WARNING potential securirty gab! - Nexus 4 General

according to pc world a 'new' security gab has been discovered, which can DoS your nexus via flash sms!
http://www.pcworld.com/article/2067...lofservice-attack-via-flash-sms-messages.html
doesn't seem to be very dangerous, but it is embarrassing how long google already knows about this, but doesn't fix it :/
keep calm and push the thanks button!

It's already been posted
SMS exploit
Closed

Related

[Q] Security concerns using a rooted / ROM'd Captivate

Greetings everyone.
Ill just start off with asking the question: How many of you give 2nd, 3rd or nth thoughts about using a rooted (or, rooted and ROM'd) phone?
Now, let me explain why I am asking this question.
Earlier this week, my Google account was broken into. The attacker mass-emailed everyone on my contact list a link to a Viagra ad, of all things. It could have been worse, since my contacts and emails were left in-tact. In a furious, chaotic, post-incident rush, I was scrambling in an attempt to figure out how they obtained my password. At the time of this writing, I have come up with nothing. The first thing I thought, naturally, was a worm/trojan/virus on my PC. Several anti-virus / anti-malware / anti-root-kit scans proved to be clean.
So, I turned my sleuthing efforts towards my phone -- a Samsung Captivate, which had been rooted and ROM'd to Captivate 3.04. I had Lookout installed the entire time, and I have been using Cognition ROMs since late December of 2010. In assuming the worst, I nuked my phone, reverted back to stock and re-rooted and re-ROM'd. While rooting my phone, my virus scanner pleasantly informed me that the One Click rooting solution contained an exploit (Lotoor, I believe). Now, I completely understand that its necessary to use these exploits in order to gain access. However, it kinda got me thinking -- what else could be going into the phone that I dont know about?
Note that all ROMs and Rooters were obtained from links available from this website. I did not get them from "shady" locations.
I am realistic about this. I download and install applications from the internet frequently. I put a some faith in my virus scanners / anti-malware applications. This little incident, however, is making me a little more skeptical about what applications I run, as its difficult and time consuming to monitor every application for "phone home" activities.
The bottom line is that I do not want to sound like that I am placing blame on any of the Cognition developers (or any ROM developer). In fact, I am probably going to donate to them because the 3.04 version finally allowed me to use my GPS normally. I honestly feel like I have a smart phone now, as everything works as it should and the phone is alot snappier compared to the stock version. I am saying this even after I tried out the official Samsung Kies Froyo update, which still leaves me hanging for GPS service.
And yes, I completely understand that I could have very well downloaded something on the Android market that was infected. Even though I did not download any of the applications mentioned on the latest hotlist (really, I just dont care about "screaming sexy Japanese girls"), I could have obtained an undiscovered beast. It could also be the case that I have something on my PC that scanners just arent picking up. I may never know.
Where do you all stand on this issue? Do most ROM creators have more than one set of eyes looking at the packages that get deployed, or is that too unpractical?
Thanks in advance!
(P.S. I have searched the forum and looked at the suggested links before posting. I just didnt find anything that quenched my thirst)
nope 10 chars
Mobile security is becoming a concern and should be. Regardless of stock or rooted, there is a risk.
I don't bank on my phone, use my 'real' gmail or put sensitive info on my phone. Mobile is becoming a huge platform to mine information from.
qwertyaas said:
Mobile security is becoming a concern and should be. Regardless of stock or rooted, there is a risk.
I don't bank on my phone, use my 'real' gmail or put sensitive info on my phone. Mobile is becoming a huge platform to mine information from.
Click to expand...
Click to collapse
Isn't that the truth? I definitely have not done any mobile banking over mobile, and I don't think that I ever will. Its just scary that the attacker probably could have dug up more information about me in my emails than I care to think about.
I switched over to Google's 2-step verification system, so hopefully that will deter future attempts. Notice how I didnt say "prevent," as I dont think anything can actually stop a determined attacker short of getting rid of the phone and my gmail account. Obviously, if my phone falls into the wrong hands, I could be potentially hosed.
Check this out
http://www.engadget.com/2011/03/06/google-flips-android-kill-switch-destroys-a-batch-of-malicious/
