Security bulletin for rooted users: Android passwords stored as clear text - Vibrant General

http://www.androidcentral.com/android-passwords-rooted-clear-text
Anyone else see this article? Any thoughts? Just curious what ppl smarter than me think...

Just don't download programs with root access that haven't been widely tested.
But if your phone gets stolen you could be screwed if the thief is savvy enough :X

Normally when I get a popup saying this app is asking for Root I know it and I allow it. However if I get something that isn't allowed of course I'm not going to allow it and more than likely delete it.
Thanks for bringing up the article too.

I think I only had two apps that ever required SU permission, but it's definitely something to think about until the encryption update comes.

that's what i thought. i've been a linux user for about 10 years now so the idea of rooting sounded pretty risky to me. of course i finally got the nerve to root and create my first nandroid about 10 minutes before finding that article...
i guess as long as i still have control over apps that request root access, i'll be fine. that was my main fear.
thanks!

Related

Regarding ROOTED Hero or any Droid phone..

Taken from an user in Androidforums.com ...
that kind of crossed my thoughts when I rooted my phone, what is the possibility though?
n0gik said:
This is a wonderful thread - and my apology if I've missed this question here or anywhere else.
Regarding 'rooted' Hero (or any other Android) phones, once they're rooted, can you set a root password? ('passwd' command after issuing 'su' command)
It would seem to me that leaving the superuser unprotected, with escalated execution privileges NOT protected, then downloading/installing a maliciously written application could become an issue. I'd hate to see thousands (millions?) of Android phones become disabled, DOS attack points or spamming mailer daemons.
Just trying to make an educated decision before rooting.
Click to expand...
Click to collapse
no answers????
I've not done much research on the subject however the superuser apk is there to protect us with custom roms so you can be protected from potentially malicious applications.
We really cant set a password on our root, especially since this is not a "Full" linux distro, it's very watered down to fit and run "well", this includes the SElinux. The SuperUser app offers protection, when an app runs that requires Root, superuser kicks in and asked Always Allow, Allow, Dont Allow, Never Allow.
Given, superuser probably has its weeknesses all security apps do and anyone with the smarts to figure out the loop holes will. It's a cell phone, not your bank account or medical records. I can't see you or anyone carying anything too private on it, maybe some corp. emails. Viruses happen, luckily there doesn't seem to be to much circulating in the way of Android. There are even a few AV apps on the market if you look for them.
The only app I have that requires root is WiFi Tether. Maybe, oneday, when we get full kernel source someone can protect our root a little better than it currently is. If having an Android phone has taught me anything, it is that Google security policies must be Garbage. Look at how they protect paid apps, if I was a Dev that wanted to make money on his code there is no way I could cope with only having stuff in a protected folder. Looks like they would have to make their own software protection, and some have.
Lcarpenter, thanks for answering.
I can breathe a little better now..

