99% Of Android Handsets Are Vulnerable To Attack That Can Leak User Login Credentials - XPERIA X10 General

Hello,
I've been going through Redmondpie and there's a lil issue that popped up.
http://www.redmondpie.com/99-of-and...-attack-that-can-leak-user-login-credentials/
Researchers at multiple universities are warning that almost all smartphones running Google’s Android software could be allowing third parties access to digital tokens that could allow access to services such as Google Calendar and Contacts.
The issue, which affects all devices running versions of Android prior to 2.3.3 is related to handling of the authentication protocol ClientLogin. According to researchers at the German University of Ulm the, once a user enters their credentials, the programming interface retrieves its token in clear text. With the token valid for 14 days, a window appears where attackers could use their new found access however they like.
The whole process is relatively easy to exploit too, according to the researchers.
“We wanted to know if it is really possible to launch an impersonation attack against Google services and started our own analysis,”
“The short answer is: Yes, it is possible, and it is quite easy to do so.”
This comes after a professor at Rice University demonstrated a similar flaw affecting Facebook, Twitter and once again Google Calendar. This time however the hack could only be carried out on an unsecured Wi-Fi network. Google has since patched the hole in Android 2.3.4 but failed to plug the whole when it comes to Picasa which allows web albums to potentially transmit sensitive data in the clear. Google is working on a fix.
The potential security holes are exacerbated by Android’s fragmentation issues, which cause phones to remain on older software long after patches have been released. With carriers and device manufacturers insisting on meddling with Google’s operating system updates can take months to get past their own software engineers. The result is a massive 99% of Android devices still being wide open to hacks.
Google recently said it will be working more closely with carriers to try to reduce the time it takes for updates to be rolled out fully.
-------------
What is your opinion? We are now risking our login credentials and our entire data with third party tokens and google which could be taken advantage of.
(This is only happening for users prior to 2.3.3)

Yeah, I saw an article about this too on
http://news.cnet.com/8301-27080_3-20063646-245.html?tag=TOCmoreStories.0
also. Good post. I had no idea android could be attacked like this. Here is another article about it if you want to see another one from one of my favorite sites.

omg, you mean to tell me that people may be able to find out what time my doctor's appointment is AND get my mom's phone number?

great news...now you can save your ass from a embarrassing situation in front of your girlfriend saying your android was hacked

This isn't really surprising considering it only works over unencrypted networks. Everyone knows unencrypted networks are susceptible to attack I'm not to surprised at this. It was kind of stupid of Google to transmit important data in plain text but hey, at least they fixed it in 2.3.4. I never use WiFi anyway so guess I'm safe.

"the following scare tactic/smear campaign has been brought to you by apple"

If you're using unsecured wifi, you deserve to get hacked

pngface said:
If you're using unsecured wifi, you deserve to get hacked
Click to expand...
Click to collapse
Yeahh! That's True! I've never using public or free wifi unless I know from whom it is.

Wow im scared.
NOT
Like hackers are following me when I use the internet on my phone :/ And I almost only use internet here at home on my secured wifi. And I wouldn't be even scared when I would be using a open wifi network. Like they do know what I'm doing.
It's just some piece of crap news made by apple.

There you go, issue fixed: http://www.engadget.com/2011/05/18/google-confirms-android-security-issue-server-side-fix-rolling/

I still cant understand why 99% of users are affected..
Do 99% of Android user connect to an open network ? Even if they connect do they enter credentials so that the auth token can be stolen ? Why is this even a concern ?

realunited123 said:
I still cant understand why 99% of users are affected..
Do 99% of Android user connect to an open network ? Even if they connect do they enter credentials so that the auth token can be stolen ? Why is this even a concern ?
Click to expand...
Click to collapse
99% aren't on 2.3.4 yet, and this is where the issue was fixed....

