Cracking VZ Navigator - Mogul, XV6800 ROM Development

I've been able to get this to somewhat load on dcd 3.26. I installed the app unsigning 3 files then put the LBSdriver.dll and its other 2 files into windows directory. When I try to manually register the LBSDriver.dll i get "\Windows\LBSDriver.dll was loaded, but the DllRegisterServer entry point was not found. This file cannot be registered." Without the lbsdriver files the app will not even execute but will progress to the posted screen shots once the driver files are found. My hope is to use vz nav on a custom rom and ultimately get the PDE server IP for aGPS.
Can someone better than myself finish it from here?
These are screen shots of my progress.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Below are some of the gps files from MR1

Why not just use TomTom, Iguidance or similar? They would be superior to VZN anyway and it looks like you already have TomTom loaded.

I believe his intent is to acquire the information for the aGPS servers. This information could then be used to reduce the GPS lock times for Verizon subscribers for any GPS application they choose to run.

khristopher13 said:
I believe his intent is to acquire the information for the aGPS servers. This information could then be used to reduce the GPS lock times for Verizon subscribers for any GPS application they choose to run.
Click to expand...
Click to collapse
Exactly I do use tom-tom as my preferred GPS app but want to aquire the PDE IP info that only VZ nav can provide. Also, I would like to demo to my customers the VZ nav on a PPC without needing a stock rom to do so. I don't want to show them tom-tom and tell them it wont work on their phone without unofficial software.

Garmin Mobile XT FTW!

As far as getting it to run, I would assume this is what you need:
Code:
<?xml version="1.0" encoding="utf-8" ?>
<wap-provisioningdoc>
<!-- Provision VZW LBS Root certificate to Privileged Execution Store-->
<characteristic type="CertificateStore">
<characteristic type="Privileged Execution Trust Authorities" >
<characteristic type="c5b657fbca96ce9c444db867151167567536ed12">
<parm name="EncodedCertificate" value="
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"
/>
</characteristic>
</characteristic>
</characteristic>
<!-- Provision VZW LBS Root certificate to SPC Store-->
<characteristic type="CertificateStore">
<characteristic type="SPC" >
<characteristic type="c5b657fbca96ce9c444db867151167567536ed12">
<parm name="EncodedCertificate" value="
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"
/>
<parm name="Role" value="254"/>
</characteristic>
</characteristic>
</characteristic>
</wap-provisioningdoc>
Where are you getting the vznavigator software from? I must have missed something.

dcd1182 said:
Where are you getting the vznavigator software from? I must have missed something.
Click to expand...
Click to collapse
Here it is

I'm working on fixing the cab to allow it to install properly

Just installed his xml and still same errors. Did I name this improperly?

Also, the reason you're getting that message when you try and register LBSDriver.dll is because it doesn't export the DllRegisterServer function.

gc14 said:
Also, the reason you're getting that message when you try and register LBSDriver.dll is because it doesn't export the DllRegisterServer function.
Click to expand...
Click to collapse
I'll leave it to you guys as that is above my skill level. But so I can learn how would you properly export the correct function? I have done some vsnet C++ compiling so this isn't entirely foreign to me.

any update on the cab GC?

(This post is probably not of particular interest unless you're reversing LBSDriver.dll.)
To disable the calling .exe signing check in lbsdriver.dll, patch 0xea in at 0x10003afb (file offset 0x2efb).
You'll also need to nix the cert directory (signature) in the PE header or WinCE will refuse to load the .dll due to a signature mismatch on a signed binary.
GPSOpenDevice seems to be mostly compatible with the WinCE GPSOpenDevice, except that at least one event handle must be specified. GPSGetPosition/GPSCloseDevice all have the correct number of parameters, but GPSGetDeviceState seems to have one extra parameter which I haven't looked into yet.
There are additional checks after the main .exe signing check that GPSOpenDevice does which have yet to be analyzed.

drellisdee said:
Below are some of the gps files from MR1
Click to expand...
Click to collapse
drellisdee - any chance that you could grab oemgpsOne.dll off of the ROM image? Disassembly in the WCE debugger is patently awful and having the actual file to feed to a real disassembler would be nice.

Here you go

Incidentally, while vznavigator is running and enabled, the standard GPS API functions for non-vznavigator apps via COM4.

Skywing, if you get a sec, pm me please.

Also, is there a packet sniffer capable of running on a Windows CE platform? If so we may be able to decrypt the active packets sent while using vz navigator to get the PDE server info.

I'm not convinced that it would show anything other than the account verification stuff. There isn't any user-visible cell data traffic while it's doing AGPS fixes when I use VZ Navigator (according to the traffic indicator in WM, which might not be entirely accurate, but...), even though FieldTest.exe shows measurements of cell tower time offsets and the sort being taken.
On that note, however, does anyone have a good way to disable the desktop passthrough for ActiveSync (network proxying through the linked computer)? This interferes with VZ Navigator, which is a pain as the VS debugger requires an ActiveSync link to work.

Skywing said:
I'm not convinced that it would show anything other than the account verification stuff.
Actually from what I understand its kind of a combination. The PDE runs a query to the AAA server to confirm provisioning. If that comes back a success then the PDE provides the device with its Lat/Long. This info is then sent to NIM for routing info in VZNav.
As to why gc gets those errors here is what I think may be up. VZNav runs a PID check when it is run on a device. Should it not get a match on the device it will error out. On custom ROMs our PID is different from the stock ROM from my understanding so that would explain it. This part however I am not positive on but figured I would throw it out there.
Click to expand...
Click to collapse
Click to expand...
Click to collapse

Related

[APP] [18 November] [RC1] Energy XDA_UC Configuration Tools 2 (EXCT2)

