But is Phoenix OS safe and secure, or a danger? - Phoenix OS News, Q&A & Development

I've just come across Phoenix OS and tried it out. While it works great for my purposes, I began to wonder about something. You know how there are stories in the news all the time about foreign countries, particularly China, Russia and North Korea are always finding ways of hacking into US secured sites and what not? How do we know that Phoenix isn't sharing all of our private info with hackers or something? I know it sounds paranoid, but we live in that sort of world now. Any thoughts? (Other than I'm crazy delusional, paranoid and don't use it.) Thanks.

netizenmt said:
I've just come across Phoenix OS and tried it out. While it works great for my purposes, I began to wonder about something. You know how there are stories in the news all the time about foreign countries, particularly China, Russia and North Korea are always finding ways of hacking into US secured sites and what not? How do we know that Phoenix isn't sharing all of our private info with hackers or something? I know it sounds paranoid, but we live in that sort of world now. Any thoughts? (Other than I'm crazy delusional, paranoid and don't use it.) Thanks.
Click to expand...
Click to collapse
Dude, after Snowden, the NSA leaks, and homeland security policy, you've honestly have a hell of a lot more to worry about domestically from your own country to be worried about any foreign nation trying to hack your system. The fact this app is made in a foreign land isn't something that should elevate concern, it's whether or not it connects to the internet and you happen to use it to do anything. That's the threat vector you should be worried about always. The fact you even posed this question implies you're somehow more secure on Windows 10 or Android in general just because they're not developed in China. I honestly trust these guys more than I ever would Microsoft or any other company Snowden's leaks long identified as part of Prism. Think Windows 10 forces updates only for our well being? They upload and download files constantly. My laptop has never been as quiet as when I'm on PhoenixOS. It's serene how at ease it is compared to the constant activity I see on Windows machines. Only one on your side here is you and what you do with the data under your domain, once you go online you're at risk. Once you lose your control or possession of your system, you're at risk. Whether in San Antonio or Shanghai.

it isnt 100% safe i dont recommend it can harm your system i dont know but safely is u use a memu ,andy or bluestack my favorite is memu

Use phoenix os it's not a problem for your datas, NSA already owns them, in the moment you begin using anything developed from US companies like microsoft apple or google you give your private life to them.
The real problem for the security is the usa not china,russia or any other country. If you are so paranoid you can use android x86 without google apps, avoid to use android emulator because they are closed source and you can't verify if there are backdoors.

