JRom Flasher Link has malware - Nexus 7 General

Unfortunately since I cannot post in that particular forum I have to post in completely unrelated forum because of the ridiculous policies here. (though I do see why it is imposed but it sucks).
Anyway the link provided in this thread:
http://forum.xda-developers.com/showthread.php?t=1902016&page=18
Will give you malware if you are not careful. In my opinion the moderators should not allow this, if you fail to pay attention and end up not unchecking "use our download manager" you WILL get infected with some nasty malware that is very persistent. Bitdefender didn't catch any of it and this is a antivirus program that updates at least 4 times per day.
I spent 3 hours removing the garbage this thing installs and I did not authorize any of the software installs that it asked me to install but it installed this garbage anyway.
If you've downloaded from the link provided in that thread and you are on Windows PLEASE check your computer, this thing didn't just hijack internet explorer it hijacked chrome too via extensions.
Please check your C:\Program Files\ directory for youtubeadremover folder. If you've got that folder you've got a disaster on your hands. Also check your Chrome extensions to verify that there are no extras in there.
To make it clear I'm not blaming the OP for this I am sure its the shaddy file sharing site that bundled this garbage.
Thanks guys, hope you don't find anything.

And this is why I never approved of such one-click tools... I don't understand why people don't just get everything they need malware-free straight from Google and read a bit of information.
I haven't looked at the tool and can't verify the malware, but in any case, thanks for the heads up.

Related

PC Virus Source Reported

The Associated Press reports that new virus and trojan sources
are coming out of China via all the new electronic gadgets we
becoming addicted to.
They say that the source is at the manufacturing level coming
from either malicious intent or infected test computers on
manufacturing lines.
When you hook infected device to your host PC that's when
the virus/trojan enters into play,they name TomTom gps
as one of the sources of the problem devices along with
plethora of mini music devices.
actually treat my reply as a very serious notification.
there are a hell lot of viruses and trojans coming from china these days.
my pc is infected with something which actually seems to be an adware but has:
1. hijacked my browser
2. always downloads a trojan (no matter what i try to download, i always end up downloading a file setup.exe 139 kb)'
3. no antivirus has detected anything in my system.
4. lan connection is lost (ping becomes >300ms)
when i not knowingly clicked the exe file it did the following:-
1. disabled kaspersky av(infact avp.exe was running with 100% cpu)
2. infected all the exe files on my pc.
3. infected all sytem processes (kept running under 'system')
4. disabled boot in safe mode
5. infected all .htm files
it all starts as the followin: (notice the 2 small chinese windows in webpage which popup with any site including xda-dev)
Guys, before you start a scare and alienate and entire nation how about some facts?
bigstr: do you have a link to any specific articles / news reports / security warnings concerning specific products?
To my knowledge there has been one occurrence so far where a virus accidentally included in a ROM of a nav device and if I recall correctly the manufacturer provided a fix.
mariner_hart: with all due respect, if you click on an exe without knowing where it came from or scanning it with an AV software you have only your self to blame.
I suggest you download a software called HijcakThis (using another PC), run it and post the resulting log on an appropriate forum (not here).
I am sure someone will point out what you need to remove to solve your problem.
Finally, it is a good idea to disable the autoplay function in windows to prevent any CD / DVD / removable disk from running any software before it is scanned for viruses.
I don't have a link as I read it in the Hamilton Spectator and as
I said it was an Associated Press source article and named
TomTom as one of the sources.
I believe it may be possible to research either the Spectator
or AP via net to find source.