cappysw10 said:
Check this out
http://www.engadget.com/2011/03/06/google-flips-android-kill-switch-destroys-a-batch-of-malicious/
Click to expand...
Click to collapse
Dilli already released a fix for this vulnerability for his 7.0 ROM. Maybe u cud get a similar one on ur custom ROM too.
While your concerns are rational and I await the answers, I believe they are borne out of a false understanding of what happened to you. When a spam e-mail is sent "from" your e-mail account it is not always the case that the attacker has gained access to your machine or your e-mail account. Most e-mail spam is sent via smtp "spoofing" whereby an attacker can make an e-mail look like it is from anyone else. These are done by automated scripts that can find and/or generate random "from" e-mails and then send to other recipients that have been found or randomly generated. If many of your friends received the e-mail, it IS POSSIBLE your computer or account was compromised, or that other friends' accounts have been compromised such that the automated spam bot gained access to a similar address book to yours.
Just wanted to let you know that you may not have been compromised.
Anyway, I too, am interested in the vulnerabilities of these custom ROMS.
sircaper said:
While your concerns are rational and I await the answers, I believe they are borne out of a false understanding of what happened to you. When a spam e-mail is sent "from" your e-mail account it is not always the case that the attacker has gained access to your machine or your e-mail account. Most e-mail spam is sent via smtp "spoofing" whereby an attacker can make an e-mail look like it is from anyone else. These are done by automated scripts that can find and/or generate random "from" e-mails and then send to other recipients that have been found or randomly generated. If many of your friends received the e-mail, it IS POSSIBLE your computer or account was compromised, or that other friends' accounts have been compromised such that the automated spam bot gained access to a similar address book to yours.
Just wanted to let you know that you may not have been compromised.
Anyway, I too, am interested in the vulnerabilities of these custom ROMS.
Click to expand...
Click to collapse
He said the email was sent to every one if his contacts. He was compromised.
That said. Use a secondary junk gmail account if at all possible on your phone. Don't install any app that asks for stupid permissions. Be very leary of any app that wants internet access regardless of who developed it. Android virus scanners are a joke, do not trust them.
P.s. "(really, I just dont care about "screaming sexy Japanese girls")" = blasphemy
whiteguypl said:
He said the email was sent to every one if his contacts. He was compromised.
That said. Use a secondary junk gmail account if at all possible on your phone. Don't install any app that asks for stupid permissions. Be very leary of any app that wants internet access regardless of who developed it. Android virus scanners are a joke, do not trust them.
P.s. "(really, I just dont care about "screaming sexy Japanese girls")" = blasphemy
Click to expand...
Click to collapse
Point taken. I don't disagree, but the odds say no. I figured he was using hyperbole and didn't really validate with every single person in his address book. The majority of spam e-mails are via spoofing.
sircaper said:
While your concerns are rational and I await the answers, I believe they are borne out of a false understanding of what happened to you. When a spam e-mail is sent "from" your e-mail account it is not always the case that the attacker has gained access to your machine or your e-mail account. Most e-mail spam is sent via smtp "spoofing" whereby an attacker can make an e-mail look like it is from anyone else. These are done by automated scripts that can find and/or generate random "from" e-mails and then send to other recipients that have been found or randomly generated. If many of your friends received the e-mail, it IS POSSIBLE your computer or account was compromised, or that other friends' accounts have been compromised such that the automated spam bot gained access to a similar address book to yours.
Just wanted to let you know that you may not have been compromised.
Anyway, I too, am interested in the vulnerabilities of these custom ROMS.
Click to expand...
Click to collapse
Thanks for the input.
As much as I would like to believe it was spoofed (and inherently making me feel better at the same time), I can say with a high degree of certainty that whoever did this had my password. How can I be somewhat sure of this? The "recent activity" list on gmail.com had an entry from a web browser access in Brazil. I do not have a proxy in Brazil, nor have I traveled there in.. well... ever. Also, the recipients' email headers claimed the email originated from gmail.com. Now, you're completely right that this part could have been spoofed, but I am not so sure about the first part. Upon doing some research, I've found that alot of other people who also had their accounts compromised had the same log entries and same origin in the email headers sent to the recipients.