fiscidtox said:
99% aren't on 2.3.4 yet, and this is where the issue was fixed....
Click to expand...
Click to collapse
I know that. But do 99% of users connect to open network ? And the issue is still with Picasa (even on 2.3.4)

realunited123 said:
I know that. But do 99% of users connect to open network ? And the issue is still with Picasa (even on 2.3.4)
Click to expand...
Click to collapse
no but 99% of users theoretically could, hence the figure.
As for picasa, unless your posting nude pics you have nothing to worry about lol

fiscidtox said:
no but 99% of users theoretically could, hence the figure.
As for picasa, unless your posting nude pics you have nothing to worry about lol
Click to expand...
Click to collapse
Lol i dont even use picasa
Sent from my X10project using XDA App

fiscidtox said:
no but 99% of users theoretically could, hence the figure.
As for picasa, unless your posting nude pics you have nothing to worry about lol
Click to expand...
Click to collapse
And to be honest if you are not bothered about posting your nude pics on picasa, you probably wouldn't be worried if it got into someone else's hands
Sent from my LT15i using XDA App

it's scary!

Not really that scary.. what would be scary if those nude pics started showing up all over the OS without a way of ever getting rid of it all.

Why scary? Android's adoption rate would go through the roof then. The inner pervert inside everyone will shine

Interesting to read but I write this on 2.3.4 miui so I do feel bad for the others who don't root their Android device and install custom roms.
Have a look at this article which has implications for all Android devices.
http://mobile.engadget.com/2011/04/...or-android-a-security-manager-that-keeps-per/
Sent from the miui matrix SGH-i897

Related

New Android Virus from China?

