. I also noticed that someone from Russia had accessed my Gmail account. I changed my Gmail password (the old one was alpha-numerica,random, with symbols) and turned on two step authentication.
The Gmail account seems to be ok. The contacts all there and no messages removed or messages sent by people other than me.
The only sign of the intrusion is about a dozen "free" apps ordered by that device. It included sketchy gambling apps, a child's game that from comments I read has adult advertisements, and ringtones. After I changed the password there are new "free" media on the account - books and various video. These appear to be from a different user - all in English as opposed to Russian and nothing sketchy.
My guess on how this started - I downloaded an app with about 100 reviews. The next day the "free" apps started to appear, and the unauthorized device also was added the next day.
My SGS 3 isn't rooted. For Jellybean it seems that I have to wait for a stable root, should be another few days.
I contacted the Play Store support and they were of no help. They referred me to Gmail support but Gmail doesn't offer phone support. I think only support on a Google Group forum.
Any idea how this could have happened and how to get this device off of my account? My PC's are secure and my primary PC is Linux.
starfcker69 said:
Last week I noticed a device under my Google Play account (My Devices) that is not mine, a phone on a Romanian cell phone company network. I also noticed that someone from Russia had accessed my Gmail account. I changed my Gmail password (the old one was alpha-numerica,random, with symbols) and turned on two step authentication.
The Gmail account seems to be ok. The contacts all there and no messages removed or messages sent by people other than me.
The only sign of the intrusion is about a dozen "free" apps ordered by that device. It included sketchy gambling apps, a child's game that from comments I read has adult advertisements, and ringtones. After I changed the password there are new "free" media on the account - books and various video. These appear to be from a different user - all in English as opposed to Russian and nothing sketchy.
My guess on how this started - I downloaded an app with about 100 reviews. The next day the "free" apps started to appear, and the unauthorized device also was added the next day.
My SGS 3 isn't rooted. For Jellybean it seems that I have to wait for a stable root, should be another few days.
I contacted the Play Store support and they were of no help. They referred me to Gmail support but Gmail doesn't offer phone support. I think only support on a Google Group forum.
Any idea how this could have happened and how to get this device off of my account? My PC's are secure and my primary PC is Linux.
Click to expand...
Click to collapse
I have the IMEI # of the phone added to my account, also the model number (registered in Russian Federation). Could the IMEI be useful? I can PM if interested.
Imeis are quite useful to many people...Just don't pursue this on xda.
Sent from my Galaxy Nexus using xda premium
My account too was almost hacked.
I signed into youtube and a notice was shown that someone from ip in china tried to log into my google account and it denied them and i changed my password. No weird apps nothing.
The thing is probably the app you downloaded.
Just because it has 100 downloads doesn't mean its malware but you need to check permissions always.
Even big games like "Paper Toss" has been know to sell peoples info to companies.
When you read permissions. There should be a list of all the options the app requests.
Be Smart. If you download a calculator, It shouldn't have access to your personal identy, messages and the big key is internet access.
If you download a calender it may need access to contacts but it it also needs internet access, its probably is storing your contacts and sending them out to a site that then sells to a company and lastly, your grandparents receive phone calls asking if they want to buy a service and use your name as who referred them.
Also. rooting is a good option. With an app on here called pdroid or droidwall you can download those apps but it will alert yyou when the app wants to use a permission (like internet) and gives you the option to allow or deny.
good luck
I have one update. I think that after I changed my password and went to two step verification, the purchases of "free" apps and media stopped. It's been four days and nothing new added. So far so good. Thanks for the replies. BTW, Google of no help.
I'd still like to know how the Gmail account was compromised - I may never know.
similar thing just happened to me (Galaxy Note) appeared on my account from no where. When I contacted google if they can help or if they are interested in tracking him down, all they said was we cant help you. And change the pw. Obviously I know that I need to change the pw. I know Apple would have tracked it down somehow if it was an iphone. My pw has 22 characters number letter symbols yet it was hacked.
Since google is not helping me I installed Android Lost app on this NOTE and waiting to get a location update via email. I know it wont do anything much and I cant do anything against him or her since no paid apps were downloaded. Still I would like to do something to crooks like this. He only had 6 apps installed (facebook,viber candy rush) and terminal emulator (which worried me).