Artfulbits Anti Piracy Database to ban people that pirate apps from using stealing

http://www.artfulbits.com/Android/antipiracy.aspx
If your a Dev please support them, if you need assistance msg me i can send u code that will allow your app to automatically send a message to this company with a users information that has stolen your app or tried to steal it.
pentace said:
http://www.artfulbits.com/Android/antipiracy.aspx
If your a Dev please support them, if you need assistance msg me i can send u code that will allow your app to automatically send a message to this company with a users information that has stolen your app or tried to steal it.
Click to expand...
Click to collapse
I'm all for cracking down hard on piracy, but there are three big flaws with this solution:
1) How would Artfulbits verify that an app reporting a device is a "dark" device is making that report in good faith? If a bunch of pirates wanted to render this service pointless, they could just create apps that flood the service with false positives.
2) It is possible (although difficult) to link IMEI to a user/owner. This makes a publicly accessible database of "dark" IMEIs somewhat shady in terms of being a breach of privacy.
3) Finally, if this service is to be useful, apps have to have some way of acting on the information in the database. That is just going to lead to folks "cracking" apks to remove the IMEI-checking routines, or simply using leakproof firewalls to prevent the app from accessin the IMEI database.
Thoughts?
There is not going to be a way to completely stop piracy. Google just needs to step up the way the market works to prevent some of the piracy.
I understand devs deserve money for their hard work (and the log of my google checkout shows I support them) but I personally dont want any app reporting any information about myself or my phone. If there is a list of which apps do I will find an alternative for better or worse and not use the app. Not to knock on those who support this method, I just personally dont like it.
rondey- said:
There is not going to be a way to completely stop piracy. Google just needs to step up the way the market works to prevent some of the piracy.
I understand devs deserve money for their hard work (and the log of my google checkout shows I support them) but I personally dont want any app reporting any information about myself or my phone. If there is a list of which apps do I will find an alternative for better or worse and not use the app. Not to knock on those who support this method, I just personally dont like it.
Click to expand...
Click to collapse
Well considering my app has been pirated 3x as much as it has been downloaded legally i would be willing to let go of the few that are not comfortable with their imei being registered on a website which only happens if u are stealing an app, most apps out there gather more information from you than that without you even knowing.
I don't get why people would install this program. If it detects pirated software on your phone then who the hell are you letting you use your phone? Lets say you know you have pirated software well then of course you wont install this program. If you know your running a clean rom and have no reason to suspect pirated software your giving up a lot of information for a false sense of security. So unless this is forcibly installed on everyone's phone I don't see what's the point.
psychoace said:
I don't get why people would install this program. If it detects pirated software on your phone then who the hell are you letting you use your phone? Lets say you know you have pirated software well then of course you wont install this program. If you know your running a clean rom and have no reason to suspect pirated software your giving up a lot of information for a false sense of security. So unless this is forcibly installed on everyone's phone I don't see what's the point.
Click to expand...
Click to collapse
It's not a program you install. It is a database. App developers write routines into their programs which access the database. If an application suspects that it was illegally pirated, then it will send the user's IMEI to the database.
This is stupid idea. Go to the source of piracy if you want to fight it.
Give people access to paid apps on market and they won't download illegal copies form rapidshare...
su27 said:
Give people access to paid apps on market and they won't download illegal copies form rapidshare...
Click to expand...
Click to collapse
Riiiight... because if you give pirates the option to pay they'll definitely all pay right?
This database thing bothers me.
Not because I might be stealing programs..
but because I might find one and not know its "dark"
Suddenly I'm on some blacklist because I thought an app was cool?
I just did a search on one of the torrent sites, and found a file to DL.
It has 231 apk files and 2 .bak files. (I'm assuming the bak files are for a cracked version of the paid apk) but many of these files are a)old versions or b) free already.
Normally I would say SCORE! I don't have to DL to the g1, then back up, uninstall, transfer to the pc, and store.
Last time I tried a file like that, more than half were for cupcake, and would not work on my donut. Recycle bin.
With this Database I would get tagged as a cheater the first time I tried to install any of those files that were marked. But I have no idea they are "dark" before hand.
While I thank the Dev's for the work they do.
{Seriously, Thank you Developers!}
I'm a student, and I'm poor, which means I'm cheap.