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
This thread is for the discussion, development and support of EXCT2. EXCT2 is compatible with all Energy Roms based on Windows mobile 6.5 and it is entirely possible that it will work with other stock and custom windows mobile roms.​
EXCT2 is the continuation of a project i started last year which can be found here. It was born out of a hatred for the hours it took to configure a new rom install.​
EXCT2 expands on EXCT by adding a basic User Interface and allowing for a large amount of automation for settings gathering from the system registry. No registry editors required, no Third party XML file writers needed. EXCT2 will detect exchange server settings, audio manager storage paths, Windows Live and palringo settings and so much more all at the touch of a button and export them in the appropriate file type in the folder of your choosing for XDA_UC (or possibly Sashimi) to import.​
Requirements:​
Windows Mobile 6.5 or 6.5.x (it may work with 6.0 and 6.1 as well but this has only been tested in the SDK's emulator and may not work as expected)
.Net Compact Framework 3.5
XDA_UC (it may well work with other settings importers like sashimi)
Some patience ​
Known Bugs:​
All known Bugs have been squished for now​
Download:​
All downloads will be hosted here and new builds will also be hosted on XDA. Hosting the newest version anywhere else is strictly prohibited and if you want to host mirrors of previous versions seek my permission first.​
Some Fun Stuff​
I have had some forum banners made up so the users can identify themselves to each other. Also so it is easier to identify the testers and myself outside of this thread. If anyone donates towards the continuation of the project you will get a special supporters banner. Below is the users banner for you to download. Thanks to Swiss420 for creating them and also for doing the program icon. Swis has also just come up with the EXCT2 Splat!​
​
The Thank you's
Finally i should say thank you to a few people simply because they have put up with me pestering them with questions and because they have provided code. These people are XDA members Ultrashot, Stephj, Xcaliburinhand. Also Jesse Jiang and Reed Kimble the on MSDN forums have contributed greatly. Finally The testing team deserve a big thanks (even the guys that went MIA) CanjunFlavoredBob deserves the biggest thanks for sticking with it and providing some great suggestions and ideas.​
The Changelog
Changelog:
18 November (RC1)
Updated Visual look
Other minor bug fixes
23 September (Beta 5)
Added CHT export (hidden and disabled till the CHTE team sort out a bug in their code)
Fixed Minor issue with twitter export
Added People tab order export
Added Manilla Tab order export
Fixed issue with Alarm 2 and alarm3 exports
15 August (Beta 4)
Added Alarm export functions
Some small UI tweaks
Improved Operation Complete and Operation Failed dialogs
Other small tweaks and fixes
24 July (Beta 3.1)
Fixed Rhodium crash (thanks to JVH3)
22 July 2011 (beta 3)
Complete UI redesign.
Added File overwrite checking
Adjusted Time elapsed check in file write success check to 10 seconds
Improved Exception handling
Added "Export all" click detection to reduce the amount of message boxes it generates
Updated xml export code to include updated error handling, file overwrite protection and Export all click detection
Added copy.mscr to cab file (Installs to "\Storage Card\XDA_UC")
Added copy2root folder detection/creation code
Various Other internal changes
10 July 2011 (beta 2):
Fixed xml file write checking code
Improved folderbrowser (thanks to stephj)
Improved combobox item description for all xml functions
Fixed Twitter function (thanks to CJB for helping with that)
Added framework for file copies. Will allow for opera settings export later
Added some basic exception handling
probably some other things i forgot to write down
30 June 2011 (beta 1):
First public release
The FAQ
1) Some misconceptions.
It has been reported this is a settings importer as well as an exporter. This is not true. EXCT2 will only export settings and only the settings it is aware of. It is also not exclusively written for the Energy roms. It will quite probably work on any rom but the only roms it has been tested with are the stock WM6.5 rom in the WM emulator and the Energy rom in my signature. I also know that CajunFlavoredBob uses EXCT2 on his own private custom rom
2) I use a program/feature in Windows Mobile that doesn't have a settings exporter in EXCT2.
Well tell me about it. As long as it is a program that many people use, IS NOT a third party app like S2U2 or any of the SPB programs etc, and you can provide me an complete example of the settings that need to be exported i will work on including it, if it is reasonable to do so.
3) EXCT2 beta 2 and newer crashes on startup
Make sure you have .Net 3.5 Compact framework installed. This can be checked by running cgacutil.exe from the windows folder on the device
4) What do i need to include when posting a problem?
When posting a problem, please include what device you are using, the exact version (including skin, windows build number and rom date) also the version of .Net you have installed. This can be found by running cgacutil.exe from the windows folder on the device. If this util reports anything less than 3.5.xxxx.xx then don't post. Instead grab .Net 3.5 from the MS download center and get NRGZ to update his rom
more to come.........
@everyone This is a pretty handy application that makes exporting settings a piece of cake. Not everything is fully functional yet, but this has HUGE potential for the entire community and deserves some support and recognition.
@M3PH Is the public beta release any different than the last alpha build I tested?
cajunflavoredbob said:
@everyone This is a pretty handy application that makes exporting settings a piece of cake. Not everything is fully functional yet, but this has HUGE potential for the entire community and deserves some support and recognition.
@M3PH Is the public beta release any different than the last alpha build I tested?
Click to expand...
Click to collapse
Yeah i fixed the things you said were broken .. well the things i could fix (the palringo function mostly). I've also spent a little time this afternoon working on the user selectable save location with stephj and we've cracked it so i'll ship that out into a new private area for the testers tomorrow because i'm gonna go have some chill time. I've been working on this for 4 weeks or so and now it's public i'm gonna go enjoy myself for few hours
I've also just sent a PM to ezthunder in the hope that he will come read the thread and post something about it on the portal. I hope he likes EXCT.
M3PH said:
Yeah i fixed the things you said were broken .. well the things i could fix (the palringo function mostly). I've also spent a little time this afternoon working on the user selectable save location with stephj and we've cracked it so i'll ship that out into a new private area for the testers tomorrow because i'm gonna go have some chill time. I've been working on this for 4 weeks or so and now it's public i'm gonna go enjoy myself for few hours
I've also just sent a PM to ezthunder in the hope that he will come read the thread and post something about it on the portal. I hope he likes EXCT.
