android/calyosx
for a few days i was able to use just telegrm and no internet at all.
i used my VPN as a lock to keep all programs quarantined safely untill i fixed a few issues
still telegram and session texting apps could communicate just fine.
now i got my internet worked out on my phone and was simultaneously not able to reach the telegram or session texting at all.
so i found the fix. i can use session/telegram on my phone.
that looks like a serious problem.
the thing that was stopping it was a security setting "restrict cleartext network traffic"
so the texting sounds to me like it is openly available for all to read. all man in the middle / stingray readers, node relays, or providers.
both these apps totally bypass the VPN on the phone and do not use the networking as the other apps do. they both have no vpn interaction at all. that is clearly verified
both are registered as "cleartext network traffic"
am i imagining the security risk in this , or is it as bad as i am guessing
Related
Hi
I am trying to connect to my office wifi via proxy server.
Scenario 1: I am using Samsung Bada (wave 1), connected to the internet successfully and also any applications that require an internet connection including Samsung's app store.
While, connecting via open networks like home wifi and other friends' wifi also worked without any issue.
Scenario 2: Now I also have an android based Galaxy pocket: even after entering all the required proxy setting as mentioned above, I can access websites via browser but cannot access samsung's app store, google's play store, skype, sipdroid etc.,
I know it is nothing to do with the network administration as I am still accessing via my samsung wave but not via android. Please help me in identifying what I am missing. Is there anything like a network profile I need to assign for these applications?
thanks
S
Figured out the solution
Sometimes it is pathetic to notice that I didn't receive a single suggestion after I posted my question above. This is not how it used to be when we had smartphones that were just running windows long time ago.
There were lot of suggestions that comes up within a few minutes of posting, now after the invent of android and so many devices we have so many members but knowledge sharing has decreased considerably as each person is busy with solving their own issues.
Well, let me come back to the point - All that I needed to do was to run an app like 'proxydroid' or 'auto proxy lite' from one of our members from xda-developers to solve this issue. In order, to run these apps the device needed to be rooted. I rooted and installed this app and from that instance I am able to make all my apps including skype, google app market and what not all can access internet from my corporate wifi.
However, I noticed that only one application never succeeded this trick - that app is a Voip/SIP application called 'Pronto dialer' which throws a message 'unknown error occurred'. It works fine in an open wifi like at home etc., I am suspecting the proxy setting in the office network clashes with the proxy setting in the dialer...dont know what it is. Anyway I am glad and relieved that I was able to solve 90% of the issue.
Hope the above will be useful for someone with similar limitation from corporate wifi.
I am running a rooted LGA V400 tablet with Android 4.4.2 Kernel version 3.4.0+, software version v40010e and build number KOT49l.A1403851534. The tablet does not have provisions for a data connection via a SIM card- wifi only.
I am using the connections tab in eolwral OS monitor to keep track of what connections the various applications and the OS are making with the outside i.e.. via wi-fi. I also am running AFWall + to shut down phone home garbage. I had Droidwall installed before this. Neither Droidwall nor AFWall + shut down non whitelisted connections......
As normal course of operation the ONLY applications I whitelist are
Firefox
GMail
Google+
GPS Status
Internet (the built in browser)
Kaspersky Internet Security
Maps
Navigator
Skype
Speedtest
Sun, Moon & Planets
UCBrowserHD.
As I am writing this the tablet has an uptime of 1 hr 42 minutes. The only existing connection to the internet according to OSMonitor is Youtube through 127.0.0.1:42818. Youtube is NOT whitelisted. Also please note that I am composing this post on my laptop.
If I restart the tablet things change radically. I have 19 connections either syn_sent, time_wait,Listening or Established. Most are from System although there are things like Google Account Manager (not whitelisted) Qualcom, Youtube (again) and things like Google Input Services. On the first boot of the day its is worse with more of the system connections to various IP's in various states, Kernel connections (not whitelisted) App updates(not whitelisted), Google backup Transport and its group (not whitelisted), Google Partner Setup ( not whitelisted), Hidden Person Menu (not whitelisted), Software Update (not whitelisted), and a group of others appear which are not whitelisted.