I have several free apks stored away. Hell, I still used youtube downloader 1.2...until it quit working last week. Why, because I don't want to spend money just to have a cool phone.
If you really want to make it hard on the thieves... someone make a program that cripples another program, until the user requests the full version. Then it reads the Imei number from the phone and sends an upgrade request to a server. The server requests payment. Server verifies payment. The server issues a hashed password based on the Imei, which is then sent back to the phone as a password. Customer never sees the password.
This is what Doc to go appears to do. I could be wrong.
Now make it so that program can be imbedded in any other program.
Now thieves need a whole crap load of hacking to find enough hashed passwords to find the hash.
If the hash is added to at random intervals, or a different hash is used based on the Imei number, they might never find the hash.
Besides that, how the heck does a program know if it has been stolen?
How can it tell between a stolen program and a wiped phone that is getting reinstalled with backed up apk's?
jashsu said:
I'm all for cracking down hard on piracy, but there are three big flaws with this solution:
1) How would Artfulbits verify that an app reporting a device is a "dark" device is making that report in good faith? If a bunch of pirates wanted to render this service pointless, they could just create apps that flood the service with false positives.
Click to expand...
Click to collapse
Exists several strategies, for example the most popular is "honey pot" strategy. When vendor especially making leak of software or prepare specially application to track piracy.
jashsu said:
2) It is possible (although difficult) to link IMEI to a user/owner. This makes a publicly accessible database of "dark" IMEIs somewhat shady in terms of being a breach of privacy.
Click to expand...
Click to collapse
For example in our country sufficient IMEI of the phone to find it owner and it location, of course if you have police under your shelders. That is why I am thinking that IMEI is a good identifier.
jashsu said:
3) Finally, if this service is to be useful, apps have to have some way of acting on the information in the database. That is just going to lead to folks "cracking" apks to remove the IMEI-checking routines, or simply using leakproof firewalls to prevent the app from accessin the IMEI database.
Thoughts?
Click to expand...
Click to collapse
Solution is not perfect, but can be easily enhanced. HTTPS protocol with certificate checks will make firewalls and redirections useless.
What functionality exactly you have in mind?
[email protected] said:
While I thank the Dev's for the work they do.
{Seriously, Thank you Developers!}
I'm a student, and I'm poor, which means I'm cheap.
I have several free apks stored away. Hell, I still used youtube downloader 1.2...until it quit working last week. Why, because I don't want to spend money just to have a cool phone.
Click to expand...
Click to collapse
Leave according to your money. what can I say... spend less, work more.
[email protected] said:
Besides that, how the heck does a program know if it has been stolen?
How can it tell between a stolen program and a wiped phone that is getting reinstalled with backed up apk's?
Click to expand...
Click to collapse
Several simple steps:
- install software only from well known web sites, Android Market, Handagoo, SlideMe, etc.
- try to use trials and if it does not exists but you want to try, contact with developers. In most cases developer will provide you version for testing.
- if your phone is placed into black list, then you can contact "blacklist" vendor for explanation and fixing.
jashsu said:
Riiiight... because if you give pirates the option to pay they'll definitely all pay right?
Click to expand...
Click to collapse
You see - that's your problem - you want to fight the enemy instead of prevent war.
In my country there are many people who would pay for android programs because they are quite cheap. But we have no access to paid market. That is why we download apps illegaly.
Now, what do you think will faster stop us from stealing apps:
A. Calling us pirates and thieves
B. Giving us access to paid apps
su27 said:
Now, what do you think will faster stop us from stealing apps:
A. Calling us pirates and thieves
B. Giving us access to paid apps
Click to expand...
Click to collapse
You are making the incredibly flawed assumption that piracy only happens because people have no access to the paid market. Are some people put in this situation? Yes, probably. But the majority of pirates likely DO have access to the paid market and simply don't want to pay.
I am a bit confused, what does this ban people from? The market in it's entirety?
If that is the case, I would think you'd see an outburst of pirating once people couldn't access the market anymore. And that would also prevent people who may not feel like dishing out $100 for a navigation solution from purchasing numerous $1-10 programs that they would actually use on a daily basis. I think this methodology is flawed.
Piracy will never be completely stopped. However, making it harder for people to pirate your software is the best prevention. Instead of saying "Oh, you might have installed a pirated copy of XXX on your device, so now you can't purchase any more programs legitimately, so keep on stealing!". Due diligence falls on the hands of the software creators. If piracy is something you want to prevent (or at least inhibit) for your software, create an IMEI checking device key required to be granted after receipt (and clearance) of payment. Similar to CoPilot, granted it still gets cracked - it is much harder and much less widespread, and a simple update renders it useless to those who used the cracked version (check all over these forums for people complaining about it).