I really hope that Android close their unlimited backdoors in the OS.
Hey everyone, how do I sign into Themer? On my Galaxy S4 it gives me the option so sign in with Google or Facebook. I have neither. IF I DID HAVE TO CHOOSE BETWEEN THE TWO HOWEVER I would get a Google account just for Themer... but I don't know if that is possible. When I select to sign into Themer with Google, it tells me to choose a Google account when there is none on the device. What do? (derp) Thanks in advance.
Abethene said:
Hey everyone, how do I sign into Themer? On my Galaxy S4 it gives me the option so sign in with Google or Facebook. I have neither. IF I DID HAVE TO CHOOSE BETWEEN THE TWO HOWEVER I would get a Google account just for Themer... but I don't know if that is possible. When I select to sign into Themer with Google, it tells me to choose a Google account when there is none on the device. What do? (derp) Thanks in advance.
Click to expand...
Click to collapse
Hi there, we'd advise creating a simple Google account. We use this feature generally for security purposes as well as to display unread email count notifications (as the general population now use Gmail as their preferred email account).
Not everyone wants to participate in social media. I find it disappointing that Themer would require I do so, and is a deal-breaker for me.
Without a google account an android device has only half of its functions. I uderstand google+ but a normal google account?
Gesendet von meinem GT-I9505 mit Tapatalk
Abethene said:
Hey everyone, how do I sign into Themer? On my Galaxy S4 it gives me the option so sign in with Google or Facebook. I have neither. IF I DID HAVE TO CHOOSE BETWEEN THE TWO HOWEVER I would get a Google account just for Themer... but I don't know if that is possible. When I select to sign into Themer with Google, it tells me to choose a Google account when there is none on the device. What do? (derp) Thanks in advance.
Click to expand...
Click to collapse
Just create a easy google acct.
Lurkerdownbelow said:
Not everyone wants to participate in social media. I find it disappointing that Themer would require I do so, and is a deal-breaker for me.
Click to expand...
Click to collapse
We understand that it's not for everyone, but it's the best way for us help find new users as well as to keep Themer free. We will soon add options to remove this service.
Lurkerdownbelow said:
Not everyone wants to participate in social media. I find it disappointing that Themer would require I do so, and is a deal-breaker for me.
Click to expand...
Click to collapse
If you don't have a Google account you may as well not be using android. "Google account" does not equal "social media". Without a Google account you can't even use the Play Store.
Sent from my SAMSUNG-SGH-I747 using XDA Premium 4 mobile app
BakaNeko59 said:
If you don't have a Google account you may as well not be using android. "Google account" does not equal "social media". Without a Google account you can't even use the Play Store.
Sent from my SAMSUNG-SGH-I747 using XDA Premium 4 mobile app
Click to expand...
Click to collapse
You're correct. I realized that I had been confusing google+ with my normal google account. My bad here. I had assumed that since it was requesting me to sign in with my google account or facebook that it was social media related. I, in fact, do have a google account and can access the play store - which is how downloaded Themer to try in the first place.
I'd now like to know why it needs me to sign in with either account. How does that help Themer find new users and keep it free? I'm not being an ass here, just trying to learn new things.
Lurkerdownbelow said:
You're correct. I realized that I had been confusing google+ with my normal google account. My bad here. I had assumed that since it was requesting me to sign in with my google account or facebook that it was social media related. I, in fact, do have a google account and can access the play store - which is how downloaded Themer to try in the first place.
I'd now like to know why it needs me to sign in with either account. How does that help Themer find new users and keep it free? I'm not being an ass here, just trying to learn new things.
Click to expand...
Click to collapse
To be honest it's mainly for security reasons on our side. If someone breaches our servers, we can link it to a verified account and take action where necessary. In terms of social, when you log in you might have selected the box to receive emails from Themer about new updates and very important events. In this way, people who have uninstalled Themer because of some reason, might find that it now includes something that they've always wanted. Therefore it helps introduce 'new' users and in turn the more users we have the greater chance we have to generate resources (through the sponsored apps in the Smart Categories, which can also be turned off if the user desires).