Digression. Anyways, what they did is not as important as how they did it. Even to this day I am not sure. I really dont want to place blame on the ROM, because honestly the Cognition people did a fantastic job with it.
Bottom line is that I was curious as to everyone's security concerns, or lack thereof, when using custom ROMs.
How can you tell if your phone has been infected? What are some of the signs?
Hondo209 said:
How can you tell if your phone has been infected? What are some of the signs?
Click to expand...
Click to collapse
Well, I am no expert in this area, but the first place to look would be at an anti-virus, anti-malware application (such as Lookout). However, that probably wont do you any good if the virus/trojan/worm/whatever is still unknown.
Second place you might want to look is at your data usage. Excessive amounts might indicate something is up.
Other than that, maybe one of the sure-fire ways is to see which system files have changed and how. For some reason, a software package like Tripwire comes to mind. Although, I dont know how useful something like that would be on a mobile device.
Someone much more versed in this topic should have some better ideas
EggplantWizard said:
Thanks for the input.
As much as I would like to believe it was spoofed (and inherently making me feel better at the same time), I can say with a high degree of certainty that whoever did this had my password. How can I be somewhat sure of this? The "recent activity" list on gmail.com had an entry from a web browser access in Brazil. I do not have a proxy in Brazil, nor have I traveled there in.. well... ever. Also, the recipients' email headers claimed the email originated from gmail.com. Now, you're completely right that this part could have been spoofed, but I am not so sure about the first part. Upon doing some research, I've found that alot of other people who also had their accounts compromised had the same log entries and same origin in the email headers sent to the recipients.
Digression. Anyways, what they did is not as important as how they did it. Even to this day I am not sure. I really dont want to place blame on the ROM, because honestly the Cognition people did a fantastic job with it.
Bottom line is that I was curious as to everyone's security concerns, or lack thereof, when using custom ROMs.
Click to expand...
Click to collapse
Hmm.. Interesting.... I may take back my argument then!
As far as the concerns? I am also on Cognition 3.04 and up until now, I brushed aside the security issues. I had concerns, but hoped the community was strong enough to expose them. There definitely is an inherent risk downloading files authored by the developers. I know that some of them add in their own signature files just to track the programs and see if they are being altered. I'm not sure what can be done. Maybe you can run the ROM zips through a virus scanner on your pc before installing?
whiteguypl said:
P.s. "(really, I just dont care about "screaming sexy Japanese girls")" = blasphemy
Click to expand...
Click to collapse
HA! Now that's just funny.
sircaper said:
I figured he was using hyperbole and didn't really validate with every single person in his address book.
Click to expand...
Click to collapse
Well, I didnt validate with *every* single person in my address book, but I talked with a few that I speak with on a daily basis. They all had the same headers originating from gmail.com
Although, I do have to admit that one of the bizarre after-effects of such a compromise is that I have been "reunited" with people I haven't spoken to in a very long time. Take the good with the bad, I suppose.
I agree that security is a concern especially so when one is rooted. There are so many things to take into account. Even using wifi hotspots where hackers can hijack your logged in sessions whether it be Gmail, websites or banking. There are other methods where they can intercept packets with password and account information. For myself, I try and keep antivirus apps like Lookout running and scan often as well as am very cautious as to what hotspots I connect to. It doesnt look like your virus scanner helped you much. However, there may the possibility that you received malware on your PC where you may also be checking gmail from and it spoofed your account using information from there. Its all a guessing game though as there is probably no way to tell how this happened to you. I'd be thankful that it was just an ad that was sent out and nothing more serious came as a result...and change my passwords damn fast (lol)
Oh yeah, I only use wifi networks that I know. I don't log onto public wireless or random networks...