Click to expand...
Click to collapse
He's a good one to contact. I always go through orb3000. Either way, here's hoping for some exposure.
Have yourself a beer for this little milestone.
cajunflavoredbob said:
He's a good one to contact. I always go through orb3000. Either way, here's hoping for some exposure.
Have yourself a beer for this little milestone.
Click to expand...
Click to collapse
I already am and theres gonna be a few more consumed before the evening is done
Just a couple of things for people reading this thread and thinking is it worth a try. Firstly hell yes! The more feedback i get from the curious the better because it will allow me to improve on the rough edges. I always release stuff as quickly as i can because the more people that use stuff like this the more it improves in a shorter amount of time. Secondly, if you have flashed more than just a couple of custom roms in your time you know it can be a pain to restore all your settings by hand. I remember when i was flashing updates every couple of days. It made using my phone so difficult because everytime i ran a new program i'd have to configure it. After every flash i would have go through the labourious process of reconfiguring my wifi, exchange partner and vpn settings. That's a half hour job right there and with EXCT it takes 10 seconds. Those numbers work for me and the 1500+ people that downloaded the original EXCT.
So go on, try it out, click that thanks button like you have a muscle spasm in your index finger and enjoy the brilliance that is EXCT2 (and if you really like it buy me a beer links below )
so we made it on to the portal see what egzthunder1 had to say here
Can't wait to try it, just need to know what prep is needed. I'm coming from EXCT1, so should I do anything more than backup and empty my XDA_UC folder and then run the cab?
BerMM said:
Can't wait to try it, just need to know what prep is needed. I'm coming from EXCT1, so should I do anything more than backup and empty my XDA_UC folder and then run the cab?
Click to expand...
Click to collapse
BerMM, Whazzzup!!!?
You actually need to interact with this (sorry if that sounds insulting. I've been drinking). For you, i would say all you need to do is make sure the exchange, wifi and vpn tabs are filled out and hit the export all button and prey it's doesn't crash (no exception handling in the public release yet). If it works fine you then you just need to check everything you need was exported and combine the back up with it.
There also stuff in EXCT2 that would have never got into EXCT (like Facebook and twitter settings backup). Mainly because NRGZ said he would include EXCT2 in the rom when it was up to his standards (and the sun, moon, most of the planets and the man himself all align ).
Anyway, nice to see you're still around. I never forget a pretty face... i mean... i never forget a decent supporter
P.S
If you want a copy of the testing version let me know but it means you will have to do some work and stay in touch but you do get a cool banner like CajunBob's (ok fair enough, it's not exactly a massive selling point but Swiss spent time on those)
Going to give this a shot. Watching Nrgz postings shows he is getting ready to release his first 29022 ROM tonight so this will come in handing getting all the apps configured like I want them.
Thanks.
6700Freak said:
Going to give this a shot. Watching Nrgz postings shows he is getting ready to release his first 29022 ROM tonight so this will come in handing getting all the apps configured like I want them.
Thanks.
Click to expand...
Click to collapse
Another rom, you say? Any chance someone could tell me where a changelog is for these different builds (29017 vs 29022 for example)?
back to the main subject: Great job! I haven't "export[ed] all' yet, as I don't use sense and I feared for the safety of my meticulously kept xda_uc folder, but everything I tested worked just fine.
My first suggestion would be the obvious; instead of having numbers for encryption/auth in the wifi tab, make the drop down list show the words each number represents.
I haven't HR'd yet, but looking at the Hotmail.reg, it doesn't seem to have saved the password anywhere, encrypted or not.
Additionally, it would be nice for it to have an option to add other mail accounts with a page similar to what you have for exchange.
link68759 said:
Another rom, you say? Any chance someone could tell me where a changelog is for these different builds (29017 vs 29022 for example)?
back to the main subject: Great job! I haven't "export[ed] all' yet, as I don't use sense and I feared for the safety of my meticulously kept xda_uc folder, but everything I tested worked just fine.
My first suggestion would be the obvious; instead of having numbers for encryption/auth in the wifi tab, make the drop down list show the words each number represents.
I haven't HR'd yet, but looking at the Hotmail.reg, it doesn't seem to have saved the password anywhere, encrypted or not.
Additionally, it would be nice for it to have an option to add other mail accounts with a page similar to what you have for exchange.
Click to expand...
Click to collapse
You can't lift the hotmail password from the registry. It's just plain impossible but you can lift everything else so when you run windows live all you have to do is to enter the password. There is also no provision for placing it in to a registry file so windows live knows what to do with it. So blame MS not me.
The numbers will get masked eventually. Right now it's more of a case of getting everything working before we make it look nice (and if you look at post 3 there are links that explain the numbers)
If you want extra email accounts send me an example file and when i get time i'll make up a layout and some code for it.
You guys have to understand that to write a program like this i've had to do months of reaserch to get the registry keys etc for exct1 and then i've had to learn VB, develop exchange partner detection code (i am the only person in the world to have done that) and then write 1100+ lines and counting of code. I can also only develop for what i have to hand. If i don't have say a yahoo email account syncing to my phone i'm not just magic one up to test with
M3PH said:
You can't lift the hotmail password from the registry. It's just plain impossible but you can lift everything else so when you run windows live all you have to do is to enter the password. There is also no provision for placing it in to a registry file so windows live knows what to do with it. So blame MS not me.
The numbers will get masked eventually. Right now it's more of a case of getting everything working before we make it look nice (and if you look at post 3 there are links that explain the numbers)
If you want extra email accounts send me an example file and when i get time i'll make up a layout and some code for it.
You guys have to understand that to write a program like this i've had to do months of reaserch to get the registry keys etc for exct1 and then i've had to learn VB, develop exchange partner detection code (i am the only person in the world to have done that) and then write 1100+ lines and counting of code. I can also only develop for what i have to hand. If i don't have say a yahoo email account syncing to my phone i'm not just magic one up to test with
