[HELP REQUEST] Chrome book school security - Chromebooks

on my Chromebook at my school, we have most almost everything disabled, and any methods of bypassing it are either too hard or too risky, but, I have found that I can save a txt As an apk, when I open this I get the could not compile(because i don't know what im doing a this point), if I'm right this means I can make an application, maybe a terminal, really I just want to be able to ssh to my Linux at home. Any ideas?
p.s if anything goes wrong I take full responsibility for any damage

Related

[APP]Hydros TrackMe - Remote mobile access for all WinMo devices

Hydros TrackMe​
We all have gone through the moment of losing our phones and if you havent experienced it, consider yourself lucky, as it is a distressing moment and the worst part of it is if don't have a clue of where it is. Fortunately, next time you lose your phone, all you need to do is text your phone with a special command and magically your phone will text back to that number with information regarding it's area code, its gps coordinates and it's cell tower data which can be easily be uploaded to Hydros Sync Center and give you an exact pinpoint of where your phone is. So, the next time your neighbor or your colleague steals your phone (or accdentally "takes" it), you can find them and hold them accountable with the data in it. Speaking of data, in the emergency of you having seure data on the phone, the TrackMe app also completly wipes your phone so they won't be able to access the data. Other options for this neat app include locking down your phone and threatening them with cool messages (just so you can scare them into returning it). Either way, no matter how you use this lightweight app, you will be thanking the developer the next time you lose your phone and don't know where it is.​
System Requirements
All windows mobile phones! With or Without a gps
Features
Remote GPS tracking
Remote Hard Reset
Remote Soft Reset
Remote message sending - to threaten the robber
Remote lockdown with special password
Completly hidden from taskmanager so user can't terminate it
message to all cookers!​
Hey cookers out there! if you find this app interesting, I am giving you permission to put it on your rom (to make the world a secure place) and considering that it only takes up 63KB, this is perfect for any rom. Simply cook the cab with whatever kitchen you use and thats it. However, make sure you place it in startup so it is always running...even if you use the hard reset command from the remote access.​
DOWNLOAD LINK: http://hydrosmobile.webatu.com/Default.html​
hey guys. it's kinda my first time making an actual app for windows mobile which I have published so please let me know if I did an ok job. Also, please feel free to tell me how i can make it better. I am open to suggestions

[Q] How do we protect our Android device from the CelleBrite UFED?