Someone jacked my Sprint account

Just a heads up, somehow someone compromised my account, and was able to deactivate my phone, and activate their own EVO on my account, change plans, and change all the security info, PIN security question, and security email. A bit of a wakeup call, running rooted phones, installing apps that give themselves unfettered access...
Yes, "its your own damn fault", but whatever, just keep your eyes constantly peeled, and make sure your sprint "myaccount" settings are secure...
What ROM where you using? Any idea what apps you had installed that might have been compromising your data?
Take some screenshots of all your installed apps. Couldn't hurt.
This is more of a Sprint thing. They have a problem with internal fraud
Was using CM6 at the time. According to the rep I spoke with (that actually helped me, the first guy was a turd), they had been calling in between the 28th and 30th, on the 30th they were able to remove my device and add theirs.
I don't think it was any of the apps I have installed. I'm thinking it was either an inside job, or someone else (ie, haxor) on Sprint's nodes during the last week sniffing packets. Reason I think that is that they seemed to have compromised the security by way of changing the e-mail address that security updates go to. I don't know, its just a crappy feeling overall. Kind of like when I was mugged many years ago...
hondoslack said:
Was using CM6 at the time. According to the rep I spoke with (that actually helped me, the first guy was a turd), they had been calling in between the 28th and 30th, on the 30th they were able to remove my device and add theirs.
I don't think it was any of the apps I have installed. I'm thinking it was either an inside job, or someone else (ie, haxor) on Sprint's nodes during the last week sniffing packets. Reason I think that is that they seemed to have compromised the security by way of changing the e-mail address that security updates go to. I don't know, its just a crappy feeling overall. Kind of like when I was mugged many years ago...
Click to expand...
Click to collapse
Sprint should should just clone that account, deactivate it, ban the new ESN.
I fail to see the benefit of account jacking (especially after account owner's phone gets deactivated)
jerryparid said:
Sprint should should just clone that account, deactivate it, ban the new ESN.
I fail to see the benefit of account jacking (especially after account owner's phone gets deactivated)
Click to expand...
Click to collapse
I like what happens (and it rarely happens,Ive heard stories of things that have happened way back,which are always good for a chuckle) where I work when someone does something illegal,or commits crimes using sensitive information at work. The US Marshals come,drag them out in handcuffs for everyone to see and then they get their room and board on the US Government for the next few years.
Every phone is legally required to have GPS that is available at all times and it sounds like they are committing identity theft. Have the police, or if they are in a different state possibly FBI, go get them.
This was an inside job and has nothing to do with your ROM or the fact that you rooted your phone. Threads like this could easily scare people away from rooting for no good reason.
I think you might have gave someone your info!!
dallashigh said:
This was an inside job and has nothing to do with your ROM or the fact that you rooted your phone. Threads like this could easily scare people away from rooting for no good reason.
Click to expand...
Click to collapse
This may not have had anything to do with his phone being rooted but it is possible that could have had something to do with it too. When you root your phone you are effectively bypassing just about every single security feature put on there.
You are lying to yourself if you think rooting your phone doesn't make your information much easier to steal.
jahnile said:
This is a strange story, def.ly a wake up call.
http://WWW.rootznculture.com
Click to expand...
Click to collapse
NVM wrong thread
xHausx said:
This may not have had anything to do with his phone being rooted but it is possible that could have had something to do with it too. When you root your phone you are effectively bypassing just about every single security feature put on there.
You are lying to yourself if you think rooting your phone doesn't make your information much easier to steal.
Click to expand...
Click to collapse
That is patently false. If you install a custom ROM then you are trusting the ROM developer not to put anything sneaky in there. Considering CM6 is open-source and used by thousands of people, it's unlikely to be the ROM's fault.
An app with root can do just about anything. That is why the Superuser app is there to make sure only apps that need it can get root access.
Installing apps from non-Market sources is much riskier than rooting your phone. Installing an SSH daemon would make it possible to access your system remotely. That would also be a security risk.
Enabling USB debugging will make it easier for someone with physical access to your device to access your information. That much is true.
There is absolutely nothing about the act of rooting that puts your information in jeopardy.
dallashigh said:
That is patently false. If you install a custom ROM then you are trusting the ROM developer not to put anything sneaky in there. Considering CM6 is open-source and used by thousands of people, it's unlikely to be the ROM's fault.
An app with root can do just about anything. That is why the Superuser app is there to make sure only apps that need it can get root access.
Installing apps from non-Market sources is much riskier than rooting your phone. Installing an SSH daemon would make it possible to access your system remotely. That would also be a security risk.
Enabling USB debugging will make it easier for someone with physical access to your device to access your information. That much is true.
There is absolutely nothing about the act of rooting that puts your information in jeopardy.
Click to expand...
Click to collapse
You say any app with root can do just about anything, you just confirmed what I said. If whatever terminal app you are using can give you root(superuser) access without a password than any app can do it.
A SSH shell is for communicating over a network, it has nothing to do with root access.
If you read recently at defcon someone showed a market app that could root your phone without your permission and take some private info. So without root your screwed to. So you can probably blame an app before root. Also all data is encrypted so I doubt it was a packet sniffer.
This is a Sprint issue. I've seen and heard of it happening way too many times for me to assume that it's Android related even in the slightest bit.
I don't really think it's fair to lump rooting and basic modification in with account theft. There are always multiple sides to any story.
dallashigh said:
That is patently false. If you install a custom ROM then you are trusting the ROM developer not to put anything sneaky in there. Considering CM6 is open-source and used by thousands of people, it's unlikely to be the ROM's fault.
An app with root can do just about anything. That is why the Superuser app is there to make sure only apps that need it can get root access.
Installing apps from non-Market sources is much riskier than rooting your phone. Installing an SSH daemon would make it possible to access your system remotely. That would also be a security risk.
Enabling USB debugging will make it easier for someone with physical access to your device to access your information. That much is true.
There is absolutely nothing about the act of rooting that puts your information in jeopardy.
Click to expand...
Click to collapse
Then what is this article referring to? http://phandroid.com/2010/07/31/hackers-release-data-stealing-program-to-push-google-to-plug-holes-at-security-conference/
xHausx said:
You say any app with root can do just about anything, you just confirmed what I said. If whatever terminal app you are using can give you root(superuser) access without a password than any app can do it.
Click to expand...
Click to collapse
Sure you don't have to enter a password, but the first time the app runs, you DO have to confirm that you want to give it root access. And again that would be the APP that is malicious and not the mere fact that your phone is rooted.
xHausx said:
A SSH shell is for communicating over a network, it has nothing to do with root access.
Click to expand...
Click to collapse
I know what SSH is. I'm not an idiot. An SSH server is something that would actually put your device at risk of being remotely accessed without your knowledge or permission.
redrazr7791 said:
Then what is this article referring to? http://phandroid.com/2010/07/31/hackers-release-data-stealing-program-to-push-google-to-plug-holes-at-security-conference/
Click to expand...
Click to collapse
They distributed a trojan that installed malware at the same time it rooted your phone.