At the company I work for, an email came out from our care group that I thought everyone might find interesting. When I first read it, I immediately thought of the MIUI ROM that I installed....
"A new virus infecting the android based phones has been detected in china.It is being said that this is by far the most complicated and sophisticated Android virus that the security firm has come across.This virus is being dubbed as ‘Gemini’ and it has the capability of being remotely operated by the hacker once it is in the phone.Though many viruses have been detected earlier in Android apps. but this the is most sophisticated among all of them.
The Botnet feature of the virus is the major concern.Once the malware is completely installed on the user’s phone, it has the potential to receive commands from a remote server that allows the hacker to access the user’s data and all personal stuff.Once the privacy of the user is compromised,the hacker can do anything he wish to do.
Lookout mobile security,who basically detected this virus said that Gemini uses advanced and sophisticated techniques to hide it’s track.They also said that that the virus is capable of sending location coordinates and device identifiers to the remote server, helping it to generate a list of all installed apps on the infected phone and to install more infected ones.
All the infected applications that have yet come up have been downloaded from a third party Chinese application market. “Geinimi is effectively being ‘grafted’ onto repackaged versions of legitimate applications, primarily games, and distributed in third-party Chinese Android app markets,” the company wrote in a blog post.On the other hand,the same applications that are downloaded from official Android application market are safe.
Although it is not very clear that what actually is the intent of the authors of Gemini.The chief technology officer for Lookout,Kevin mahaffy said that “It could be anything from a malicious advertising network to an attempt to create a botnet”.Botnet basically is a group of infected computers or phones that the attacker controls to compromise for data and identity theft and also it can be used to launch attack on other machines.
The application which are grafted with virus are mostly games and a few applications.Some among them are:
• Monkey Jump 2
• Sex Positions
• President vs. Aliens
• City Defense
• Baseball Superstars 2010.
Here’s how it works:
When a host application containing Geinimi is installed on a client’s phone, the Trojan gets activated in the background and collects information that can compromise a user’s privacy.Geinimi attempts to connect to a remote server using one of 10 embedded domain names. If it connects, Geinimi transmits collected information to the remote server."
here you go http://www.msnbc.msn.com/id/40857219/ns/technology_and_science-wireless/
Interesting read. I wonder: If the infected app is removed, does the virus get removed with it?
rugedraw said:
Interesting read. I wonder: If the infected app is removed, does the virus get removed with it?
Click to expand...
Click to collapse
that would make for a pretty ineffective trojan. I highly doubt it.
also, as per the msnbc article, the virus is named "Geinimi," not "Gemini." Although I guarantee everyone will call it gemini because it's so much easier, at least to an english speaker.
Old news.
cjh6386 said:
that would make for a pretty ineffective trojan. I highly doubt it.
Click to expand...
Click to collapse
It does get removed if you remove it from applications. The only way it wouldn't get removed is if the app were to root the device first, and then push the apk to the apps folder. but this one doesnt do that.
I'm honestly surprised there aren't more of them out there, it would be way to easy to do.
Sent from my PC36100 using XDA App
cjh6386 said:
that would make for a pretty ineffective trojan. I highly doubt it.
Click to expand...
Click to collapse
Good point......I'm just not sure how viruses affect our phones compared to how they affect Windows based PC's.
Last-Chance said:
Old news.
It does get removed if you remove it from applications. The only way it wouldn't get removed is if the app were to root the device first, and then push the apk to the apps folder. but this one doesnt do that.
Click to expand...
Click to collapse
Even then, you would still be able to remove it manually from the apps folder, no? Providing the user has root access, of course.
This is bull****. Why can't they leave viruses for windows computers?
Sent From My HTC Evo 4G On The Now Network From Sprint Using Tapatalk Pro!
I guess it's becoming an issue with the carriers too since our Care department is now getting swamped with calls from people who either "think" they're phones are infected or read that MSNBC article.....
In any event, I have to admit that I didn't even give it a thought that I might get a virus on my phone. I actually even saw quite a few virus programs on the Market and just ignored them. I'll now have to revisit that option, especially since I'm installing ROMS from every source that posts them....
rugedraw said:
Good point......I'm just not sure how viruses affect our phones compared to how they affect Windows based PC's.
Even then, you would still be able to remove it manually from the apps folder, no? Providing the user has root access, of course.
