Deploying Android to an Enterprise - Android Q&A, Help & Troubleshooting

I need to deploy Android devices(specifically Samsung Galaxy Note 10.1) to about 4,500 retail stores. We have an MDM, and most of the details(as far as security goes) are pretty much set. What we haven't figured out yet is how to initially image/configure these devices up right out of the box. We currently have about 500 iPads deployed(with MDM), and the way we were able to set those up out of the box was by using Apple Configurator to create an "image"(backup), and then restoring it to the other iPads. Using Apple Configurator, we were also able to pre-load apps onto the device.
Is there a similar method to imaging Android devices? That does not include having to root or install a 3rd part recovery?

Related

[Q] com.android.fixed.update

Hey all,
I'm the proud owner of a Samsung Nexus S (sadly the i9020a model, though). I was forced against my will at gun point by someone named Jealousy to install ICS (4.0.4) on my i9020a when it was released for all other Nexus S devices except for the US AT&T version of the phone.
Anyway, love the ICS and absolutely love the ROM I'm using (Brainmaster's stock ICS, w/ Supercharger V6 and a number of other goodies). But I was a bit confused today when I opened my phone and noticed a recently downloaded APK called "update.apk". Looking at it's info, it's name is "com.android.fixed.update" with no author, developer, and minimum version of 0. It weighs roughly 40kb and is not associated with the market, so I'm going to have to disable my "Market-only" settings in order to install it, otherwise it was about to install itself.
I was wonder what it might be. With no other information, I'm a bit hesitant to install it. The only permissions it asks for is Network Access and Start on Boot.
I thought just maybe it was an OTA from a developer (maybe even Brainmaster) but I wasn't exactly sure what kind of access or ability non-service providers had to OTA functionality and what not. (I suppose, if it can probably be modified with some effort, seeing as the source is available...)
Anyway, hoping to hear your thoughts on it. Google showed ONE result for "com.android.fixed.update" and that's it. Thanks for your input in advance!
We also got the same file on our Moto Xoom, I believe its a virus so do not install it. The file was downloaded at biandroid (dot) info which is definitely not associated with android.com
http://anonhq.com/notcompatible-back-market/
that is the explanation
Back in 2012 malware called Not Compatible was haunting android devices. Now more powerful than ever the latest version of NotCompatible.C has its own self protected encryption. Thus making this program difficult to find and delete.
Lookout Inc, a mobile security firm says that this version of the malware is a threat on a massive scale. Once in it has the tendency to control and hack data. It is an advance form of malware that can be seen on a PC a botnet so powerful that it has a server design architecture, P2P communications and as previously said encryption capabilities.
The programming of the malware is one of the hardest to kill malware that we have observed. Once the malware is installed it does not appear on the android operating system as it keeps itself in the background. It only works when the device is unlocked by the user or if it is restarted.
view
Source: Imgur
The only way you can find out is through Manage Applications>Settings. This will show you that an application by the long name of (com.andriod.fixed.update) is running. All you need to do is simply uninstall it.

[Q] Recommend a phone that is not locked down

I am a Windows Phone developer who writes apps for wearable devices like the Pebble that are not supported or poorly supported on Windows Phone. In order to understand the Bluetooth protocol for the device I normally download the manufacturers apk for their device and decompile it to understand the Bluetooth packet requirements.
I have been using a Nexus 7 which has worked well but the last couple of devices I have purchased, Google Play will not allow me to download the apk because my Nexus 7 is not a phone. So the question is what would be the recommended pre-owned device I should get that will still allow me to download apps meant for an Android phone but still allow me to get to Google Play and the apk when downloaded.
If it makes a difference, I use Verizon but if a suitable phone was not available or too expensive, I would be willing to go with a phone I could not use on Verizon but still use Google Play on.
Thanks for any help you can provide.