ThemerSupport said:
To be honest it's mainly for security reasons on our side. If someone breaches our servers, we can link it to a verified account and take action where necessary. In terms of social, when you log in you might have selected the box to receive emails from Themer about new updates and very important events. In this way, people who have uninstalled Themer because of some reason, might find that it now includes something that they've always wanted. Therefore it helps introduce 'new' users and in turn the more users we have the greater chance we have to generate resources (through the sponsored apps in the Smart Categories, which can also be turned off if the user desires).
Click to expand...
Click to collapse
Hey thanks so much for taking the time to answer this in more detail! It's much appreciated. I'll give it a thorough try now.
ThemerSupport said:
To be honest it's mainly for security reasons on our side. If someone breaches our servers, we can link it to a verified account and take action where necessary. In terms of social, when you log in you might have selected the box to receive emails from Themer about new updates and very important events. In this way, people who have uninstalled Themer because of some reason, might find that it now includes something that they've always wanted. Therefore it helps introduce 'new' users and in turn the more users we have the greater chance we have to generate resources (through the sponsored apps in the Smart Categories, which can also be turned off if the user desires).
Click to expand...
Click to collapse
Thanks.
ThemerSupport said:
Hi there, we'd advise creating a simple Google account. We use this feature generally for security purposes as well as to display unread email count notifications (as the general population now use Gmail as their preferred email account).
Click to expand...
Click to collapse
Thanks a lot for your help. I was also facing the same problem.
Google account is a deal breaker
Hi,
For me this is a deal breaker.
I can follow your reasoning. But how can you give the same app the rights to read (display) all your text-messages, contacts & location together with a personalized login (be it google or facebook).
I know that American mentality is different in this case than German mentality: but I think it is insane to give access to all of these information at once...
I'm not the only paranoid here (if you think I am) but I know a lot of others (Germans) who think the same.
Sorry of I'm too frank: if you want to reach more Germans with your app, then you need to rethink this log-in dialogue.
btw: yes, you can use Android (CyanogenMod) without any kind of account. Works great
Yours, toggle
toggler said:
Hi,
For me this is a deal breaker.
I can follow your reasoning. But how can you give the same app the rights to read (display) all your text-messages, contacts & location together with a personalized login (be it google or facebook).
I know that American mentality is different in this case than German mentality: but I think it is insane to give access to all of these information at once...
I'm not the only paranoid here (if you think I am) but I know a lot of others (Germans) who think the same.
Sorry of I'm too frank: if you want to reach more Germans with your app, then you need to rethink this log-in dialogue.
btw: yes, you can use Android (CyanogenMod) without any kind of account. Works great
Yours, toggle
Click to expand...
Click to collapse
Hi Toggler,
We understand your concern, as we are simply a launcher. However, that isn't really the case. As all of our widgets are built in, we require these permissions to allow the user to view his/her unread SMS/Email/Missed Call counts on the homescreen. We don't store any of the information, we simply display it. We've now actually had to remove the Dialer Widget to reduce the number of permissions required, but we still need a few to improve the user's experience. Once Facebook introduces anonymous login, we'll implement that straight away, however right now we need it for security reasons on our end (in then breaching theme servers).
Hope this helps!
- Marco
Hey guys,
When enabling the hidden sync option in experimental settings, it reveals quite a few new sync items and in wondering what they are and what some of them turn themselves back on when I disable them.
Game Data - this shows up twice.
Credentials State
Google Nearby (I'm assuming this is for maps)
Location Reporting and Location History (I have location completely disabled and location reporting disabled in Google settings... This keeps turning itself back on)
Push Subscriptions
People Details
Any light you can shed on this would be appreciated.
you're not alone wondering
The day I have been looking for an answer myself on this topic you started this thread.
The fine folks over here seem to have been ignoring your post, but so you know you are not alone wondering.
I have been disabling the hidden services for days now and tried to find a pattern or activity that turns them back on to no avail.
Even search engine results seem to be filtered of any useful answer, but this may be just another conspiracy theory...
If you found out more on this, post it here please.
And thanks.
lleo_ said:
The day I have been looking for an answer myself on this topic you started this thread.
The fine folks over here seem to have been ignoring your post, but so you know you are not alone wondering.
I have been disabling the hidden services for days now and tried to find a pattern or activity that turns them back on to no avail.