Click to expand...
Click to collapse
probably, but if the app is smart enough to root android devices, chances are its smart enough to hide itself. With root access it can pretty much do anything it wants, including hiding itself, as well as accessing other programs, and what not.
Would a nand restore get rid of it?
Sent from my HTC Supersonic
If it needs root access to do it's thing, wouldn't that trigger the superuser app? And if a game triggers the superuser app, and a person clicks on "Allow"...then...maybe they deserve to be infected.
From what I remember of reading about this virus, it only affected users in China who downloaded it from a third-party market application and not Google's Android Market.
Viruses in android doesn't make any sense to me at all. Since android is so different. As another poster stated, doing a nand is in essence like wiping the total system, correct?
Sent from the Evo 4G
dglowe343 said:
Would a nand restore get rid of it?
Sent from my HTC Supersonic
Click to expand...
Click to collapse
in essence yes. But a person smart enough to code a virus that roots devices is probably smart enough to backdoor nand restore points as well.
Holyrolla said:
If it needs root access to do it's thing, wouldn't that trigger the superuser app? And if a game triggers the superuser app, and a person clicks on "Allow"...then...maybe they deserve to be infected.
Click to expand...
Click to collapse
The chinese one doesn't need root. I was just saying that if it had root it would be a lot harder to remove. And the app is binded to other programs, so the person will probably not even know that the legit one doesnt require superuser.
mbaseball3 said:
Viruses in android doesn't make any sense to me at all. Since android is so different. As another poster stated, doing a nand is in essence like wiping the total system, correct?
Sent from the Evo 4G
Click to expand...
Click to collapse
Why doesn't it? Millions of dollars are stolen each year by criminals that infect phones in order to dial out premium numbers.
Last-Chance said:
in essence yes. But a person smart enough to code a virus that roots devices is probably smart enough to backdoor nand restore points as well.
Click to expand...
Click to collapse
fear monger much?
EDIT: for those curious he's just drumming up nonsense to see if he can get you in a frenzy ... that or has has NO CLUE what he's talking about.
Even if someone was stupid enough to "Accept default permissions" and not question why your video game that you downloaded from a third party marketplace with "allow unknown sources to be installed" flag set needs to look at your phone calls and personal contacts ... there would still be a popup by superuser the moment it tried to do something that required root.
It's a perfect storm trojan: no more a risk to your phone than a phishing site is to your identity: that is a huge problem if you're an idiot.
Justin.G11 said:
fear monger much?
EDIT: for those curious he's just drumming up nonsense to see if he can get you in a frenzy ... that or has has NO CLUE what he's talking about.
Even if someone was stupid enough to "Accept default permissions" and not question why your video game that you downloaded from a third party marketplace with "allow unknown sources to be installed" flag set needs to look at your phone calls and personal contacts ... there would still be a popup by superuser the moment it tried to do something that required root.
It's a perfect storm trojan: no more a risk to your phone than a phishing site is to your identity: that is a huge problem if you're an idiot.
Click to expand...
Click to collapse
yea bro, cause you know what you are talking about. How about you actually look up **** before talking.
1. A 3rd party app can simply ask for 1 permission, then root the phone and gain wide variety of permissions. When i say root, i dont mean the same way as you see here. It will gain permissions beyond what normal apps do. It wont ask for superuser permissions. It will only ask for 1 permission on install
2. Did you know that there is a Buffer overflow available on all phones that are running 2.1 of android? Did you also know that there is a buffer overflow for all androids that are running the latest webkit on 2.2? apparently not. fyi, a buffer overflow in a browser can represent a huge risk, meaning visiting a website that is infected will in return infect you. A buffer overflow will also not ask for any permissions and load a malicious application straight to your phone.
Next time when you talk to someone as if they were a kid, make sure that person doesn't happen to have a CS degree, and 8+ years of experience in computer security. Now gtfo.
those chinese have a strange sense of humor, I bet it started as a prank by some drunk college students to see if they could do something small that would make americans even more paranoid
NewZJ said:
those chinese have a strange sense of humor, I bet it started as a prank by some drunk college students to see if they could do something small that would make americans even more paranoid
Click to expand...
Click to collapse
if you call being charged 100s of dollars on your bill because some virus made phone calls to premium rate numbers a joke, then yes they are very funny.

