[Q] Security enhanced smartphone - Android Q&A, Help & Troubleshooting

Hi all, new poster here.
Up until recently I wasn't very much interested in acquiring a smartphone. As I'm rather curious, I finally decided to make that technological leap.
Having read about inherent insecurity of such devices, wanted to know what can be done to make them more... ehm, "safe".
Going for android, there seem to be lots of ways hardening the system, but what about baseband RTOS? As I understand, no amount of security
can stop it from controling phone's funcionality. Cryptophone seems to deploy a hardware based firewall on older Samsung phones where
CPU and baseband don't share direct memory, what are the possibilities of doing the same with SOC that shares it? XEN?
Second point - SIM security. Having read Nohl's research on its vulnerability, is it possible to code TurboSIM to reject OTA updates?
If there is no way of separating baseband from CPU, how practical can one be by combining battery powered mifi dongle in one pocket,
and airplane-mode enabled smartphone in the other? Any recommendations?
For starters, I'm considering Moto G - what can I do in order to secure it?
Should I go for newely presented Blackphone instead? Is it all just hype or a real deal?
Perhaps I should wait for Neo900? Quote from their website: "Neo900 won't share system RAM with the modem and system CPU will always have
full control over the microphone signal sent to the modem. You can think of it as a USB dongle connected to the PC, with you in full control
over the drivers, with a virtual LED to show any modem activity."
Apologies for somewhat lenghty post. All help is much appreciated.​

bump

Related

[Q] Why aren't the BCM4330 Capabilities utilised in in our i9100s?