Even search engine results seem to be filtered of any useful answer, but this may be just another conspiracy theory...
If you found out more on this, post it here please.
And thanks.
Click to expand...
Click to collapse
All of them are self explanatory.
Game data: for games (whether you have them or not) so that your scores are uptodate.
Credentials state: for certificates in your device.
Google nearby: for maps and NFC
Location reporting and history: to keep your location details uptodate
Push subscriptions: to keep your push subscriptions uptodate (like mail Whatsapp etc)
People details: to keep your contacts list uptodate
I don't know why these are not obvious.
Regarding some of them automatically getting re-enabled, I don't have any such issues. If you continue to have these issues, you may have to use something like Myandroidtools or Disable Service etc to keep them under control.
tnsmani said:
All of them are self explanatory.
Game data: for games (whether you have them or not) so that your scores are uptodate.
Credentials state: for certificates in your device.
Google nearby: for maps and NFC
Location reporting and history: to keep your location details uptodate
Push subscriptions: to keep your push subscriptions uptodate (like mail Whatsapp etc)
People details: to keep your contacts list uptodate
I don't know why these are not obvious.
Regarding some of them automatically getting re-enabled, I don't have any such issues. If you continue to have these issues, you may have to use something like Myandroidtools or Disable Service etc to keep them under control.
Click to expand...
Click to collapse
Really thanks for your reply.
The visible items are self-explanatory indeed. As the OP reported, what is troubling why is there a hidden "location reporting and location history" sync option and why does it get re-enabled after being turned off. I also do not use any location service and turned off everything I could on my CM11 on Nexus 5
Can you tell which service do you suggest to be disabled to keep the "location reporting and location history" sync disabled?
lleo_ said:
Really thanks for your reply.
The visible items are self-explanatory indeed. As the OP reported, what is troubling why is there a hidden "location reporting and location history" sync option and why does it get re-enabled after being turned off. I also do not use any location service and turned off everything I could on my CM11 on Nexus 5
Can you tell which service do you suggest to be disabled to keep the "location reporting and location history" sync disabled?
Click to expand...
Click to collapse
I am not familiar with CM11 so I can't tell you any options in that. Also in my Nexus 4 and 7 with stock KK 4.4.4, I don't have a hidden sync for location.
If you use Myandroidtools or Disable Service, then disable anything connected with location. There are quite a few.
If you run Tasker you can make sure your sync settings stay put; location reporting isn't re-enabled, by using the Synker plugin for Tasker and having it set things how you want them at Display On, Display Off, and Screen Unlocked events.
Additionally, Shazam has a hidden sync that re-enabled itself when you run the app. I just use a Task shortcut: Launch Shazam
Wait Short period
Plugins-> Synker, and set it with the autisyncs you want.
Beware that Google services pushed to the phone can change the number of sync options, as can installing Shazam or Skype for examples, and the calls to plugin need to be adjusted. Its less hassle than it sounds.
Hi im facing an issue with google sync, im not able to get the game data sync option in google sync. i have updated google play services,play store..and also play games. kindly help me if know any solution.
I am currently running on cm11 rc3...it was working before..now its not...
il hit the thanks button guys..
srinikethan1392 said:
Hi im facing an issue with google sync, im not able to get the game data sync option in google sync. i have updated google play services,play store..and also play games. kindly help me if know any solution.
I am currently running on cm11 rc3...it was working before..now its not...
il hit the thanks button guys..
Click to expand...
Click to collapse
If you have disabled any sync option with DisableService or MyAndroidTools etc re-enable them.
CM's constant revision sometimes changes things unexpectedly. So try with a previous version of CM.
tnsmani said:
If you have disabled any sync option with DisableService or MyAndroidTools etc re-enable them.
CM's constant revision sometimes changes things unexpectedly. So try with a previous version of CM.
Click to expand...
Click to collapse
Hi,thanks for the reply...i finally solved it....
srinikethan1392 said:
Hi,thanks for the reply...i finally solved it....
Click to expand...
Click to collapse
How?
tnsmani said:
How?
Click to expand...
Click to collapse
Hey after flashing and updating the gapps..check in settings..in sync....if it stills hasnt appeared. use greenify and hibernate the google play services. then just restart your phone(Not necessary, sometimes it just works)then checck...the sync for game data and other hidden sync items just appear...
