Topic 'Re: Smartphone apps track users even when shut down' in forum 'Security' - dslreports.com

Re: Smartphone apps track users even when shut down

Thu, 13 Sep 2012 06:44:42 EDT

anon posted : Okay, is time to donate some MORE findings :)

Android SQLITE default allows OTHER to read and copy your db HISTORY (like browsing, calling, calender, sms histories, whatsoever that use sqlite for database) in ANY APP

all sqlite db are CREATED with rw-r--r-- properties ( 'r--' for other (if you know Unix) in default storage locations) allowing SPYING apps just copy the sqlite databses and upload them to the BIG BROTHER.

Can easily be fixed with a change of 1 line in the code, of course you have to BUILD your android OS yourself ... Good luck

Re: Smartphone apps track users even when shut down

Wed, 12 Sep 2012 12:21:29 EDT

Kearnstd posted :

said by AVD:

said by BubbaKlinton :

said by SafireDonkey:

Oh well, 99.99% of todays people don't even know that their TV is sending what-they-have-been-looking-at-what-time behind their backs too. Who cares, right ?

I know a LOT about cable and the cable boxes. Yes, many broadcasters and cable TV program providers would LOVE to know what people are watching, but even if the provision was there for it, how could it know? It cannot!

I leave my cable boxes on all the time. That would mean that NBC might ASSUME I watched NBC all night, and all the time I am at work. It just is useless data.

no, there are algorithms that can compensate for that.

I bet they could even use for many setups now knowing when the HDMI connection goes down that the TV is off. the box has to redo the handshake when I turn the TV on so the box must know when the HDMI connection goes down with the TV off button being hit.
--
[65 Arcanist]Filan(High Elf) Zone: Broadband Reports

Re: Smartphone apps track users even when shut down

Wed, 12 Sep 2012 10:46:19 EDT

anon posted : As mentioned for Android, Cyanogenmod or a similar custom ROM, an adblocker, Droidwall (iptables), and PDroid & it's derivitives or a similar app like LBE Privacy Guard goes a long way for the informed user to take back control. Cyanogenmod even has it's own optional permission blocking built in, but many prefer the PDroid spoofing approach to help prevent apps crashing.

Re: Smartphone apps track users even when shut down

Wed, 12 Sep 2012 08:21:35 EDT

AVD posted : I don't know. I'm out of TiVo hacking as a hobby. Comcast on demand is good enough for me.
--
--Standard disclaimers apply.--

Re: Smartphone apps track users even when shut down

Mon, 10 Sep 2012 17:27:13 EDT

antdude posted :

said by AVD:

said by antdude:

I wonder if there is information on this stuff for us security geeks/nerds. ;)

I know after the Janet Jackson / Justin Timberlake Superbowl scandal, TiVo said that was the most rewinded portion of the show.

Also, in the old days you could hack TiVo, there was a log of timestamped keypresses on the hard drive.

And no one had decrypt the newer DVRs? :(
--
Ant @ AQFL.net and AntFarm.ma.cx. Please do not IM/e-mail me for technical support. Use this forum or better, »community.norton.com ! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer.

Re: Smartphone apps track users even when shut down

Mon, 10 Sep 2012 10:16:46 EDT

AVD posted :

said by antdude:

I wonder if there is information on this stuff for us security geeks/nerds. ;)

Re: Smartphone apps track users even when shut down

Mon, 10 Sep 2012 10:14:51 EDT

AVD posted :

said by BubbaKlinton :

said by SafireDonkey:

Oh well, 99.99% of todays people don't even know that their TV is sending what-they-have-been-looking-at-what-time behind their backs too. Who cares, right ?

no, there are algorithms that can compensate for that.
--
--Standard disclaimers apply.--

Re: Smartphone apps track users even when shut down

Sun, 09 Sep 2012 21:46:54 EDT

antdude posted :

said by CableGuy20 :

said by BubbaKlinton :

said by SafireDonkey:

Oh well, 99.99% of todays people don't even know that their TV is sending what-they-have-been-looking-at-what-time behind their backs too. Who cares, right ?

Not really useless because we know when your TV is idle cause your on the same dull program for hours but when your home you have been flipping from one station to the next. You have to remember all device like a computer has some form of tracking like cookies or apps that spy on you.

When you use the dvr to record your favorite shows they receive a log of what you been watching. Proprietary software always spies because you do have have control over the operating system.

I wonder if there is information on this stuff for us security geeks/nerds. ;)
--
Ant @ AQFL.net and AntFarm.ma.cx. Please do not IM/e-mail me for technical support. Use this forum or better, »community.norton.com ! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer.

Re: Smartphone apps track users even when shut down

Sun, 09 Sep 2012 08:14:13 EDT

anon posted :

said by BubbaKlinton :

said by SafireDonkey:

Oh well, 99.99% of todays people don't even know that their TV is sending what-they-have-been-looking-at-what-time behind their backs too. Who cares, right ?

Re: Smartphone apps track users even when shut down

Sun, 09 Sep 2012 01:58:39 EDT

anon posted :

said by SafireDonkey:

Oh well, 99.99% of todays people don't even know that their TV is sending what-they-have-been-looking-at-what-time behind their backs too. Who cares, right ?