Click to expand...
Click to collapse
I won't blame microsoft for protecting my passwords
I appreciate the significant amount of work you've put into your projects; but correct me if I'm wrong, generating the email2.xml could be done in almost exactly the same way as you have with the activesync page. You don't need to test any email accounts, since if it doesn't work AND the xml file was generated correctly, that is beyond the scope of this export project (and probably something funky going on within winmo itself, since xda_uc is only the messenger). Regardless, I would be willing to create any number of email accounts to help testing, and I'm sure others with random email domains will offer up their bug reports.
I will post a sample email2.xml later
------EDIT
It's later, here's a generic imap email config. There's probably some unnecessary unused values at the end, and I don't mean to patronize, but have you read http://msdn.microsoft.com/en-gb/bb737579 ?
Code:
<wap-provisioningdoc><characteristic type="EMAIL2">
<characteristic type="{76877040-0395-4efb-b3c6-b87c5aedce67}">
<parm name="SERVICENAME" value="Gmail" />
<parm name="SERVICETYPE" value="IMAP4" />
<parm name="INSERVER" value="imap.gmail.com" />
<parm name="OUTSERVER" value="smtp.gmail.com" />
<parm name="NAME" value="Link" />
<parm name="AUTHNAME" value="[email protected]" />
<parm name="AUTHSECRET" value="supersafepass" />
<parm name="DOMAIN" value="" />
<parm name="REPLYADDR" value="[email protected]" />
<parm name="FORMAT" value="2" />
<parm name="LINGER" value="30" />
<parm name="RETRIEVE" value="-1" />
<parm name="KEEPMAX" value="50" />
<parm name="DWNDAY" value="7" />
<characteristic type="TAGPROPS">
<parm name="8128000B" value="0"/>
<parm name="812C000B" value="1"/>
</characteristic>
<parm name="AUTHREQUIRED" value="1" />
<parm name="SMTPALTENABLED" value="0" />
<parm name="SMTPALTAUTHNAME" value="" />
<parm name="SMTPALTAUTHPASSWORD" value="" />
<parm name="SMTPALTDOMAIN" value="" />
</characteristic>
</characteristic>
</wap-provisioningdoc>
link68759 said:
I won't blame microsoft for protecting my passwords
I appreciate the significant amount of work you've put into your projects; but correct me if I'm wrong, generating the email2.xml could be done in almost exactly the same way as you have with the activesync page. You don't need to test any email accounts, since if it doesn't work AND the xml file was generated correctly, that is beyond the scope of this export project (and probably something funky going on within winmo itself, since xda_uc is only the messenger). Regardless, I would be willing to create any number of email accounts to help testing, and I'm sure others with random email domains will offer up their bug reports.
I will post a sample email2.xml later
------EDIT
It's later, here's a generic imap email config. There's probably some unnecessary unused values at the end, and I don't mean to patronize, but have you read http://msdn.microsoft.com/en-gb/bb737579 ?
Code:
<wap-provisioningdoc><characteristic type="EMAIL2">
<characteristic type="{76877040-0395-4efb-b3c6-b87c5aedce67}">
<parm name="SERVICENAME" value="Gmail" />
<parm name="SERVICETYPE" value="IMAP4" />
<parm name="INSERVER" value="imap.gmail.com" />
<parm name="OUTSERVER" value="smtp.gmail.com" />
<parm name="NAME" value="Link" />
<parm name="AUTHNAME" value="[email protected]" />
<parm name="AUTHSECRET" value="supersafepass" />
<parm name="DOMAIN" value="" />
<parm name="REPLYADDR" value="[email protected]" />
<parm name="FORMAT" value="2" />
<parm name="LINGER" value="30" />
<parm name="RETRIEVE" value="-1" />
<parm name="KEEPMAX" value="50" />
<parm name="DWNDAY" value="7" />
<characteristic type="TAGPROPS">
<parm name="8128000B" value="0"/>
<parm name="812C000B" value="1"/>
</characteristic>
<parm name="AUTHREQUIRED" value="1" />
<parm name="SMTPALTENABLED" value="0" />
<parm name="SMTPALTAUTHNAME" value="" />
<parm name="SMTPALTAUTHPASSWORD" value="" />
<parm name="SMTPALTDOMAIN" value="" />
</characteristic>
</characteristic>
</wap-provisioningdoc>
Click to expand...
Click to collapse
Cool, thanks. Can i be cheeky and as you to export the registry key for that too?
As for the coding, it is pretty similar but the problem is in the details. Although the xml writing code would be the same with out the above file i'd have no idea what the attributenames would need to be. Then there is digging the values from the registry. You need to know the name of the account and every one names them differently. So you need to have an inputbox so the user can enter the name, then you need to run a search through the registry to find the relevent key and finally convert all the registry values to something that can be used in an xml file. So, if the email2 providers aren't grouped together in the registry like the activesync partners that's gonna mean writing a custom search proceedure.
So you see how complicated it is and yes i had read that link but it doesn't tell me the things i need to know about the registry key's and values because you forget this program is supposed to be as autonomous as possible and just another xml file writer.
Right, and now for a progress update. The current testing version has an improved folderbrowser that now supports a hierarchal view. Also, i have implemented some very basic exception handling. I expect to get the new version to you guys this week but i'm not making an promises.
Ok, I see, I didn't realize the activesync page fetches values from the registry. I didn't use it, and from my glance at it, I thought you had to fill in the values yourself (which is what I thought would be done for the email2.xml).
I'll have the key for you shortly.
link68759 said:
Ok, I see, I didn't realize the activesync page fetches values from the registry. I didn't use it, and from my glance at it, I thought you had to fill in the values yourself (which is what I thought would be done for the email2.xml).
I'll have the key for you shortly.
Click to expand...
Click to collapse
Some of it comes from the registry and some of it you have to enter coz it's easier to get the user to input it than convert the value data to something the xml file can use. Ideally i would prefer it if the user never had to enter anything but that perfect world doesn't exist
The Beta2 has gone to the testing team. I'm hoping they do their thing so i can get it out today but it's very much a case of it's ready when it's ready. The preliminary changelog includes lots of crash fixes and some bug squishing and a speed improvement here and there. I also have a surprise for you but i'll keep that one quiet untill we release Beta2. Let's just say it opens the door for some really cool future features.
Also would you guys like it if i posted future versions on xda as well as hotfile so you can use the new QR Code download system? Post below and tell me what you think
I can't find the registry keys of email accounts for the life of me: where are they located?
link68759 said:
I can't find the registry keys of email accounts for the life of me: where are they located?
Click to expand...
Click to collapse
It will either be "\storage card" or "\storage card\XDA_UC" and is called either exchange.xml or hotmail.reg. It won't be anywhere else. In the testing version i implemented a folder browser so you can pick where it is saved.