Related

Things that need to be improved for future Development

First i must give a standing ovation to the DARK FORCES TEAM (D.F.T.) on there accomplishment on the win phone 7 os as i am very impressed with performance.
Second my recommendations to improve the future builds.
1 change the phone identification in the os from HTCLEO to HD7 so as u no longer have to go through as much trouble to activate live services.
2. make os preactivated or precracked for live services. (This May Seem as a difficult task but in actuality its not.. A good Example would be windows xp as many people have made various keygens and cracks to bypass activation, there is even a hacked version of xp where it is preactivated with genuine certificates working so dont tell me it cant be done, if anything u could come up with a registry patch that activates win phone 7's os,
if u were able to accomplish these 2 things DFT you would be the gods of Phone modding, hacking, integration, and os development (Although many already think of u as such but why not take it to the next level?)
Your requests clearly tend into the "hacking" and "warez" direction. I don´t think both of your requests will be easily fulfilled, and if, you won´t find the solution here at xda.
From my gutt feeling, I believe that the current solution stays in the grey zone where all the "classic" flashing, hacking, tweaking and modding has been for years, but overriding activation routines breaks laws.
Frankly spoken, getting the activation code from the OS maker is not a big issue as of now. In a year or two, many HD2 users will have moved on, either to Android, or maybe to WP7, or iOS, who knows - but HD2 will be outdated sometime.
I myself would much more prefer to get a properly working camera, that´s it.
very understandable about the law issues, but correct me if im wrong, did we not already break the laws by customizing the os in the beginning??? im not the most knowledgeable on this and by no means do i want to start a controversy, i just figure if we have already come this far go all the way..
Well... I'm pretty sure there is no law against porting OS's to devices besides the fact that it could break your warranty.
And Microsoft said they would not add the WP7 update to previous devices because it doesn't meet their hardware standards, but they never said it would be ported on to previous devices.
Furthermore, at the moment you have to call Microsoft for an activation key that they generate on the spot for any phone, model, etc... They even ask if you need a key before asking for your name, email, phone number and other information (at least they did for me), so in a way, they are promoting this behaviour.
So there is nothing completely wrong with doing this at all, but it sounds like you just don't want to call Microsoft for key that takes all of 5 minutes.
And what tictac0566 is right. All we do is take their OS and move it to our phone. That's like installing Windows 7 to your exclusive Dell Windows XP.
And we have not customised the OS that much as of yet.
darkowler said:
very understandable about the law issues, but correct me if im wrong, did we not already break the laws by customizing the os in the beginning??? im not the most knowledgeable on this and by no means do i want to start a controversy, i just figure if we have already come this far go all the way..
Click to expand...
Click to collapse
Forgive some of the answers, we don't mean to be mean . You see, sometimes it's difficult to distinguish most of the good intentions in touchy subjects like this one. It might be that it has been asked repeatedly with it only ending on a flame war or perhaps something along the lines and some are getting tired of it. It's not your fault bro.
Let me put it into perspective though, as far as I'm concerned, yes.. technically speaking, porting WP7 goes against the licensing terms. As a matter of fact, we aren't really supposed to do it at all. But then again, the same can be said about Winmo and all its variants.
In the past MS has stated that as long as only the software that has been shipped on the cellphone is included sans any commercial software you'd have to buy normally, then it's a go. I believe we could assume the same about WP7 for the time being. Asides it helps them find bugs faster and treat like a big beta-testing but just in real life by XDA.
I believe Microsoft isn't much bothered by it or rather is not a threat. But the moment you mess with it's DRM or rather the services (XBOX mainly to be specific) being protected by whatever algorithm Microsoft has put in place it then you are already touching their crown jewel.
Hacking the device for tiles is not a priority for MS, but hack the Live services and this can only assure or give the impression anyone can tinker enough to hack to cheat on the Live service (which is rather amusing, since hacking gamer points and scores is just so wrong in so many levels).
I'd say it's just like the Xbox console. As long as you don't mess with Xbox Live, then most of the hacks aren't really blocked unlike Sony, which sued the pants off everyone and now that is why the PS3 was gutted to pieces recently. I hope that helps a little more.