Someone mentioned this in another thread, but this is a topic that should have it's own separate thread.
Some of you may have already read the news: Michigan: Police Search Cell Phones During Traffic Stops
Don't assume it won't come to your town.
I can't say I plan to do anything that would warrant police suspicion, yet I don't like the idea of anyone being able to easily pull data from my device. And we know cops won't be the only ones with these devices. So I've been wondering, how can we protect our Android devices from the CelleBrite UFED?
Check out this video that shows some of the features it has, keep in mind it does much more and can even extract DELETED data.
See the company's product page here: http://www.cellebrite.com/forensic-products/ufed-physical-pro.html
This research paper talks about the CelleBrite UFED and other extraction methods. (CelleBrite UFED is talked about starting on page 9.) I doubt there's a means to prevent all of those methods given some involve long term handling of the device, but CelleBrite UFED can extract data when a device is retained by the CelleBrite UFED user for a short period of time. It looks like HTC Android type devices can only be extracted from via the (micro)USB Port and it requires USB Storage and USB Debugging turned on. The CelleBrite UFED has to gain Root Access. It can get by screen passwords and root even a device that was not yet rooted.
There's another thread where someone was requesting a ROM that would not work with the CelleBrite UFED. I'm not sure how to make a ROM or anything else that would not work with the CelleBrite UFED without limiting certain features we all may use from time to time.
Over on Slashdot, someone said they hacked their device (Nexus One) to not do USB client mode. This is another option that would limit some features many of us may use.
So, how can we protect our privacy and our data? Does it mean sacrificing some features like USB storage mode?
The biggest problem is what's missing from Android itself. Meego might be protected but not Android.
You would need an encrypted boot loader that retains root for some users.
A kernel and os files that support different users so the default user is not root like Linux and a prompt with a password for superusers not just an Allow like now for Android.
Encryption libraries that would support truecrypt encryption of both internal and external (SD card) encryption in toto not just individual files.
A true trash system that overwrites files like srm in linux and sswap for wiping the swap file after every system reboot.
Ultimately I don't see it happening. In theory if you were running Ubuntu on your phone then yes cellbrite would just crap out not knowing what to do with your phone. Same possibly with meego. But then no real app support, no navigation and driver support is crap even for ROMs using the same os let alone a different OS like true linux.
It's amazing how many don't even bother deleting thumbnails hanging around on their computers or securely wiping files on their computer. Same with swap files retaining passwords or even website cookies that have the same password as their computer.
Best thing to do, don't keep anything that could be bad on your phone. Use a cloud system or home server sync that requires a seperate login every time and keeps no local files. Or as I do, encrypt the hell out of anything you find valuable, which currently is only my complete backups...
Sent from my Xoom the way it should be, rooted and with SD card.
This is where that cheap Boost Mobile phone comes in, or any other prepay phone. Just hand the officer that one. Store your personal data on your smartphone.
chbennett said:
Best thing to do, don't keep anything that could be bad on your phone. Use a cloud system or home server sync that requires a seperate login every time and keeps no local files. Or as I do, encrypt the hell out of anything you find valuable, which currently is only my complete backups...
Sent from my Xoom the way it should be, rooted and with SD card.
Click to expand...
Click to collapse
Hello, All. This is my first post at xda-developers!
Since I'm new to Android, data security has concerned me. Climbing the learning curve of rooting and tweaking my SGH-T989, I've focused on control, security, and privacy. So far pretty good, thanks largely to members' posts at this site. Thank you very much!
Then this thread crushed me. Visions of "1984", "THX 1138", "Terminator", etc.
I considered the suggestions here. Thoughts about the OS seem right to me, but that's beyond my abilities. I did try following chbennett's advice: I enabled encryption in my backups and moved them to the internal SD.
But I don't yet know how to do the 'home server / log in on demand' scheme for contacts and calendar. I will appreciate any help with that.
Meanwhile, I looked for a way to make a 'panic button' that would let me wipe my phone immediately. What I chose was making a contact whose phone number is the USSD code for Factory data reset.
Maybe Tasker, etc. could streamline this approach; but my trials showed that, unlike MMI codes (e.g., to toggle caller ID blocking), USSD codes cannot be submitted to the OS indirectly. So swiping a contact, direct dial shortcut, etc. did not work. On my phone, all that worked was either 1. manually dialing the code, or 2. dialing the contact name, then tapping the contact.
So the routine to use this 'panic button' is:
1. launch Dialer
2. dial the contact name
3. tap the contact name in the search results
4. tap "Format USB storage" in the "Factory data reset" dialog
5. tap "Reset phone" button in the "Factory data reset" dialog.
It sounds clunky, but it's actually pretty quick. I named the panic button contact "XXX" to avoid confusability when dialing (it needs only "XX" for a unique match.)
If you can suggest improvements to this scheme, or think it is misguided, please let me know. Thanks.
Any updates on this? I'm curious as to how to guard against ufed.
I think an instant hard brick option would be better so theres nothing to recover as i dont believe the factory reset is a secure wipe
Possibly a voice activated secret phrase or keypress u could say/do super fast in a tricky situation that autoflashes a corrupt/incompatible bootloader and recovery to device after secure superwipe that should stump them for awhile
im still interested in this i disabled usb debugging on my phone but unsure if the UFED can still access anything on my ICS full encrypted passworded evo3d im assuming they could dump the data at most but i highly doubt they could access the decrypted data unless you used an insecure pass
If you have encryption enabled for your data partition, then all you need to do is to turn off your phone when you see a cop. If they take it from you, they can turn it on and hook up their device, but they will only be able to snarf the system partition, which does them no good. They'd need your password to mount the data partition.
If you look around on this forum, you can find the steps necessary to switch the lock screen back to a simple pattern lock while leaving the disk encryption enabled.
Are you sure Cellebrite and UFED or w/e can't access encrypted data partion? I know it can take an image of the phone "hard drive". They then can run password tools against image to unlock it no?
dardack said:
Are you sure Cellebrite and UFED or w/e can't access encrypted data partion? I know it can take an image of the phone "hard drive". They then can run password tools against image to unlock it no?
Click to expand...
Click to collapse
I'd like to know about this too. I am about to set up encryption on my device and I'd like to know more about what type of attacks it can beat.
Edit to add: I assume brute force attack protection is like any other type of encryption.....dependent on the strength of your password. But, assuming we all know that already, I'm still curious about this.
If the question is how to protect your device when you think someone would scan your phone, you'd have to have some sort of inclination that a scan is about to happen. I'm assuming this is many people's concern as they're considering wiping their device through a quick process. In that scenario, just turn off your device. Unless you warrant suspicion of something fairly bad, they wouldn't be confiscating your cell phone.
smokeydriver said:
...Unless you warrant suspicion of something fairly bad, they wouldn't be confiscating your cell phone.
Click to expand...
Click to collapse
We all wish all law enforcement was just and honest, but so far in world history that has not been the case. Even a pretty woman may have her phone scanned by a curious cop snooping for pics.
Sent from my HTC One using Tapatalk 2
I would still like to know if there is an answer here...
So I recently had some dealing with assisting in a Cellbrite search. We initiated and enlisted the help of law enforcement for an employee who was doing some illegal activity which is not relevant to this discussion other than the person used an iphone. Anyway, the investigator came in and wanted to know if I can enable the bypass for the automatic screen lock in 5 minutes because when it locked, it disabled the Cellbrite copy.
Now, couple things here, he was only doing what he was "allowed' to do in the local municipality, and he did say they sell a more expensive Cellbrite device which would be able to crack it. I did find it interesting that the simple corporate Activesync policy I have set up was actually having this effect. Anyway I removed the policy and it worked. Funny thing is he could have done it himself had he known anything about that kind of thing. He was presented to us as an expert but I guess that mainly covered a basic Cellbrite expertise.
So, I do think encryption would be a great answer as the partition would be hard to bust in to. Nothing is impossible but I would rather not smash my phone on the highway next time I get pulled over so I would like to know definitively that this is the right approach. This is definitely not paranoia as there are at least 3 states where it looks like it happens regularly.
Time to look at a 2600 group for stuff like this I guess. I am early in my investigation
Later