anyone else feeling like they are playing with a loaded gun?

So I've been away for just a day (no phone, no pc) and when I get home I start browsing all the different sites I enjoy, finding anything that may be interesting and I feel like Ive been slapped in the face, I see several articles about malicious apps, nothing new really, and as I do often go on various spouts of randomly downloading apps, Im still over cautiously paranoid but this droid dream as they call it and the information (albeit lack of) surrounding this latest round of malware has me worried, although I do tend to wipe my phone twice a month (as I said I am rather paranoid) Im just wondering what the general opinions are and any tips that could be offered to help avoid problems like these, and as I have yet to do so and Im feeling quite ungrateful at this time, Thank you to the devs and community, Im either running a factory reset, wiping the phone for some patch or update, flashing a new kernel/rom that Im actually relieved that my phone never keeps anything long enough to be exploited, if it wasnt for all the helpful people, tutorials and advice I would undoubtedly be running a stock phone and Im 99% sure i would have a some malicious app installed (I almost downloaded one of the very apps listed on androidpolice for example)
- -sorry for the length of the post, i swear when i started writing it was 4 badly worded sentences
I never download programs that are just out. If a game sounds cool, I may wait a week or so to get it. I also run MyLookout and have it scan every night.
Use anti-virus software like Lookout. Search the market for anti-virus apps. Its really no different than using a computer. There are thousands of viruses for PCs. Nothing to really be paranoid over, there are ways to avoid them, and/or fight them. Just use your better judgement when downloading apps, and just to be safe use a trusted anti-virus app. But generally i'd say we are still pretty safe.
I never use anti-virus apps on my phone, as they can bog things down. Just take the same precautions you would on a PC. Don't download stupid **** and you should be fine. :b
I don't have an antivirus on my computer and least of all my phone. Common sense is the best antivirus.
DoctorComrade said:
I don't have an antivirus on my computer and least of all my phone. Common sense is the best antivirus.
Click to expand...
Click to collapse
This. I see no need for virus software. I have run my Win7 pc since I got it (@ Win7's launch) with no virus software and its still just as good as the day I got it. FireFox seems to block everything I need it to. And on my phone the most I might download would be an album or a movie and I only do that from trusted websites.
Sent from my PC36100 using XDA App
I am far more worried about the amount of time my server is gone with my credit card after dinner.
uniquenameevo said:
I am far more worried about the amount of time my server is gone with my credit card after dinner.
Click to expand...
Click to collapse
+1
ten char
DoctorComrade said:
I don't have an antivirus on my computer and least of all my phone. Common sense is the best antivirus.
Click to expand...
Click to collapse
Common sense doesn't save you from the identity thief that drives around neighborhoods looking for wireless signals to access, a good thief can crack a wpa secured router. This is where you want your anti-virus software, these days they almost always come as an "Internet" Security suite, which includes intrusion detection and prevention.
Or you could secure your network adequetly.and btw most identity theives are probably not trolling neighborhood networks. They are the people with access to mass amounts of accounts.ie cable companies, subscription services, and the like.
Khilbron said:
Common sense doesn't save you from the identity thief that drives around neighborhoods looking for wireless signals to access, a good thief can crack a wpa secured router. This is where you want your anti-virus software, these days they almost always come as an "Internet" Security suite, which includes intrusion detection and prevention.
Click to expand...
Click to collapse
Sent from my GT-P1000 using XDA App