The BCM4330 has a number of listed features that our SGS2s do not appear to have. For instance, the chip in question has listed support for Bluetooth 4.0+HS (so, I assume the Bluetooth low power standard) and FM Transmission/Receive, however all sources state that the SGS2 only supports up to Bluetooth 3.0, does not have Bluetooth high speed (virtually the same as Wifi direct, I'm told, but may not have the same level of uptake) and there are no references to FM transmission.
Without relevant APIs or sources I assume none of these unused features can be utilised. Is it a possibility that Samsung removed some components of the chip to reduce bulk?
What's confused me about this entire situation is that the original Galaxy S and the iPhone4 feature this same chipset, but there's not even a mention of Bluetooth3.0 even though they appear to support it . . . weird. Perhaps I've completely failed to understand the nature of these chipsets, but if I'm not being completely stupid then it'd be nice to explore how one could fiddle with our precious phones to extend its capabilities.
Bump
Sent from my GT-I9100 using XDA Premium App
HazzBazz said:
The BCM4330 has a number of listed features that our SGS2s do not appear to have. For instance, the chip in question has listed support for Bluetooth 4.0+HS (so, I assume the Bluetooth low power standard) and FM Transmission/Receive, however all sources state that the SGS2 only supports up to Bluetooth 3.0, does not have Bluetooth high speed (virtually the same as Wifi direct, I'm told, but may not have the same level of uptake) and there are no references to FM transmission.
Without relevant APIs or sources I assume none of these unused features can be utilised. Is it a possibility that Samsung removed some components of the chip to reduce bulk?
What's confused me about this entire situation is that the original Galaxy S and the iPhone4 feature this same chipset, but there's not even a mention of Bluetooth3.0 even though they appear to support it . . . weird. Perhaps I've completely failed to understand the nature of these chipsets, but if I'm not being completely stupid then it'd be nice to explore how one could fiddle with our precious phones to extend its capabilities.
Click to expand...
Click to collapse
Example:
Back then, at MWC 10, Samsung introduced the Samsung Omnia HD (i8910) which has alot of things AND an FM transmitter, when the device was actually launch, it didn't have the FM transmitter, modders and coders saw & knew that this device have the component, even proved with a secret code and an app they build, but no one has ever managed to get it to work.
So far of being a costumer at Samsung corp. I noticed 2 mistakes that they are repeating:
1. Samsung can't manage to get solid 30fps at 720p devices and 1080p.
2. Samsung rls products with an FM transmitter but they never support it and doing everything that we won't manage to get it work.
The fact that this chip is capable of performing all those tasks does not mean it is capable of doing all those task simultaneously. There might be some hardware challenges/contradictions between the different roles.
For instance, bluetooth 4.0 requires filtering above 3GHz of more than 10dB, while at the same time the chip is capable of Wifi on 5GHz; both are supposed to be on the same antenna so either you can not use the chip for Bluetooth 4.0 AND wifi 5GHz or you have to use some very complicated filter depending on which mode you're using. If they have not supplied this filter inside the chip then it becomes a bit complicated to use both modes.
The FM transceiver could very well be connected to the same internal power amplifiers as wifi but a wifi antenna does not look like an FM antenna.
It is not always possible (actually seldom) to use all the specifications of a chip at the same time with the same hardware setup. (Though often the user won't notice because it is not able to check the specification, like ultra low power and high speed often conflict.)
The features you mention are integrated into the chip itself, so it's not possible to "offload" them. However, they may leave out necessary off-chip components and/or enabling software.
For example, FM is popular in Korea. Many Samsung models targeted to the Korean Market include FM capability. It requires extra hardware though, including a rather primitive looking FM antenna. The corresponding models for other parts of the world leave this out. I presume Samsung doesn't see the popularity of FM in other parts of the world to be enough to make up for the extra cost in the handset.
Drivers and such require work, too. So while the chip may support the capability, they may postpone the software development for various reasons. If the hardware support is fully intact, it might be possible to make something work, but it could require some very deep hacking.
requist's response is interesting and seems like a possibility, although a quick reading of the Broadcom product page seems to suggest they've accounted for mixing capabilities in the chip design. Hard to tell without more detailed info.
Disclaimer: I'm not an official spokesperson. Opinions expressed here are mine and not those of my employer.
requist said:
The fact that this chip is capable of performing all those tasks does not mean it is capable of doing all those task simultaneously. There might be some hardware challenges/contradictions between the different roles.
For instance, bluetooth 4.0 requires filtering above 3GHz of more than 10dB, while at the same time the chip is capable of Wifi on 5GHz; both are supposed to be on the same antenna so either you can not use the chip for Bluetooth 4.0 AND wifi 5GHz or you have to use some very complicated filter depending on which mode you're using. If they have not supplied this filter inside the chip then it becomes a bit complicated to use both modes.
The FM transceiver could very well be connected to the same internal power amplifiers as wifi but a wifi antenna does not look like an FM antenna.
It is not always possible (actually seldom) to use all the specifications of a chip at the same time with the same hardware setup. (Though often the user won't notice because it is not able to check the specification, like ultra low power and high speed often conflict.)
Click to expand...
Click to collapse
time division multiplexing.
Dirty_Jerz said:
time division multiplexing.
Click to expand...
Click to collapse
That does not solve hardware conflicts.

[Q] Releasing custom Android Built TV Box? Is it possible?