[Q] Interfacing with a java application

I'm developing a touch screen based system for controlling electronic music. As part of the development, we'll be building our own touch screen, but that's not going to be ready for some time. In the mean time, I need to start writing the software (which will be done in java), and I'm going to need a touch screen to use for testing.
So, I am NOT trying to write an application for the Galaxy Tab. I am writing a application that runs on the my desktop, and I'd like it to be able to get touch information from the Galaxy, in any way practical. I've looked into using an iPad for this, but it looks to be too much of a pain to be worth it. All I need is a way of my java application receiving the list of co-ordinates of touches from the tab, in real time. I don't need any higher level gesture interpretation (as I'll have to do that on my end for the final system anyway), just all the touch co-ordinates. Does anyone have a suggestion on the best way to go about this? Is there something in existence already to accomplish this easily, or is there any kind of java library I can use to make calls to a connected tab from my application? I've been googling around, but haven't found any particularly useful information on the subject, as the tab is chiefly meant to be a stand-alone item, not a pc peripheral. Any tips on where I might start looking would be a huge help. Thanks!
-cullam
cullambl said:
I'm developing a touch screen based system for controlling electronic music. As part of the development, we'll be building our own touch screen, but that's not going to be ready for some time. In the mean time, I need to start writing the software (which will be done in java), and I'm going to need a touch screen to use for testing.
So, I am NOT trying to write an application for the Galaxy Tab. I am writing a application that runs on the my desktop, and I'd like it to be able to get touch information from the Galaxy, in any way practical. I've looked into using an iPad for this, but it looks to be too much of a pain to be worth it. All I need is a way of my java application receiving the list of co-ordinates of touches from the tab, in real time. I don't need any higher level gesture interpretation (as I'll have to do that on my end for the final system anyway), just all the touch co-ordinates. Does anyone have a suggestion on the best way to go about this? Is there something in existence already to accomplish this easily, or is there any kind of java library I can use to make calls to a connected tab from my application? I've been googling around, but haven't found any particularly useful information on the subject, as the tab is chiefly meant to be a stand-alone item, not a pc peripheral. Any tips on where I might start looking would be a huge help. Thanks!
-cullam
Click to expand...
Click to collapse
Ok, well I'm going to try and be brief and not turn this into an Android programming essay so here goes.
You have a couple of different routes you can take.
1. If you use eclipse for development and you hook up your tablet, you can watch the log and see that it prints useful information constantly, basically debug output that tells you whats going on in the background. If you just want to look at it, you can probably see it there.
2. This would be my choice, but I'm a programmer so I love a new adventure. I would recommend you just write a quick app for your tablet that pumps out the location of a touch whenever you touch the screen. If you are familiar with sockets and such, you can just write a simple server Java app that collects packets of data from your tablet, and just have the tablet send out a multicast packet containing the coordinates you touch every time you touch the screen.
There are probably some other ways, but if you are already going to be doing the bulk of the project in Java, you aren't looking at a difficult learning curve to write a basic little android app.
Thanks! I'll definitely try the eclipse trick. And yeah, writing an app on the tab is probably going to be necessary, but MUCH easier than having to learn a new language, and get an official license to do one on the iPad. The thing I'm really unsure about is the available communication methods for getting data back and forth between them. I was hoping there might be some sort of java api to get calls going through the usb connection. So I'll guess I'll see what the Eclipse hook up shows me.
cullambl said:
Thanks! I'll definitely try the eclipse trick. And yeah, writing an app on the tab is probably going to be necessary, but MUCH easier than having to learn a new language, and get an official license to do one on the iPad. The thing I'm really unsure about is the available communication methods for getting data back and forth between them. I was hoping there might be some sort of java api to get calls going through the usb connection. So I'll guess I'll see what the Eclipse hook up shows me.
Click to expand...
Click to collapse
apple stuff is crap anyways, leave them to their pretentious commercials and closed minded development.
as far as the android sdk, I think it will take you a lot less time to just use network communications. google socket client/server java tutorials and you should be set to go in about 2 hours. I have implemented it, its all straight forward, and imho probably an easier app to write that something that pumps out of the usb port
Awesome, thanks