Also, implement trials that don't require the user to pay for them, giving them only 24 hours to try something out before they decide they need their money back. Even Microsoft lets users go 30 days without activation (last I checked) to try out Windows. They do not (to the best of my knowledge) make great attempts to prevent their software from being copied, but instead make it harder on those who do pirate it. Blocking system updates (of course everything has a workaround or crack, but making it harder on someone is oftentimes a great deterrent), preventing new feature installation, etc.
I am not condoning piracy, nor am I condemning software publishers. Just trying to make a point, which is this:
If you take someone who has stolen a program (for whatever reason/justification they may think of) and punish them by revoking their access to purchase said program (or any other program), you have thus reinforced their reason/justification to not purchase any programs.
Now, i may be wrong here, but looking at their source code to integrate into applications, there seem to be 2 things: 1) the device has to have a data connection, otherwise the code doesnt know whether the device is blacklisted or not, at which point it defaults to assuming it isnt, which overall is a good thing for users who have paid but for whatever reason dont have network at that time, however it is easy enough to stop an application from accessing the network, or even a specific site (ie the site for your imei number on their page).
secondly, is this meant to run on the first run of an app, or every run? if it is every run then i can see people getting annoyed by the unnecessary data usage, whereas if it is only on the first run then someone still has access to all their pirated apps from before they were on the database.
please note the only coding i have done is some fairly simple C, so i could be wrong, but anyone can check this if they want: http://www.artfulbits.com/Articles/Samples/Piracy/Integration.aspx
I think that by now most people know that I don't honeycoat things, so I'll just say it... this idea is RETARDED.
1) The application needs to use the API to get the IMEI. If you start using the IMEI to blacklist phones, a minor modification to the API causes the application to always read a string of 0's. Defeated.
2) The application needs PERMISSION to read the IMEI (android.permission.READ_PHONE_STATE). If you start requiring programs to have this permission, people will simply DENY it this permission (yes, it IS possible to block a permission)... this is ESPECIALLY the case when the application has *no good reason* to read the phone state.
3) As has been mentioned before in this thread, HOW DO YOU KNOW that an application you are downloading is pirated? Many applications are FREE to download, and virtually NONE of the pirated apps are labeled as "THIS IS PIRATED".
4) Connection to the internet can be EASILY blocked. Lots of ways... firewall, hosts, permissions, etc. Again, defeated.
Oh, and to those saying crap like access to paid market won't stop piracy, NOBODY SAID IT WOULD!!! It *WILL* reduce it though, since there ARE people out there who WOULD buy apps *IF THEY COULD*.
daveid said:
I am a bit confused, what does this ban people from? The market in it's entirety?
Click to expand...
Click to collapse
Read the description again more carefully. This does not impact a user's ability to access the Market, as it is not a Google product. In case your comprehension is lacking, i'll explain it very simply:
1. A developer decides to use the Artfulbits Anti Piracy Database (shortened AAPD) with its app.
2. A user downloads this AAPD-enabled app from the market.
3. When said app is run, it sends the IMEI of the device to the Artfulbits server. The server returns a color code corresponding to the number of times that IMEI has been reported by other AAPD-enabled apps for piracy. The app can then do whatever it wants with that information. This can be anything from deleting itself to crippling its own functionality.
4. App can also detect if has been pirated (by checking to see if the app has an entry in the user's personal Market account or some other method). If the app detects it is pirated, it will send a report to AAPD.
Another point Artfulbits failed to consider is that not all Android devices will have IMEIs to report.
Is piracy really that much of a problem? I mean most apps cost <3€ and I don't think I am the only one who values his time higher than saving 3€. I rather pay once and get updates via Market than check warez-sites for updates, and I think that most think that way?
There are just two apps that I ever considered to pirate. One was a dictionary for 20$ but I ended up buying it. The other is CoPilot which I would never buy since I don't own a car, but since it is not cracked anyway, I was not forced to really think about it.
I don't see anything good coming from that database. I.e. if my phone would be entered by mistake, you can imagine what problems that would cause for devs whose apps I bought, which I assume would suddenly stop working then.
You really need to think about whether the negative side-effects of such measures like this database are worth the (presumably very small) benefit.