[APP] FREE Anti virus

http://forum.xda-developers.com/showthread.php?t=1453695
Why are you creating 2 topics about it?
Had you tested it? How it compare to theoretically best Zoner Antywirus? Tell us some more, than posting links - this is kind of flooding.
For me, this program won't beat Zoner.. for now.
Anyway, I'll test it
Rayman96 said:
Why are you creating 2 topics about it?
Had you tested it? How it compare to theoretically best Zoner Antywirus? Tell us some more, than posting links - this is kind of flooding.
For me, this program won't beat Zoner.. for now.
Anyway, I'll test it
Click to expand...
Click to collapse
sorry if i did hurt you. well i was a beta tester for the app. it did performed well for me, besides comodo is a reputed company after all and they are standing for free softwares.
I posted the links cause it contains all the details of the software, details about the company etc, i thought its better than i explain those details.
about double posting, the one i posted is in the general section is for all to see. The second is for my fellow lgp500 users, where i really belogs. i hope i am clear enough. no harm ment
Best free antivirus is your brain - never install app without good amount of comments about app.
AdvDretch said:
Best free antivirus is your brain - never install app without good amount of comments about app.
Click to expand...
Click to collapse
Who in this world has time to read all that? Have you ever tried to read Google’s conditions and policies while creating a Google account? Certainly the answer would be ‘NO’. Do you know that Google had 60 different policies that helped them to collect data from your personal Gmail and other Google apps? Now do you know that they had merged all these in to one policy?
Google will know more about you than your wife does. Everything across your screens will be integrated and tracked. Google noted that it collects information you provide, data from your usage, device information and location. Unique applications are also noted. Sure you can use Google’s dashboard and ad manager to cut things out, but this policy feels Big Brother-ish. Google is watching you as long as you are logged in. It’s also unclear whether this privacy policy move will be considered bundling in some way by regulators. This unified experience hook appears to be at least partially aimed at juicing Google+. Google responded with clarification: Google noted that it already has all that data, but it’s now integrating that information across products. It’s a change in how Google will use the data not what it collects. In other words, Google already knows more about you than your wife.( not my comment go read this.... http://m.zdnet.com/blog/btl/googles-new-privacy-policy-the-good-bad-scary/67893)
Now my question is whether Google is good or bad? Do you need Droidwall to defend your privacy? Or do you still believe in your Brain(better do not believe in brain but use it to think rationally)?
Conclusion: we need a new definition to “virus”...My contribution is Anything that steals your private data is a virus.( no flames needed, no harm meant...just my thought about the relevancy of protective apps like Droidwall, comodo, avg, etc. ...etc)
,do we realy need anti virus?,
algie17 said:
,do we realy need anti virus?,
Click to expand...
Click to collapse
You dont need one
Sent from my LG-P500 using XDA Premium App
josinpoul's mean run anti virus before creating Google account
And if too don't have anti virus then don't use Google. Josin your explanation is wrong. Brain and antivirus both useful.
No need for 2 topics about one thing but thanks for sharing!!!
http://ca.reuters.com/article/technologyNews/idCATRE81N1T120120224
By Jim Finkle
BOSTON (Reuters) - Cybersecurity experts have uncovered a flaw in a component of the operating system of Google Inc's widely used Android smartphone that they say hackers can exploit to gain control of the devices.
Researchers at startup cybersecurity firm CrowdStrike said they have figured out how to use that bug to launch attacks and take control of some Android devices.
CrowdStrike, which will demonstrate its findings next week at a major computer security conference in San Francisco, said an attacker sends an email or text message that appears to be from a trusted source, like the user's phone carrier. The message urges the recipient to click on a link, which if done infects the device.
At that point, the hacker gains complete control of the phone, enabling him or her to eavesdrop on phone calls and monitor the location of the device, said Dmitri Alperovitch, chief technology officer and co-founder of CrowdStrike.
Google spokesman Jay Nancarrow declined comment on Crowdstrike's claim.
Alperovitch said the firm conducted the research to highlight how mobile devices are increasingly vulnerable to a type of attack widely carried out against PCs. In such instances, hackers find previously unknown vulnerabilities in software, then exploit those flaws with malicious software that is delivered via tainted links or attached documents.
He said smartphone users need to prepare for this type of attack, which typically cannot be identified or thwarted by mobile device security software.
"With modifications and perhaps use of different exploits, this attack will work on every smartphone device and represents the biggest security threat on those devices," said Alperovitch, who was vice president of threat research at McAfee Inc before he co-founded CrowdStrike. Researchers at CrowdStrike were not the first to identify such a threat, though such warnings are less common than reports of malicious applications that make their way to online websites, such as Apple's App Store or the Android Market.
In July 2009, researchers Charlie Miller and Collin Mulliner figured out a way to attack Apple's iPhone by sending malicious code embedded in text messages that was invisible to the phone's user. Apple repaired the bug in the software a few weeks after the pair warned it of the problem.
The method devised by CrowdStrike currently works on devices running Android 2.2, also known as Froyo. That version is installed on about 28 percent of all Android devices, according to a Google survey conducted over two weeks ending February 1.
Alperovitch said he expects to have a second version of the software finished by next week that can attack phones running Android 2.3. That version, widely known as Gingerbread, is installed on another 59 percent of all Android devices, according to Google.
CrowdStrike's method of attack makes use of a previously unpublicized security flaw in a piece of software known as webkit, which is built into the Android operating system's Web browser.
Webkit is also incorporated into other software programs, including Google's Chrome browser and the Apple iOS operating system for the iPhone and iPad.
CrowdStrike said it had not attempted to create software to attack iOS devices or the Chrome browser.
Ok, now a group of hackers control 500000000 devices... an antivirus will slow the phone down more than a hacker trying to run a phone from another continent over your 2G network... just think about it... how can your screen be monitored over 3G in real-time? It can't be done on my 5Mbps PC...
And if you turn data off, then 1GB of data will be sent to google when you turn it on??? Think logic...(where the f**k do you store that??? I think the effect will be noticed right away, and the attacker has no time to take control, unless you are stupid enough to see a 1GB file and not suspect anything...) PCs have real-time protection, but that is because there are terrible threats out there, and they are optimized, they don't slow down... on your phone, you will regret having a phone for 2 years running like **** and then dropping in water, while you could have best performance in those 2 years...
We are not windows, but we are android, and it is the most unsafe mobile OS, if you want a safe one, get from apple... just 2x price at ½ quality...
Sent from my LG-P500
well i use avast antivirus
but not for scanning viruses
but rather for anti-theft feature and firewall(blocking apps)
and isnt android a java based OS ??
im sure there are not many virus's
that can cause heavy damage

[Security] Should I be concerned about this vulnerability in CM?