Re: Smartphone apps track users even when shut down

Fri, 07 Sep 2012 17:08:34 EDT

AVD posted : after I use it.

Re: Smartphone apps track users even when shut down

Fri, 07 Sep 2012 13:45:02 EDT

I AM posted :

said by Floriana:

;) The world is crazy. No privacy! The world is terrible. No privacy!

HEHE. They can track what toilet paper I use for all I care.

Re: Smartphone apps track users even when shut down

Thu, 06 Sep 2012 06:01:33 EDT

Floriana posted : ;) The world is crazy. No privacy! The world is terrible. No privacy!

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 16:07:16 EDT

siljaline posted : It would be like plugging a Virgin PC to the Net totally exposed to Android malware

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 14:42:06 EDT

OZO posted :

said by Drunkula:

Actually I believe it has iptables. Not sure if it was built in or an add-on but I did see mention of it. It is Linux after all...

Not all Android builds include iptables. For example, HTC Aria / Android 2.1 doesn't. When you try to run DroidWall (third party firewall app), it returns error:

"Error applying iptables rules.
Exit code 1.
 
iptables v1.4.10
iptables: No chain/target/
match by that name.

Unless you root the phone and install special build ROM with kernel, built with support for the "owner" netfilter kernel module, you will not be able to use iptables firewall.

--
Keep it simple, it'll become complex by itself...

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 11:35:15 EDT

SafireDonkey posted : Oh well, 99.99% of todays people don't even know that their TV is sending what-they-have-been-looking-at-what-time behind their backs too. Who cares, right ?

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 10:27:05 EDT

siljaline posted : Did you read my reply to antdude ? OZO

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 09:39:39 EDT

Drunkula posted : Actually I believe it has iptables. Not sure if it was built in or an add-on but I did see mention of it. It is Linux after all...
--
There are 10 types of people that understand binary numbers. Those that do - and those that do not...

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 09:30:03 EDT

AVD posted : You could always write and market a firewall. Or just install a CM modded rom.
--
--Standard disclaimers apply.--

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 05:27:50 EDT

SipSizzurp posted :

said by BlitzenZeus:

....many of these phones tend not to get the updated firmware leaving them vulnerable to known exploits.

It is not only the phone firmware that might be exploited. The FBI computers also leak data.

quote:
Hackers associated with Anonymous claim to have swiped more than 12 million Apple iPhone and iPad device identifiers from an FBI computer.
.......
Someone using the banner of AntiSec — a 14-month-old joint operation of Anonymous and LulzSec — posted a document to Pastebin on Monday that contained links to around a million Apple unique device identifiers (UDIDs). The anonymous poster said the release was intended to highlight the FBI's alleged tracking of Apple customers.
.......
AntiSec said the hack, which apparently exploited a Java vulnerability, yielded a CSV file containing "a list of 12,367,232 Apple iOS devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service [APNS] tokens, zipcodes, cellphone numbers, addresses, etc".

»www.zdnet.com/fbi-hack-yielded-1···0003668/
--
Breaker One Nine.

Re: Smartphone apps track users even when shut down

Tue, 04 Sep 2012 02:24:20 EDT

OZO posted : The whole permission system in Android is a big joke and I think that designers of Android OS are just laughing in our face, displaying those permissions, but allowing users to do absolutely nothing about them. User can't remove or block anything. Suggestion to ask application developers to remove some or all unnecessary permissions is naive and will achieve nothing IMHO. They do it for a reason, then know and will keep it that way... Permission management should be done by the developers of the OS, not by application developers. And control over permissions should be offered to users. But it looks like Android OS designers want to keep laughing at people, who are left with black/white choice - accept it or go away with nothing. Very funny (for them) ... but, at the same time, rather extremely sad (for us, users) :(
--
Keep it simple, it'll become complex by itself...

Re:  

Mon, 03 Sep 2012 22:17:17 EDT

siljaline posted : There are some that plug and pray, others learn how to lock their phones Dude111 just like anything else. I would be the latter :D

Mon, 03 Sep 2012 22:03:14 EDT

Dude111 posted : Yup i know,its pathetic and shows how MINDLESS ZOMBIES people have become! (And the elite LOVES IT!!!)

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 19:38:56 EDT

Juggernaut posted : I haven't bothered to root yet, and I may not. Meh.

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 19:18:59 EDT

unoriginal posted :

said by Juggernaut:

Oh snap! :D

People don't bother to vet apps for the most part. I do, and very carefully. I don't click adverts. Ever. Never have.

If you have rooted your phone I highly recommend AdAway, it blocks all the ads at the system level so you never see them.

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 19:15:36 EDT

siljaline posted : See what Facebook permissions are required to run on your Mobile :hmm:

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 19:08:42 EDT

Zach 58 posted :

said by EGeezer:

Somewhere, somehow, the word "sheeple" will be used ... :D

Is iSheep close enough? Sorry....couldn't resist the temptation. :D

--
Zach

Re:  

Mon, 03 Sep 2012 17:35:17 EDT

Blackbird posted :

said by StuartMW:

said by Dude111:

Yes i imagine they do and MOST PEOPLE WHO OWN THESE THINGS DONT CARE which is quite sad.....