Forget activation code use this app, NOT an activator!

Hey guys, I want to pass this app along to everyone here who is having problems activating WP7.
Note: This does NOT activate phone, it allows you to download ANYTHING thats in the Market.
I do NOT believe in warez! I am posting it here because of the people who cant activate WP7.
Also, this is NOT my app so I take no credit for this, just passing it along.
Overview: 3 ("free") WP7 MktPlace enables you to download Apps/Games for
specific regions (i.e. en-US, en-GB, fr-FR, de-DE) or specific devices (i.e. htc, dell, samsung) from the marketplace.
They also get auto-signed, so you can install them on your developer unlocked device.
After it's downloaded use "Tom XAP Installer.exe" to install it.
Make sure you have Zune running in background and usb is connected.
Some apps will give you error because it's for a different phone but I had almost every app install that I tried.
You can either use the search feature or leave the search box empty and click search for more results.
Your phone also has to be unlocked to install apps.
MOD EDIT:: ATTACHMENTS REMOVED - SEE LAST POST BEFORE THREAD WAS CLOSED.
Something that bypasses legitimate activation is definitely NOT allowed here. We are here to make it possible for users to run WP7 on their devices. Whether they get the OS activated or not is their own business. Bypassing legitimate activation is definitely possible but definitely illegal and therefore IS NOT allowed here.
Attachments in OP removed.
Thread closed.