[Q] Gingerbread, SIP/VoIP and people from outside the US

I'm sorry if this has already been debated elsewhere. I did search and try to locate threads on this already, but didn't come up with anything which (seemed) relevant to this problem.
If anyone has a link handy for another thread which already discusses this, I'll close the thread if that is wanted.
With that said... Here's my issue.
As stated elsewhere, one of the main things which excited me about Gingerbread was the ability to do native SIP dialing. About time, I say! Now I've flashed Gingerbread on my SGS and so far the results has been below underwhelming.
From what I can tell this is how you get SIP/VoIP/Internet calling on your phone using Gingerbread:
1. Sign up for Google Voice.
2. Install Google Voice and sign in.
3. Voila. Your Gingerbread Android-device now has a bunch of SIP settings and options.
This is ofcourse, unless your manufacturer has somehow crippled your phone's software.
That might be the case with Samsung's firmware, but I wouldn't know because the steps outlined above is absolutely impossible for anyone outside the US. You cannot sign up for Google Voice anywhere else. End of story.
So. Is this for real? Did Google release a smartphone OS for worldwide consumption, touting "native SIP", native internet calling as feature and then implement it in a way which means it will only work in one country, all else be damned?
I seriously find this very hard to believe. There has to be a way to get this functionality up and running otherwise. Seriously? The internet maestros at Google implements a core OS-level function tied to (one) geo-location? Is third-party solutions ala Sipdroid the solution for everyone else?
So... Please tell me I am completely mistaken and that there are steps for getting SIP running on my phone, despite me not have an adress of residency ending in "US".
Any hints or links in any direction so that I can actually get to try this out would be über appreciated.
Bump.
I realize posting this while Europa were getting ready for sleep and only US-people were around might have been bad timing.
Just bumping this again to see if there's any more response. I can't seriously be the only one wondering about this.
If bumping is severely against forum policies, let me know and I'll make a note of it and wont do it again.
http://forum.xda-developers.com/showthread.php?t=1043016
Use this zip as an update from CWM recovery, enables the menu "Internet call settings" under "Call settings".
Works on odex and deodex ROMS [I have the same JVB as the OP]
Problem solved
Thanks Vinnie.
Since I already have some framework-res.apk dependent mods, I just pushed the permissions-file as mentioned in that thread, and now I have "Internet calling options" available.
Yes, I realize this will only work while on wifi and SIP over 3G will be disabled, but at least it gives me something to experiment with so that later I will know if handing over my other mods for 3G VoIP/SIP will be worth it.
Thanks for the response and handy link. Now if XDA had better search, I might not have needed to pollute the forums with duplicates like this
Edit: Checked the entire thread and saw that there is an update.zip with eyecandy as well. Will try it out later.

JRom Flasher Link has malware

Unfortunately since I cannot post in that particular forum I have to post in completely unrelated forum because of the ridiculous policies here. (though I do see why it is imposed but it sucks).
Anyway the link provided in this thread:
http://forum.xda-developers.com/showthread.php?t=1902016&page=18
Will give you malware if you are not careful. In my opinion the moderators should not allow this, if you fail to pay attention and end up not unchecking "use our download manager" you WILL get infected with some nasty malware that is very persistent. Bitdefender didn't catch any of it and this is a antivirus program that updates at least 4 times per day.
I spent 3 hours removing the garbage this thing installs and I did not authorize any of the software installs that it asked me to install but it installed this garbage anyway.
If you've downloaded from the link provided in that thread and you are on Windows PLEASE check your computer, this thing didn't just hijack internet explorer it hijacked chrome too via extensions.
Please check your C:\Program Files\ directory for youtubeadremover folder. If you've got that folder you've got a disaster on your hands. Also check your Chrome extensions to verify that there are no extras in there.
To make it clear I'm not blaming the OP for this I am sure its the shaddy file sharing site that bundled this garbage.
Thanks guys, hope you don't find anything.
And this is why I never approved of such one-click tools... I don't understand why people don't just get everything they need malware-free straight from Google and read a bit of information.
I haven't looked at the tool and can't verify the malware, but in any case, thanks for the heads up.

[Q] grievingDad needs HELP!