[Q] Rooting Advantages and Disadvantages

I have been reading this forum for some weeks now and wanted to thank you all for the great info here. I got my first Android phone (Vibrant) a few weeks ago.
I found out about rooting just yesterday. Since I really don't want to spend a lot of time troubleshooting the phone, I had a few questions to figure out whether I should root or not:
Will rooting my phone be overall worth it? Will I have to troubleshoot it a lot as a result? It works well now.
How will the updates work in the future? For example, I won't have to worry about Android 2.2 because it will be included in Cyanogen? Will my phone notify me when it's time to update?
This one is important: are there any instructions that tell me how to backup my current phone so that I can restore it to the original condition in case something happens?
Is Cyanogen accepted to be the best for rooting?
Will all my applications become uninstalled? Will anything else change besides my access level? I read some conflicting into on this.
Can you think of any disadvantages to rooting (other than possible voiding of warranty if you can't hide it)?
Do you guys have a list in this forum as to which applications are bloatware and should be removed (and are safe to remove)? I don't know anything about Android, so I have no idea
And finally, is there a thread/list where all the most important/useful applications that should be installed after rooting are listed? I know titanium backup is one. I couldn't understand what BusyBox does. So a list with explanations would be great.
I haven't liked the battery life of this phone and I am hoping that after removing all the bloatware from it that issue might be fixed as well. My phone starts with 160M+ memory. Even though I keep killing open applications, the performance keeps dropping over time until I can't get more memory beyond ~90M. This is when I have to shut down the phone and turn back on. Other than tethering, my main reason for rooting is 1.performance gain and 2.battery life extension.
Thanks for all the help. A lot of talented people on this forum.
There is no reason to not root this phone in my opinion. You can unroot it. You will get OTA updates using the stock ROM. Many of the recommended apps, guides, useful information is in the sticky at the top. Please read that, then ask any more detailed question you may have.
edit: when you root, there will be NO change to your apps/contacts/settings/etc.... you will reboot and be like "well, am I rooted?"... look for the superuser app in your app drawer, there? Good, you were successful.
Ok, you got an excellent thread there that pretty much answered all my questions! I will root my phone and get back here if I have any more questions, with a cleaned up list. Thanks.
will applying the RyanZA fix stop the OTA update?
A lot of people have this misconception that rooting means modifying their phone. Rooting by itself is not really modifying anything on your phone, all it does is give you super user privileges.
Think of your Mac or Windows PC, you have administrative accounts and you have user accounts. Admins can do anything, user accounts are typically limited.
When you have root access to your phone, you are the admin. You can access features that default account can't.
With that said, once you do have su you step into a whole new world with many different paths. You can can simply stay rooted and use apps that required root access and leave it at that.
Or you can dive into custom ROMs. This is where you step off the manufacturers intended path and follow community developed versions of the operating system.
Alternatively, in between those two extremes above you can do many things in between. You can stay with stock rom but have custom (modules or programs) APKs, or other modifications that change or expand on stock ROM.
Always keep in mind that once you choose to root, what happens to your device is your responsibility. Once again, your responsibility. If you are not willing to accept that, then stay non-rooted/stock and responsibility will be on Samsung to add/remove features, provide updates, fix bugs, etc.
Ok, so a few questions:
I bought Autostart and hid the system apps. Now what? I don't know what to disable from this list. There are applications, but they are listed under several categories. For example, "Application Removed." I have no idea what that category is for. Should I just worry about "After Startup"? Please elaborate.
You don't recommend AppKiller. Won't all those open applications just drain the battery? For example, if I have TeleNav open, how can I close it after I am done using it without AKiller?
There is an entire thread of various people posting various things, but I still would like to see just ONE combined list of all the "safe" bloatware to remove and "risky" ones. That thread did not help me at all since various people are reporting various things.
You recommend Root Explorer, which is kind of expensive. Is there any reason why I can't use the uninstall function of Titanium Backup? Is it any less thorough?
Where is the restart function?
How can I disable those annoying power down and power up sounds of the phone? Can this be done without lowering system volume?
Thanks!
Awesome, Glad to hear your root went well.
1. I bought Autostart and hid the system apps. Now what? I don't know what to disable from this list. There are applications, but they are listed under several categories. For example, "Application Removed." I have no idea what that category is for. Should I just worry about "After Startup"? Please elaborate.
I remove almost all non-system apps unless it is logical wht said app would need to function, aka, text received you would not want to block messanger/handcent..... if there is something you are questioning, just let me know.
2. You don't recommend AppKiller. Won't all those open applications just drain the battery? For example, if I have TeleNav open, how can I close it after I am done using it without AKiller?
Now that you have root, remove all of the bloatware and it will not be an issue. These run in the background and very likely are not using ANY of your resources.
3. There is an entire thread of various people posting various things, but I still would like to see just ONE combined list of all the "safe" bloatware to remove and "risky" ones. That thread did not help me at all since various people are reporting various things.
I used that thread because a lot of people posted the apps they removed. Almost all of them can be removed, if there is one you are questioning, let me know.
4. You recommend Root Explorer, which is kind of expensive. Is there any reason why I can't use the uninstall function of Titanium Backup? Is it any less thorough?
I mentioned in the sticky that I do not use TB. I know it allows you to remove apps, but Root Explorer does this and a lot more. For example..... #6
5. Where is the restart function?
Not sure I know what you mean? if you want a reboot option you can get Quick Boot from the market.
6. How can I disable those annoying power down and power up sounds of the phone? Can this be done without lowering system volume?
In the sticky I show where the files are located. With Root Explorer you can navigate to them and delete the files.