My questions are-
. If either Droidwall or AFWall+ are true IPTables firewalls how and why is all of this crap able to get on wifi?
When transport for a certain service is not available i.e. blocked by a firewall does Android do something different with the connection request to enable it i.e. the plethora of system connections? It appears to me that AFWall+ isn't working as advertised because of f these leakers-
Most of the connections appear at boot up- is what is happening that these connections are established before AFWall+ gets up and running and it does not have the ability to close them? Note that on boot up after the GUI is running I get a SuperSU notification that AFWall + has been granted root permission so I am curious about the order of things starting i.e. a lot of the connection sockets being established before the firewall is running.
Finally- the V400 is somewhat of a stepchild. Is there another version of Android I can load on this platform that will work?
Thanks to all for the expertise here. I searched the forum before posting this as well as the internet, I am experienced with Unix and Linux and have done IPTables in non Android OS'es. I find what I am seeing here disturbing. Any help or suggestions would be deeply appreciated.
Expat.
Hi all,
I want to prevent certain apps from accessing my work Wi-Fi, mostly so my employer can't see what I'm doing. Specifically, I don't want to be connected to my employer's Wi-Fi while on Facebook, Evernote, etc.
For some other apps, I still want to use Wi-Fi to save data.
I just installed Tasker and have already a Task set up to shut off Wi-Fi for these apps. My question is: is this really secure? Does anyone think this will prevent my employer from seeing what's on my Facebook, or is there a flaw I'm not thinking of?
Ex: maybe Tasker has a delay which will allow my employer to see Facebook load anyway.
Alternatively, if anyone knows a more efficient way of doing this (in Tasker or anywhere else in Android) that'd be great.
Thanks
Question your boss is a hacker?
Because if he isn't he can't see anything in theory because he doesn't know how.
But you can use vpn connection as Hotspot Shield
so your traffic inside that network and all over the internet is encrypted.
You can also use "Firewall" for that.Firewall apps that they stop apps that you choose from getting access to internet.
if you aren't rooted try this one NoRoot Data Firewall . it use VPN
connection. So this vpn connection is local and when the blocked app tries to connect the internet it just get the localhost ip as gateway . the other apps continue to work normally.
if you are rooted try this one AFWall+ (Android Firewall +)
depends on your needs of course.
Just got a notification today saying I should turn on samsung secure wifi. After much googling, I finally got the impression that it is a VPN server operated by samsung which you can force apps to use. Is that really it, or did the vague marketing web pages confuse me?
Why would I be more secure by routing all my traffic through samsung? Sounds like something facebook would do
Yes, it's a VPN service. If you are using unencrypted (typically public) WiFi, everybody within range of that WiFi can listen in on your network traffic. To prevent that, you can use a VPN. The VPN provider can of course see your traffic, should they be so inclined, so don't use a VPN provider you don't trust.
Hello guys,
I have had one specific problem for literally years now and I could never find a solution.
Say I've got a Galaxy S20 and I won't root it. Leaves me with three options to block ads:
- use Firefox and uBlock origin
- set dns.adguard.com as custom DNS
- use Blokada, DNS66 or any other VPN-based adblocker
The problem with the latter two: Chrome will randomly stop functioning whenever I am connected to any wifi network.
It will just stop loading random sites, not show all pictures in Google Image search, not show anything anymore when you click back and forward or just stop loading anything at all.
Go to mobile connection, it immediately works. Disable the DNS/VPN blocker, it immediately works.
Reconnect wifi, it will work again for a while. Can be two days, can be ten minutes. It's completely random.
I am not able to figure out ANY reason why this is happening.
I know Chrome has its own DNS resolver and you should disable it when using DNS based blocking methods (disable async dns resolver and clear dns cache), and while this fixes the problem that not all ads are blocked in a reliable way, it doesn't fix the wifi connection loss.
Using DNS or VPN based blockers only cause problems in Chrome, no other app.
I know I could just switch browsers, its just that I use Chrome on desktop as well and like the synced bookmarks.
Does anyone have any idea why using a VPN/DNS based adblocker would cause Chrome to specifically stop working randomly only in a wifi network, but not via mobile?
I have had this issue over several devices and Android versions for years now and I can't figure it out.
Curious if any of you can help.