My son ODed on 11.17.14. I have been looking over his phone for some time. In a moment of utter stupidity I deleted all SMS messages. Links from me, his mother, his sibling and his friends. I have been looking online for ways to recover msgs. Dr. fone appears to be one of the best but does not work on his phone. It appears it would work if the phone was rooted. I have downloaded and installed towelroot. The app says the phone is not supported. I have found and used the three Mod string modifiers. the app still says the phone is not supported. I even went to the ATT device support center and they said they could not help. Please anyone, help me recover my son's messages. Its the last words I will ever have from him.
Thank you.
update grievingDad
Rereading post, additional info may be needed:
Model number
SAMSUNG-SM-G900A
Android version:
4.4.2
Kernal version
3.4.0-2178781
[email protected] #1
Tue Jul 22 13:58:46 KST 2014
Build number
KOT49H.G900AUCU2ANG3
If anything else is needed let me know.
grievingDad needs HELP!
Another thought,
I live in Baton Rouge, La. Available at 225-278-6466
If anyone is in town, New Orleans, or vicinity, I will come to you for help.
I am desperate to recover these msgs.
thank you.
Download AT&T messages if it is not already installed. After you log in it will start downloading all of the logs, sms, calls, etc.
@grievingDad,
I truly do not intend to be callous in this situation, but I will make a few points here and some may be helpful.
1) I don't know who you are, and since I do not know you, I cannot be certain of your motives for even trying to retrieve deleted messages. If you have truly lost someone and your motives are as simple as they appear in your firt message, my heart goes out to you and I wish you all the best in trying to retrieve your son's messages. I only say this because I would not even attempt to retrieve deleted messages for someone if they were doing it for spiteful or illegal reasons (Example: Jealous lover, disgruntled employee, etc.). There are probably more illegitimate reasons to retrieve another person's messages than legitmate ones. I am guessing that is why you will have a difficult time finding someone to help you with this directly. I am not an attorney, but even helping you to retrieve deleted messages sounds like a slippery slope.
2) You may be able to get an attorney to petition AT&T for a record of the messages. I believe that they have to keep them for a certain period of time for legal reasons. I'm not sure how accessible the messages will be. I remember trying to get a copy of one of my own messages (many years ago), and I wasn't able to get it from them. I know that messages are subpoenaed in court, but you might have to involve a judge to get them.
3) If your son used Hangouts for messaging (not the stock messaging app), you may be able to get the messages through his Google account. You might be able to ask Google for his password. I suspect that it would invole contacting Google and send them an official copy of the death certificate. I doubt that it would be easy.
4) It is possible that you could something wrong and brick the phone. In other words, you would never get anything off of it.
5) Consider the possibility that the messages may really be gone forever. Some things in the digital world offer the ability of recovering from "Oops!", but some things are meant to be deleted permanently. I am not trying to be a pessimist. All I am trying to do is counter the notion that everything is hackable and data is never really lost.
I don't think your being callous, just pointing out things i didn't consider.
1) It never occurred to me that that the post would be interpreted as nefarious. I know using names instead of handles is not very common, but if you wish you can look up his obit in the Baton Rouge Advocate. His name is William McCardle. My name is Douglas. I can be found at the number listed above in the same city. I'm not an attorney either, but I don't believe providing information on rooting a phone would lead to any type of prosecution. The service for all four numbers on the family plan are in my name.
2) I took the phone to the ATT device service center. I assumed if it was possible to retrieve msm from their servers they would have advised me there. But maybe not. I will contact ATT directly and/or consult with the family atty.
3) Hangouts is on the phone, but doesn't appear to have any msgs. Nothing is in Archives. The msms icon was one of the four permanent icons at the bottom, so I assume it is the stock messaging app.
4) I have copied/backup the device to Kies 3 and copied all photos to my computer. Even if the phone is bricked, it is worth the risk to get the msms back.
5) Its good you pointed out that not all data is recoverable. I was aware that even an App was able to retrieve msms, that some may be corrupted or overwritten due to reuse of the memory space.
6) Lastly, my motives are just that simple.
Thank you for the reply. Any further input would be greatly appreciated.
The App AT&T messages will recover just about every message sent and received from the line.
I don't recall if it recovers MMS messages.
It should be on the phone already. If not you may be able to download in he play store.
I used it once when I was going to be out of a service area. Connected to WiFi and used the app. While using the app it seemed to download every message ever sent and received. Took forever and I could not stop it.
Success
Thanks to those who replied. Installed the att msgs app and all the texts have been downloaded.
Just wish I had followed the advise on the 3rd when it was first suggested.
grievingDad said:
Thanks to those who replied. Installed the att msgs app and all the texts have been downloaded.
Just wish I had followed the advise on the 3rd when it was first suggested.
Click to expand...
Click to collapse
I kept meaning to go back and check this thread earlier to see how you made out. I am glad to hear that you were able to recover the messages. All the best.

