Database Develop

[Request] Hardening AOKP security?

Dear Developers of AOKP,
first of all: Thank you so much for this awesome ROM which I am using since 3 years by now! Since security has been in the media periodically for quite some time now, I feel like this is the right time to ask: Would you please harden AOKP to include the very latest security enhancements? What bothers me in particular is that it seems even though so much development is being done, vulnerabilities like Mempodroid still seem to be present in the latest builds (using AOKP 4.4.2 for M7UL). A good way to check this is to use the X-RAY Security Scanner. Please fix these vulnerabilities.
Furthermore, would you please implement a feature to toggle hardening like triggered with the app SecDroid? This neat little project unfortunately has been abandoned, but yet the idea should be clear. The developer of SecDroid also released a Guide on how to harden Android. Maybe AOKP can use the Source of SecDroid somehow?
For me, AOKP always will be the best ROM out there. I can proudly say that having donated to the project makes me feel great and I'm looking foward to see AOKP implementing the latest and greatest security enhancements out there. Thank you ahead!

SecUpwN said:
Dear Developers of AOKP,
first of all: Thank you so much for this awesome ROM which I am using since 3 years by now! Since security has been in the media periodically for quite some time now, I feel like this is the right time to ask: Would you please harden AOKP to include the very latest security enhancements? What bothers me in particular is that it seems even though so much development is being done, vulnerabilities like Mempodroid still seem to be present in the latest builds (using AOKP 4.4.2 for M7UL). A good way to check this is to use the X-RAY Security Scanner. Please fix these vulnerabilities.
Furthermore, would you please implement a feature to toggle hardening like triggered with the app SecDroid? This neat little project unfortunately has been abandoned, but yet the idea should be clear. The developer of SecDroid also released a Guide on how to harden Android. Maybe AOKP can use the Source of SecDroid somehow?
For me, AOKP always will be the best ROM out there. I can proudly say that having donated to the project makes me feel great and I'm looking foward to see AOKP implementing the latest and greatest security enhancements out there. Thank you ahead!
Click to expand...
Click to collapse
A few of us are interested in this and we'll see what can be done

BytecodeMe said:
A few of us are interested in this and we'll see what can be done
Click to expand...
Click to collapse
Awesome! What are you planning to do?

SecUpwN said:
Dear Developers of AOKP,
first of all: Thank you so much for this awesome ROM which I am using since 3 years by now! Since security has been in the media periodically for quite some time now, I feel like this is the right time to ask: Would you please harden AOKP to include the very latest security enhancements? What bothers me in particular is that it seems even though so much development is being done, vulnerabilities like Mempodroid still seem to be present in the latest builds (using AOKP 4.4.2 for M7UL). A good way to check this is to use the X-RAY Security Scanner. Please fix these vulnerabilities.
Furthermore, would you please implement a feature to toggle hardening like triggered with the app SecDroid? This neat little project unfortunately has been abandoned, but yet the idea should be clear. The developer of SecDroid also released a Guide on how to harden Android. Maybe AOKP can use the Source of SecDroid somehow?
For me, AOKP always will be the best ROM out there. I can proudly say that having donated to the project makes me feel great and I'm looking foward to see AOKP implementing the latest and greatest security enhancements out there. Thank you ahead!
Click to expand...
Click to collapse
Even if every vulnerability fix was included in source, (for now) it will still not be secured. Unless you compile your own builds with a different platform key, your builds will not be secure. This applies to nearly every AOSP-based custom ROM.
We've talked about it, and we might implement something for milestone releases. But security is a huge huge problem to take on with custom ROMs and there are a lot of heads to the dragon to take down
Sent from my HTC One using Tapatalk

Romanbb said:
We've talked about it, and we might implement something for milestone releases. But security is a huge huge problem to take on with custom ROMs and there are a lot of heads to the dragon to take down.
Click to expand...
Click to collapse
True point. But I'm sure that folks who can add unicorn sparkles to a ROM will even discover and implement some really cool security enhancements & fixes for the already known vulnerabilities. After all, this is a suggestion and to be seen without pressure. Waiting for your next awesome release for M7UL, @Romanbb! You're doing a great job!

SecUpwN said:
True point. But I'm sure that folks who can add unicorn sparkles to a ROM will even discover and implement some really cool security enhancements & fixes for vulnerabilities. After all, this is a suggestion and to be seen without pressure. Waiting for your next awesome release for M7UL, @Romanbb!
Click to expand...
Click to collapse
For sure. I'm definitely not against security enhancements by any measure.