I agree with a lot on this thread. A master Guide for rooting/unrooting and usage should be made. The FAQ currently stickied is informative for the most part but it focuses on far too many things to be able to go into enough detail on each. Personally I would like a "All things root" guide or something sticked which is comprehensive and focuses JUST on that, with the most common root usage apps and things posted (including safe disabling or removal of bloat, backing up, flashing roms, etc.) so that people who have NO idea whatsoever and it is their first phone or something can just read that and feel at home. I may start working on one if no one else does it, we'll see.
}{Alienz}{ said:
so that people who have NO idea whatsoever and it is their first phone or something can just read that and feel at home.
Click to expand...
Click to collapse
I'd say that if someone has no idea what they are doing, the last thing they should be attempting is flashing firmware on their phone.
The layer of obscurity and technical difficulty associated with rooting/modding is of benefit in terms of preventing people from doing things they should not be doing without sufficient knowledge base.
There is plenty of info here and online in general to start someone off if they are interested in learning about this in general.
IMHO, creating a trail of bread crumbs for someone who doesn't know what they are doing is more likely to hurt them or community in general rather than help them.
In my experience rooting your could be fun and a nightmare, if not done properly and, you have of time on you're you could become a rom switching addict cyanogen is currently available for the vibrant you can still root, but you will be on stock vibrant rom.till samsung release the source code so no froyo.and the rumor is that they won't release the source code.
Sent from my Nexus One using XDA App
s15274n said:
Awesome, Glad to hear your root went well.
1. I bought Autostart and hid the system apps. Now what? I don't know what to disable from this list. There are applications, but they are listed under several categories. For example, "Application Removed." I have no idea what that category is for. Should I just worry about "After Startup"? Please elaborate.
I remove almost all non-system apps unless it is logical wht said app would need to function, aka, text received you would not want to block messanger/handcent..... if there is something you are questioning, just let me know.
2. You don't recommend AppKiller. Won't all those open applications just drain the battery? For example, if I have TeleNav open, how can I close it after I am done using it without AKiller?
Now that you have root, remove all of the bloatware and it will not be an issue. These run in the background and very likely are not using ANY of your resources.
3. There is an entire thread of various people posting various things, but I still would like to see just ONE combined list of all the "safe" bloatware to remove and "risky" ones. That thread did not help me at all since various people are reporting various things.
I used that thread because a lot of people posted the apps they removed. Almost all of them can be removed, if there is one you are questioning, let me know.
4. You recommend Root Explorer, which is kind of expensive. Is there any reason why I can't use the uninstall function of Titanium Backup? Is it any less thorough?
I mentioned in the sticky that I do not use TB. I know it allows you to remove apps, but Root Explorer does this and a lot more. For example..... #6
5. Where is the restart function?
Not sure I know what you mean? if you want a reboot option you can get Quick Boot from the market.
6. How can I disable those annoying power down and power up sounds of the phone? Can this be done without lowering system volume?
In the sticky I show where the files are located. With Root Explorer you can navigate to them and delete the files.
Click to expand...
Click to collapse
1. What I don't understand is that the category says "New Outgoing Call" and GVoice beneath it. So I should NOT disable it, right? Because it has nothing to do with startup? But if so, then almost every other category has nothing to do with startup either. It is only the first listing that says "After Startup" and it misses A LOT of applications that do start up, like TeleNav. I don't even see TeleNav anywhere in that list. Same is true for "Email," Gallery," "Voice Dialer," and a bunch of other apps that I don't want to start on startup. I don't see any way of killing these other than by ATKiller. Am I missing something here?
2. See the problem is this: right now I have Telenav and I use it sometimes. However, I don't want it to run just whenever. So if I don't want to uninstall it, isn't my only solution ATKiller? There are other programs like this. And I can't disable them from the Autostart menu either since they're not there (Filtered out System files).
3. That site does not list what each of the bloatware does. For example, I am not sure I want to remove Account and Sync because I might need it for my bills. Same thing with "MyFiles." I don't even know what "vvm" is.
4. I am not able to tether the phone. I already tried Barnacle and it said "Running..." after I disabled supplicant, used channel 6, and disable ad-hoc. Then I tried this: http://forum.xda-developers.com/showthread.php?t=739147&highlight=tether, but I am still not able to connect. My laptop detects the phone as "computer-to-computer network," but when I click connect, it keeps trying to connect and then doesn't. I am not sure where to go from here.
Thanks.
One more thing I still don't know: how are the updates going to work from now on? Whenever an Android update comes out, like 2.1update or Froyo, do I have to come here and do everything manually? Or is there a way from within the phone to find out with one click? I am assuming whatever update is available for the phone will also be available for custom download (otherwise I could unroot, update, reroot?).
Thanks.
By the way, I also agree about a complete guide. It's not that it will enable the clueless to mess up their phone, but rather the opposite - it will allow the clueless to become cluefull. Such a guide would be very helpful. Meanwhile I am having to jump from thread to thread and then to Google trying to find out about this or that. That's not to say that the guide available isn't very helpful already.
I've already contacted a few people about starting said guide. I have not got much feedback from people willing to help....
^ you've asked a lot man... I can try and answer some, but you need to keep doing some reading. I feel like I've offered up a lot as is.
Just b/c you have root, does not mean you will not receive the OTA updates. If Froyo is released, you can update from the phone, you will lose root though. Most of us, will wait for the developers to have a stock froyo + root that we can flash.
why use telenav? I am not familiar.. just curious why not use google nav?
autostarts, just b/c you have it set to not start an app on boot, does not mean when you click the icon to open it will cause an issue. Really not that big of a deal. If you notice an issue, just set the app back to enabled.
Do not use a task killer.
The thread I linked has plenty of information for what you can remove from the phone, with instructions.... same for the barnacle tether app. If you want, download Wireless Tether, google it... the source code is on google.
http://code.google.com/p/android-wifi-tether/downloads/list
androidaddict23 said:
In my experience rooting your could be fun and a nightmare, if not done properly and, you have of time on you're you could become a rom switching addict cyanogen is currently available for the vibrant you can still root, but you will be on stock vibrant rom.till samsung release the source code so no froyo.and the rumor is that they won't release the source code.