Security Warning For HUAWEI P8 LITE Owners! Build No: ALE-L21C432B574

SECURITY WARNING!
Note: Because the last thread closed by Perseus (thanks to XePeleato who lobbied for it from Madrid and he said that "Please stop trying to write in Spanish, I don't understand a single word.") I am forced to open a new thread and in this time upload a YouTube video to proof that ALL P8 LITE HAVE A POTENTIALLY DANGEROUS SECURITY ISSUE.
NOT POSSIBLE TO ENCRYPT THE PHONE and I requested here: [ROM][OTA Update] ALE-L21 Dual SIM C432B574 to DELETE THE ROM URGENTLY because if more people updating or flashing the ROM more and more people will be affected very seriously.
This issue I find not just on B574 but on B564 as well.
I kindly request everyone that in the future before posting comments make a full backup on the phone and do the same what I am doing on the video below.
Here you go:
PLEASE WAIT UNTIL HUAWEI FIX THIS (or if you already unlocked the bootloader flash the stock ROM!
(Because Perseus closed the previous thread, I again need to contact with HUAWEI and ask the to keep they eyes on this thread. I request all admin and moderator NOT to close this one because it's helping all device owners and Huawei to resolve this serious security issue)
Thank you for your attention,
AndroidSecurity
All these ROMs are stock. As you can see, nobody cares. Think about not spamming here.
Sent from my Huawei ALE-L21 using XDA Labs
No one encrypts their device, not even 1% of all android owners. I dont care NSA or FBI looking at my cat pictures. So please, stop spamming these mindless posts and opening up new threads. Your previous thread already got closed because you were SPAMMING and acting in a disrespectful manner
The company that I work in use gmail for work and it requires us to encrypt our phone any other stuff to sync so I think this is a pretty serious issue.
Just because you don't use it, doesn't mean others don't too.
Hope Huawei fixes this as I don't want to use our company issued iphones.
Why... That video is so misleading... Why do you talk like if you knew exactly what's going on? This community would be really nice if people said "Help, I can't get it to work " instead of "It doesn't work", or "it's broken" ... I really have a lot of stuff to do, I am just answering to the people who actually believe that their 'naughty secrets' have been compromised.
First of all I am going to explain how does it work, and then, I'll tell you how to check if it's encrypted or not.
Android, as you may know, has some partitions, of course, it doesn't encrypt them all, just the data partition, where your apps data and internal storage live. And I can make such statement because I can actually prove it scientifically, not recording a video, here you have the original emui FsTab, Do you know what it is? Sure you do! You have been programming for 15 years, but I'll explain it for everyone else, FsTab is a file where the Filesystems are defined so android can mount them correctly: https://gyazo.com/ca9072281128b56416bb1fff9163f0c0 At line 9, the data partition is defined, and it ends with 'encryptable=footer' that means that encryption is supported.
Then, you say that it takes very little amount of time to restart, that's because the encryption takes place after that restart, at the Huawei logo, and of course, I'll prove it with a logcat, that, if you don't believe, you can check your own, as well as the Fstab file. https://gyazo.com/1b75c6835be7025169071a7ecc88df16
Cryptfs takes care of encrypting the data partition, as you can see, and then it obviously, as you proved with your video, asks you for the code. But then you say that it stops asking for the code when you change it! Yeah, it does, but it remains encrypted, because the key, or the pattern, is not the real encryption key, it's the key, that unlocks the real key, that's stored inside a cryptographically secure area of the CPU, what you do when you remove the code, is remove a layer of protection, but that doesn't stop the device from being encrypted, because, Can you encrypt it again? The answer is no. What you can do, is change the key by invoking cryptfs from the command line. Should Huawei let you change the passcode via a graphical interface? It would be nice, but the device remains encrypted, until you boot it up.