[Q] Set custom DNS (e.g. openNic, OpenDNS, etc.), (post 2015 CE)

I have scoured the interwebs for a solution, yet found only obsolete and empirically ineffectual methods, aka "setprop net.dsn1" etc., none of which persist, neither immediately after the issued command nor, especially, after a reboot.
Please allow me to make it clear, that I find it perverse and loathsome that an "app" would be necessary to accomplish this feat. The indolent '"app" mentality', which is the sadly presumed remedy for nearly every action other than involuntary motion, is a contract with the assassin of freedom – and I abhor it venomously.
I have owned an Android (presently with CM11 ROM installed, with TWRP recovery) device for two weeks. It is the first Android device (or smart, tablet, etc.) I've ever owned or dared t fuss with. I particularly purchased the Samsung Galaxy Tab Pro 8.4 because it was supported by CM. I am normally a Linux user and value my liberties of hack-ability. Oddly, I was able to successfully configure my DNS via a terminal emulator within my Android device, but recent updates seem to have thwarted my efforts. Apparently, resolv.conf no longer exists and some fundamental changes have been implemented, though this is all new to me and I ain't sure.
I believe that a user should be able to configure their own DNS (amongst other things) and therefore request assistance from the wizards of xda. Google is simply unacceptable, and Verizon hijacking plain makes me mad.
Show me the way, to 208.67.222.222!

Deleting Android !

OK here's a question for all you android-heads: How to get rid of it ???
Android was originally developed as open source but then Google 'bought it' and converted it to a proprietory system which requires a Google 'account' which colates and tracks personal info across devices and systems. Huawei may finally give us a way out of the Yank back-end snooping problem but that can only be defeated by getting rid of the American OS (Android and IOS) which steal and pass all data directly to American authorities and companies. What happened to privacy ???
Sailfish, Ubuntu touch and Tizen may be useful but it would be infinitely better if we could install our own Linux versions and take back control.
The 'newspeak' labelled "Smartphones' remind me of the old 8088 computers from the 1980's that could hardly be used as they were so basic. "Smartphones' are so very very basic that you cannot even access the root to install your own OS and software. Surely someone can link the ideals of the Rapberry Pi to the advanced hardware of the "Smartphone" to get a device that can actually be used normaly ! THAT will be the day! Oh and by the way - in Australia there existed "Communicators" - just like a "Smartphone", but without Sim cards, using only wi-fi and telephony with mVoIP (but that didn't give billions of $' to the phone companies...) We seem to be going backwards technologically Over and out....
Update 22.12.2019:
A new (really) open source Linux phone has just been announced - the Pine-Phone which can run any Linux system. Details at fossmint pinephone-an-open-source-smartphone-for-linux
Install Armbian if it's kernel supported hardware that you can build a map for. Otherwise there isn't really an option, irritating as that is.

I know the Nexus 10 is old but certificates shouldn't be a reason to make it useless

Hi All, I used to play around with SSL certs and openssl and all that stuff... so I have a bit of knowledge on the topic but am by no means an expert... please give me a bit of leeway if I misspeak...
I have a Nexus 10 that I still like and that I still use.... yes I'm a cheapskate! It runs Android 5.1.1... my Nexus 6 (yes I still use that one too!) runs Android 7.1.1. That fact will be made relevant below... There are a lot of us cheapskates around and we do like to extend the life of our stuff for as long as possible.
The Question: If I have an OLD android device trying to connect to a website with a browser... or trying use an app against a server with a cert that is signed by a CA that my truststore does not have, in principle, all I need to do is get that CA installed (yes/no/maybe?)
The Reason I ask:
So I saw an Android Police item today: "Many websites will stop working on older android versions in 2021" This story says that thanks to the fact that "Let's Encrypt" will stop cross signing their certificates with the DST CA X3 certificate... Evidently any device running 7.1 or earlier will start having issues. The DST cert has been around for some time... but "Let's Encrypt" has their "ISRG Root X1" CA. According to the AP article, this "cross-signing" made it possible for devices on Android 7.1 or earlier to connect to SSL-enabled sites. After January 2021 they are NOT going to do this anymore so your chrome brower (which unlike FireFox does not have capability to use a separate truststore) will not work with some websites... and of course this has ramifications for apps that rely on ssl as well.
So again, my question is, assuming the apps I have use the basic device's trust store, shouldn't I just have to install the ISRG Root X1 into my device's truststore and I can then be fat, dumb, and happy again? My limited knowledge on SSL suggests the answer is "yes that would work" but I'm not sure (of much!) these days.

Categories

Resources