Why isn't it possible to create a tool that can repackage ROMs with custom keys, say, using a Windows computer or Xposed Framework?
Also, isn't Mempodroid what allows us to give apps SU permission?

pan.droid said:
Also, isn't Mempodroid what allows us to give apps SU permission?
Click to expand...
Click to collapse
No. Mempodroid is an EXPLOIT and a vulnerability, please don't mistaken it with SuperSU.

SecUpwN said:
please don't mistaken it with SuperSU.
Click to expand...
Click to collapse
Okay. Just so long as you don't *mistake* 'SU' with SuperSU=)

AOKP Kitkat Rom
The Android Open Kang Project (AOKP) team has released nightly builds for a number of Android running device which bring Android 4.4.2 KitKat update for these devices. One such build is also available for Sony Xperia Z, which runs Android 4.3 Jelly Bean.

gteknet said:
The Android Open Kang Project (AOKP) team has released nightly builds for a number of Android running device which bring Android 4.4.2 KitKat update for these devices.
Click to expand...
Click to collapse
As you might have guessed, AOKP runs through all my veins. I'd probebly never use anything else, if not forced to. As soon as a new nightly is out, I'm using it. But what exactly is the AOKP team doing to make their build more secure?
One of the features that I'd LOVE to have would be encrypted calls between AOKP builds without having to be online or installing additional software. Would such be possible somehow?

Thread cleaned
I suggest several members use the ignore user option if they want to remain members on XDA
I will be keeping an eye on posting. Cut out the infantile crap or you will be removed
This is a development site, take your garbage to a social media site
Senior Moderator

@kennyglass123, thanks for cleaning it up. I really appreciate your effort. Unfortunately though, no member of the AOKP team has answered my initial question yet. Could someone please do so?

SecUpwN said:
As you might have guessed, AOKP runs through all my veins. I'd probebly never use anything else, if not forced to. As soon as a new nightly is out, I'm using it. But what exactly is the AOKP team doing to make their build more secure?
Click to expand...
Click to collapse
Sadly, this question is still open. Since I'm using M7 (Gerneric GSM), maybe @Whitehawkx can answer this?

[Q] cyanogenmod or pure Android?

what changes in ROM CyanogenMod, there are improvements? what it really changes the pure android, performance, better battery or just theme?

It adds various features to stock android.Performance/battery depend on how stable the release is.For more info you could go to http://www.cyanogenmod.org/about

Modifications might bring about improvements, but they can also bring about bugs.

Well I think that depends on how long I need to wait before xposed could be used on lollipop
If it is in 3 month I think I will go with pure android
从我的 XT1058 上通过 XDA-FORUM 发送 powered by appyet.com

desperadoxzg said:
Well I think that depends on how long I need to wait before xposed could be used on lollipop
If it is in 3 month I think I will go with pure android
从我的 XT1058 上通过 XDA-FORUM 发送 powered by appyet.com
Click to expand...
Click to collapse
Moto X stock ROM is not pure Android or close to AOSP like Nexus Devices. Custom ROMs like CM (CyanogenMod) are closer to pure Android than the one that comes with this phone. CM is not AOSP either even on a Nexus, they use a lot of code from CAF (Code Aurora Forums) to work on a lot of different devices. You can't compile the Moto stock ROM from source like you can AOSP or CM. It might look like stock Android but it's definitely not. Even if you flash CM now you can always go back to stock using mfastboot.

I am on CM12 the last 6-7 days. I love it! Battery life in my case has improved. Maybe cause a few moto apps were consuming resources and now are not present. I know that voice control and active display are not working but the first I don't use and the for the second I have my moto 360 to catch my notifications. I suggest you to give it a go. CM12 runs very smooth on my moto x! I don't think I am going back to stock...

Oxygen OS 3.5.1 Community Build Released

For those of you already running thecommunity build of OxygenOS 3.5, you will receive an OTA to the community build (3.5.1) very soon. For those of you who are not running the first community build, you can flash 3.5.1viathe links below. Afterwards, you'll continue to get future OTAs delivered directly to your device.
This new version includes:
Changelog
Accent color added
Battery icon customization added
LED customization added (Display)
sRGBmode added (Display > Screen mode)
Night mode added
Dark mode theme optimized
General bug fixes
Please help make OxygenOS even better by filling out the opinion survey and/or the bug report form.
https://goo.gl/forms/qFsrbyvxRbmjQnIi1 - Feedback on UI/UX
https://goo.gl/forms/l5etNY41zhmYI6tk1 - Bug Reporting Sheet
Visit the download page here: http://downloads.oneplus.net/oneplus-3/oneplus_3_oxygenos_3.5.1_community_build/
Direct Download Link :
http://oxygenos.oneplus.net.s3.amaz...6_OTA_002_all_1608301010_6ee96e2225c34a71.zip
Google Drive Link :
https://drive.google.com/file/d/0BwuhxALNsjtpbVVsVnV3YjJQdXM/view?usp=sharing

Dark mode theme optimized... full black?