Sent from my Nexus One using XDA App
Click to expand...
Click to collapse
Cyanogen is not yet available for the Vibrant. It will soon.
Froyo-cooked ROMS are already out for the Vibrant (alas with some bugs) so I don't think there's a reason to think Cyanogen won't be on Froyo.
Also: Never having done a root/rom flash does not make someone stupid or signify they should never try it. It just means they should READ some documentation and be technically up to the challenge before they do. I don't think having a clear guide on most of the process will hurt anyone who is coming into this but doesn't yet know all the details and steps of what to do.
Excelsius said:
Ok, you got an excellent thread there that pretty much answered all my questions! I will root my phone and get back here if I have any more questions, with a cleaned up list. Thanks.
Click to expand...
Click to collapse
glad the root went well for you. I am wanting to root my phone too, but not sure which root method is easiest and best.
Which root method did you use?
I had a mytouch rooted before the Vibrant, but they are way different and I dont want to screw up
s15274n said:
I've already contacted a few people about starting said guide. I have not got much feedback from people willing to help....
^ you've asked a lot man... I can try and answer some, but you need to keep doing some reading. I feel like I've offered up a lot as is.
Just b/c you have root, does not mean you will not receive the OTA updates. If Froyo is released, you can update from the phone, you will lose root though. Most of us, will wait for the developers to have a stock froyo + root that we can flash.
why use telenav? I am not familiar.. just curious why not use google nav?
autostarts, just b/c you have it set to not start an app on boot, does not mean when you click the icon to open it will cause an issue. Really not that big of a deal. If you notice an issue, just set the app back to enabled.
Do not use a task killer.
The thread I linked has plenty of information for what you can remove from the phone, with instructions.... same for the barnacle tether app. If you want, download Wireless Tether, google it... the source code is on google.
http://code.google.com/p/android-wifi-tether/downloads/list
Click to expand...
Click to collapse
I appreciate all your answers. I don't mean to say that anyone else can't answer as well. I am still unclear on several things I asked and would appreciate if someone could chime in, at least about the exact procedures for using autostart and the reasoning behind not using the task killer. I am new to Android, but I am pretty good at computers, including building them. So when I am learning about doing this or that, I would like to know about the reasoning behind that. I am sure that all of the questions I ask here I can find out on my own, but I was hoping that I could utilize the purpose of the forum and learn something from the veterans rather than reinventing the wheel myself.
I am using Telenav because I have a one month free trial. I discovered Google Nav just yesterday. I just want to compare them myself, even though it is unlikely I will pay $10/month in either case. But remember that Telenav is just one of the applications causing issues.
Thanks for all the answers. Please don't feel pressured to answer all the things I might ask. If I don't get enough answers, I'll just do a quick thread search and if that's not fruitful, I'll create a specific thread for autostart usage.
androidaddict23 said:
till samsung release the source code so no froyo.and the rumor is that they won't release the source code.
Click to expand...
Click to collapse
Isn't this illegal? I thought the whole point of Android was opensource and under the GPL License, they are required to post the full source code, right? Or I could just be way off base here.
kboater said:
glad the root went well for you. I am wanting to root my phone too, but not sure which root method is easiest and best.
Which root method did you use?
I had a mytouch rooted before the Vibrant, but they are way different and I dont want to screw up
Click to expand...
Click to collapse
I used the first procedure recommended in the sticky: http://forum.xda-developers.com/showpost.php?p=7150299&postcount=1
I am not sure why it said that you have to restart several times. Here are some clarifications on the steps there that I think were not too clear:
1. When you connect your device, you need to pull down the message area, click on the USB, and only then you will see the option to MOUNT your phone. I had to experiment to figure this out.
2. The guide doesn't say, but if your USB debugging mode is on, I would disable it, just to be safe: Settings (this is that leftmost button on your phone when you're at your desktop)-->Applications-->Development-->USB debugging (uncheck). This might be unnecessary, but I did it just to be safe.
3. When you are copying the Update.zip file into your phone, make sure you check the size of the folder. It must be your internal storage - it will be 12GB+ and will have your system files. If you have trouble identifying this, simply remove your SD card!
4. When you are restarting the phone, make sure you press the volume button in the MIDDLE so that it is entirely pressed (up and down). While holding it, press and hold the power. Do not let go of the volume button until your enter the recovery menu.
Anyway, that's what I did and rooted from the first time without any issues.
t0phux said:
Isn't this illegal? I thought the whole point of Android was opensource and under the GPL License, they are required to post the full source code, right? Or I could just be way off base here.
Click to expand...
Click to collapse
It could be that Samsung has modified the code for their own phones making the code their property, while the "regular" 2.2 (unmodified) would be available to everyone. I could be wrong, but I think this how it would work.
Excelsius said:
I used the first procedure recommended in the sticky: http://forum.xda-developers.com/showpost.php?p=7150299&postcount=1
I am not sure why it said that you have to restart several times. Here are some clarifications on the steps there that I think were not too clear:
1. When you connect your device, you need to pull down the message area, click on the USB, and only then you will see the option to MOUNT your phone. I had to experiment to figure this out.
2. The guide doesn't say, but if your USB debugging mode is on, I would disable it, just to be safe: Settings (this is that leftmost button on your phone when you're at your desktop)-->Applications-->Development-->USB debugging (uncheck). This might be unnecessary, but I did it just to be safe.
3. When you are copying the Update.zip file into your phone, make sure you check the size of the folder. It must be your internal storage - it will be 12GB+ and will have your system files. If you have trouble identifying this, simply remove your SD card!
4. When you are restarting the phone, make sure you press the volume button in the MIDDLE so that it is entirely pressed (up and down). While holding it, press and hold the power. Do not let go of the volume button until your enter the recovery menu.
Anyway, that's what I did and rooted from the first time without any issues.
Click to expand...
Click to collapse
thanks
10 char