Hey there, i hope i`m right in here and you pros can answer me some questions.
We are currently building a new software which will be released soon, i won`t go into details in here, because we not ready to release some infos about it yet. Anyway, thats not the problem....
Here is my question: Our Software could expand to TVs and now we are searching on how to get our solution onto TV Screens. We cam across all those Android based TV Boxes, we ordered some and tested them, unfortunatly they didn`t offer everything we needed.
Sooo, is it possible to release a custom Android Installation on such a Box?
What if we get the blank hardware boxes, can we get an Android Installation up and running? (With the paid help of some XDA-Developers..)
We would really need a stripped down Version only with our APP and some other stuff running.
Also another question, if it is possible to release a custom box, is it legal to Google`s Terms?
We are brand new in this field, so please be so kind and help us out. If it is possible and we can implement this thing we are definitly will be going over xda-developers, because we just don`t have any clue about Android Systems.
Are you meaning something like this?
http://www.pcworld.com/article/244278/meet_cotton_candy_the_dualcore_android_usb_device.html
We all know that Android is flexible enough to be put on phones, tablets, laptops, and TVs. FXI, a technology lab based in Norway, decided to add USB drives to Android’s host of platforms.
FXI’s Cotton Candy USB device might look like any other flash drive, but it packs smartphone parts like a dual-core 1.2GHz Samsung Exynos processor and its own ARM GPU for 1080p video playback. It also has lots of connectivity, including Wi-Fi, HDMI, Bluetooth, and a MicroSD card slot to expand its 1GB of storage.
This Raspberry Pi-eqsue miniature PC comes with Android 2.3 (also known as Gingerbread). When you plug it into a PC or Mac, it automatically bring up a separate pop up for the Gingerbread OS. This functionality could be used to bring Android apps or games to any computer. Alternatively, if your HDTV has HDMI ports, you could potentially turn it into a smart, Internet-connected monitor.
Angry Birds might be a little hard to play on your TV. [Photo: FXI]
The only down side of the device is that it is not supported by Google, so you won’t be browsing the marketplace anytime soon. Instead, FXI is working to get a third-party app store together. For now, though, you'll have to side-load any apps you want to run on it.
FXI is in talks with other companies to bring Cotton Candy to market by the second half of 2012 and predict that the device will cost "well under $200" according to The Verge.
Click to expand...
Click to collapse
MoPhoACTV Initiative
Yes, thats also this kind of thing we might need. But currently we are more looking into these kind of Boxes: cect-shop.com/Android-TV-Box_c55_x1.htm
And we would need a custom Android installation on one of these boxes? As asked above, is this possible and legal?
Why android?
i don't know the exact details about, but I think getting regular linux to run on a set op box is easier and cheaper to customize with exactly the software you want it.
It doesn`t have to be Android. Andorid was just a possible solution we found and the other reason is that i`m capable of programming apps for Android so it was the closest possibility.
You say Linux...hmm... also a possible solution.
Lets tell you at least some details. The Box should run only with our application, and should be able to be connected to a TV where the application is started then and does their thing. It`s a specialized kind of Software Application for targeted companys.
What it should be able to do:
At least an output resolution of 1280 * 720
Connectable with HDMI, DVI etc. to Televisions
As you say Linux, are you capable of doing such a thing? We might need you...
Or do you have some resources where we can find some developer who can achieve this?
surekin said:
It doesn`t have to be Android. Andorid was just a possible solution we found and the other reason is that i`m capable of programming apps for Android so it was the closest possibility.
You say Linux...hmm... also a possible solution.
Lets tell you at least some details. The Box should run only with our application, and should be able to be connected to a TV where the application is started then and does their thing. It`s a specialized kind of Software Application for targeted companys.
What it should be able to do:
At least an output resolution of 1280 * 720
Connectable with HDMI, DVI etc. to Televisions
As you say Linux, are you capable of doing such a thing? We might need you...
Or do you have some resources where we can find some developer who can achieve this?
Click to expand...
Click to collapse
I think any experienced linux dev is capable of doing such a thing, not that difficult. Get a good supported distro, remove all the bells and whistles and let it just boot to your application. I think that is the most elegant solution. Android is much more difficult to customize in such a way. I might have the technical skills to pull it off, but I'm not interested, sorry.
It all depends on your needs and resources. Try googling for embedded linux. linuxfordevices.com is a good place to start i think.
Why the choice for a setopbox and not a regular application? In call centers and other businesses normal programs are used to display information on a large screen, while running on a regular OS. The cost of having to develop and deliver support on not only the software, but also on the setopbox and its embedded OS is quite large. You have to take that into account. Given that you post this question on this forum, I suspect that your resources are rather limited. If I were you, I would reconsider the choice for a setop box.
First, thx for your time...and second, i understand what you mean in your post, but our software already runs on Mac OS, Windows and iOs, so we already have an application running. The settopbox would just be an addition, because some of our customers might need such a thing. Thats the reason why i`m doggling around searching for some ideas.
Our resources are limited sure, but not too limited, the reason why i posted here, is because i`m searching for answers here too, and xda is always a good place to ask in my opinion. We are going other ways too, let me make that clear!
So, i understand what you meant by Linux, i am now contacting some Linux devs who might want to achieve this.
Thx!