Removal of new sneaky COVID menu and feature, is it possible?

hi guys
i just noticed that google just sneaked in this new voice under the Google account settings, which is for COVID notifications. i am extremely upset, i don't want that so how can i get rid of that?
at the moment is all blank on my phone as well
do i need to root the phone? can we hack this please? this has gone to ridiculous levels.
or shall i remove Google OS completely and do one of those factory re-installations without google? takes some work but i saw that's possible.
many thanks,
Gab
Depends On Your Device
gabriolinari said:
hi guys
i just noticed that google just sneaked in this new voice under the Google account settings, which is for COVID notifications. i am extremely upset, i don't want that so how can i get rid of that?
at the moment is all blank on my phone as well
do i need to root the phone? can we hack this please? this has gone to ridiculous levels.
or shall i remove Google OS completely and do one of those factory re-installations without google? takes some work but i saw that's possible.
many thanks,
Gab
Click to expand...
Click to collapse
Glad someone else besides me realizes how creepy this is. The kind of phone you have determines how easily you'll find alternative software. But if you have the means, time and the computer hardware, you can create your own build server.
You'll just need to locate the blobs for your device.
I don't see this anywhere in Google account settings on SG S10. Could this be regional?
Sent from my SM-G973U1 using Tapatalk
madfusker said:
I don't see this anywhere in Google account settings on SG S10. Could this be regional?
Sent from my SM-G973U1 using Tapatalk
Click to expand...
Click to collapse
hmhm that is in my google account settings, it popped up without asking anything
furboom1240 said:
Glad someone else besides me realizes how creepy this is. The kind of phone you have determines how easily you'll find alternative software. But if you have the means, time and the computer hardware, you can create your own build server.
You'll just need to locate the blobs for your device.
Click to expand...
Click to collapse
Absolutely ,i have 2 x S8 and on my wife's phone same thing happened. tempting to roll back to Nokia!
do you have those blobs?
gabriolinari said:
hmhm that is in my google account settings, it popped up without asking anything
Click to expand...
Click to collapse
No pops yet in USA on unlocked S10 currently on AT&T.
microg installed with nanodroid (or lineage.microg.org / build micro by u) does the job very well.
Of course.. bootloader needs to be unlocked.
muebbel said:
microg installed with nanodroid (or lineage.microg.org / build micro by u) does the job very well.
Of course.. bootloader needs to be unlocked.
Click to expand...
Click to collapse
interesting, any thoughts on a De-google phone instead?
i have a 2nd phone a samsung A6 i can use for experiments, any tipcs? i want to give it a go!
gabriolinari said:
interesting, any thoughts on a De-google phone instead?
i have a 2nd phone a samsung A6 i can use for experiments, any tipcs? i want to give it a go!
Click to expand...
Click to collapse
On my xz1c everything runs well.. playstore.. everything... (except google-cloud-store-foo, which i dont need).
https://forum.xda-developers.com/galaxy-a6/development
Clearing the storage from the GPS app removed the mess but it came right back! Uggg
If I find away to get this permanently removed I will share later.
That Depends on the MFR
gabriolinari said:
Absolutely ,i have 2 x S8 and on my wife's phone same thing happened. tempting to roll back to Nokia!
do you have those blobs?
Click to expand...
Click to collapse
Different manufacturers have different policies. The blobs allow the phone's hardware to talk to the software you build in Android Studio or another build server.
I know that Sony and HTC are very friendly to forks, but Verizon and AT&T are historically hostile. For example, despite five years passing, my M8 is still supported by the LineageOS project.
---------- Post added at 07:42 PM ---------- Previous post was at 07:35 PM ----------
There might be a silver lining to all the abandoned phones that are usually not updated to coax customers into buying more expensive phones. They won't be pushing updates to them, and if they do, the motivation is that much clearer.
I'm currently borrowing my classmates' Aristo 2 as my m8 is being repaired. You can't shake any tracking software if it has a persistence module, which Play Services had when I booted this thing.
I had to go into sixteen different built in apps and disable everything from usage and notification access, to background data, radio access and the like. I did get an update, but it was from 2018. I turned automatic updates off in Developer Options.
I'll say, the Optimus UI has actually improved since I last used it. It's even faster when you turn off every Google app. My battery life on this device is even better than my old one, which I could squeeze a day out of. This one? At least two.
I don't recommend what I did to anyone. It requires sacrifices.
gabriolinari said:
hi guys
i just noticed that google just sneaked in this new voice under the Google account settings, which is for COVID notifications. i am extremely upset, i don't want that so how can i get rid of that?
at the moment is all blank on my phone as well
do i need to root the phone? can we hack this please? this has gone to ridiculous levels.
or shall i remove Google OS completely and do one of those factory re-installations without google? takes some work but i saw that's possible.
many thanks,
Gab
Click to expand...
Click to collapse
Did you try this?
Easy STEPS to TURN OFF COVID-19 Exposure Notifications on Android
newbit said:
Did you try this?
Easy STEPS to TURN OFF COVID-19 Exposure Notifications on Android
Click to expand...
Click to collapse
hi
i have tried and it worked on my wife's S8 however on mine i got stuck for some reason, when i do 3 dots > uninstall updates, i get
Uninstalling Google Play services unsuccessfull
i restarted and shut down the phone, tried to uninstall play store too and doesn't work, so one phone succeeded, one not. any ideas on why?ù
EDIT: i got it to work, i needed this step further
Now open settings and search for device administrator (device admin apps) and disable find my device and google pay and all the other apps listed.
thanks
but will it stay this way???
gabriolinari said:
Now open settings and search for device administrator (device admin apps) and disable find my device and google pay and all the other apps listed.
Click to expand...
Click to collapse
At first i run it to that same issue too.
gabriolinari said:
but will it stay this way???
Click to expand...
Click to collapse
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Can't make no promisses! But for now it looks like it does. But to me it feels like, the gapps slowly
start to "mail function". Means, maps doesn't work so well anymore. I couldn't save an address yesterday.
Gmail doesn't give me notifications, both take sometimes VERY long to load, and gmail even poped up