New root tool Unlock root

http://www.unlockroot.com/guide.htm
Device list is here
http://www.unlockroot.com/unlockroot.php
HTC HTC Desire Z 2.3.7
have anyone tryied it yet?
Using this for rooting looks like a longshot to me...
Rooting through ADB is much much much safer.
Avira has detected 2 virus. i deleted it
moshafidi said:
Avira has detected 2 virus. i deleted it
Click to expand...
Click to collapse
Microsoft Security Essentials detected stuff too, seems like I'll brick my phone with this. So I think I'll just stick with gfree
wanted to try, but kaspersky also say "virus alarm"
Guys, you do realize that rooting exploits are technically viruses, right?
Superoneclick comes up as a virus on my home computer, yet everyone except HTC phone owners use it to gain root.
sino8r said:
Guys, you do realize that rooting exploits are technically viruses, right?
Click to expand...
Click to collapse
Would rooting exploits on Linux/Android come up as viruses on Windows?
redpoint73 said:
Would rooting exploits on Linux/Android come up as viruses on Windows?
Click to expand...
Click to collapse
This tool is downloaded to your computer, then you execute it and it's supposed root your android automatically. Yes, they do show up as viruses sometimes.
The question, is it legit? I have my doubts.
the4biddendonut said:
Superoneclick comes up as a virus on my home computer, yet everyone except HTC phone owners use it to gain root.
Click to expand...
Click to collapse
Did a bit of Googling around, just to find out more about why Superoneclick comes up as containing a virus sometimes.
The following gives some theories on why this happens.
http://www.reddit.com/r/Android/comments/fwm9b/superoneclick_severe_virus_alert_in_windows/
So to answer my own question, it seems that the anti-virus programs may indeed be screening for exploits that don't actually affect Windows, but Linux. Whether this is the case with Unlock Root, or its actually spreading a Windows virus, who knows?
These are all very valid points, yes as with any rooting process, you could end up with a nice shiny brick but then again, "He who dares, Wins!"
However i am a at this having just about rooted my old milestone on the 8th attempt so i think i may leave this to someone else a little than me to try 1st!
No good
You know, there are ZERO decent guides, even I'm afraid to say, here on xda on how to successfully, easily and preferrably with a single click, root a Desire Z - and I've been desperate to do mine for a long time. The problem is a lot of the guides have dead links, hard to follow or half missing instructions.
Anyway.
This looked like deep joy, so I just installed it, ran it, changed to USB debug mode, hit "root" against my device and the upshot was that it looked like it went through the process, did a reboot, then still no root (checked with a root checker app and with Avast, trying to access Firewall mode which needs root).
I'm gutted, I thought I could finally make root happen without WAY too complex instructions.
Desire Z, GSM, 2.3.3 unbranded here if that helps anyone out.
adamchap said:
You know, there are ZERO decent guides, even I'm afraid to say, here on xda on how to successfully, easily and preferrably with a single click, root a Desire Z - and I've been desperate to do mine for a long time. The problem is a lot of the guides have dead links, hard to follow or half missing instructions.
Anyway.
This looked like deep joy, so I just installed it, ran it, changed to USB debug mode, hit "root" against my device and the upshot was that it looked like it went through the process, did a reboot, then still no root (checked with a root checker app and with Avast, trying to access Firewall mode which needs root).
I'm gutted, I thought I could finally make root happen without WAY too complex instructions.
Desire Z, GSM, 2.3.3 unbranded here if that helps anyone out.
Click to expand...
Click to collapse
I found it pretty easy following the main wiki. You need adb but it's easy if you do a little reading.
Sent from my HTC Vision using xda premium
adamchap said:
You know, there are ZERO decent guides, even I'm afraid to say, here on xda on how to successfully, easily and preferrably with a single click, root a Desire Z - and I've been desperate to do mine for a long time. The problem is a lot of the guides have dead links, hard to follow or half missing instructions.
Anyway.
This looked like deep joy, so I just installed it, ran it, changed to USB debug mode, hit "root" against my device and the upshot was that it looked like it went through the process, did a reboot, then still no root (checked with a root checker app and with Avast, trying to access Firewall mode which needs root).
I'm gutted, I thought I could finally make root happen without WAY too complex instructions.
Desire Z, GSM, 2.3.3 unbranded here if that helps anyone out.
Click to expand...
Click to collapse
It was really hard for me at first learning adb, but now it's pretty easy. I'm no expert, but I can follow directions. PM me if you need any help.
The main things that would concern me about this is that it took so long to be released, it's being told to us by some new person who's barely posted anything before, and even more concerning he never came to check back/talk about it :S