Firefox OS as an embedded email reader?

Greetings,
At my office, we rotate after-hours email monitoring but some of the older guys are apprehensive about getting cell phones, so keeping up on-the-go can be difficult. I am wondering about buying a ZTE Open off of ebay and getting a pay/mb data plan and we can pass that around as a dedicated email reader.
Up to that point, there is nothing to worry about, but what I am thinking of playing around with is cutting the OS down to only the email app and settings. I'd like to have it boot directly to email with settings available from the pull-down menu, if possible. I mainly want to keep it simple enough for cellular-phobic people and also take away the ability to browse the web and run up my cellphone bill.
I'm not super fluent in the in's and out's of FXOS beyond the app level, but I'm interested poking around, I'm just looking to gauge the difficulty. There are cheaper android devices that I could try with as well, but I'd much rather hack around in HTML/JS than Java. That being said, I have the option of just customizing the Andriod UI to remove everything except the mail app, so if tearing down the Firefox UI would be a lot of work, I'll just do that.
I have a Flame that I can run tests on before spending any money, but I appreciate your opinions before a throw away a bunch of time that could be used on something useful.
John
That's super doable and not very difficult I think! Only with one (obvious?) condition: you must have full root access to your device. ZTE gives a rooting tool, so if you stick with the Open C (or the flame) you should be good to go. Don't choose a Kliff for example, as they are not rootable yet.
First of all, stripping all of gaia (the top layer of firefox OS, containing all the UI) has already been done by JanOS (for IoT device), so you can get inspiration from them. They reduced it to only one js file and a folder, where you can put your own js that gets executed at startup. Your use case is a bit more complex though: you still want to access settings, and be able to go back to email when needed. Basically, you need the email app to replace the homescreen right?
Creating alternate homescreen is a possibility that firefox os gives you, see https://developer.mozilla.org/en-US/Apps/Build/Manifest#role
You can try adding the role "homescreen" to the email app, flash your device, change the homescreen in the settings and see what happens!
NB: when you change the manifest of an internal apps, you might need to rehash it by downloading https://github.com/julienw/config-files/blob/master/addpref and execute
Code:
./addpref rehash-manifest
while your device is connected (and usb debugging is on).
You might need to add handler in the email for the home button to work correctly, in a similar fashion as in verticalhome (which is the name of the folder containing the homescreen app, not "homescreen").
Good luck! Don't hesitate to ping me if you need any help.
---------- Post added at 11:00 AM ---------- Previous post was at 10:46 AM ----------
Dude I just tried this and it's working like a charm. The thing that took me the most time was the configuration of the email account

Passwords and scripts

I have a multi-boot touch screen enabled machine running Android as one of the partitions. I like the idea of transitioning from Android to ChromeOS, but I have to have use of Android apps. The Brunch project has given me a way to install ChromeOS and seems to work extremely well for what I need. But there are a few ChromeOS quirks that keep me from making the swap. Search seems to indicate they are not solvable at present, but maybe this community can help.
1. The biggest issue with ChromeOS is its insistence that I login using my full Google password every time. The Android (or ChromeOS) partition would not be my main driver, so simply sleeping is not a feasible option for me.
a. Is there a way to mod chromebook to login from cold boot using a PIN? And if so, would such a mod survive updates? Sorry, I'm pretty sure that's a hard no, but it's worth asking.​
b. Alternatively, I think I could get this to work if I could hibernate (suspend to disk) to work. I know suspend to disk is not part of the nominal use case of chromebooks, so maybe it's not even supported? Either way, I'm struggling to fine resources for it. If that worked, then I think that I could simply login with a PIN most of the time.​
2. Brunch includes a great mod to allow tablet mode to be turned on/off by way of terminal. What would be better is to have a link to a script that could toggle with a tap (or maybe two). But I don't see a way to run a script for android terminal without going into terminal. Is there a way to run scripts without having to switch to the terminal? Bonus points if I can give that way an icon and stick it in the dock.

Categories

Resources