Database Develop

[Q] Reviewing Android Security - MUST be root?

So as a little side project I've tasked myself to review the security features and potential risks to data being stored within the Android OS and I've been using my Captivate as the test rat. Since pretty much everyone with an android device uses Gmail I wanted to focus first on the Gmail app. I know that information for many apps are stored under the /data/data/[app package]/databases directory structure in an SQL Lite *.db file.
That being said, I wanted to inquire with everyone here about being able to access the /data/data directory and all info there-in WITHOUT having to root the device. Im sure there might be some on that but Im just trying to be thorough in my review...any potential thief would obviously just instantly root and delve right in afterward the data but what other potential ways are there to get into that directory, if there are any?
I've been playing around with ADB and from what I can tell that is not a viable path. The only thing I could think of is somehow tricking the ADB daemon into thinking my phone is a development phone which would allow ADB to run as root but haven't found that to be possible.
So in any case, just looking for insight from the more experienced folk as to other avenues of attack against the user data beyond the obvious root method. Thanks very much for any help!

You can run adb shell as root if the phone is in clockworkmod recovery - but if someones going to the trouble of dropping a clockwork update.zip could just as well and as easy drop a root update.zip on the phone.
If someone physically gets a hold of your phone anything tied the google account/s on the phone would have to be considered compromised - as these phones are so easy to root anyway.

I just thought of another thing, if someone were to get a hold of your phone and have access to a computer with odin they could pretty quickly do a system dump (grab every file off your phone) return where you could find it without you ever knowing they got it.

dayv said:
I just thought of another thing, if someone were to get a hold of your phone and have access to a computer with odin they could pretty quickly do a system dump (grab every file off your phone) return where you could find it without you ever knowing they got it.
Click to expand...
Click to collapse
you dont need odin. adb will do it too

Pirateghost said:
you dont need odin. adb will do it too
Click to expand...
Click to collapse
Can you do a system dump in adb without root?

dayv said:
Can you do a system dump in adb without root?
Click to expand...
Click to collapse
yes
adb pull /system

Pirateghost said:
yes
adb pull /system
Click to expand...
Click to collapse
Learn new things every day.
I like this phone allot, but there just is no way to secure it against someone physically gets their hands on it.

Pirateghost said:
yes
adb pull /system
Click to expand...
Click to collapse
Yep thats actually very easy to do however it doesn't contain any critical private data really. I looked through the directories and while there is some interesting information that can be gleaned (e.g. the generic APN configs and other hardware information) there isn't any actual private stuff such as Gmail data, authentication info for apps, etc. That is all contained within the /data/data directory from what I understand.
You CAN get a list of all the packages on the device through /SYSTEM as well as all the APK's of the installed apps but otherwise not much I've found to be worrisome.
I'll have to check out Odin and see what that can offer from a non-root perspective.

Pirateghost said:
yes
adb pull /system
Click to expand...
Click to collapse
But, that is why you don't leave USB debug on all the time - and why there is a warning when you do turn it on.
PIN or pattern lock keep prying eyes out, and protect your phone from ADB, but not if you leave USB debug on. But, like other hardware, if someone has physical access and enough time, they can get to your data.

So now that Im rooted, is there an easy way to write up a script to copy all files in the /data/data and whatever other folders I decide onto my PC?

[Q] Fix Permissions in CWM

So when I was in CWM, I accidentally clicked in fix permissions, what does this actually do? Will it cause any problems with super user or anything?
Thanks for any input!

You well be good it just fixes permissions in apps such as what they need to access might even help if you were having force closes you can read the log it creates to I believe it saves the lug to external sd card
Sent from my VS910 4G using xda premium

Beamer9408 said:
You well be good it just fixes permissions in apps such as what they need to access might even help if you were having force closes you can read the log it creates to I believe it saves the lug to external sd card
Sent from my VS910 4G using xda premium
Click to expand...
Click to collapse
Ok awesome, thanks!
Blitz GingerVolt

I do the same thing. But it takes time too long. So I hard-reseting my device by remove the battery. I think it might cancel it. But no! Now, my device won't get any signal to sign in to google account. Please help.

I would say go in cwm recovery again and do it....again. And wait for it to finish.
If this won't do the trick and you have a recent nand backup....you should restore it.
Or....if these fail (they shouldn't...) you can always use the tools recommended around here to get to a clean firmware install (don't forget to clear everything before and after the restore - full reset).

IprithDeviant said:
I do the same thing. But it takes time too long. So I hard-reseting my device by remove the battery. I think it might cancel it. But no! Now, my device won't get any signal to sign in to google account. Please help.
Click to expand...
Click to collapse
Have you tried wiping cahce and dalvik and doing a fresh ROM install??

Self Executable Code

Hi guys,
I have 2 questions.
1. Can we partition internal storage and create a separate partition and load it with self-executable code, sort of like a computer virus, a smaller code about 300-600kb which is immune to factory reset?
2. Can we prevent/disable factory reset/external flashing, in case a thief steals your phone.

santoshcoolhere said:
Hi guys,
I have 2 questions.
1. Can we partition internal storage and create a separate partition and load it with self-executable code, sort of like a computer virus, a smaller code about 300-600kb which is immune to factory reset?
2. Can we prevent/disable factory reset/external flashing, in case a thief steals your phone.
Click to expand...
Click to collapse
1. Try using the partition sd card option in the recovery.
2. If the thief is smart and knows about xda too you can't do anything, everything you would do can be undone. Well, If you are really conscious about your phone not being stolen you should try the following things:
Always keep Usb Debugging disabled.
Do not unlock bootloader.
Use security apps to protect root, system settings, package installer and other apps that could lead in user doing anything that could help him get access to installing, uninstalling apps, modifying stuff using root editing system settings etc...
Install Apps like Cerberus, Prey etc which could help you in tracking, wiping the phone, signalling you or police, even send a photo of the thief to you, etc case your phone is stolen.

Sumedha Kapoor said:
1. Try using the partition sd card option in the recovery.
2. If the thief is smart and knows about xda too you can't do anything, everything you would do can be undone. Well, If you are really conscious about your phone not being stolen you should try the following things:
Always keep Usb Debugging disabled.
Do not unlock bootloader.
Use security apps to protect root, system settings, package installer and other apps that could lead in user doing anything that could help him get access to installing, uninstalling apps, modifying stuff using root editing system settings etc...
Install Apps like Cerberus, Prey etc which could help you in tracking, wiping the phone, signalling you or police, even send a photo of the thief to you, etc case your phone is stolen.
Click to expand...
Click to collapse
Thank you for the info. But these security apps are useless once he(thief) formats the phone. I am talking about software like the guys at NSA used to install on all mobiles to bug the BIOS. So even if someone formats the phone, the next time they reboot on a new firmware, the software will also be installed. Gotta talk with NSA

[Q] Is data recovery from the internal memory possible after rooting?

Hi,
i've imported my photos from my internal memory via sony bridge for mac accidentally in Iphoto. I didn't see the app was faded and crossed. Turns out only the app Photos is still working. So after importing 2700 pics (big trip and behind with backup), the question popped if I wanted to delete the fils on my phone and I said yes. I tried to re install Iphoto, but nothing there, but older pics. I tried the temporary files from the Mac, but nothing.
So now I got my hopes up for a data recovery software thing. But although Windows (Im working on another laptop) did install the drivers correctly and I see my phone in the folder structure, no data recovery software recognises my phone although I switched to MSC and USB-debugging. I think because I haven't rooted it i suppose. Well, that's what all the forum members say
So I think rooting is my only option left? I am wondering if it works for my goal to get my data back. I read that unlocking the boot loader means everything will be erased, so then there would be no point for me to do this. Is it possible to root it without losing my (deleted) data on the internal memory? I know it is being overwritten now as we speak, but I'm sure I can save a few photos!
thanks a million!

First off, I don't fully understand the first bit involving iPhoto. But if I understand correctly, you need to recover files deleted from internal memory.
I think recognizing a phone's internal memory is indeed a steep expectation for general Windows file recovery software. However, there may be some specialized programs out there designed just for that purpose. I know for a fact they exist for iOS for example. Not that I'm a fan. Anyway, googling "recover Android files Windows" showed some interesting results, but as I have no experience I can make no recommendations. I did see Easeus among the results, and I personally would start there based on experience with other software by them: http://www.easeus.com/android-data-recovery-software/free-android-data-recovery.html
This would be your safest bet. As you probably know, your photos are still there as long as they are not overwritten. Being able to recover from an external device (PC) is therefore preferable to making changes to your internal memory. It's also far less complex than rooting
Another thought before getting into rooting: I don't suppose you had an app like Google+ making automated backups of your pictures? If so, you might find them on your Google Drive. This also might be a good idea to avoid trouble like this in the future
Third and last resort: you could try a data recovery app on your phone, like GT Data Recovery. That does requires root. The good news: you don't need to unlock your bootloader to be able to root. Locked bootloader means you're limited to stock roms, but they too can be rooted.
Here's a useful thread describing in detail what you'd need to do:
http://forum.xda-developers.com/z3-compact/general/how-to-root-backup-drm-keys-t3013343
In your case, I'd run data recovery ASAP, meaning
Downgrade your firmware, leaving data in Flashtool unchecked (!!) (See thread's FAQ for detailed explanation)
Root
Install GT Data Recovery or similar from Google Play and run it
After you've recovered all photos you can and backed up all your other data, follow the procedure in the recommended way, which includes wiping data. Do note however, that the firmware mentioned there is outdated (March 2015). You can find up to date firmware here: http://forum.xda-developers.com/z3-compact/general/list-stock-firmwares-d5803-d5833-t2906706
Good luck!
(Thanks to @bilboa1 and @istux for their useful posts!)

Thanks!
I did try several data recovery software programs, including EaseUS, but none recognised my internal memory unfortunately. I switched all auto back up programs like Google Plus off, because it was just too much. I take so many pics of my kids and the selection process usually doesn't take place directly, so it backs up everything and I've got to many pics in my Google Plus account. But this was a wise lesson i should backup somehow.
So only option 3 is left. As i read it, when I root it, the data on my internal memory won't be deleted? Stock ROM is fine for me, I'm very happy with my standard software, if rooting is what it takes, that's what i should do.

If you're rooted, you can use the app DiskDigger. Worked for me
Sent from my D5833 using XDA Free mobile app

kjoz said:
Thanks!
I did try several data recovery software programs, including EaseUS, but none recognised my internal memory unfortunately. I switched all auto back up programs like Google Plus off, because it was just too much. I take so many pics of my kids and the selection process usually doesn't take place directly, so it backs up everything and I've got to many pics in my Google Plus account. But this was a wise lesson i should backup somehow.
So only option 3 is left. As i read it, when I root it, the data on my internal memory won't be deleted? Stock ROM is fine for me, I'm very happy with my standard software, if rooting is what it takes, that's what i should do.
Click to expand...
Click to collapse
Generally speaking, wiping data is recommended when flashing a new ROM. Because Giefroot requires older firmware, you need to flash that firmware. Which means a data wipe comes recommended. Technically however, wiping data is optional. It is possible to downgrade without wiping data (by unchecking the respective option in Flashtool). So that is what I'd do in order to recover your pictures.
Once that has been accomplished, along with a backup of all other data you wish to keep, I would start the whole process again as described in the thread I linked to. Because this time, the objective would be not data recovery, but ending up with a stable phone. And that means wiping data. (Highly recommended.)
I don't want to complicate things further, but if you don't care about being rooted after data recovery, you could just upgrade to regular stock firmware instead of pre-rooted firmware. This would allow you to skip a few steps of the process, and also avoid being unable to apply Sony's OTA updates. (Significant updates can cause a loss of root.)
Personally, I would not want to give up root once I have put effort into getting it.

kjoz said:
Hi,
i've imported my photos from my internal memory via sony bridge for mac accidentally in Iphoto. I didn't see the app was faded and crossed. Turns out only the app Photos is still working. So after importing 2700 pics (big trip and behind with backup), the question popped if I wanted to delete the fils on my phone and I said yes. I tried to re install Iphoto, but nothing there, but older pics. I tried the temporary files from the Mac, but nothing.
So now I got my hopes up for a data recovery software thing. But although Windows (Im working on another laptop) did install the drivers correctly and I see my phone in the folder structure, no data recovery software recognises my phone although I switched to MSC and USB-debugging. I think because I haven't rooted it i suppose. Well, that's what all the forum members say
So I think rooting is my only option left? I am wondering if it works for my goal to get my data back. I read that unlocking the boot loader means everything will be erased, so then there would be no point for me to do this. Is it possible to root it without losing my (deleted) data on the internal memory? I know it is being overwritten now as we speak, but I'm sure I can save a few photos!
thanks a million!
Click to expand...
Click to collapse
If you have successfully imported from the phone into iPhoto, then you simply need to import your iPhoto Library into Photos in Mac.
Check if you can find the iPhoto library by going to Finder -> Home -> Pictures
There should be 2 libraries there - one for iPhoto, and one for the newer Photos app that came along in April. Double-click the iPhoto library and wait for Photos to launch, then follow the instructions to import the library into Photos.
Make sure you have enough disk space (on the Mac) to do this. You'll need at least as much free space as the size of the iPhotos library to import it into Photos and possibly more.

[DEPRECATED] Migrator - Android Backup Solution and Data Migration Utility

THIS PROJECT IS DEPRECATED. I HAVE AN ALTERNATIVE HERE.
Documentation: https://github.com/VR-25/migrator/blob/master/README.md/
Releases: https://github.com/VR-25/migrator/releases/

Reserved for jokes.

It seems really interesting, thumbs up man :good::good::good:

Okay I still don't quite understand the method technically even after reading the description.
The thing is if dev say clean flash(wipe data,system,cache,dalvik) is a must before installing a rom,etc.Then will this adk solution can be used instead of titanium backup?Because you wrote that adk more efficient than tb maybe I'll use this instead of tb

handers1234 said:
Okay I still don't quite understand the method technically even after reading the description.
The thing is if dev say clean flash(wipe data,system,cache,dalvik) is a must before installing a rom,etc.Then will this adk solution can be used instead of titanium backup?Because you wrote that adk more efficient than tb maybe I'll use this instead of tb
Click to expand...
Click to collapse
All you really need to understand are the setup steps. This module prevents app data from being deleted when you use TWRP's "wipe data/factory reset feature".

This sounds too good to be true, lol almost like a proof of concept. Can just binding the new dir with the old make it so there are no issues whatsoever? Will test later this week cause I romhop a lot.

My phone's storage is almost full.The thing i want to ask is if this procedure will need more data space inside /data/media.

alvinator94 said:
This sounds too good to be true, lol almost like a proof of concept. Can just binding the new dir with the old make it so there are no issues whatsoever? Will test later this week cause I romhop a lot.
Click to expand...
Click to collapse
And indeed it is true. No issues whatsoever -- I'm using it myself.
foxmcc8 said:
My phone's storage is almost full.The thing i want to ask is if this procedure will need more data space inside /data/media.
Click to expand...
Click to collapse
No extra space is taken, as data is moved, not copied.

I installed this and it erased all my app data, ironically enough. Make sure you have a backup before installing.

After typing "adk" it finds all the apps, but after typing "." it lists every app with "pm: not found". After a reboot, the apps are not installed. Am I doing something wrong?

soren25 said:
I installed this and it erased all my app data, ironically enough. Make sure you have a backup before installing.
Click to expand...
Click to collapse
Lmao same thing happened to me. Figured the module was buggy and uninstalled it. Maybe i did something wrong too, which im not sure how considering how easy the install instructions are

soren25 said:
I installed this and it erased all my app data, ironically enough. Make sure you have a backup before installing.
Click to expand...
Click to collapse
jungle35 said:
Lmao same thing happened to me. Figured the module was buggy and uninstalled it. Maybe i did something wrong too, which im not sure how considering how easy the install instructions are
Click to expand...
Click to collapse
That's really f**ked up... same to me. I think there was no error on my side while following the "install-reboot-forget" process. Only the lib folders had been moved/binded somehow to the SD folder, no base.apks and no odex-blobs(?).
The result was a totally broken system. Sorry, but IMHO the Dev should not proclaim it that way as long as the script seems to be in pre-alpha ... All log files in /data/media/adk/logs/ are empty, too!
Really don't know whether LMAO or :crying:
Sent from my OnePlus3T using XDA Labs

Please add an alpha into the title. Same happens to me.... and titanium can't restore accounts anymore...

The XDA link in the module description takes you to the forum section rather than this thread.

Seemed interesting and installed
But I lose all app data ,
found no logs and nothing just like fresh install of everything
Keep a backup before trying this
I was on magisk 16.7 ,
Redmi note 3 AEX N

Do not install! I lost everything like everyone else. Pictures I just took on vacation of my kids gone. All texts gone. All app data gone. Wtf man. This needs to be pulled. I lost 3gig of data

JohnFawkes said:
Do not install! I lost everything like everyone else. Pictures I just took on vacation of my kids gone. All texts gone. All app data gone. Wtf man. This needs to be pulled. I lost 3gig of data
Click to expand...
Click to collapse
Never ever try magisk stuff without nandroid or other backup in backhand.

I, like everyone else posting here, fell for this extension and lost all my app data.
I'm not sure if this extension is buggy or if we are simply too stupid to get it running but here is what I did:
install
reboot
forget (about all my app data as all apps seem to have lost their data)
I then opened a terminal, typed adk as instructed and am getting:
permission denied. Can't create /data/media/adk/logs/res_apks_verbose_log.txt: permission denied
typing su before adk does indeed give me a list of apps which seems to get longer every few minutes.
Maybe its still busy copying? I'll give it some more time. Not sure what's up though, are we supposed to wait for the ap to copy all app data over then do an initial restore? Or is it not correctly "linking" the apps to the new app data storage?
###edit###
I did not immediately remove this extension as I thought to give it some time. I then rebooted and its now hanging at the boot screen saying: "Starting up ... please wait" - this section usually only takes a few seconds but I've been staring at this screen for minutes now. I'll give it 30 minutes, maybe it is still busy copying all my APKs and app data to the SD card? I mean I was already wondering how this can only need one simple reboot to be ready...
I'll update this thread if I have any new findings as the extension description sounds quite logical so maybe we're all doing something wrong

Dev RECOMMENDED app data backup in first step even BEFORE INSTALLING it through magisk or twrp.
I think nobody is doing it

J4jks said:
Dev RECOMMENDED app data backup in first step even BEFORE INSTALLING it through magisk or twrp.
I think nobody is doing it
Click to expand...
Click to collapse
you're right he did. I didn't say I don't have a backup I only said the extension isn't behaving as advertised OR I don't get how to use it.
Also, he should change that sentence from "recommended" to mandatory if his app wipes app data
---------- Post added at 02:36 PM ---------- Previous post was at 02:18 PM ----------
I have disabled the extension and rolled back my backup. I'm still wondering what went wrong here as the extension actually created the right folders on my SD card. Somehow the links seem to have been missing. I didn't dare try a restore via "adk ." as it was unclear what else could have gone wrong.
I would however appreciate some feedback and clarification from the author.