[Q] Antivirus Software

Anyone using any that's good? I was using lookout, but I found it obtrusive and I want something worthwhile.
IlPapu said:
Anyone using any that's good? I was using lookout, but I found it obtrusive and I want something worthwhile.
Click to expand...
Click to collapse
Being these phones are Linux based most "virus" that are downloaded and installed (with user permission i remind you) are mal-ware.
There is no real reason to need one.
Just make sure you know where the apps are coming from and you shouldn't have a problem.
neidlinger said:
Being these phones are Linux based most "virus" that are downloaded and installed (with user permission i remind you) are mal-ware.
There is no real reason to need one.
Just make sure you know where the apps are coming from and you shouldn't have a problem.
Click to expand...
Click to collapse
As I stated in AC/AF forum. You have to understand the biggest threat *nix based system faces comes from the user itself who are danger to the system as they don't understand it. Now by default how the permission base structure was setup was designed to limit the access from rouge script or execute shell which was place remotely. For it to happen it didn't magically came on the local host it was done with the permission of the user unknowingly as they basically gave the rights away. This is why we say to new users not to run under usr root as even sufficient @wheel access they can do damage.
So when you download app specially you know who and you know where becareful make sure you read the permission that you grant the apps as it can connect, update, upload contents. Far as this thread goes its useless as virus scanner just waste resource which can be overcome with little caution or avoided totally with common sense.
You dont really have to worry about antivirus with android aslong as you dont let everything under the sun have its way with superuser. Theres not much that can go wrong past wipeing your contacts or something but thats a quick refresh on sync and there back. Really all u need is a good device finder something that can help you recover a stolen device or what ever. I use Mobile Defence and its almost out of beta so should be available on the market soon.
SoltyPK said:
You dont really have to worry about antivirus with android aslong as you dont let everything under the sun have its way with superuser. Theres not much that can go wrong past wipeing your contacts or something but thats a quick refresh on sync and there back. Really all u need is a good device finder something that can help you recover a stolen device or what ever. I use Mobile Defence and its almost out of beta so should be available on the market soon.
Click to expand...
Click to collapse
Do you even know what your talking about? Wiping contacts? Where did you get that from? That's least of the worst fear far as you know it can dail in some 900 number and charge you whatever money they want. They can even data mine and steal other info but antivirus wont help you only way you can be safe is follow common sense and not giving permission to things that's suspicious and asking for access to things it has no need for access to.
Sent from my HTC Glacier
SoltyPK said:
You dont really have to worry about antivirus with android....
Click to expand...
Click to collapse
I beg to differ. Just using one news source .. and articles from the last 30 days, I found the following Andriod malware news stories:
Infected Androids Run Up Big Texting Bills
Mobile Spyware Conferences Into Your Calls
New Android Malware Robs Bandwidth For Fake Searches
Security Warning Over Web-Based Android Market
Android isn't Windows, but it is susceptible to attack. It is a growing market (300,000+ phones activated daily), filled with non-technical, clueless users, as well.
Here's one more, from another news source, from yesterday. Fifty apps. Five-Zero. In Android Market:
Google Removes More Malware from Android Market
The only alternative app market I've ever seen is appbrain, and that re-routes you to the standard market. Why would you use something other than the android market? Outside of pirated apps, it seems pretty pointless. Am I missing something?
Well thats the beauty of open community even if anything does show up it is quickly identified and users blow the whistle on it. Other than that you need walgarden based market like Apple's App Store which takes time and forever to post as this is fine as is. This is why user recommendation is important and mostly everyone use similar.
Far as virus thing goes its pure void I mean if it was identified then the source wouldn't be available in first place. You DON'T need anything as thats what they want you to think as they pray on your fear to buy these BS app which you don't even need with little caution you can be safe.
^^^^ lol Blackshelf is never wrong
.. at least that's what he thinks... ARROGANT
sent from my rooted mytouch 4g
surfnhawaii808 said:
^^^^ lol Blackshelf is never wrong
.. at least that's what he thinks... ARROGANT
sent from my rooted mytouch 4g
Click to expand...
Click to collapse
So why don't you prove me wrong here? are you actually trying to debate this? Last time I checked I was the one behind *nix system for past 12+ years. Thats like driving your car with your eyes closed and when you get in accident you blame the car, no you only have yourself to blame. As this same concept apply for system. Fine lets drop this subject ill let you prove your own point so did you ever find the docs about your "VICC 4G Sim Card"? How did that go for ya? how do I get one? will you sell me one for $9.99? lol
So since I don't need antivirus, and mal-ware is all I am looking for, what then is the best methods for telling if an App is laced with mal-ware? I am very careful in what I grant SU access and look at the permission before I install. I usually install from the app market. Any other helpful hints?
Well when you need something as the community for recommendations on which app would be appropriate for your need I mean if you Google it you will find answer as I'm sure someone asked, this way based on top pick what everyone use you can get.
Second is be cautious and what I mean by that is look for abnormalities like the app is asking for permission which wouldn't have news for to function.
Third is the most important part to where you get it ask you can reduce the risk by downloading from app market and not downloading from 3rd party of by pirated *.apk's as you wont know where it came from or what it contained.
If you follow these simple methods you can reduce the risk factor by large margin, now I am no fool I know you still can get it even after this but this way it wont be long before someone blow the whistle on it and app gets pulled from the market. This is just common sense you should follow.
Sent from my HTC Glacier
Antivirus software?
The most widely used free anti-virus software is AVG from Grisoft which makes money by selling virus protection to small businesses. To promote this, it offers domestic users a very professional free version which allows regular updates.