Press thanks if helped
They are spying on you. These HIDDEN accounts are there and the sheep who use stock android can't see them because they are HIDDEN in stock Android. They keep adding themselves back, they check themselves even if you unckeck them, they sync things you tell them not to sync, and it's NOT because you update something as I have not updated Cyanogenmod from 4.4 and it happens every time I start my tablet. Google will keep spying and can care less if its illegal to keep syncing things you don't want to sync because Google owns the US government. Google saved HHS when ACH Website failed, they have imbedded themselves so far into the government they are like a cancer that can't be removed. The US Gov "lent" Google GeoSat, one of our SPY satellites to make Google Earth, something that cost tax payers a lot of money. Google may provide Google Earth for free but they STEAL your personal information when you use the service, which means Google got free use of a US Government, taxpayer owned, SPY satellite so they could make more money for their private (not government run) company. Google gets free & subsidized aircraft fuel from NASA for their fleet of Attack Jets (IE fighter planes) also subsidized by WE THE PEOPLE. I am not some conspiracy theorist; I have worked for both sides of the isle on this one and can tell you Google is a problem.
Let's be honest, XDA has turned into a bunch of fanboys; it's not the site we had years ago. I have been fighting this crap for years (Look at my post history) and if you have not figured out yet, most of us who cared about privacy left XDA years ago. This is why no one is responding here; no one left cares. You are very correct, Google Play Services is MALWARE in disguise. I am not a crApple lover at all, and still use Android (for now), but am sick of Google's crap. I ported out my Google Voice number today and now have very little left to do with the company.
Google services is a framework that GApps and most stuff downloaded from the Play Store rely on to function. It used to be you can disable it and still have apps work, but a lot of them now wont even load if its removed or disabled. Google says its a way for app devs to take shortcuts, but it's there for one reason: Make App Devs LAZY so they they use Google's SPYWARE. App Devs (even most paid ones) don't give a crap about your privacy; most are adding ad code so they can steal your personal information. Google loves this as it opens up your device to have everything stolen, by not only Google but 3rd parties. Why do you think Google removed the ability to block app permissions then claimed it was a dev only feature? Google could care less about your privacy.
I sent the three main Google guys (@Google email not @gmail... Yes I know the Google Guys Real Emails) a project proposal from the company I own two years ago; they [legal, but Shady] stole the idea and nine months later made the announcement that in a few months they would be starting on Android Auto. My SMS messages going through Google Voice started to have issues shortly after with anything concerning to business coming in slow or didn't arrive at all, my Google+ posts were blocked for unknown reasons just saying they "didn't fit the community guidelines", and my Camera/Mic was constantly pushing popups saying they "couldn't start as they were already active" when I tried to use them on my Android Devices. I don't know why it's so hard for these sheep to believe a $500 Bil company, one of the most powerful in the world, wouldn't be spying on competitors or even stealing ideas from the community. I wouldn't be shocked if these creepy elite weirdo's havn't come up with their own version of "unReality TV" where they just spy on regular people like watching a television show. They are creepy vampires, all of them. I have had dating emails sent to gmail from the dating site I use not arrive despite the company I use tracking down the emails and saying they made it to gmail servers and thus should have gone through, client emails be delayed until after project deadlines, phone calls not make it, SMS/MMS delayed and/or lost, etc. I have people telling me they emailed or called me without reply, etc. My PC is virus free and My Android Tablet is as well. I now use a dumb phone and forward everything to that number, which no shock the dumb phone works when people call, but anything that goes through Google servers is still hit or miss. No one I know has these problems, but no one I know has called Eric Schmidt some foul names, so I guess people will say "it's my fault". Whatever; you just didn't get robbed several billion on a project by a garbage greedy scumbag company.
Screw Google.
I have attached a little of what I am talking about because the net is filled with BS. The I had to block out a lot of the proposal email as they only stole part of the idea so far and this was my SECOND email. The first one has some how gone missing from my sent box, but had a DOC attachment with a formal business proposal. That went through, but as you can see from the screen shots, Eric Schmidt has now blocked me with a policy rule on his email. Again, they received the original proposal back in January of 2014, before this screen shot of the second correspondence, after which they started blocking my Google+ Posts and when I send this second correspondence email I found out I was blocked by Eric. Nice! Steal my ideas, try and cover up email (missed one! OOPS!) then block me! Google "Does No Evil!" Oh wait, Google is nothing more than an advertising agency pretending to be a tech company... I guess thats where we get the lies "Do no evil". Everyone knows advertising lies.