a message that there is something wrong with the play services. But this was so quick, I couldn't even knock
the display.
If you want to dig a bit deeper, extract the AndroidManifest.xml from the google play services and look for
"exposurenotification".
Code:
<permission android:name="com.google.android.gms.nearby.exposurenotification.EXPOSURE_CALLBACK" android:protectionLevel="signature" />
<uses-permission android:name="com.google.android.gms.nearby.exposurenotification.EXPOSURE_CALLBACK" />
<activity android:enabled="true" android:excludeFromRecents="true" android:exported="false" android:name="com.google.android.gms.nearby.exposurenotification.settings.SettingsCheckerActivity" android:process="com.google.android.gms.ui" android:taskAffinity="" android:theme="@style/ExposureNotificationDialogStyle" chimera:autoEnabled="true">
<intent-filter>
<action android:name="com.google.android.gms.nearby.exposurenotification.settings.CHECK_SETTINGS" />
<category android:name="android.intent.category.DEFAULT" />
</intent-filter>
</activity>
<activity android:enabled="true" android:exported="true" android:label="@LEMON_transformed_from_string/exposure_notification_settings_title" android:name="com.google.android.gms.nearby.exposurenotification.settings.SettingsActivity" android:process="com.google.android.gms.ui" android:resizeableActivity="true" android:supportsPictureInPicture="true" android:theme="@style/ExposureNotificationSettingsStyle" chimera:autoEnabled="true">
<intent-filter>
<action android:name="com.google.android.gms.settings.EXPOSURE_NOTIFICATION_SETTINGS" />
<category android:name="android.intent.category.DEFAULT" />
</intent-filter>
</activity>
<service android:enabled="@bool/platformIsAtLeastL" android:exported="false" android:name="com.google.android.gms.nearby.exposurenotification.service.ExposureNotificationInternalService" android:process="@string/common_persistent_process" chimera:autoEnabled="@bool/platformIsAtLeastL" />
<service android:enabled="true" android:exported="false" android:name="com.google.android.gms.nearby.exposurenotification.service.ExposureMatchingTriggerService" android:permission="com.google.android.gms.permission.BIND_NETWORK_TASK_SERVICE" android:process="@string/common_persistent_process" chimera:autoEnabled="false">
<intent-filter>
<action android:name="com.google.android.gms.gcm.ACTION_TASK_READY" />
</intent-filter>
</service>
<service android:enabled="@bool/platformIsAtLeastL" android:exported="false" android:name="com.google.android.gms.nearby.exposurenotification.service.ExposureMatchingService" android:process="@string/common_persistent_process" chimera:autoEnabled="@bool/platformIsAtLeastL" />
<service android:exported="true" android:name="com.google.android.gms.nearby.exposurenotification.WakeUpService" android:permission="com.google.android.gms.nearby.exposurenotification.EXPOSURE_CALLBACK" />
Besides: I've found a Video from a german "Ethical Hacker" Jean Pereira (www.Haikiki.com),
he showes a "live hack" of its phone via the corona app. Can't tell if this is legit. But coudn't find anything else in english yet...
Cheers
NewBit
The only way to get rid of it is to delete Google Play Services (com.android.google.gms). That's how they snuck it in. On Android Pie it's simple. Just debloat via ADB using pm list packages prompt and voila! it's gone. On Android 10 it works the same EXCEPT none of the google apps, firefox, instacart, or anything like that will WORK. So you can de-google all you want - they've baked it into everything. It's something I'm struggling with now since I was forced to upgrade.
furboom1240 said:
That Depends on the MFR
Different manufacturers have different policies. The blobs allow the phone's hardware to talk to the software you build in Android Studio or another build server.
I know that Sony and HTC are very friendly to forks, but Verizon and AT&T are historically hostile. For example, despite five years passing, my M8 is still supported by the LineageOS project.
---------- Post added at 07:42 PM ---------- Previous post was at 07:35 PM ----------
There might be a silver lining to all the abandoned phones that are usually not updated to coax customers into buying more expensive phones. They won't be pushing updates to them, and if they do, the motivation is that much clearer.
I'm currently borrowing my classmates' Aristo 2 as my m8 is being repaired. You can't shake any tracking software if it has a persistence module, which Play Services had when I booted this thing.
I had to go into sixteen different built in apps and disable everything from usage and notification access, to background data, radio access and the like. I did get an update, but it was from 2018. I turned automatic updates off in Developer Options.
I'll say, the Optimus UI has actually improved since I last used it. It's even faster when you turn off every Google app. My battery life on this device is even better than my old one, which I could squeeze a day out of. This one? At least two.
I don't recommend what I did to anyone. It requires sacrifices.
Click to expand...
Click to collapse
They don't have to coax you to upgrade. All the companies are about to shut off old phones and force customers to upgrade to 5G. TMO store managers said end of the year if their people aren't on 5G they won't have service. Same with ATT. You can google it - they say it's for 3G phones but it's a lie. They are planning on taking all our free, unlocked, and functional phones off their network for this Android 10 Dynamic Partition R/O crap that teases root at you but doesn't let you do nothing.
hi - mine is still running OK and without it, a part on maps to be honest where you see the C19 layer and updates which are so intrusive, etc ,just to remind us every single day, what a crap..., i think i blocked play services updates, something like that.
i have a s8 on android 9 - you get the random notification that like "sheets will not work if you don't update play services". but ignore that and it works, disabled notifications and voilà. not sure they will still sneak in this crap.
I am not doing any of the samsung updates since 6 months. bit of drawback for the security updates but whatever...
gabriolinari said:
hi - mine is still running OK and without it, a part on maps to be honest where you see the C19 layer and updates which are so intrusive, etc ,just to remind us every single day, what a crap..., i think i blocked play services updates, something like that.
i have a s8 on android 9 - you get the random notification that like "sheets will not work if you don't update play services". but ignore that and it works, disabled notifications and voilà. not sure they will still sneak in this crap.
I am not doing any of the samsung updates since 6 months. bit of drawback for the security updates but whatever...
Click to expand...
Click to collapse
Yes, you can delete Google Play Services on Pie and it will work easy peasy. On Android 10, once you delete Google Play Services and you reboot the phone you cannot send text messages, use instacart, use firefox- it blocks ALL functionality of apps.