So I download this X-Ray vulnerability scanner app (it's legit) and scan my device. To my surprise, even my Nightly is vulnerable to the mempodroid exploit. Should this concern me enough to file a CM bug report? By the way I use Franco kernel so if this is a legit exploit should I consider contacting him? See original G+ thread. https://plus.google.com/117694138703493912164/posts/AfNQ7cT9JYV
Sent from my Nexus 4 using Tapatalk 4 Beta
Mempodroid is a root exploit and considering that CM comes pre-rooted you shouldn't have anything to worry about
Sent from my NEXUS 4 using xda premium
Oh good. What a relief. So that means we have no known vulnerabilities. That's good. Take that Apple.
Sent from my Nexus 7 using Tapatalk 4 Beta
MikeRL100 said:
Oh good. What a relief. So that means we have no known vulnerabilities. That's good. Take that Apple.
Sent from my Nexus 7 using Tapatalk 4 Beta
Click to expand...
Click to collapse
http://www.theepochtimes.com/n3/152836-android-master-key-security-flaw-affects-900m-devices/
If people are worried about security they should not be rooting their devices to begin with.
Sorry if I'm offending
zelendel said:
If people are worried about security they should not be rooting their devices to begin with.
Click to expand...
Click to collapse
Sorry for disagreeing with you, but I worry about common sense security. If this is a root exploit that is needed to ship with CM to allow one to use root, no biggie. I know root makes you vulnerable, but guess what? So does administrative access on Windows. If I worked for the governemnt or a large business I would have a different, possibly non-smart phone to do that task. I'm not stupid enough to go downloading cracked apps from pirated sites, but let me tell you all something. On my PC I had Opera 14 installed and used it during when one of Opera's employee's PCs got hacked and injected the Opera certificates with malware. I freaked. Prooves that a targeted attac could be successful, even with good protection. Luckily, my layer of security (MVPS hosts, Avast, and Malwarebytes Pro) kept it from even approaching the front door. And my Linux box even has the MVPS hosts file as well. Also, if this was an actual vulnerability to be concerned about, Steve Kondik would've patched it before the iCrap loving media could get new anti-Google propaganda. By the way, I am arguing with none of you, but I do need to make a point. I know since Android is based of Linux and not Windows NT, it is hella more secure. I would not root this if this phone had to be used under secure conditions. I'd either disable root while at work, or get a second phone. Yes I love root that much. But I don't get malware very often, havent' had an actual infection that wasn't blocked in many many years. Never even had Android malware. You know why? Hosts file+common sense. I never go to pirated sites, and never will. I love the XDA devs, community, and even some of the non-XDA Google Play devs enough not too. And when I say love, I mean I don't want to see their income sapped. Piracy is a no-no on XDA, but I'm sure it's OK to condemn it. And my talk on that ends now. :good: So onto the main topic, I have common sense, some privacy protections, and I don't just allow any app superuser access. I check reviews first and even have a malware scanner in Advanced Mobile Care. No on demand protection since its not necessary for me, and I never have gotten malware. I bet jailbroken iOS devices get more malware since most of the apps on them are cracked since Apple boots you out of iTunes for jailbreaking. Also, even though I'm rooted I like to know what each exploit means. No device or computer (even a hardened Linux server) is safe from the most skilled black hat. But since I'm not a target of interest, I have some malware prevention via the HOSTS file, Android is more secure than Windows, and I most importantly have common sense, I'll be fine. Maybe I'm too lax on security, but I guarantee you, I will adapt if some freak drive by download trojan comes to Android and by some crazy way gets malware through the Play Store with reputable apps. If a nasty was detected, or an app just looked different enough, it ain't gonna get no system access from me. So go ahead you iOS loving "Android is the next Windows XP" malware magnet pundits in the media, go ahead (that i if any Apple trolls stumble across this thread). I guarantee none of the streams of infected botnets will not add another to the collection. Like I said, not arguing with you but I disagree with you (at least initially) on how powerful my common sense is. I'm not saying you're doubting me, you're a cool guy and more than likely give a lot of assistance around here, but I may look like a noob troll cause I am a Junior member, but I was a long time lurker, and on AndroidForums I have been around a bit. I'm not some sort of super brain (at least not yet) and I do know rooting hampers security, but although I care about security, I just don't want my precious Nexus 4 and 7 to ever become virus magnets. I should have mentioned it, but I thought that vulnerability in CM was because it needed an exploit to have root by defaul (even though CM has disabled it recently). Also I will take some blame myself if I offended any of you. I am paranoid about a lot of things. But it's good to be paranoid to a certain extent. That would explain the lack of malware on all of my computers. But I should pay less attention to the social networks. Even G+. If this was on Facebook, mind you all, I wouldn't have game a damn about it. Facebook is full of trolls, fanboys, and noobs. That's why I rarely use that site and when I do, I pretty much block off all access to my profile from strangers. G+ encourages sharing with new people, while Facebook is like being with your old clique of buddies. That's why I use G+ so much now. That and I can help idiiot test things for developers. :laugh:
scream4cheese said:
http://www.theepochtimes.com/n3/152836-android-master-key-security-flaw-affects-900m-devices/
Click to expand...
Click to collapse
Yes you're definitely right we have a security issue. Not that Android itself is insecure (both my Nexus 4 and 7 were rushed to the latest Nightly to prevent them from joining a botnet) Good thing is custom ROMs create headaches for the bad guys cause they fragment Android (not in the iSheep style way of not getting updates) but in the way that they remove bloatware and some system apps, increase security in some areas, and in general all the code changes make it harder to create a universal botnet. I guarantee 95% of that botnet will be from OEM stock phones. We forget around here that most people are ignorant of common sense and security, if not downright stupid and don't care about security as long as they get their free cracked apps. We're the nerds here and most people are going to make it easy for these holes to be abused. They go to the most untrustworthy sites, install unstrustworthy apps, and are basically asking for it. Also the OEMs are pathetic for not all having a way to quickly patch Android. This type of stuff should sound an alarm to create a security update. I can see not giving an old phone a new version of Sense/touchwiz/Motoblur,etc. but denying security updates is ridiculous. The government should sue the offending OEMs if they want to be respected by the geeks a little more after the whole NSA mess. Because despite the fact that we aren't the ones here creating the botnet, what are we gonna do if thousands of clueless users install cracked apps that contain malware with the exploit, and form a botnet, that say DDOS attacks Google. Then Google Services would be disrupter. Also Google (who I am a big fan of) needs to stop being greedy in the one area of Android updates and force OEMs to include security patches and also backport and open source the security patch ASAP. I know CM is safe from that exploit already, I saw Steve Kondik's commit. But the OEMs are the problem. Google needs to push them past their comfort zone. You can have a car that is 10-20 years old and just because it's out of warranty doesn't mean that even if it takes a fool to make the engine explode in a deadly blast, that the manufacturer would just it there. I've seen Chevy recalls for example. One of them was a recall because something would catch fire if you were an idiot and poured gasoline or engine fluid or somehting on the engine. Of course the people doing this were stupid, but the same is true with technology. Why let the clueless and in the worst case those that just don't care create a botnet for us all to suffer from? Create an idiot patch and stop the situation from exploding. Please OEMs. Do something right for once.
MikeRL100 said:
Sorry for disagreeing with you, but I worry about common sense security. If this is a root exploit that is needed to ship with CM to allow one to use root, no biggie. I know root makes you vulnerable, but guess what? So does administrative access on Windows. If I worked for the governemnt or a large business I would have a different, possibly non-smart phone to do that task. I'm not stupid enough to go downloading cracked apps from pirated sites, but let me tell you all something. On my PC I had Opera 14 installed and used it during when one of Opera's employee's PCs got hacked and injected the Opera certificates with malware. I freaked. Prooves that a targeted attac could be successful, even with good protection. Luckily, my layer of security (MVPS hosts, Avast, and Malwarebytes Pro) kept it from even approaching the front door. And my Linux box even has the MVPS hosts file as well. Also, if this was an actual vulnerability to be concerned about, Steve Kondik would've patched it before the iCrap loving media could get new anti-Google propaganda. By the way, I am arguing with none of you, but I do need to make a point. I know since Android is based of Linux and not Windows NT, it is hella more secure. I would not root this if this phone had to be used under secure conditions. I'd either disable root while at work, or get a second phone. Yes I love root that much. But I don't get malware very often, havent' had an actual infection that wasn't blocked in many many years. Never even had Android malware. You know why? Hosts file+common sense. I never go to pirated sites, and never will. I love the XDA devs, community, and even some of the non-XDA Google Play devs enough not too. And when I say love, I mean I don't want to see their income sapped. Piracy is a no-no on XDA, but I'm sure it's OK to condemn it. And my talk on that ends now. :good: So onto the main topic, I have common sense, some privacy protections, and I don't just allow any app superuser access. I check reviews first and even have a malware scanner in Advanced Mobile Care. No on demand protection since its not necessary for me, and I never have gotten malware. I bet jailbroken iOS devices get more malware since most of the apps on them are cracked since Apple boots you out of iTunes for jailbreaking. Also, even though I'm rooted I like to know what each exploit means. No device or computer (even a hardened Linux server) is safe from the most skilled black hat. But since I'm not a target of interest, I have some malware prevention via the HOSTS file, Android is more secure than Windows, and I most importantly have common sense, I'll be fine. Maybe I'm too lax on security, but I guarantee you, I will adapt if