I just rooted a friend's EVO Shift which is really similar to the G2. It was a pain but if you follow the steps to the "t" you should be okay. The reason I meantioned it was because I rooted my G2 when it had stock Froyo on it and was easy as cake The problem which makes it difficult is downgrading to Froyo. Once you get past that part... its as easy as using Visionary apk and clicking a button. Its pretty safe inspite of what people think. I'm all for the one click root apps but it's better (and maybe required) to downgrade to Froyo first.
The REAL problem people have is learning adb. It's easy for us veterans but does seem difficult for most people and the command prompt can be intimidating. the only thing I can suggest is put the adb in a folder that you can remember and just copying and pasting commands. just make sure the spaces in the lines are right and its pretty safe.
About this root tool, yeah, I'd say its much safer to use a reputable method than something new.
and with the virus scanners basically calling all root related stuff viruses... there's no way to check for sure if its safe or not. That's why its probably best to go on reputation. The root exploits are what they say they are: an exploit like some viruses in that category. I recommend Avira virus app for windows because it will actually show you the particular virus in their library/database and it's definition and its use. Very handy app along with AVG. Well... good luck to all!
adamchap said:
You know, there are ZERO decent guides, even I'm afraid to say, here on xda on how to successfully, easily and preferrably with a single click, root a Desire Z - and I've been desperate to do mine for a long time. The problem is a lot of the guides have dead links, hard to follow or half missing instructions.
Anyway.
This looked like deep joy, so I just installed it, ran it, changed to USB debug mode, hit "root" against my device and the upshot was that it looked like it went through the process, did a reboot, then still no root (checked with a root checker app and with Avast, trying to access Firewall mode which needs root).
I'm gutted, I thought I could finally make root happen without WAY too complex instructions.
Desire Z, GSM, 2.3.3 unbranded here if that helps anyone out.
Click to expand...
Click to collapse
Wiki guide is the only one you need: http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_Vision_.28G2.2FDZ.29_and_DHD
But it really doesn't sound like you want a guide, you want a one-click solution. This seems to be an increasing trend, as more of the masses get interested in rooting, but don't want to put forth any effort.
It would seem to me that having root, without an understanding of some of the basic terms, concepts, and tools, is a dangerous place to be. Modding your phone without some basic knowledge can get you in a real mess, without the tools to get you out of it.
Do yourself a favor, just start reading. Understand the guide, roll up your sleeves and do it. Its really not that hard. But it will take some time, as many of the terms, tools, procedures will be new to you. But you'll be better for it in the long run. HTC has a tendency to protect their devices from one-click root apps. So if you like HTC devices, you may as well get used to the fact that rooted is a process, and not one click. Plus, with any ROM flashing or other modding, things like ADB are good to know and be able to use, in case things go awry.
Anything in the guide that you don't understand can usually be answered by just using the XDA search function, or Googling around the net. If you make a halfway legit attempt to research the question yourself, and still don't get it, come back to the forums and ask, and somebody will help you.
Agree with Redpoint73.
A tool that does system manipulation on a remote platform isn't a virus on the platform it's run, so programs that manipulate your windows host file perform actions similar to what some viruses do. Open an ADB and push a few commands is NOT that so if your system warns, take that seriously! Even if I would love to have a SuperOneClick give me root on my HTZ Desire Z (work phone so I really shouldn't mess with it) I am NOT interested in touching something like this. Why would someone register a domain and make an entire homepage, rather than posting the code here, unless it was fishy?
I would be ready to bet that these guys can monitize on this in one way or another, so it *might* work as a root but rest assure that either the PC or the phone is contaminated when it's done.
The point of one-click rooting is just to get to the features I want that I've been locked out from... using a firewall app, using a backup app, maybe a quick flash of a ROM without operator bloatware in it - a couple of other features like that. I'm sure the majority of users such as me don't feel we should NEED to learn command sets and technical stuff that we don't need to, nor have the time in our lives to learn.
It's all about features and user experience for me - and I can't get to those features without root. I don't want to do anything complex, arcane or put nightlies on, but simply have a lighter ROM with a couple of more features, and that doesn't need anything more than a button marked "Root".
Cheers for all the input on this everyone.