Amen!
Unfortunately any resistance is futile. I'm in the same boat.
tnsmani said:
All of them are self explanatory.
Game data: for games (whether you have them or not) so that your scores are uptodate.
Credentials state: for certificates in your device.
Google nearby: for maps and NFC
Location reporting and history: to keep your location details uptodate
Push subscriptions: to keep your push subscriptions uptodate (like mail Whatsapp etc)
People details: to keep your contacts list uptodate
I don't know why these are not obvious.
Regarding some of them automatically getting re-enabled, I don't have any such issues. If you continue to have these issues, you may have to use something like Myandroidtools or Disable Service etc to keep them under control.
Click to expand...
Click to collapse
This helped already a lot !!!
Can someone please additionally explain those. As I translated them ... please write the correct name too ....
- *reminders (which ? cant be calender reminders)
- *offline sync of login data
- *state of login data
Where do u see the hidden sync items ? I am unable to find them.
dhananjay123 said:
Where do u see the hidden sync items ? I am unable to find them.
Click to expand...
Click to collapse
If you have enabled the option in Greenify, go to DEVICE>SETTINGS>ACCOUNTS>Google
can we disable/remove/delete them?
patrickdrd said:
can we disable/remove/delete them?
Click to expand...
Click to collapse
Can disable (although some reenable themselves)
how? my androidtools?
patrickdrd said:
how? my androidtools?
Click to expand...
Click to collapse
After enabling option in Greenify head to accounts in settings.
Hi there,
I ordered a OnePlus 3 for use on my private and my companys sim card (no access to companys intranet, only for telephone accessibility).
For business contacts which I don't want to have synced with google I use the app "MyLocalAccount" which seems to be good for that situation.
But is there a possibility to deny whatsapp for accessing this "MyLocalAccount"?
Maybe with a xposed module?
Or is there another way to handle this?
Thanks for your help,
Shadow128
Shadow128 said:
Hi there,
I ordered a OnePlus 3 for use on my private and my companys sim card (no access to companys intranet, only for telephone accessibility).
For business contacts which I don't want to have synced with google I use the app "MyLocalAccount" which seems to be good for that situation.
But is there a possibility to deny whatsapp for accessing this "MyLocalAccount"?
Maybe with a xposed module?
Or is there another way to handle this?
Thanks for your help,
Shadow128
Click to expand...
Click to collapse
Hello and welcome to XDA Q&A section of the Forum.
Perhaps you should try out an XPosed module called "XPrivacy"? It will ask for your permission for litterally everything and once you accept it it obviously won't and it should help with what you need help with.
If I helped, hit "thanks"
I tried XPrivacy and asked also in the XPrivacy thread, but it is not 100% what I want
The easiest way would be to block access to all contacts from that local account, but in XPrivacy I've to allow every contact for WhatsApp.
But as I also searched on google I think there's no way to do this?
Hi Guys, i cannot instal fm whatsapp on oppo, appears a message Security Reminder and High-risk Virus and does not allow installation.
My device is a Oppo Find N2
i hope u realise that Whatsapp is clamping down on third party versions of whatsapp and it will result in ur account getting permanently banned.. and many of these third party versions do include shady stuff, hence it gets flagged..
WhatsApp Will Delete Your Account if You Use These Apps
Are you using any of these apps on your phone? If so, WhatsApp may permanently disable your account. Delete them right away!
www.gizchina.com
rathian said:
i hope u realise that Whatsapp is clamping down on third party versions of whatsapp and it will result in ur account getting permanently banned.. and many of these third party versions do include shady stuff, hence it gets flagged..
WhatsApp Will Delete Your Account if You Use These Apps
Are you using any of these apps on your phone? If so, WhatsApp may permanently disable your account. Delete them right away!
www.gizchina.com
Click to expand...
Click to collapse
I understand the risks, but I've always used it on other phones, only on Oppo I can't install