However, keep this in mind, if you change the code and it no longer asks you for it at the system start, it asks you for it at the home screen, and if you don't have the code, you can't access any file, and if you leave it without a passcode, then you shouldn't be thinking about encryption at all
Now, how can you check at home that it works? Easy, install TWRP or another recovery and try to read/write to your data partition, you'll see you can't. Another thing you can do, is run this command through adb shell 'getprop ro.crypto.state' it will say 'encrypted' of course, if you want to mess with cryptfs just run this command 'vnd cryptfs' and then whatever parameter, by the way, you can check cryptfs code here: https://android.googlesource.com/platform/system/vold/+/master/cryptfs.c to figure out the parameters or just google them.
Now be more careful when you see something and believe it without thinking about it.
P.S: Your thread is closed because you were unrespectful, I have nothing against you or against security, I hope you don't treat this as a personal attack, because it is not.
Encryption works on my device. Your is the only that's broken. I would suggest you go and replace it.
It's very clear that your only mission is to make everyone panic. That's why you keep resubmitting this over and over and try to stop EVERYONE from upgrading to newest version even though almost NO ONE would be affected if this issue was real.
Sent from my ALE-L21 using XDA-Developers mobile app
SHOW ME A VIDEO! I REFUSING TO ACCEPT ANY KIND OF PERSONAL ATTACK IN THIS FORUM. NO ONE OF YOU PROVIDING EVIDENCE THAT I AM WRONG. ALL OF YOU COME HERE AND POSTING BECAUSE SOMEBODY CALLED YOU TO DO IT. I REQUESTING ALL MODERATOR AND ADMIN TO COME HERE.
I POSTING HELPFUL EVIDENCES THAT THE PHONE AND THE ROM IS DANGEROUS. ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO.
I GARANTEE THAT NO ONE OF HUWEI P8 LITE DEVICE CAN BE ENCRYPTED!!!!
By the way Android 6.0 according to Google requires to enable full disc encryption.
I showed on the video my build number and everything which can be used to verify my statements. I am on stock ROM unlocked bootloader etc. YOU and ONLY you who comes here are discrediting me. But helpful comments you cant provide as I did.
I STRONGLY RECOMMEND DO THE SAME WHAT I DO IN THE VIDEO AND RECORD IT AND POST IT HERE. DO IT!! NOT ATTACK ME WHO HELPING EVERYBODY.
POST HERE VIDEO WHERE YOU SHOWING YOUR BUILD NUMBER AND DOING EXACTLY THE SAME AS I DID. NO CUT ON VIDEO!!!
THANK YOU
I am sorry, but moderators please could you ban this jerk. Everybody knows that using CAP is yelling and he continues to be disrespectful to everybody that disagrees with him, so he should sit in his room with his phone switched off and that is that. Please !
---------- Post added at 07:58 PM ---------- Previous post was at 07:56 PM ----------
He should also learn better spelling. I hope his programming (15 years) is better.
AndroidSecurity said:
SHOW ME A VIDEO! I REFUSING TO ACCEPT ANY KIND OF PERSONAL ATTACK IN THIS FORUM. NO ONE OF YOU PROVIDING EVIDENCE THAT I AM WRONG. ALL OF YOU COME HERE AND POSTING BECAUSE SOMEBODY CALLED YOU TO DO IT. I REQUESTING ALL MODERATOR AND ADMIN TO COME HERE.
I POSTING HELPFUL EVIDENCES THAT THE PHONE AND THE ROM IS DANGEROUS. ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO.
I GARANTEE THAT NO ONE OF HUWEI P8 LITE DEVICE CAN BE ENCRYPTED!!!!
By the way Android 6.0 according to Google requires to enable full disc encryption.
I showed on the video my build number and everything which can be used to verify my statements. I am on stock ROM unlocked bootloader etc. YOU and ONLY you who comes here are discrediting me. But helpful comments you cant provide as I did.