All About Maps - Episode 1: Showing Routes from GPX files on Maps

This article is originally from HUAWEI Developer Forum
Forum link: https://forums.developer.huawei.com/forumPortal/en/home​
All About Maps
Let's talk about maps. I started an open source project called All About Maps (https://github.com/ulusoyca/AllAboutMaps). In this project I aim to demonstrate how we can implement the same map related use cases with different map providers in one codebase. We will use Mapbox Maps, Google Maps, and Huawei HMS Map Kit. This project uses following libraries and patterns:
MVVM pattern with Android Jetpack Libraries
Kotlin Coroutines for asynchronous operations
Dagger2 Dependency Injection
Android Clean Architecture
Note: The codebase changes by time. You can always find the latest code in develop branch. The code when this article is written can be seen by choosing the tag: episode_1-parse-gpx:
https://github.com/ulusoyca/AllAboutMaps/tree/episode_1-parse-gpx/
Motivation
Why do we need maps in our apps? What are the features a developer would expect from a map SDK? Let's try to list some:
Showing a coordinate on a map with camera options (zoom, tilt, latitude, longitude, bearing)
Adding symbols, photos, polylines, polygons to map
Handle user gestures (click, pinch, move events)
Showing maps with different map styles (Outdoor, Hybrid, Satallite, Winter, Dark etc.)
Data visualization (heatmaps, charts, clusters, time-lapse effect)
Offline map visualization (providing map tiles without network connectivity)
Generate snapshot image of a bounded region
We can probably add more items but I believe this is the list of features which all map provider companies would most likely provide. Knowing that we can achieve the same tasks with different map providers, we should not create huge dependencies to any specific provider in our codebase. When a product owner (PO) tells to developers to switch from Google Maps to Mapbox Maps, or Huawei Maps, developers should never see it as a big deal. It is software development. Business as usual.
One would probably think why a PO would want to switch from one map provider to another. In many cases, the reason is not the technical details. For example, Google Play Services may not be available in some devices or regions like China. Another case is when a company X which has a subscription to Mapbox, acquires company Y which uses Google Maps. In this case the transition to one provider is more efficient. Change in the terms of services, and pricing might be other motivations.
We need competition in the market! Let's switch easily when needed but how dependencies make things worse? Problematic dependencies in the codebase are usually created by developing software like there is no tomorrow. It is not always developers' fault. Tight schedules, anti-refactoring minded teams, unorganized plannings may cause careless coding and then eventually to technical depts. In this project, I aim to show how we can encapsulate the import lines below belonging to three different map providers to minimum number of classes with minimum lines:
Code:
import com.huawei.hms.maps.*
import com.google.android.gms.maps.*
import com.mapbox.mapboxsdk.maps.*
It should be noted that the way of achieving this in this post is just one proposal. There are always alternative and better ways of implementations. In the end, as software developers, we should deliver our tasks time-efficiently, without over-engineering.
About the project
In the home page of the project you will see the list of tutorials. Since this is the first blog post, there is only one item for now. To make our life easier with RecyclerViews, I use Epoxy library by Airbnb in the project. Once you click the buttons in the card, it will take to the detail page. Using bottom sheet we can switch between map providers. Note that Huawei Map Kit requires a Huawei mobile phone.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
In this first blog post, we will parse the GPX file of 120 km route of Cappadocia Ultra Trail race and show the route and check points (food stations) on map. I finished this race in 23 hours 45 mins and you can also read my experience here (https://link.medium.com/uWmrWLAzR6). GPX is an open standart which contains route points that constructs a polyline and waypoints which are the attraction location. In this case, the waypoints represents the food and aid stations in the race. We will show the route with a polyline and waypoints with markers on map.
Architecture
Architecture is definitely not an overrated concept. Since the early days of Android, we have been seeking for the best architectural patterns that suits with Android development. We have heard of MVC, MVP, MVVM, MVI and many other patterns will emerge. The change and adaptation to a new pattern is inevitable by time. We should keep in mind some basic and commonly accepted concepts like SOLID principles, seperation of concerns, maintainability, readibility, testablity etc. so that we can switch to between patterns easily when needed.
Nowadays, widely accepted architecture in Android community is modularization with Clean Architecture. If you have time to invest more, I would strongly suggest Joe Birch's clean architecture tutorials. As Joe suggests in his tutorials, we do not have to apply every rule line by line but instead we take whatever we feel like is needed. Here is my take and how I modularized the All About Maps app:
Note that dependency injection with Dagger2 is the core of this implementation. If you are not familiar with the concept, I strongly suggest you to read the best Dagger2 tutorial in the wild Dagger2 world by Nimrod Dayan.
Domain Module
Many of us are excited to start implementation with UI to see the results immediately but we should patiently build our blocks. We shall start with the domain module since we will put our business logic and define the entities and user interactions there.
This is not the end. For full content, you can visit https://forums.developer.huawei.com/forumPortal/en/topicview?tid=0201260729166420263&fid=0101187876626530001