some freak drive by download trojan comes to Android and by some crazy way gets malware through the Play Store with reputable apps. If a nasty was detected, or an app just looked different enough, it ain't gonna get no system access from me. So go ahead you iOS loving "Android is the next Windows XP" malware magnet pundits in the media, go ahead (that i if any Apple trolls stumble across this thread). I guarantee none of the streams of infected botnets will not add another to the collection. Like I said, not arguing with you but I disagree with you (at least initially) on how powerful my common sense is. I'm not saying you're doubting me, you're a cool guy and more than likely give a lot of assistance around here, but I may look like a noob troll cause I am a Junior member, but I was a long time lurker, and on AndroidForums I have been around a bit. I'm not some sort of super brain (at least not yet) and I do know rooting hampers security, but although I care about security, I just don't want my precious Nexus 4 and 7 to ever become virus magnets. I should have mentioned it, but I thought that vulnerability in CM was because it needed an exploit to have root by defaul (even though CM has disabled it recently). Also I will take some blame myself if I offended any of you. I am paranoid about a lot of things. But it's good to be paranoid to a certain extent. That would explain the lack of malware on all of my computers. But I should pay less attention to the social networks. Even G+. If this was on Facebook, mind you all, I wouldn't have game a damn about it. Facebook is full of trolls, fanboys, and noobs. That's why I rarely use that site and when I do, I pretty much block off all access to my profile from strangers. G+ encourages sharing with new people, while Facebook is like being with your old clique of buddies. That's why I use G+ so much now. That and I can help idiiot test things for developers. :laugh:
Yes you're definitely right we have a security issue. Not that Android itself is insecure (both my Nexus 4 and 7 were rushed to the latest Nightly to prevent them from joining a botnet) Good thing is custom ROMs create headaches for the bad guys cause they fragment Android (not in the iSheep style way of not getting updates) but in the way that they remove bloatware and some system apps, increase security in some areas, and in general all the code changes make it harder to create a universal botnet. I guarantee 95% of that botnet will be from OEM stock phones. We forget around here that most people are ignorant of common sense and security, if not downright stupid and don't care about security as long as they get their free cracked apps. We're the nerds here and most people are going to make it easy for these holes to be abused. They go to the most untrustworthy sites, install unstrustworthy apps, and are basically asking for it. Also the OEMs are pathetic for not all having a way to quickly patch Android. This type of stuff should sound an alarm to create a security update. I can see not giving an old phone a new version of Sense/touchwiz/Motoblur,etc. but denying security updates is ridiculous. The government should sue the offending OEMs if they want to be respected by the geeks a little more after the whole NSA mess. Because despite the fact that we aren't the ones here creating the botnet, what are we gonna do if thousands of clueless users install cracked apps that contain malware with the exploit, and form a botnet, that say DDOS attacks Google. Then Google Services would be disrupter. Also Google (who I am a big fan of) needs to stop being greedy in the one area of Android updates and force OEMs to include security patches and also backport and open source the security patch ASAP. I know CM is safe from that exploit already, I saw Steve Kondik's commit. But the OEMs are the problem. Google needs to push them past their comfort zone. You can have a car that is 10-20 years old and just because it's out of warranty doesn't mean that even if it takes a fool to make the engine explode in a deadly blast, that the manufacturer would just it there. I've seen Chevy recalls for example. One of them was a recall because something would catch fire if you were an idiot and poured gasoline or engine fluid or somehting on the engine. Of course the people doing this were stupid, but the same is true with technology. Why let the clueless and in the worst case those that just don't care create a botnet for us all to suffer from? Create an idiot patch and stop the situation from exploding. Please OEMs. Do something right for once.
Click to expand...
Click to collapse
Oh you have many valid points. My statement was more for the average user that really has no use for root. They root and flash cause they think it is cool.
The carriers and OEMs are trying to do something to stop it. The are locking bootloaders and making unrootable kernels (Samsung) To be honest I think this is a good idea for most users. They have no really need for those things and only end up with issues cause they have no idea what they are doing.
Cm Released a set of patches today to block some of the security issues.
See that is the issue with With OEM. Google cant force them to do anything. All the carrier has to do is take the AOSP code and add their stuff to it. No one can say what they have to add or not. This is why I only get nexus devices. I watched Euro devices get updated by the OEM while the US based devices never saw any updates at all. Including security updates that the OEM had issued. As long as the Carriers control what happens to the devices there is nothing that we can really do.
#Nexus4Lyfe I wish this was G+. I felt like a stupid hash tag would be appropriate.