[HOWTO]Work Music On Ouya

Let's get started!
What you're going to need!(IMPORTANT!)
1. SU
2. Busy Box
3. A Way To Side Load
4. Knowledge Of Permission Setting
& Root Permissions
5. Root Explorer
If you're familiar with setting permissions via. Root Explorer that's a plus!
I'm sorry, but as I don't get on the computer much. I can't provide permissions to set and I'll tell you the usual.
Everything here can be found with a simple Google search.
Are you a noob?
Well, I can tell you that this procedure is very easy and something easy to remember.
Google a search on; "What Permissions To Set On Root Explorer In System" or something among those lines, as we will need to install .apk's that way!
Assuming you understand what to do, let's figure out what player you'd like to use.
I, being one to have large libraries of music tend to use PlayerPro, I recommend Google Music/Google Play Music.
Let's pull more strings! Pull the app off the net or if you own the app, extract it onto a side load app you trust.
Once done, proceed to Root Explorer with knowing you have the app on the Ouya itself, once you see it use the Copy Paste method and place it in the System Apps(can be easily found from Main Directory), once you've established this, now is where permission settings come into play.
You should be able to remotely click the bottom "..." Using the D-Pad or the Touch Pad. This is where Copy And Paste should be.
If you've gotten through this and everything is set up proper, the next step is to reboot the console itself, do a full reboot to prevent any confusion and risk not seeing/having the player working.
If you've done this correctly, once you go to view your apps, you should see your app installed and ready to go.
NOTE: And yes, I mean note! Do not try this with the side load procedure and expect it to work, people have attempted this and either 1. See force closes, 2. The app is not loading, 3. The app is there but will not open and doesn't truly seem to be installed.
SIDE NOTE: This can be done with both ADB and my procedure.
If this was useful to you, I can only ask of a favor!
Check out my YouTube channel!
http://WWW.YouTube.com/user/TheDarkRosary
Subscribe if you will!
You also need googleloginservice.apk and googleservicesframework.apk otherwise you cannot sign into your google account to sync your library.
This has also been posted here:
http://forum.xda-developers.com/showthread.php?t=2291320
Also i would have classed this thread as general and not development.
MODS This just clickbait SPAM BS.
The title is vague on purpose, and the thread is basically saying "Hey bro, if you want a music app on your Ouya, just sideload that ****! OH WOW!"
However, like dully79 said, the only main reason to use the official Google Music app is to use the Google Music service and stream your library from the cloud. However, this is impossible without Google Services, which is not present in the stock Ouya ROM and isn't in any 3rd party ROM out yet, either. So basically, you can't do what he says you can do by doing what he says to do.
This is clearly intended to get people to try and go to his stupid YouTube channel, which he links to at the end.
How about you get traffic and views by having good content on your channel, instead of polluting this forum with useless bull****?
DivinityCycle said:
MODS This just clickbait SPAM BS.
The title is vague on purpose, and the thread is basically saying "Hey bro, if you want a music app on your Ouya, just sideload that ****! OH WOW!"
However, like dully79 said, the only main reason to use the official Google Music app is to use the Google Music service and stream your library from the cloud. However, this is impossible without Google Services, which is not present in the stock Ouya ROM and isn't in any 3rd party ROM out yet, either. So basically, you can't do what he says you can do by doing what he says to do.
This is clearly intended to get people to try and go to his stupid YouTube channel, which he links to at the end.
How about you get traffic and views by having good content on your channel, instead of polluting this forum with useless bull****?
Click to expand...
Click to collapse
Please be respectful of my threads.
No, I do not have my channel setup at the end to spam boards, it's just a simple thanks if you enjoyed my tutorial.
I don't intend to spam people, nor do I try and grab traffic.
I am simply trying to help others understand a method, if you disagree, I'd be more than happy to remove my channel link with a simple request, and also a request that you not bash my threads as I'm only here for assistance and spend my time happily making ROMs and doing other things.
I will not criticize you unless you doing do the same, it's disrespectful to me that you try and hurt my progress and tuts I post as users may not know how.
If I were simply begging for something I'd spend my time in General Forums where people generally go to do that sort of thing.
Lastly, if you've got nothing nice to say, don't say it and just avoid wasting your time coming through a place where people go to help, not get help with a channel.
I'm disappointed to know that someone would go as far as to make a whole post bashing on what I do to help the community, and I will have this brought to the mods and discussed with them in order to better our area without someone posting the same in all threads.
My last words are, thank you for those of you who actually know I try to help and who simply understand that if I were to spam you'd seed traffic from my post everywhere. I love you all, and appreciate you not going this far to bash me.
DivinityCycle said:
MODS This just clickbait SPAM BS.
The title is vague on purpose, and the thread is basically saying "Hey bro, if you want a music app on your Ouya, just sideload that ****! OH WOW!"
However, like dully79 said, the only main reason to use the official Google Music app is to use the Google Music service and stream your library from the cloud. However, this is impossible without Google Services, which is not present in the stock Ouya ROM and isn't in any 3rd party ROM out yet, either. So basically, you can't do what he says you can do by doing what he says to do.
This is clearly intended to get people to try and go to his stupid YouTube channel, which he links to at the end.
How about you get traffic and views by having good content on your channel, instead of polluting this forum with useless bull****?
Click to expand...
Click to collapse
To leave my feedback on a clearer note. YES! Yes you can listen to music from a storage device as long as the device is read as a USB Mount! This has been confirmed by others in the official Ouya Forums!
Google Play Music is for cloud streaming. And for any other read device!
dully79 said:
You also need googleloginservice.apk and googleservicesframework.apk otherwise you cannot sign into your google account to sync your library.
This has also been posted here:
http://forum.xda-developers.com/showthread.php?t=2291320
Also i would have classed this thread as general and not development.
Click to expand...
Click to collapse
Oops, my bad man, all credit goes to you if I took your method.
People cry a out signatures, there's no need for one! I love my community and will stand up for it!
This thread was your fourth post on XDA, at least on that account.
It is not actually a Development post and contains basically nothing that anyone in the Dev section wouldn't already know ("Hey bro, if you want to put an app onto your system you can copy & paste it into /system/apps! This makes it a system app! Oh wow!")
Then you link to your YouTube channel and ask people to go to it.
All of these things together made you seem like a SPAMmer. If you're not, sorry about that, but your post is still in the wrong forum and doesn't actual contain useful or new information. The fact that a much better thread explaining how to do what you posted about exists (in the correct forum no less) is just icing on the cake.
DivinityCycle said:
This thread was your fourth post on XDA, at least on that account.
It is not actually a Development post and contains basically nothing that anyone in the Dev section wouldn't already know ("Hey bro, if you want to put an app onto your system you can copy & paste it into /system/apps! This makes it a system app! Oh wow!")
Then you link to your YouTube channel and ask people to go to it.
All of these things together made you seem like a SPAMmer. If you're not, sorry about that, but your post is still in the wrong forum and doesn't actual contain useful or new information. The fact that a much better thread explaining how to do what you posted about exists (in the correct forum no less) is just icing on the cake.
Click to expand...
Click to collapse
That's fine, I just didn't want you to take me as a spammer, I didn't intend to.
I didn't know where to post this at that.
I've got multiple things done that people are still asking about and I was just trying to knock this one out of the way.
People cry about signatures, there's no need for one! I love my community and will stand up for it!