The Bootloader (not dev stuff, general Q)

hey guys.
i just now started thinking ,what DOES unlocking the bootloader achieve ?
i mean if its only implementing new kernels which make new rom implementation easier and OCing available.. well im not all that impressed by it then.
(yes oc is good, but people seem to be making new roms anyway...so)
so please helpful forumers, enlighten me ,what does the unlocking of the bootloader achieve for us ?
and yea i am kinda new to android stuff
yep basically what you said - being able to flash unsigned kernal which makes rom development easier as you have control over the kernal and the android system so you dont have to compile your android system to match up to the existing SE kernal.
In simple terms: Gingerbread, 16 M colors, all hardware pieces working at 100%, getting rid of SE layers, etc.
alright men thanks a bunch.
guess im definitely going to buy the neo, seems such a perfect price and power match and the bootloader question was the only thing keeping me from it, also the ram, but i have good faith in gingerbread task manager +the launcher is very nice
Indeed, it is so much more than just OC'ing.
Would an unlocked bootloader mean something could be done about the call volume on the X10?
And could you make the photo light work as a flash without third party apps?
Glad someone asked this question, as I have no idea what it all means and didn't want to start a new post
YES IT IS. But it seems to be too far since many of us are using this device from almost one year and would be able to renew our X10 soon letting it in the past. Too sad since with the bootloader opened this device could be amazing and safe. But now I'm blocking data traffic to avoid viruses and using it like an old phone and looking for a replacement, also the camera is next to be useless with such stupid light. GPS is fine but every smartphone out there come with GPS too !
xnewser said:
YES IT IS. But it seems to be too far since many of us are using this device from almost one year and would be able to renew our X10 soon letting it in the past. Too sad since with the bootloader opened this device could be amazing and safe. But now I'm blocking data traffic to avoid viruses and using it like an old phone and looking for a replacement, also the camera is next to be useless with such stupid light. GPS is fine but every smartphone out there come with GPS too !
Click to expand...
Click to collapse
and how exactly does the bootloader connect to the safety of your device ? just watch what ure dling ..
xilw3r said:
and how exactly does the bootloader connect to the safety of your device ? just watch what ure dling ..
Click to expand...
Click to collapse
It let you to install a clean copy of the latest software and why not another completely new and different operative system.
xnewser said:
It let you to install a clean copy of the latest software and why not another completely new and different operative system.
Click to expand...
Click to collapse
im sorry but i STILL dont understand how this connects to safety :X (if by safety you mean malware from infected apps.....)
xilw3r said:
im sorry but i STILL dont understand how this connects to safety :X (if by safety you mean malware from infected apps.....)
Click to expand...
Click to collapse
Yes, he means that. There are some security issues in past Android versions, but in Gingerbread those issues shouldn't have any effect.
Briefly, on the security topic... I've been wondering about malware in an app I use, but didn't know where to ask about it. Traffic Counter app tracks your usage of minutes, data, wifi, and texts. I started using because I have limited data, and 1500 text messages. Since I started using this app I have been flooded with text messages and emails from my carrier about their unlimited text message plan and their 2GB data plans. Is this the malware security issue?
agentJBM said:
Briefly, on the security topic... I've been wondering about malware in an app I use, but didn't know where to ask about it. Traffic Counter app tracks your usage of minutes, data, wifi, and texts. I started using because I have limited data, and 1500 text messages. Since I started using this app I have been flooded with text messages and emails from my carrier about their unlimited text message plan and their 2GB data plans. Is this the malware security issue?
Click to expand...
Click to collapse
I'd say yes, the famous spyware, wich sends information to your carrier about you and your preferences or "needs", so your carrier offers you something you may be interested on.
Of course that's not with the intention of damaging you (maybe...), but the point is that they're spying you
@agentjbm
I would say that if you are getting those from your carrier now then you could call them about it. They usually have an opt out for receiving messages from your carrier.
Sent from my Delorean using a flux capacitor!
Yes, I already asked them to stop. Outside of the nuisance of multiple messages I don't see the major "security issue". In fact, I prefer target marketing to mass marketing. As long as it is something that could be of interest to me, I don't mind it.

Anyone else nervous about new Google Assistant?