Mercenary hackers claim full control over Windows Phone

Read here.... http://www.wpcentral.com/mercenary-hackers-hackingteam-claim-full-control-over-windows-phone. Not sure how to feel about this??? If true then there's definately hope for unlocking more WP8 handsets yet at the same time with all the NSA crap going on and concerns about privacy and security...WTF??? Reading around various forums and sites I am actually surprised how many people are NOT interested in unlocking their devices naming security as their number one reason for switching to the WP8 platform. In all the time I've spent here on the forums, with the exception of a few shady posts by no one of any consequence, I have never seen any maliciousness in the the search for exploits and attempts to unlock devices. If anything it almost seems like a game between devs and MS/OEMS and it wouldn't surprise me one bit if some of the devs here were offered opportunities by those same entities; if not then our gain, MS's loss. However this article got me thinking about the possibilities and implications of any exploits or unlocks found and just wondering what others thought... As for my mindset....I paid for my device with hard earned cash therefore it should be mine to F up as I see fit and I will deal with the consequences like a big boy.
Microsoft buying Apple is much more plausible that what is in there.
Part of having a secret surveillance plan is to actually keep the plan secret.
I doubt the group "responsible" for this would post their achievements on the internet, provided they are supported by the government.
tonbonz said:
Read here.... http://www.wpcentral.com/mercenary-hackers-hackingteam-claim-full-control-over-windows-phone. ... As for my mindset....I paid for my device with hard earned cash therefore it should be mine to F up as I see fit and I will deal with the consequences like a big boy.
Click to expand...
Click to collapse
You and folk like you are in the insignificant minority of the population
There are far to many people that will quite happily blame MS / OEMs / Networks for any and all problems regardless of who actually broke it.
The other thing is said networks / OEMs don't want you arsing about with their phone, for example, ATT take great pride in being able to charge you for a service that is free, if the phone was unlocked that would stop and ATT would be out of pocket. They pull out of WP arena and rollocks your fathers uncle, MS loses market share.
it sucks, but such is life, now that MS has locked down the market place with from what I can tell is completely impervious to abuse, I doubt very much they could give a $h!t what you do to the platform and if you can unlock it, they do however care about market share which is where the networks come in...
Oh, that's pretty plausible, actually. Even if you assume it's for every device on every version of the OS, I'd still be willing to believe it. Microsoft has done well on security with WP8, hardening the OS (NT in general) over the last decade or so to remove vulns, and using pretty good sandboxing of WP8 apps to minimize attack surface. With that said, there are still items being found, and patched (at least on the PC), regularly in Windows. Some of those vulnerabilities will be present and reachable on WP8 as well, and given how slowly phone updates roll out, I wouldn't be surprised if there's a known but un-patched issue being exploited. For that matter, it could be a true zero-day - something Microsoft is completely unaware of, at least when the exploit was first used - although I think that's less likely.
dazza9075 said:
You and folk like you are in the insignificant minority of the population
There are far to many people that will quite happily blame MS / OEMs / Networks for any and all problems regardless of who actually broke it.
The other thing is said networks / OEMs don't want you arsing about with their phone, for example, ATT take great pride in being able to charge you for a service that is free, if the phone was unlocked that would stop and ATT would be out of pocket. They pull out of WP arena and rollocks your fathers uncle, MS loses market share.
it sucks, but such is life, now that MS has locked down the market place with from what I can tell is completely impervious to abuse, I doubt very much they could give a $h!t what you do to the platform and if you can unlock it, they do however care about market share which is where the networks come in...
Click to expand...
Click to collapse
I'm used to being the minority, in a world full of sheep I'd much rather be a wolf, but insignificant? Harsh... Of course the security of the platform is probably the biggest selling point MS had to offer the networks and with perfect timing. I'm sure it's helped increase market shares when everyone's worried about keeping their data secure. As for the marketplace, I am constantly amazed at the apps being created but use very few myself. My kid spends more time on my Lumia than I do; using the Kid's Room feature to play games. Another brilliant "security" feature and one of the first features I point out to any parent asking about the platform. Anyways, knowing the work done here and intentions behind it, seeing that some group possibly gained full access to the platform simply for the purpose of "spying" for anyone that can pay their fees kinda p***ed me off and wondered what others thoughts were...
"Mercenary hackers claim full control over Windows Phone"
and my grandpa told me he had sex with Lili Marleen... but who know... maybe has maybe not
tonbonz said:
I'm used to being the minority, in a world full of sheep I'd much rather be a wolf, but insignificant? Harsh... Of course the security of the platform is probably the biggest selling point MS had to offer the networks and with perfect timing. I'm sure it's helped increase market shares when everyone's worried about keeping their data secure. As for the marketplace, I am constantly amazed at the apps being created but use very few myself. My kid spends more time on my Lumia than I do; using the Kid's Room feature to play games. Another brilliant "security" feature and one of the first features I point out to any parent asking about the platform. Anyways, knowing the work done here and intentions behind it, seeing that some group possibly gained full access to the platform simply for the purpose of "spying" for anyone that can pay their fees kinda p***ed me off and wondered what others thoughts were...
Click to expand...
Click to collapse
aye, we are significant in our world but there are a lot more numpties out there then there are of us
GoodDayToDie said:
I wouldn't be surprised if there's a known but un-patched issue being exploited..
Click to expand...
Click to collapse
I totally agree with you but until I see something concrete these are only words...or like I can say in Italian:
fatti, non pugnette!:laugh: (facts, no word please)
Oh, to be sure. Still, it actually gives me a little hope for finding a universal "jailbreak" hack... although I'd prefer one that isn't remotely exploitable.