[Q] YSE5250 vs Arndale 5250

I'm stuck on deciding which of the two I should go with. Things I'm not sure about is the different sound boards and and network boards. Not sure which sound board is better but more importantly what modes the WiFi chipsets are capable of with regards to packet detection. Any advice is welcome. I'm sure there are questions I should be asking that I'm not even aware of.
My intended uses are for native compiling and network hardening / pen testing with a secondary use as a (semi) mobile DAC. Thanks in advance.
Well, Nvidia just made it a tougher choice, this is on Newegg for $192....
https://developer.nvidia.com/jetson-tk1

Turning an old phone into a crypto currency mining project

Hello everyone.
Berfore I write anything, I am aware that ARM processors are not nearly powerfull enought for this to pay off, but I have some spare time on my hands and an old android phone (samsung galaxy S) that has no other use whatsoever.
So, here is what I was thinking:
Is there a way to completely strip the phone of android, so it runs an os (preferrably a flavour of linux) that is as easy on resources as possible and is capable of running wireless drivers and mining software. My knowledge on this part is full of holes, so there are several questions I would like an answer to:
1. Can an android phone (running an ARM processor) run ONLY a distro of linux. I do not mind loosing the phone's capabilities (camera, GSM, touchscreen...). It needs to support a usb mouse and keyboard, a wireless connection and basically run as low on power as possible.
2. Where would I start when reading up on such a thing?
3. Is there already such a thing out there and I'm just incapable of finding it?
Again, I just want this to be a fun project, I bet a lot of you guys have useless old hardware laying around, let's put them to work
JasonXtreme said:
Hello everyone.
Berfore I write anything, I am aware that ARM processors are not nearly powerfull enought for this to pay off, but I have some spare time on my hands and an old android phone (samsung galaxy S) that has no other use whatsoever.
So, here is what I was thinking:
Is there a way to completely strip the phone of android, so it runs an os (preferrably a flavour of linux) that is as easy on resources as possible and is capable of running wireless drivers and mining software. My knowledge on this part is full of holes, so there are several questions I would like an answer to:
1. Can an android phone (running an ARM processor) run ONLY a distro of linux. I do not mind loosing the phone's capabilities (camera, GSM, touchscreen...). It needs to support a usb mouse and keyboard, a wireless connection and basically run as low on power as possible.
2. Where would I start when reading up on such a thing?
3. Is there already such a thing out there and I'm just incapable of finding it?
Again, I just want this to be a fun project, I bet a lot of you guys have useless old hardware laying around, let's put them to work
Click to expand...
Click to collapse
Well, first of all using a Galaxy S as a mining rig would be very inefficient. It has a too small and old GPU, even on a Nexus 6 it would take forever to make even a LiteCoin or DogeCoin. So no, that's not really what you should do with it. The best way is to turn it into a mediacenter. You heard of XBMC?
Here is a really great guide on how to do that: http://forum.xda-developers.com/xpe...de-cracked-screen-beast-life-tv-xbmc-t2907921
I guess this is the best what you can do with your old phone. :good:
Besides, I sometimes use mine to experiment things in terms of Android. Like building an experimental ROM and flash on it, because a brick is not so terrible on such a old device.
Hope I could help you!
Thank you for your input
As I've stated, I am aware that I am barking completely up the wrong tree, but nontheless - I am interested in rewiring the SGS into a linux-only machine, meaning I want to eliminate android completely. The mining is just a bonus here, even if it does produce mHashes
you can mine with the app called miner gate . I mine on my s3 korean and get an hashrate of 8 mb s easily available on play store

How well does Android support external HDMI+USB touchscreens?

Hi all,
I'm looking to purchase and install a relatively capable second hand Android phone (Samsung S5 for example) running a custom ROM such as LineageOS along with an external HDMI+USB touchscreen in a car for use as an in-car gauge display.
However I haven't been able to find much information on how well Android supports third party external touch screen devices other than forum posts from early years such as 2012 and unsolved threads with little information that are a little more recent.
I know a lot of these devices are simply plug and play with Windows without the need to source specific drivers from the manufacturer, but I'm unsure if they're as simple when it comes to Android, a few of them seem to claim they're compatible but I haven't been able to find much proof.
Any and all information would be appreciated.
PS I'm aware there are Android head units available, however I'm looking for something that still has the features of a phone such as GPS and mobile data and third party ROM support.

Categories

Resources