The pixel seems like I good phone but I'm a little apprehensive about the new assistant app. I'm sure it will arrive on all phones eventually. I really don't want google to always know where I am, how long i was there, where I'm eating, if I'm moving around, what I'm buying, watching on tv, and searching for. Full access to my texts, emails, and friends. Best case scenario is they use/sell all my life's info to a marketing company. They should call the app Snowden assistant. My life is boring, but they don't need to know that. Google is becoming too invasive just to change your money into consumer products. And all Nouget kernels are locked, so without a leak, you become a Google Ad Slave without any self protection. I don't like it.
if you think that's bad it get worse i call tmobile yesterday wifes phone. acting up
they new everything that was on and how many pictures were on phone and the list goes on .they same said 1st issue you have developers on which is bad second that wifi was on and needed to be off for more diagnostic. so any way don't be too worried of google as tmobile also knows what's on your phone
This is why I personally feel root should be option on all devices. Are we to trust all the hands in our private cookie jars? I personally feel more secure with my control of my device than with large companies that are constant targets of hackers. I'm glad we have more control over what apps can access in android 6 and and 7, but still no real control what the carriers and their friends can access about our lives and what they do that info. It will be interesting to see if people end up caring enough about their privacy or maybe I'm just being too sensitive about it.
1iwilly said:
if you think that's bad it get worse i call tmobile yesterday wifes phone. acting up
they new everything that was on and how many pictures were on phone and the list goes on .they same said 1st issue you have developers on which is bad second that wifi was on and needed to be off for more diagnostic. so any way don't be too worried of google as tmobile also knows what's on your phone
Click to expand...
Click to collapse
This is why I disable the My T-Mobile app it is how they gather all this information. If you root the app will even try to request root permissions which is insane.
XmentalX said:
This is why I disable the My T-Mobile app it is how they gather all this information. If you root the app will even try to request root permissions which is insane.
Click to expand...
Click to collapse
Indeed. I have the unlocked S7 Edge .. no carrier or Samsung bloat installed. This Big Bro crap is just that .. crap. They also load up a diag process as part of the MyTmobile app. You don't opt out of their network testing and disable that process .. it will eat your network connection and system resources. It hit my Note 7 and made it unusable for 40 minutes. I noticed the data arrows going mad and figured this was the problem. It was. I disabled all the TMO software and this separate process and everything was good .. then recall. Not a good month all the way around.
Bubba Fett said:
The pixel seems like I good phone but I'm a little apprehensive about the new assistant app. I'm sure it will arrive on all phones eventually. I really don't want google to always know where I am, how long i was there, where I'm eating, if I'm moving around, what I'm buying, watching on tv, and searching for. Full access to my texts, emails, and friends. Best case scenario is they use/sell all my life's info to a marketing company. They should call the app Snowden assistant. My life is boring, but they don't need to know that. Google is becoming too invasive just to change your money into consumer products. And all Nouget kernels are locked, so without a leak, you become a Google Ad Slave without any self protection. I don't like it.
Click to expand...
Click to collapse
Don't worry, Google Assistant is exclusive to Pixel phones. Google probably doesn't need Assistant to know everything about you anyhow.
XmentalX said:
This is why I disable the My T-Mobile app it is how they gather all this information. If you root the app will even try to request root permissions which is insane.
Click to expand...
Click to collapse
Dr. Fed said:
Don't worry, Google Assistant is exclusive to Pixel phones. Google probably doesn't need Assistant to know everything about you anyhow.
Click to expand...
Click to collapse
And once the Pixel folks have worked out the kinks by beta testing it .. it'll get pushed out to everyone.
Anyone who thinks the Pixel will sell enough to make it work Google doing it as an exclusive feature is just nuts. Also, the folks who created Siri just got bought by Samsung so most likely by summer '17 we'll all be saying "Hey, Viv!" and all that silliness.
1iwilly said:
if you think that's bad it get worse i call tmobile yesterday wifes phone. acting up
they new everything that was on and how many pictures were on phone and the list goes on .they same said 1st issue you have developers on which is bad second that wifi was on and needed to be off for more diagnostic. so any way don't be too worried of google as tmobile also knows what's on your phone
Click to expand...
Click to collapse
Well, when you first get the phone, at the beginning the t-mobile app ask if you give them permission to collect data to "easily diagnosed" issues on your phone ...you have the option of denial or acceptance on that....or you also can disable the t-mobile app on app manager
farru503 said:
Well, when you first get the phone, at the beginning the t-mobile app ask if you give them permission to collect data to "easily diagnosed" issues on your phone ...you have the option of denial or acceptance on that....or you also can disable the t-mobile app on app manager
Click to expand...
Click to collapse
I kinda wondered what that does. You still have to opt out of maps, chrome, google app and Google account to fully unhook from google. There are many sub menu options in Google account especially.
Bubba Fett said:
I kinda wondered what that does. You still have to opt out of maps, chrome, google app and Google account to fully unhook from google. There are many sub menu options in Google account especially.
Click to expand...
Click to collapse
Well at least Google gives their customers the options to turn off all of that... you just need patience to go over and READ descriptions of every single option...Google puts everything there for ppl to choose...it's just ppl are too lazy lol
What's irritating me, and I don't know if anyone else has noticed, but ever since Google stated only the Pixel would have this feature, Google Now has been crippled on Samsung phones. Used to get news, all sorts of info, now when I go to Google Now, I only get the sports teams I follow and location based stuff. I think Google is pulling a stunt to push people to the Pixel. Not cool.
Sent from my SM-G935T using Tapatalk

Categories

Resources