Doing my first OS replacement or ROM replacement.

I am currently looking for an alternative OS or ROM on a phone. My big challenges are I have a great grand fathered in at&t data plan. I don't want to loose and There is no good phone that is both on their list and seems to give me the option to try different ROMS or OS's if one dose not fit my needs.
I truly believe if there is a place that linux could fit best it is on my private device. I don't mind windows for my Daily desktop but in the past few months I have watched the location data icon flash on the top of my phone despite having turned location data off. It would be nothing for google to truly allow us to make this choice on our own. An it always felt wrong to get a google phone hack it and then side load a ROM like copper or even lineage.
I haven't looked into Paranoid Android user yet. The real thing I keep bumping my head against is compatibility with AT&T so I guess I am here to ask the following questions.
If I do a custom OS like Post Market OS, Sailfish, even Ubuntu touch. Will some screw with my AT&T plan while others don't. Its not like I am going to tell them I switching the OS but I imagine there is something in there that allows them to throttle remotely and prevents tethering etc? perhaps one of the choices spoofs that. What is the best ROM/OS for this? Crapy call by the courts on that one BTW when that decision was handed down, and kudos to the absolute BOSS who went after AT&T. Funny thing is I am not even that big of a hot spot user. I have no problem with cafe wifi. It's not like I am doing banking there and I air gap that Laptop from my home wifi. The rare occasion that I have needed it was a recent business trip and even that wasn't allot of data. But I digress.
Second question I want to support the linux community that are building new OS's for existing devices as I think that is really the week point for adoption at this time. I have been thinking about it and I think the best way to do it would be to hire a new developer to give a hand to an existing project for a few weeks. Fresh eyes and all that. Any recommendations on how to select one?
It's not that there is anything wrong with ROM's but they all use AOSP and allot live hardware designed for there retail version android meaning they get at least a licensing fee for each one. I am big believer in actual capitalism in divers markets with real consumer choice. What we have today is not it and supporting the behemoths in any way isn't really the key to success. I could take you down the rabbit hole of how the problem is the government and things like the CIA investment corporation AKA In-Q-Tell. Picking winners and loser's and taking free market's to the wood shed and shooting it in the head. However I think that is enough and it gives my disposition. So, you might Have a good Idea on how to guide me.
Thanks for any help.
WoW no response at all. Did I post this in the wrong place maybe it should be someplace else.
As per the mod bump i guess

Categories

Resources