Rooting and Fixing Samsung Galaxy Tab E (SM-T560NU) (and fixing -504 issue)

Disclaimer: I know this should go in the correct subforum for my device, but I'm having trouble navigating this site, altogether. I only see subforums for a handful of devices. So if there is a better place for this thread, I apologize
Oh, where to begin. My wonderful girlfriend got me this tablet back in october, since i said it'd be nice to have a linux based tablet so i wouldn't have apple telling me what i can and cannot do with my device (she saw that as a hint, even though it was more social commentary, but I'll take it). Anyway, I found the 16GB limitation problematic, so I decided to root it so i could use some sort of sshfs app to create a slow multi-terabyte harddrive space to steam small files (like music) from. Seeing as i had the thing for only a week and it's kind of expensive, even for a nurse, to buy for me, i chickened out and made due with a small 8GB microSD card which i just happened to have laying around.
Fast forward to a few days ago, I ordered from Amazon a 128GB microSD card (also from samsung), and decided to try to make due with that. Only to find out (and, if you're able to help me you've probably met the following issues yourselves) that the seemingly largest apps refuse to let you move them to external storage. Even better, there's some apps like Star Wars KOTOR (2.5GB) that say they let you move them, but in reality they stay on internal storage and create empty folders on the external medium. And then many apps cannot write and read to and from SD cards (like DOSbox Turbo), for reasons that completely stump me (which leads to me having to move dos games back and forth when i want to play one that saves). I then read about this wonderful feature called "Adoptable Storage," and promptly go through all sorts of things to try to enable it, only to find out that, since I have Android Version 6.0.1 from Samsung, that feature was disabled by them. After using the email support to berate them (they don't have a suggestion box), decided to try to come here and figure out how to properly root this device and figure out how to solve my space issue (I have 128GB of space that I need to use, but have no idea how to use it for what i need to use it for). By the way, a small shoutout to Samsung support, despite my very terse response, there clearly was a human being at the other end and this human was very, very civil and said that they'll pass it on as feedback (I got the impression that the employee either had the same issue or at least wanted me to know that there have been alot of complaints about this issue).
Anyway, now that that wall of text is over, this is how far i've gotten.
I know that XDA is reliable, they've had problems in the past with malware, but it was unintentional and the ship has been cleaned. I don't know about anywhere else, so the rooting instructions i find elsewhere i assume are probably correct, but i don't know where to get files for the process that i can trust, outside of XDA (and i'm having trouble finding the files i need, here).
I have a nice little article from techbeasts.com ( techbeasts.com/install-twrp-and-root-samsung-galaxy-tab-e/ ), but I don't know where their downloads came from and how many people checked them out for windows and android trojans and such.
So...
1. Is that article accurate for android 6.0.1?
2. Are those files safe (free from corruption and viruses)?
3. If they're not safe, where can I get safe files?
4. I like to develop programs, and I want to be able to develop apps for android as well. Once rooted, how does one test how their app would work on an unrooted device to ensure the app follows the "proper procedures?"
5. How do I deal with apps that are root sensitive? The point of all this is so that I can keep using my apps, so if they all break because i'm rooted that defeats the purpose.
6. Other than having to be careful with what i do (I've used Linux for years, and I occasionally like to code in assembly), that it voids my warranty, and that screwing up can make for a really bad day, is there anything else that I should know? This is, indeed, my first touch screen device outside of Nintendo products, because my V3xi is fine for me as a phone.
EDIT:
7. Forgot the most important question: How would I go about getting adoptable storage working on this device once it is rooted?
Forward: Given the nature of my question, the URL is absolutely necessary. After I've gotten my "10 useful posts" I'll fix the URL for future viewers.
EDIT2: Decided to take a chance. Ran into some issues finding the "stock firmware" which I ended up having to do. For those that have problem getting TWRP to stick, you gotta flash the stock firmware of the version you have currently installed. I tried to flash the original that it came with, which, for some reason, it didn't like at all.
Oh, and don't turn off OEM mode after everything's done. I assumed that after everything was installed it wouldn't second guess it and i could safely turn it off for added security if any app went rogue or something. Nope, must keep it on, so do regular backups. Turn off auto-updating, etc. I hear there's some sort of app that lets you "update safely." Not sure what it is, but unless you *NEED* it, don't do it.
And as a bonus note (so it shows up in the archives), some apps didn't install right (either google or the app developer's fault, but these apps weren't tied to this process [pokemon go and just about all the final fantasy games]). The kicker about this is is that you will not notice this UNTIL you uninstall the app, and reinstall it. Deleting the data before uninstalling the app will make it unstable. To find the data, i used
Code:
du / | grep "pokemon" > pokesearch.log
, since i knew that there should not have been a pokemon related directory on my droid at the time, since i needed to reinstall pokemon go because it was acting really fruity. Deleting the folders (actually, the last entry contains the rest, so it's easier just to delete the last one) allowed me to avoid the -504 issue (not to be confused with 504).
Code:
[email protected]:/data/data/com.termux/files/home # cat pokesearch.log
4 /mnt/expand/07aa2c40-4a8f-428c-afb9-7495df69eb26/user/0/com.nianticlabs.pokemongo/cache
1192 /mnt/expand/07aa2c40-4a8f-428c-afb9-7495df69eb26/user/0/com.nianticlabs.pokemongo/code_cache
12 /mnt/expand/07aa2c40-4a8f-428c-afb9-7495df69eb26/user/0/com.nianticlabs.pokemongo/shared_prefs
4 /mnt/expand/07aa2c40-4a8f-428c-afb9-7495df69eb26/user/0/com.nianticlabs.pokemongo/files
1220 /mnt/expand/07aa2c40-4a8f-428c-afb9-7495df69eb26/user/0/com.nianticlabs.pokemongo
Message me if have the same tablet on a system root
Sent from my SM-S907VL using Tapatalk
denakor said:
Message me if have the same tablet on a system root
Sent from my SM-S907VL using Tapatalk
Click to expand...
Click to collapse
We can talk here for the benefit of the community. Any problems you might have should be documented for the sake of the community. But, yes, the -504 error i mentioned above can only be solved through root, so, yes, i was successful.
Kohlrak said:
We can talk here for the benefit of the community. Any problems you might have should be documented for the sake of the community. But, yes, the -504 error i mentioned above can only be solved through root, so, yes, i was successful.
Click to expand...
Click to collapse
I have the same tablet
---------- Post added at 09:32 PM ---------- Previous post was at 09:28 PM ----------
keith thibodeau said:
I have the same tablet
Click to expand...
Click to collapse
Tablet just updated itself after I tried to root it .. MM 7.0.1 but I didnt ask it to
I disabled automatic updates (from settings and google play, 'cause it's in both places) to prevent this problem. There might be a new firmware for the tablet, but i'm sticking to this version. I'm not sure you can downgrade after you upgrade, though. You can take a shot, though, if you're not afraid of loosing data. I doubt this process will brick as long as you can get the official firm ware on backup incase something goes wrong.
Kohlrak said:
We can talk here for the benefit of the community. Any problems you might have should be documented for the sake of the community. But, yes, the -504 error i mentioned above can only be solved through root, so, yes, i was successful.
Click to expand...
Click to collapse
Now it seems impossible to root without pc

Categories

Resources