Do I get a prize? :D

»msg deleted

I think you get a free Android app. Assuming, of course, that you allow it to track you 24/7, log all your keystrokes, and take photos of you or your environs whenever it wishes.

That or you get several FREE CAPITAL LETTERS, since you've obviously used up some of your old ones. (Note: vowels will cost you for S&H, though).
--
"Is life so dear, or peace so sweet, as to be purchased at the price of chains and slavery? Forbid it, Almighty God!" -- P.Henry, 1775

Re:  

Mon, 03 Sep 2012 17:27:50 EDT

StuartMW posted :

said by Dude111:

Yes i imagine they do and MOST PEOPLE WHO OWN THESE THINGS DONT CARE which is quite sad.....

Do I get a prize? :D

»msg deleted
--
Don't feed trolls--it only makes them grow!

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 17:24:17 EDT

Juggernaut posted : Most corporate IT depts lock these down tight for BYOD's. Including the option to remotely wipe them if lost or stolen.
--
Better to have it and not need it, then need it and not have it.

Mon, 03 Sep 2012 17:22:07 EDT

Dude111 posted : Yes i imagine they do and MOST PEOPLE WHO OWN THESE THINGS DONT CARE which is quite sad.....

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 17:22:02 EDT

BlitzenZeus posted : That's actually how it is now, and many of these phones tend not to get the updated firmware leaving them vulnerable to known exploits. The companies in general don't expect you to use a phone for more than one to two years, and might only get one firmware update. Even the popular iphones have this issue, but part of that is they are putting more powerful/different hardware in newer models too.

In general security is an afterthought when it comes to smartphones.
--
I distrust those people who know so well what god wants them to do because I notice it always coincides with their own desires- Susan B. Anthony
Yesterday we obeyed kings, and bent out necks before emperors. But today we kneel only to the truth- Kahlil G.

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 17:15:30 EDT

EGeezer posted : I'm not a smartphone expert, but it seems these devices are so crippled in their internet security and user content and unsolicited connection control that they're useless for much of anything beyond taking pictures, casual email/text messages, viewing videos and uploading crap to Facebook or twitter.

If I were a business network or critical infrastructure security admin, the thought of allowing BYOD smartphones or other mobile devices access to my network would be a scary one.

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:59:09 EDT

Juggernaut posted : Oh snap! :D

People don't bother to vet apps for the most part. I do, and very carefully. I don't click adverts. Ever. Never have.
--
Better to have it and not need it, then need it and not have it.

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:57:57 EDT

OZO posted : I think I just did it:

said by OZO:

And many users don't see that or don't bother to think about is at all. :(

--
Keep it simple, it'll become complex by itself...

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:54:58 EDT

EGeezer posted : Somewhere, somehow, the word "sheeple" will be used ... :D

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:54:30 EDT

BlitzenZeus posted : Then I should respond that any modern computer uses a soft power button, and is no longer a true switch, other than the switch on the back of their power supply. :)

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:51:36 EDT

OZO posted : Yes, that's what Google's Android phones designed to do - to collect information about users. If you think something different, answer to yourself simple questions:
1. Does your phone have firewall that will help you to block applications from accessing the Internet?
2. Why applications do not have 'X' close facilities (close button, standard "Exit" menu, etc)?
3. Why lot of applications installed on Android phones request completely unnecessary permissions? For example, a flash light app may ask for network access, contacts data, your phone records, GPS data, etc and you can't limit any of those permissions if you want to install it.
4. Why you can't get control over your phone unless you jail break (root) it?

You don't own your own Android phone (in opposite, it owns your personal data), unless you root it. It's by design... And many users don't see that or don't bother to think about is at all. :(
--
Keep it simple, it'll become complex by itself...

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:50:27 EDT

BlitzenZeus posted : Apparently some people didn't realize that these devices only really go into a standby mode as that is a soft power button, as in controlled by software. If it has power it's operational.

Re: Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:47:47 EDT

StuartMW posted : I'm shocked I tell ya, shocked, that smartphones track everything you do and everywhere you go :p Duh!

BTW as with other cell phones turning them "off" only puts them in a lower power mode. Remove the battery (if possible) to prevent all tracking.
--
Don't feed trolls--it only makes them grow!

Smartphone apps track users even when shut down

Mon, 03 Sep 2012 16:29:02 EDT

antdude posted : »bostonglobe.com/business/2012/09···ory.html from »www.bluesnews.com/cgi-bin/board.···d=134905 ...

Good thing I don't own a mobile phone. :P

Topic 'Re: Smartphone apps track users even when shut down' in forum 'Security' - dslreports.com

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: &nbsp;

&nbsp;

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: &nbsp;

Re: &nbsp;

Re: Smartphone apps track users even when shut down

&nbsp;

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Re: Smartphone apps track users even when shut down

Smartphone apps track users even when shut down

Re:

Re:

Re: