So when I first got the HTC One (on ATT) I was super pissed to find out Google Wallet or Google Hangouts (the A/V) portion was somehow disabled.
I've wanted to keep my phone stock (or stock-ish) so the most invasive thing I've tried was TrickDroid. Still no dice.
Finally, I figured that the GE edition ROMs would stop this tomfoolery, nope... still blocked.
So my questions are:
1) Are there any (hacky) ways to get this apps working?
2) Via what methods are they being block?
3) If it is truly ATT being the jerks here, does anyone want to help me create a ****-storm about this?
I know carrier blocking apps is old but coming from Tmo, this is really, really pissing me off.
No matter what you do, Google wallet wont work properly, as the One doesnt have the required secure element to run it.
As for hangouts, they are working fine for me, not sure what might be happening there...
cowmixtoo said:
So when I first got the HTC One (on ATT) I was super pissed to find out Google Wallet or Google Hangouts (the A/V) portion was somehow disabled.
I've wanted to keep my phone stock (or stock-ish) so the most invasive thing I've tried was TrickDroid. Still no dice.
Finally, I figured that the GE edition ROMs would stop this tomfoolery, nope... still blocked.
So my questions are:
1) Are there any (hacky) ways to get this apps working?
2) Via what methods are they being block?
3) If it is truly ATT being the jerks here, does anyone want to help me create a ****-storm about this?
I know carrier blocking apps is old but coming from Tmo, this is really, really pissing me off.
Click to expand...
Click to collapse
TheBishopOfSoho said:
No matter what you do, Google wallet wont work properly, as the One doesnt have the required secure element to run it.
Click to expand...
Click to collapse
Blatant misinformation. I know for a fact that you can get Google Wallet to run on the HTC One. Someone mentioned it earlier and took pictures to prove it. He even posted how he was able to do it, but I wasn't interested in rooting my phone, so I didn't look into it any further.
Oh, and as for Hangout, my HTC One came with Google Talk, and after a normal Play Store update, it changed to "Hangout" (Rogers HTC One, not rooted).
cowmixtoo said:
Google Hangouts (the A/V) portion was somehow disabled.
Click to expand...
Click to collapse
I know att announced that the av portion (video chat) will be enabled over the next few months. Starting with unlimited users and going down the line. I think it works for me now as I am on the unlimited data plan.
Also search there is a hack if rooted to allow this now. You have to modify a file.
As far as wallet. Att Verizon and t mobile have rejected wallet for there own proprietary system called Isis. Currently only available in salt lake city and Austin. www.paywithisis.com
It sucks because they have not expanded the system beyond those 2 cities in a long time.
Sent from my HTC One using xda premium
WhatsAUsername said:
Blatant misinformation. I know for a fact that you can get Google Wallet to run on the HTC One. Someone mentioned it earlier and took pictures to prove it. He even posted how he was able to do it, but I wasn't interested in rooting my phone, so I didn't look into it any further.
Click to expand...
Click to collapse
Wohah there. Unless you have a source that isn't blatent misinformation. Google wallet is not offically supported on the HTC One unless you are on the sprint network in the states. Source: http://support.google.com/wallet/bin/answer.py?hl=en&answer=1347934
As the model in question is the AT&T version he is telling the truth. Getting it to work otherwise is a hack.
WhatsAUsername said:
Blatant misinformation. I know for a fact that you can get Google Wallet to run on the HTC One. Someone mentioned it earlier and took pictures to prove it. He even posted how he was able to do it, but I wasn't interested in rooting my phone, so I didn't look into it any further.
Oh, and as for Hangout, my HTC One came with Google Talk, and after a normal Play Store update, it changed to "Hangout" (Rogers HTC One, not rooted).
Click to expand...
Click to collapse
"Blatant" misinformation? Hardly. Try googling it, only Sprint editions of the One support wallet, there are many and varied references to other One versions lacking the hardware to support Wallet in its current incarnation.
How's this?
One thing worth mentioning: The HTC One Google Play Edition doesn't come with Google Wallet -- and the app also isn't available for installation on the device via the Play Store. (Wallet is installed on the GS4 Play Edition.) A Google spokesperson tells me this is due to the One's hardware lacking an embedded secure element that Wallet requires in order to run.http://blogs.computerworld.com/android/22397/galaxy-s4-htc-one-google-play-editions
So there's a hardware deficiency on the GSM version?
Why even both putting NFC on the phone?
BarryH_GEG said:
How's this?
One thing worth mentioning: The HTC One Google Play Edition doesn't come with Google Wallet -- and the app also isn't available for installation on the device via the Play Store. (Wallet is installed on the GS4 Play Edition.) A Google spokesperson tells me this is due to the One's hardware lacking an embedded secure element that Wallet requires in order to run.http://blogs.computerworld.com/android/22397/galaxy-s4-htc-one-google-play-editions
Click to expand...
Click to collapse
cowmixtoo said:
So there's a hardware deficiency on the GSM version?
Why even both putting NFC on the phone?
Click to expand...
Click to collapse
NFC has other uses as well. You can share things easily between phones. Also some places have NFC payments without google wallet. In Canada Rogers and CIBC have teamed up and made NFC payments for the s3 (another phone without google wallet).
Google Wallet is the biggest NFC payment network for a phone. For people coming from Wallet devices (like I had the GN and the N4 before) this is an insane let down.
I would have never bought the HTC Onc and moved to ATT if this lack of functionality was made clear.
bobruels44 said:
NFC has other uses as well. You can share things easily between phones. Also some places have NFC payments without google wallet. In Canada Rogers and CIBC have teamed up and made NFC payments for the s3 (another phone without google wallet).
Click to expand...
Click to collapse
cowmixtoo said:
Google Wallet is the biggest NFC payment network for a phone. For people coming from Wallet devices (like I had the GN and the N4 before) this is an insane let down.
I would have never bought the HTC Onc and moved to ATT if this lack of functionality was made clear.
Click to expand...
Click to collapse
All it took me to look up was a quick google search. And Google Wallet is only the biggest NFC payment system in the UnS. Everywhere else does not have that option. NFC does have other uses, limited yes, but other ones.
Carrier Issue
IMO, this is a carrier's issue or fault, not HTC's.
bobruels44 said:
the s3 (another phone without google wallet).
Click to expand...
Click to collapse
dgtiii said:
IMO, this is a carrier's issue or fault, not HTC's.
Click to expand...
Click to collapse
You're both missing the point. The issue being discussed is a h/w issue where, for some reason, HTC's omitted the secure element in the NFC chip they use that Google Wallet (and any other payment systems) is dependent on. Carrier's block access to Google Wallet but if the phone's properly equipped h/w wise you can work around it. You can't work around the absence of a secure element. If you want to know what the secure element does do a Google search on "Google Wallet secure element."
BarryH_GEG said:
You're both missing the point. The issue being discussed is a h/w issue where, for some reason, HTC's omitted the secure element in the NFC chip they use that Google Wallet (and any other payment systems) is dependent on. Carrier's block access to Google Wallet but if the phone's properly equipped h/w wise you can work around it. You can't work around the absence of a secure element. If you want to know what the secure element does do a Google search on "Google Wallet secure element."
Click to expand...
Click to collapse
For the s3 I was not talking about google wallet there. I was talking about the Canadian variant of the s3. Google wallet is not available up here on any device on any carrier. That's why I was mentioning that. I may be incorect about the hardware component on that variant however my point of there are alternatives in other outcries remains.
So, is the problem with NFC a physical hardware piece, or can it be fixed with software? "Lack of a secure element" is why Verizon blocked Google Wallet on the Verizon Galaxy Nexus but that still ended up working.
dsass600 said:
So, is the problem with NFC a physical hardware piece, or can it be fixed with software? "Lack of a secure element" is why Verizon blocked Google Wallet on the Verizon Galaxy Nexus but that still ended up working.
Click to expand...
Click to collapse
You guys are confused. Here's what a secure element is and does...
If you're not familiar with how Wallet functions, it's a bit odd as an application goes. The Wallet app isn't the only "piece" necessary to get the Wallet service functioning, there are two other parts of the equation. One you're already familiar with: NFC (near-field communication). It's a simple, open wireless standard that transmits data over very short distances. In Wallet's case, it transmits payment data. But there's a third wheel in play that many people aren't aware of, and it's called a "secure element." Without getting too technical (eg, into things I don't at all understand), the secure element's job is to store encrypted credentials (your payment info) and tell the Wallet app "hey, these are the credentials you need to transmit to the payment terminal."
Only one card's credentials are stored on the element at a given time (obvious security reasons), which is why you need an internet connection if you want to switch your active card in Wallet. When you sign in to Wallet or change cards, the Wallet app calls up to the Google server, pulls down your credentials for a particular card, and then writes them to the secure element.
But one does not simply write to the secure element (... or walk into Mordor), it requires special permissions. Google Wallet is doing something few apps do - asking for direct, exclusive access to a secure piece of hardware in the phone. Not only that, once Google takes over the secure element, it wants total control. Because of the security concerns (and related technical difficulties) involved in sharing a secure element, Wallet and only Wallet is able to utilize the internal secure element on a Wallet-enabled device. That means Google is directly managing every layer of the process. http://www.androidpolice.com/2013/0...why-the-carrier-is-still-allowed-to-block-it/
People got Wallet working on the VZW GN by side-loading it; much like everyone else who's running Wallet even though it's not carrier or region supported for their particular device . VZW's beef is that they don't trust third parties to use security-enabled h/w that VZW can't control on VZW-sold devices. When VZW realized people were by-passing the process they, with Google's help, did the following...
So Google Wallet has never officially been available for Verizon, on any smartphone. However for months now users have been able to side-load Google’s awesome Wallet app for mobile NFC payments using the web store, or installing a custom ROM. Today however it appears that Google’s pulled the backend plug. http://androidcommunity.com/google-wallet-gets-pulled-from-verizon-galaxy-nexus-20120914/
If the VZW GN didn't have a secure element Wallet would have never worked. The only two phones I've heard about without a secure element are the DNA/Butterfly and the One (except apparently for Sprint).
BarryH_GEG said:
You guys are confused. Here's what a secure element is and does...
If you're not familiar with how Wallet functions, it's a bit odd as an application goes. The Wallet app isn't the only "piece" necessary to get the Wallet service functioning, there are two other parts of the equation. One you're already familiar with: NFC (near-field communication). It's a simple, open wireless standard that transmits data over very short distances. In Wallet's case, it transmits payment data. But there's a third wheel in play that many people aren't aware of, and it's called a "secure element." Without getting too technical (eg, into things I don't at all understand), the secure element's job is to store encrypted credentials (your payment info) and tell the Wallet app "hey, these are the credentials you need to transmit to the payment terminal."
Only one card's credentials are stored on the element at a given time (obvious security reasons), which is why you need an internet connection if you want to switch your active card in Wallet. When you sign in to Wallet or change cards, the Wallet app calls up to the Google server, pulls down your credentials for a particular card, and then writes them to the secure element.
But one does not simply write to the secure element (... or walk into Mordor), it requires special permissions. Google Wallet is doing something few apps do - asking for direct, exclusive access to a secure piece of hardware in the phone. Not only that, once Google takes over the secure element, it wants total control. Because of the security concerns (and related technical difficulties) involved in sharing a secure element, Wallet and only Wallet is able to utilize the internal secure element on a Wallet-enabled device. That means Google is directly managing every layer of the process. http://www.androidpolice.com/2013/0...why-the-carrier-is-still-allowed-to-block-it/
People got Wallet working on the VZW GN by side-loading it; much like everyone else who's running Wallet even though it's not carrier or region supported for their particular device . VZW's beef is that they don't trust third parties to use security-enabled h/w that VZW can't control on VZW-sold devices. When VZW realized people were by-passing the process they, with Google's help, did the following...
So Google Wallet has never officially been available for Verizon, on any smartphone. However for months now users have been able to side-load Google’s awesome Wallet app for mobile NFC payments using the web store, or installing a custom ROM. Today however it appears that Google’s pulled the backend plug. http://androidcommunity.com/google-wallet-gets-pulled-from-verizon-galaxy-nexus-20120914/
If the VZW GN didn't have a secure element Wallet would have never worked. The only two phones I've heard about without a secure element are the DNA/Butterfly and the One (except apparently for Sprint).
Click to expand...
Click to collapse
Wow. Thank you for that reply. Just one thing I'm confused about. Last year, the Galaxy S3 did not have a secure element, but the Sprint version did, so people were taking some lib files from the Sprint version, putting them on their S3s, and getting Google Wallet to work. With that in mind, does this mean that the secure element is software that could potentially be added on afterwards by, possibly, a third party source like someone on XDA, or does it have to be built into the phone initially?
dsass600 said:
Wow. Thank you for that reply. Just one thing I'm confused about. Last year, the Galaxy S3 did not have a secure element, but the Sprint version did, so people were taking some lib files from the Sprint version, putting them on their S3s, and getting Google Wallet to work. With that in mind, does this mean that the secure element is software that could potentially be added on afterwards by, possibly, a third party source like someone on XDA, or does it have to be built into the phone initially?
Click to expand...
Click to collapse
+1. Really great explanation of secure elements but I also agree. I had the galaxy s3 to mobile edition and all files, libs and what not where pulled from the sprint version and made flashable to all s3s.
Sent from my HTC One using Tapatalk 4 Beta
TheBishopOfSoho said:
"Blatant" misinformation? Hardly. Try googling it, only Sprint editions of the One support wallet, there are many and varied references to other One versions lacking the hardware to support Wallet in its current incarnation.
Click to expand...
Click to collapse
I'm glad someone already posted that link about people getting it working before I came back to check this thread. Stop misleading people. I already told you previously that I understood the lack of a secure element, but that it was still possible (at least at one point) to get it working. There's no need to put down others just because you feel so sure about your own knowledge. -.-
dsass600 said:
Last year, the Galaxy S3 did not have a secure element, but the Sprint version did, so people were taking some lib files from the Sprint version, putting them on their S3s, and getting Google Wallet to work.
Click to expand...
Click to collapse
All Samsung's NFC-equipped devices have a secure element (which is h/w). What you guys are talking about is missing s/w necessary to provide access to it. I'm guessing in the cases you're mentioning they were carrier SGS3's and the missing s/w was a carrier-requested "enhancement" specific to their SGS3. It's kind of like carrier's pulling the FM radio s/w but leaving the h/w which allows people to later get the functionality back.
http://nfctimes.com/news/samsung-embed-secure-element-galaxy-s-iii-other-nfc-phones
In the case of the DNA/Butterfly and non-Sprint One’s the physical secure element has been omitted and no amount of s/w can reverse that.
This is a pure guess on my part but HTC not providing a secure element is probably because they don't want to deal with the administration of it. Much like MAC addresses, secure elements are serialized and need to be tracked on a per-device basis which means maintaining a database and supporting Google in dealing with borked secure elements (which happens a lot). And that includes replacing the NFC chip if the secure element gets borked which would/could be a warranty claim. With so little carrier support for Wallet it's not a bad strategy as outside XDA people wouldn't miss access to it. And as far as I know Wallet's the only app that currently requires the presence of a secure element.
Related
New to android and captivate, so excuse me if I'm missing something..but it seems that with one's google account being tied into all the functions, including buying in the market with the credit card on file with google..there has to be a setting to not allow the device to be used with a different sim..or some kind of security that will lock down your google account if the phone is stolen? Is something built in..or is there an app out there that people generally use for peace of mind?
EDIT: All of the recent Nokia phones I've had has a setting to not allow a different sim to be used
fldude99 said:
New to android and captivate, so excuse me if I'm missing something..but it seems that with one's google account being tied into all the functions, including buying in the market with the credit card on file with google..there has to be a setting to not allow the device to be used with a different sim..or some kind of security that will lock down your google account if the phone is stolen? Is something built in..or is there an app out there that people generally use for peace of mind?
Click to expand...
Click to collapse
Very interesting. I too would like to know the answer. This is one of the many reasons why I NEVER use:
A) Mobile Banking
B) Purchases of any kind that includes Plastic
C) Setup any accounts that wire account info
Call me paranoid, but hey, it will save you a ton of headache on that unfortunate "if" day. Please keep us posted.
So does anybody have an answer...or at least some kind of marketplace app that is used for security?
So is nobody interested in security? Or is there just no simple solution..one thing that I miss on my Nokia N97 is the remote lock..send a text of a secret word, and poof the device is locked...done
I think people are interested to some degree but no widely known easy method. And just an fyi, rooting your phone and gaining superuser privileges - as many of us have done - creates a big security hole for trogin malware attack, so if you have rooted your phone take care and know what your installing and try to pay attention to anything using super user privileges.
How is the bloatware on the S6 with T-Mobile? Is it usually less than other carriers?
falcon26 said:
How is the bloatware on the S6 with T-Mobile? Is it usually less than other carriers?
Click to expand...
Click to collapse
The tmobile apps that came preinstalled on my s6 are:
My account
Name ID
TV
Visual voicemail
Mobile hotspot
Device Unlock
All can be disabled but I would say depending on who you are some of these actually have some functionality. I don't pay for TV or name ID so I have those along with the my account app disabled.
I think most of the bloatware is from Samsung (as in the carrier is somewhat irrelevant) but I can't talk for other people with other carrier versions of the phone.
The bloat on my S4 from ATT was pretty bad but that was a while ago.
Alarand said:
The tmobile apps that came preinstalled on my s6 are:
My account
Name ID
TV
Visual voicemail
Mobile hotspot
Device Unlock
All can be disabled but I would say depending on who you are some of these actually have some functionality. I don't pay for TV or name ID so I have those along with the my account app disabled.
I think most of the bloatware is from Samsung (as in the carrier is somewhat irrelevant) but I can't talk for other people with other carrier versions of the phone.
The bloat on my S4 from ATT was pretty bad but that was a while ago.
Click to expand...
Click to collapse
this phone is always sending me notifications (on the lockscreen) advertising something. its so weird, this is my first samsung phone and my last phone ran stock android.
the worst part is, stock android commands like "navigate to 3100 Missipi Rd in Chicago Illinois" or "call Mom" lag because FLIP BOARD is a mandatory homescreen on your phone.
the last time i reset the phone. it started automatically downloading apps. like ANT antenna and Milk Video. Really? milk video? its so lowclass for them to do something like this on their "flagship" phone.
say what you want about Crap-ple but atleast they're not taking money from small tech companies to put apps on their phone that you cannot remove.
If you dont like flop board use the google experience launcher. Makes it like stock but keeps all of the good stuff. replaces the garbage flop board with google stuff.
coffeeclutch said:
this phone is always sending me notifications (on the lockscreen) advertising something. its so weird, this is my first samsung phone and my last phone ran stock android.
the worst part is, stock android commands like "navigate to 3100 Missipi Rd in Chicago Illinois" or "call Mom" lag because FLIP BOARD is a mandatory homescreen on your phone.
the last time i reset the phone. it started automatically downloading apps. like ANT antenna and Milk Video. Really? milk video? its so lowclass for them to do something like this on their "flagship" phone.
say what you want about Crap-ple but atleast they're not taking money from small tech companies to put apps on their phone that you cannot remove.
Click to expand...
Click to collapse
So let's see here. You complain about the SOS mode because of your own... usage patterns (which you can disable) and then you are bringing bogus arguments to this thread.
Nothing automatically was "automatically downloading apps" it is called updating system applications built into the device. Android and thereby Samsung separate a lot of their applicaitons from system processes and code into separate applications so they can be updated as required and not have to wait for a system update. Wanna know something really funny? ANT+ is preinstalled on the iPhone as well, it is just separated so the user doesnt know the wiser.
Podcasts, Newstand, Weather, Apple Watch App, iTunes App, iBooks... the same argument could be made for all of these that they cannot be removed, at least on the S6 they can be disabled.
Hey guys,
Just wondering if anyone else has this issue and if there is a fix? I use Royal Bank in Canada and they have finally released the wallet option, however, my phone is rooted and so the wallet function is disabled. I've tried a few of the hide root apps found on the play store but nothing seems to have worked so far. Has anyone found a way around this aside from removing root?
Thanks!
I would guess that this is the same principle as Android Pay, which won't work unless you have a *completely* stock device with no alterations at all. I've heard of "hide root" functions but I would guess (again... ) that with something as critical as payments the payment validation process would be built smart enough to detect them.
Me, I'm old school. If you can't scratch a window with it, it's not money. The idea of trusting my bank account to an NFC device that anyone can read in my pocket gives me the creeps.
dahawthorne said:
I would guess that this is the same principle as Android Pay, which won't work unless you have a *completely* stock device with no alterations at all. I've heard of "hide root" functions but I would guess (again... ) that with something as critical as payments the payment validation process would be built smart enough to detect them.
Me, I'm old school. If you can't scratch a window with it, it's not money. The idea of trusting my bank account to an NFC device that anyone can read in my pocket gives me the creeps.
Click to expand...
Click to collapse
If its in your pocket, the NFC chip is *turned off*.
Thanks, doitright. How does that work? I've had a brief look for an automated disabling of NFC but can't see one, whereas there are articles about the risks of drive-by theft.
(By the way, I'm a big fan of your systemless root. Fantastic job. I saw one visual glitch, but everything else is perfect so far.)
Root cloak for Xposed worked for the past year but there has been a major overhaul of the app (in Canada) and now RBC wallet is a separate app. I have tried root cloak and systemless root without binding xbin to system and so far nothing. Getting "will not work with this phone" on opening app. Anyone got the new app working?
I have noticed that my important email has been compromised. I've seen logins from the US (I've never been in the US) and even parts of Sweden that I have not visited (and by a browser that I've never used, so it's not me).
I am really surprised by this considering I use 2-factor authentication on it and my Note 8 doesn't even have Google authenticator visible. It is installed but I've hid it and use it by going to app store and searching for it.
All my important websites are protected by 2-factor authenticator. Except for my phone. I have BitDefender antivirus but I am not sure if this is enough.
I need something really strong to protect my phone from people accessing it and its apps. Mainly a protection against keyloggers.
My phone is rooted if that makes any difference.
Also, I don't mind if it costs money. I will pay well for top notch protection.
Nebell said:
I have noticed that my important email has been compromised. I've seen logins from the US (I've never been in the US) and even parts of Sweden that I have not visited (and by a browser that I've never used, so it's not me).
I am really surprised by this considering I use 2-factor authentication on it and my Note 8 doesn't even have Google authenticator visible. It is installed but I've hid it and use it by going to app store and searching for it.
All my important websites are protected by 2-factor authenticator. Except for my phone. I have BitDefender antivirus but I am not sure if this is enough.
I need something really strong to protect my phone from people accessing it and its apps. Mainly a protection against keyloggers.
My phone is rooted if that makes any difference.
Also, I don't mind if it costs money. I will pay well for top notch protection.
Click to expand...
Click to collapse
If it wasn't rooted I would just encrypt the sd card, make sure you have a good pattern/password and use Secure Folder for anything more sensitive. Between all that, bitdefender, and 2-factor authentication on accounts where possible, the only other thing I can think of is using a VPN when connecting to public wifi. Of course root breaks Knox though, so that changes things here for Secure Folder, etc. Maybe there are some other security apps you could use instead for sensitive stuff, as well as a firewall app, but root does run counter to maximum security.
Nebell said:
I have noticed that my important email has been compromised. I've seen logins from the US (I've never been in the US) and even parts of Sweden that I have not visited (and by a browser that I've never used, so it's not me).
I am really surprised by this considering I use 2-factor authentication on it and my Note 8 doesn't even have Google authenticator visible. It is installed but I've hid it and use it by going to app store and searching for it.
All my important websites are protected by 2-factor authenticator. Except for my phone. I have BitDefender antivirus but I am not sure if this is enough.
I need something really strong to protect my phone from people accessing it and its apps. Mainly a protection against keyloggers.
My phone is rooted if that makes any difference.
Also, I don't mind if it costs money. I will pay well for top notch protection.
Click to expand...
Click to collapse
Rooted phone = lack of security!
As soon as a phone is rooted there is little security as all the inbuilt security (safe folder & knox) are gone and banking apps won't work!
Sent from my SM-N9500 using Tapatalk
sefrcoko said:
If it wasn't rooted I would just encrypt the sd card, make sure you have a good pattern/password and use Secure Folder for anything more sensitive. Between all that, bitdefender, and 2-factor authentication on accounts where possible, the only other thing I can think of is using a VPN when connecting to public wifi. Of course root breaks Knox though, so that changes things here for Secure Folder, etc. Maybe there are some other security apps you could use instead for sensitive stuff, as well as a firewall app, but root does run counter to maximum security.
Click to expand...
Click to collapse
Thanks. I guess I already have enough security. I was baffled that my e-mail was compromised. Maybe it was, maybe it wasn't. I noticed no change to any of my files etc. But it does show suspicious logins from countries I have never been to.
robmeik said:
Rooted phone = lack of security!
As soon as a phone is rooted there is little security as all the inbuilt security (safe folder & knox) are gone and banking apps won't work!
Sent from my SM-N9500 using Tapatalk
Click to expand...
Click to collapse
Yeah thanks for the obvious pointer. But rooting a phone is a must. Also, all my banking apps work just fine. I am not dependant on Samsung.
As was mentioned earlier, use a VPN when using the internet. It does protect your IP and is handy to get to content you can't access from your country..
Nebell said:
Thanks. I guess I already have enough security. I was baffled that my e-mail was compromised. Maybe it was, maybe it wasn't. I noticed no change to any of my files etc. But it does show suspicious logins from countries I have never been to.
Click to expand...
Click to collapse
I assume you have already done this, but I would immediately change my password to that account (along with any other accounts that share the same password), even though you have rwo-factor authentication. Unless you logged in while on VPN or proxy, suspicious logins from other countries you haven't visited sounds like a red flag.
sefrcoko said:
I assume you have already done this, but I would immediately change my password to that account (along with any other accounts that share the same password), even though you have rwo-factor authentication. Unless you logged in while on VPN or proxy, suspicious logins from other countries you haven't visited sounds like a red flag.
Click to expand...
Click to collapse
I changed every important website to a password that is so hard to type I need to do it carefully every time. I got in contact with Fastmail (who btw is an awesome e-mail service, although paid) and they said that my phone is compromised.
Damnit.
I use my phone far more than my computers. They also suggested that I use a password manager but if my phone is compromised so easily then I probably am better off just getting better protection for my phone.
Nebell said:
I changed every important website to a password that is so hard to type I need to do it carefully every time. I got in contact with Fastmail (who btw is an awesome e-mail service, although paid) and they said that my phone is compromised.
Damnit.
I use my phone far more than my computers. They also suggested that I use a password manager but if my phone is compromised so easily then I probably am better off just getting better protection for my phone.
Click to expand...
Click to collapse
Damn that really sucks...sorry yo hear that. Hmm at this point I would backup photos, etc, flash stock firmware, and start fresh. Be careful with what you reinstall, as one of those apps/mods may possibly be the culprit.
@Nebell are you using sms to get your 2step-authentication code? maybe all your sms are being forwarded (via some malware app). You should be using a firewall if you are rooted.
Lots of apps have permission to access sms text messages and even send it.
Before i side load any apps, i use virustotal.com , go to website, upload APK file and if malware then install (if you must have it) but block it using firewall, any other red flags, then find another apk version or similar app.
Let Fastmail know of your breach and they can check which other devices or websites are registered/ linked to your account.
I suggest you backup your data, virus scan it all on a PC, wipe your android phone and start fresh. I use backup-your-mobile by Artur, to export my calendar, contacts, sms, call logs, etc. it works quite good.
good luck mate.
I think it might have been a false positive.
I reset my phone to factory settings and changed all passwords and suddenly "Ashburn US" login kept getting failed attempts on my email. But as soon as I reinstalled Edison Mail app and logged in, the success login from Ashburn US resumed.
It must somehow be connected to that app. I've sent a message to Edison and asked them if they are associated with that location. Maybe their server is located there or something, but I will wait and see what they reply before I take next action.
The fact that makes me believe this was a false positive is that I never noticed anyone reading my email or actually trying to do something, and I do have sensitive stuff in there.
I received my much anticipated OnePlus 6T yesterday. Unboxed it, tapped "Start" button. Scanned through both "Agreements," turned it off, boxed it up, got an RMA and shipped it back. I'm no attorney, I'm a broadcast engineer, but in my job I have to navigate the whole alphabet soup of government agencies red tape so I've learned some "legalese." I' returned the 6T because of the language in the "Agreements". When you tap "I agree" to both, then activate and use the device, your granting OnePlus access to anything on the device or networks on which it connects (condensed Reader's Digest version). Like everybody in the broadcast business I have "a lot of irons in the fire," I make notes about projects and ideas on my phone. There's no way I'm giving anyone permission to cherry pick my creativity or access to my company & networks proprietary information. I'm offering this as my personal observation on this forum and suggest anyone who is just receiving theirs new, read the legalese very carefully before you tap "I Agree."
Who the **** reads those? ?
Still why I don't buy any device that doesn't have Lineage support... However what are you going to replace it with? Going to go buy another flagship? Have you glanced through other's privacy policies? This stuff is pretty boiler plate at this point, it's CYA. Not that I'm defending it, because it shouldn't be like that, but in today's "sue happy world", and "everything needs to be connected", guess what? The solution would be just to remove this these services, there are tons of posts of which OnePlus services to remove if you want to stay on OOS and protect your privacy.
So back to the replacement, lets take a Samsung, those are popular....., have you glanced at their privacy policy, because it's similar link
I didn't go over entirely, and I'm sure there's more details, but I'm guessing OnePlus's blurb, looked something similar to this (From Samsung's Website):
In addition to the information you provide, we may collect information about your use of our Services through software on your device and other means. For example, we may collect:
Device information - such as your hardware model, IMEI number and other unique device identifiers, MAC address, IP address, operating system versions, and settings of the device you use to access the Services.
Log information - such as the time and duration of your use of the Service, search query terms you enter through the Services, and any information stored in cookies that we have set on your device.
Location information - such as your device’s GPS signal or information about nearby WiFi access points and cell towers that may be transmitted to us when you use certain Services.
Voice information - such as recordings of your voice that we make (and may store on our servers) when you use voice commands to control a Service. (Note that if we work with a third-party service provider that provides speech-to-text conversion services on our behalf. This provider may receive and store certain voice commands.)
Other information about your use of the Services, such as the apps you use, the websites you visit, and how you interact with content offered through a Service.
Information from third-party sources
We may receive information about you from publicly and commercially available sources (as permitted by law), which we may combine with other information we receive from or about you. We also may receive information about you from third-party social networking services when you choose to connect with those services.
I'm not new to android or privacy by any means.
This kind of obscure language is no mistake or ctrl c/v standard.
All of these are poored over by lawyers on mass.
.
It is for this reason I exclusively run custom rims & mods and a majority of my devices are root/xposed with multiple layers of privacy in mind.
.
There used to be a much bigger crowd of developers and possibilities...
But we seem to be a dying breed.
.
I'm deeply saddened at the lack of true device level privacy or the concern for it.
And no
You'll not catch me trusting Google or an oem.
I barely trust open source.
.
Any links to further improve safety security and privacy on an Android device would be appreciated
If you think what the 6T collects is bad wait till you hear about Google.. Android is just a glorified data collection OS.. All they care about is profiling from us and learning everything to target ads and sell to 3rd parties after all Google is an Ad company.. If you want privacy compile AOSP and use MicroG avoid all Google services and use as much FOSS apps as possible.
---------- Post added at 10:35 PM ---------- Previous post was at 10:32 PM ----------
OhioYJ said:
Still why I don't buy any device that doesn't have Lineage support... However what are you going to replace it with? Going to go buy another flagship? Have you glanced through other's privacy policies? This stuff is pretty boiler plate at this point, it's CYA. Not that I'm defending it, because it shouldn't be like that, but in today's "sue happy world", and "everything needs to be connected", guess what? The solution would be just to remove this these services, there are tons of posts of which OnePlus services to remove if you want to stay on OOS and protect your privacy.
So back to the replacement, lets take a Samsung, those are popular....., have you glanced at their privacy policy, because it's similar link
I didn't go over entirely, and I'm sure there's more details, but I'm guessing OnePlus's blurb, looked something similar to this (From Samsung's Website):
In addition to the information you provide, we may collect information about your use of our Services through software on your device and other means. For example, we may collect:
Device information - such as your hardware model, IMEI number and other unique device identifiers, MAC address, IP address, operating system versions, and settings of the device you use to access the Services.
Log information - such as the time and duration of your use of the Service, search query terms you enter through the Services, and any information stored in cookies that we have set on your device.
Location information - such as your device’s GPS signal or information about nearby WiFi access points and cell towers that may be transmitted to us when you use certain Services.
Voice information - such as recordings of your voice that we make (and may store on our servers) when you use voice commands to control a Service. (Note that if we work with a third-party service provider that provides speech-to-text conversion services on our behalf. This provider may receive and store certain voice commands.)
Other information about your use of the Services, such as the apps you use, the websites you visit, and how you interact with content offered through a Service.
Information from third-party sources
We may receive information about you from publicly and commercially available sources (as permitted by law), which we may combine with other information we receive from or about you. We also may receive information about you from third-party social networking services when you choose to connect with those services.
Click to expand...
Click to collapse
Lineage also collects weird data like what device you installed on, Carrier etc.. Not sure why it needs this but I don't run it for that reason.
nima0003 said:
Who the **** reads those?
Click to expand...
Click to collapse
people who can read
Lebrun213 said:
people who can read
Click to expand...
Click to collapse
Did you return yours?
liam_davenport said:
If you think what the 6T collects is bad wait till you hear about Google.. Android is just a glorified data collection OS.. All they care about is profiling from us and learning everything to target ads and sell to 3rd parties after all Google is an Ad company.. If you want privacy compile AOSP and use MicroG avoid all Google services and use as much FOSS apps as possible.
---------- Post added at 10:35 PM ---------- Previous post was at 10:32 PM ----------
Lineage also collects weird data like what device you installed on, Carrier etc.. Not sure why it needs this but I don't run it for that reason.
Click to expand...
Click to collapse
So they can get an idea of which devices to develop for and their user base.
liam_davenport said:
Lineage also collects weird data like what device you installed on, Carrier etc.. Not sure why it needs this but I don't run it for that reason.
Click to expand...
Click to collapse
As soon as you install Lineage it asks if you want to share / participate in this program? You don't have to share this information. If you overlooked it the user can disable this sharing in the settings. They don't try and hide it at all.
I also don't know of any Lineage builds / trees that are hidden unlike other ROMs that are popular. So everything is out in the open.
Lineage has always been my first choice, so maybe I'm biased?
Caltinpla said:
Did you return yours?
Click to expand...
Click to collapse
custom OS and MicroG
got rid of oneplus & google spyware without loosing fonctionality (except fingerprint reader obviously)
Lebrun213 said:
custom OS and MicroG
got rid of oneplus & google spyware without loosing fonctionality (except fingerprint reader obviously)
Click to expand...
Click to collapse
So, you really believe custom roms and other phone makers don't spy on you? Good luck with that!!!
Caltinpla said:
So, you really believe custom roms and other phone makers don't spy on you? Good luck with that!!!
Click to expand...
Click to collapse
If you think custom roms (AOSP) are spying on you you're on the wrong website
Intrusive TOS suck big time, but, unfortunately, if you have a email address or cell phone, use the internet in any way shape or form, forget about any sense of privacy..
I make sure I dont do anything "iffy" on my cell phone; never use it for banking or bill paying, so I feel a little less paranoid, but there is really NO WAY, aside from not having an email address/cell phone/internet connection to keep your life from some prying eyes..
Lebrun213 said:
custom OS and MicroG
got rid of oneplus & google spyware without loosing fonctionality (except fingerprint reader obviously)
Click to expand...
Click to collapse
Root and block everything.
Caltinpla said:
So, you really believe custom roms and other phone makers don't spy on you? Good luck with that!!!
Click to expand...
Click to collapse
i trust open source, if there is a doubt with the code, anyone can check (not saying everyone does that).
Google service, oneplus, etc ... on the other hand are completely locked and you have no way to see what it really does.
Btw, i switched because of the much better battery and performance i get without these spyware constantly running, not much about privacy... Still use google.com everyday so they aren't missing anything :laugh:
The only one you have to agree to is the first one. The rest you can decline and still setup your phone. I agree with Micro G but, if go a step further and install NanoDroid. It comes with replacement Google apps and GPS and all sorts of things to disconnect you from Google but have a functioning phone.
Sent from my OnePlus6T using XDA Labs
liam_davenport said:
If you think what the 6T collects is bad wait till you hear about Google.. Android is just a glorified data collection OS.. All they care about is profiling from us and learning everything to target ads and sell to 3rd parties after all Google is an Ad company.. If you want privacy compile AOSP and use MicroG avoid all Google services and use as much FOSS apps as possible.
---------- Post added at 10:35 PM ---------- Previous post was at 10:32 PM ----------
Lineage also collects weird data like what device you installed on, Carrier etc.. Not sure why it needs this but I don't run it for that reason.
Click to expand...
Click to collapse
False. Google does not sell user data to third parties, or to anyone. It's never even been considered. Unfortunately due to a mix of people not understanding how technology works and assuming that every "tech company" operates in exactly the same way this particular piece of fake news just won't die. There are plenty of terrible things they actually do nowadays, better to focus on those anyway
tech_head said:
Root and block everything.
Click to expand...
Click to collapse
so much this
every manufacturer has some sort of logging / reading data.
root, and monitor everything that leaves your phone - block apk's that shouldnt be running - or create firewall rules in the iptables to block applications from accessing certain sites / internet.
partcyborg said:
False. Google does not sell user data to third parties, or to anyone. It's never even been considered. Unfortunately due to a mix of people not understanding how technology works and assuming that every "tech company" operates in exactly the same way this particular piece of fake news just won't die. There are plenty of terrible things they actually do nowadays, better to focus on those anyway
Click to expand...
Click to collapse
This argument would make Kellyanne Conway proud. Yes, Google does not sell user data directly. But it does so indirectly every day it is in business. By allowing advertisers to target ever smaller slices of the population and track them across websites they ARE providing advertisers with user data.
GroovyGeek said:
This argument would make Kellyanne Conway proud. Yes, Google does not sell user data directly. But it does so indirectly every day it is in business. By allowing advertisers to target ever smaller slices of the population and track them across websites they ARE providing advertisers with user data.
Click to expand...
Click to collapse
A truly moronic reply that shows you have no idea what you are talking about. Have your even seen the advertising interface to Google's ad products? Obviously not because you just described Facebook's, not Google's! ?????