Possible way of bypassing MSM tool verification?

Hello everyone!
So today something that could potentially let users flash/unbrick their phones using the current MSM Download tool came to my mind.
I'm also very sorry if this is the wrong place for this, i'm new to xda.
So as you might know for Realme phones there are people who have authorized account out there and once you pay them they will connect to yoprur computer and then start flashing ocess, online with no verification. I even tried getting my phone flashed but due to them not flashing twice if one package doesn't work my device was bricked (I have A.xx variant and i tried getting B.xx flashed) and i had to send to service center to wait for unbricking process which took over a month, yes you heard it right! They couldn't even repair it with software flashing so they had to replace the whole motherboard.... At least i'm grateful i didn't have to pay for motherboard replacement and it was considered in-warranty.
So yes, again let's go back to our topic and my idea.
What came to my mind is, what happens if i create a virtual machine using VMWare, get an authorized account to login to the application then cut connection of that TeamViewer connection and immediately "Save current state of VM" after someone logs in. Would that account be still logged in? This VM can also be shared with it's own folder as far as I know too! Is there a verification after you login to the app? As far as i know there's only a verification while you login to the app and there isn't anything afterwards which i think is also illogical to do so.
I know and i'm aware Realme can patch this possible "vulnerability" overnight because on the server side, literally everything depends on them (I really hope they don't) but thanks to their habit of not caring about development, releasing broken kernel sources and not even providing official bootloader unlock (even after nearly a year in my case) has come to a point where it's irresistably annoying for me so i decided to think of possible ways to maybe bypass the verification part of the application so that they can flash a firmware as their liking.
It's Android! It had to be free! It had to be allowed to do these type of stuffs to your Android phone! Why? Why? Why Realme?!
Edit: This is the exact same post of my post on Android General. After posting i saw there were nearly no replies and activity so i decided to post the same text as well.
daeMysterious said:
Edit: This is the exact same post of my post on Android General. After posting i saw there were nearly no replies and activity so i decided to post the same text as well.
Click to expand...
Click to collapse
THREAD CLOSED as duplicate of https://forum.xda-developers.com/t/...-of-msm-download-tool-of-realme-oppo.4209135/
XDA Forum Rules (excerpt):
...
5. Create a thread topic or post a message only once, this includes external links & streaming media.
As a large forum, we don't need unnecessary clutter. You're free to edit your message as you like, so if you do not receive an answer, revisit your message and see if you can describe your problem better. Not everyone is online at the same time so it might take a while before you receive an answer.
You can bump your unanswered question once every 24 hours
Duplicate threads and posts will be removed
Always post in an existing thread if a topic already exists, before creating a new thread.
Use our search function to find the best forum for your device.
Links to an external source are only allowed if relevant to the topic in hand. A description must be included, no copy & pasting from the original source.
Self-promotion is forbidden, this includes blogs, social media and video channels etc. Random links will be removed.
...
Click to expand...
Click to collapse

Categories

Resources