Packet Sniffing and SSL Pinning on an Android Game

Hello XDA forum,
I've tried everything in my knowledge so far, so I've finally decide to come on to this forum as I've completely ran out of idea as to how to move forward with this problem at this point.
I'm not that tech savvy so please excuse my terminologies or any assumptions as I describe the problem as they could be completely wrong.
Background:
Currently I'm playing a game called Fate/Grand Order. This game has many servers, and published by different companies in certain regions. In the beginning I was playing the Global/North American (NA) version of the game, but later I've began exploring different servers.
While playing the CN version of the game, and I was able to successfully packet sniff on this version of the game. The CN version of the game is published by Bilibili and downloaded via their games site (link) as Google (Play) is blocked in China, and its online interactions communicates with the Bilibili server. Whereas the other versions of the game such as NA, JP or KR are downloaded via Google Play.
Since I was able to packet sniff the CN version of the game, it got me curious into packet sniff the other versions of the game (I have tried with NA and JP). However, when I did my proxy software Fiddler was unable to pick up any of the important packets once the game has started.
What I have tried so far:
Initially I did a bit of digging around as to why after "Tunnel to cdn.data.fate-go.jp:443" or "Tunnel to data.fate-go.us:443", no more important packets would show up again.
At first I thought it was me not setting up my Fiddler's cert properly, however I can exclude that possibility for 2 reasons.
The first is that if I hadn't set it properly the first time around, I wouldn't be able to properly see and read the CN's server packets, secondly when I used HTTP Toolkit instead of Fiddler, the same situation is happening.
After bit of research, I was suggested that it could be modern Android Apps utilising SSL Pinning to prevent MITMs and so I've decide to find a way to disable SSL Pinning for the JP and NA version. After installing Frida, launching the Frida server on my device (an Emulator), and using Objection to boot the App and using "android sslpinning disable"
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
the results were still the same, therefore leaving me extremely confused whether I have gotten this all wrong. This lead me to speculate whether I have successfully unpinned the SSL or even if it uses pinned certs. I've tried to install this APK (an SSL Unpinning Demo), but I can't seem to be able to install it on my emulator. I then looked into whether I could manually swap out the pinned certs with my own, but when I opened the game APK in APK Studio there were no certs to be found.
So right now I'm not sure how to tackle this problem further. Maybe someone could explain what this game is doing to protect itself from having its packets read/modified, or if there's any way around it., or maybe I'm just an idiot and probably got my steps wrong somewhere along the way. This is all the info I can provide from the top of my head right now, let me know you need anything else.
I would like to try the same with Smash Legends so I will just leave my reply here hoping someone may know the answer.
I've met the same question now. Do you find any method for fgo.jp sniffing? If so, pls email me at [email protected].

Must I upgrade to latest Android version to continue receiving security patches?

Hello all, I searched extensively for an answer about this on here and the Android docs but found nothing.
I'm using a Pixel 3AXL that still has security updates thru 03/22(-ish)
Google is trying to beg me to upgrade to Android 12 and I don't want the upgrade. I tested Android 12 while it was in beta and I simply don't like the bubbly interface it's the opposite of what I prefer.
That being said there's no option to refuse the upgrade and continue on with updates for Android 11 until my security end of life occurs...
Anyone know how I can get just security updates on Android 11? Will I need to manual update by "side loading" update files with adb? (or if that's even possible?)
Don't know. Android 12 might as well be malware if it screws up you're device's functionality or usability
Backup all critical data redundantly to at least 2 hdds that are physically and electronically isolated from each other and the PC. Never encrypt data drives and make sure the data is all there, intact and readable. That's your best protection against all that can happen.
In real time use it doesn't seem to matter as long as you're running on Android 9 or higher. It's fairly secure.
This N10+ hasn't been updated in over 2 years and the current load is over 1.5 yo.
Malware hasn't been an issue but I'm careful with what I install, download and back out of or close the browser, sometimes clear the cache if things get sketchy, etc. I hawk the download folder daily. Wifi is locked down as well.
Most malware is downloaded* by the user... and there's no saving dumb bunnies.
*and/or they they fail to detect malware in the download folder such as a trojan preloader. Had one breach the Samsung browser 22 months ago in spite of file settings. Tricky little rascal. It got perished before it could download its payload
Thanks, my greatest concern these days is a fdroid package gone rogue or infiltrated with malware... I suppose the same thing can and sometimes does happen on Googles play store as well. So yeah mostly package manager attacks or supply chain or whatever they're known as.
bladerunnernexus said:
Thanks, my greatest concern these days is a fdroid package gone rogue or infiltrated with malware... I suppose the same thing can and sometimes does happen on Googles play store as well. So yeah mostly package manager attacks or supply chain or whatever they're known as.
Click to expand...
Click to collapse
When side loading scan with online Virustotal.
Scan occasionally with Malwarebytes as it will pick off one every now and then. It found a raskily trojan preloader in the download folder once that snuck in before it could retrieve its payload.
Lol, just because it's on Playstore doesn't mean I trust it. All my apps have been in use for a long time and I don't "sample" apps unless I need too.
It's rare but a poorly written Android app will sometimes do a dirty uninstall and leave you with a mess. My current OS load is over 1.5 yo, still fast and stable. In part because I'm careful what I install.
I firewall block apps that don't need internet access with Karma Firewall.
I also use this setting modification to kill ads globally...
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Excellent idea. Can some apps hide from karma? I'm using a KeePass compatible open source password manager downloaded from fdroid and it's not listed on my karma firewall apps list.
All my other apps and fdroid apps are listed though...
bladerunnernexus said:
Excellent idea. Can some apps hide from karma? I'm using a KeePass compatible open source password manager downloaded from fdroid and it's not listed on my karma firewall apps list.
All my other apps and fdroid apps are listed though...
Click to expand...
Click to collapse
Nothing can hid from Karma's logging feature that I'm aware of. Problem is that feature is only active on Android 9 and below.
I've use this feature a lot as you can see what accessed the internet and when.
It's "piggybacking" on another Android service be my guess or you just didn't spot it.
Some apks show only as UID numbers.
I use the logging feature to determine their purpose.

Categories

Resources