I STRONGLY RECOMMEND DO THE SAME WHAT I DO IN THE VIDEO AND RECORD IT AND POST IT HERE. DO IT!! NOT ATTACK ME WHO HELPING EVERYBODY.
POST HERE VIDEO WHERE YOU SHOWING YOUR BUILD NUMBER AND DOING EXACTLY THE SAME AS I DID. NO CUT ON VIDEO!!!
THANK YOU
Click to expand...
Click to collapse
Taken from: https://source.android.com/security/encryption/index.html
Full disk encryption is the process of encoding all user data on an Android device using an encrypted key. Once a device is encrypted, all user-created data is automatically encrypted before committing it to disk and all reads automatically decrypt data before returning it to the calling process.
Click to expand...
Click to collapse
You obviously don't have a clue about what Full disk encryption means.
It has been proven that this claims are all false, so I'd just stop answering him and let the thread get buried, like all the other troll threads.
AndroidSecurity said:
SHOW ME A VIDEO! I REFUSING TO ACCEPT ANY KIND OF PERSONAL ATTACK IN THIS FORUM. NO ONE OF YOU PROVIDING EVIDENCE THAT I AM WRONG. ALL OF YOU COME HERE AND POSTING BECAUSE SOMEBODY CALLED YOU TO DO IT. I REQUESTING ALL MODERATOR AND ADMIN TO COME HERE.
I POSTING HELPFUL EVIDENCES THAT THE PHONE AND THE ROM IS DANGEROUS. ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO.
I GARANTEE THAT NO ONE OF HUWEI P8 LITE DEVICE CAN BE ENCRYPTED!!!!
By the way Android 6.0 according to Google requires to enable full disc encryption.
I showed on the video my build number and everything which can be used to verify my statements. I am on stock ROM unlocked bootloader etc. YOU and ONLY you who comes here are discrediting me. But helpful comments you cant provide as I did.
I STRONGLY RECOMMEND DO THE SAME WHAT I DO IN THE VIDEO AND RECORD IT AND POST IT HERE. DO IT!! NOT ATTACK ME WHO HELPING EVERYBODY.
POST HERE VIDEO WHERE YOU SHOWING YOUR BUILD NUMBER AND DOING EXACTLY THE SAME AS I DID. NO CUT ON VIDEO!!!
THANK YOU
Click to expand...
Click to collapse
Being ingnorant and disrespectful will not fix any problem you think is going on in your video. Simply calm down and accept that some poeple don't have that problem and the majority don't use this function. If you wanted to warn others simply warn them and that will be that. Also android 6.0 comes with full disk encryption but one thing forgotten here is that we aren't running vanilla android MM. Also Huawei didn't force anyone into updating their firmware. We could complain if it were a major flaw but this bug does not make the device unusable. Also your ignorance reached that of global ingorance. You said and I quote "ALL OF YOU CAN GO TO HELL IF YOU ARE NOT ABLE TO RESET THE PHONE AND DO WHAT I DO IN THE VIDEO. " Religious ignorance, and just general ignorance. As of now I call for a moderator to resolve this issue since I don't have such permissions. You first try to help us and when we try to reason everything and calming people down you attack - also ignorance. Just stupidity in my mind.
Edit: And as it would seem there isn't any problem concerning our encryption.
"Doesn't matter how good of an Idea a person has, if he cannot express it and ignores help to do so, he is as stupid as the rest of us." - me.
You tested one phone and you can't say that EVERY is affected.
Also, who would call people to disagree with you as you stated that we were called to argue here? Huawei? The other guy creates ROMS - something that Huawei doesn't want to and would never work with him, especially on this little issue with YOUR phone. No one called me.
Sent from my ALE-L21 using XDA-Developers mobile app
This thread is a mess and nothing more than speculation really.
You are more than welcome to open another thread, when you have substantial proof of what you are claiming. From what I can tell from this though it is just you, with 1 device claiming this.
Until then, thread closed!
Forum moderator,
Matt

Categories

Resources