Mr.Ronik said:
Dark mode theme optimized... full black?
Click to expand...
Click to collapse
Yep, can confirm, now dark mode has the black background back

Can someone confirm me whether the dpi issue Is fixed or not?

Dont want to sound rude, but is there a point for one plus updating the 3.5.x builds?Rather than updating MM i think they should work on Android N .

shalom06 said:
Dont want to sound rude, but is there a point for one plus updating the 3.5.x builds?Rather than updating MM i think they should work on Android N .
Click to expand...
Click to collapse
This is a community build, not final or the like. They can't have two teams working on a ROM?
Sent from my ONEPLUS A3000 using Tapatalk

Had a quick look at the survey and spotted this... please tell me they are not thinking about adding more crap into their OS?
Have you installed Clean Master? *
If so, which feature do you use the most?
Clean Junk
App Lock, protect your privacy
Battery saver, hibernate apps
Antivirus
Phone Boost
Notification Management
Uninstall, backup and move your apps
I don't use it
I really do not like where this is going.

darkjedi said:
This is a community build, not final or the like. They can't have two teams working on a ROM?
Sent from my ONEPLUS A3000 using Tapatalk
Click to expand...
Click to collapse
Honestly? I don't think so. Waste of money.
If they're working on a MM build, i suppose it will take veeeery long time before we can see something based on Android 7.

Fentadroid said:
Honestly? I don't think so. Waste of money.
If they're working on a MM build, i suppose it will take veeeery long time before we can see something based on Android 7.
Click to expand...
Click to collapse
Or just flash CM14 when the nightlies start.

Fentadroid said:
Honestly? I don't think so. Waste of money.
If they're working on a MM build, i suppose it will take veeeery long time before we can see something based on Android 7.
Click to expand...
Click to collapse
Soon cm will provide android N for us in the mid or start of Oct. So no worries

Still can't find a way to get embedded battery percentage hope this is something they can add back in

3.5.1 analysis
is any one here flashed 3.51 yet? how about performance overall, battery? ui improvements? else?
Please report

daleski75 said:
Or just flash CM14 when the nightlies start.
Click to expand...
Click to collapse
I know but... Only if you don't mind pictures quality....

given the direction OOS is heading (w/ the community builds) I'd prefer to stay on CM, just hoping OP drops the OOS camera blobs like Carl Pei said they would so we can have equal quality photography on custom ROMs soon
sad since OOS 3.2.4 is pretty amazing as is.

Fentadroid said:
Honestly? I don't think so. Waste of money.
If they're working on a MM build, i suppose it will take veeeery long time before we can see something based on Android 7.
Click to expand...
Click to collapse
They already have two teams working on ROMs. One for OOS and the other for H2OS. This is probably done by the H2OS team. If you don't like it, don't use it and stick with 3.2.4 since this is just a community build.
Sent from my ONEPLUS A3000 using Tapatalk

darkjedi said:
They already have two teams working on ROMs. One for OOS and the other for H2OS. This is probably done by the H2OS team. If you don't like it, don't use it and stick with 3.2.4 since this is just a community build.
Sent from my ONEPLUS A3000 using Tapatalk
Click to expand...
Click to collapse
At some point though they will deprecate 3.2.x and 3.5.x will take over with all of the (possible) value added software we love like cleaner master!.
Very thankful we have a fantastic dev community here who will strip out whatever crap OP put in.

daleski75 said:
At some point though they will deprecate 3.2.x and 3.5.x will take over with all of the (possible) value added software we love like cleaner master!.
Very thankful we have a fantastic dev community here who will strip out whatever crap OP put in.
Click to expand...
Click to collapse
There's no indication that they'll do that. But...you always have the option to install another ROM instead. OR as you said, strip **** out you don't want. But take into account that they're a Chinese company, with a vast majority of their user base probably is in China, so they want to cater that user base. I don't mind the visual aspects of 3.5, but you're right that more bloat is bad.

PSA if anyone hasn't already tried, installing a Substratum theme causes the phone to get stuck at 1+ logo upon reboot
Sent from my OnePlus One using XDA Labs

darkjedi said:
There's no indication that they'll do that. But...you always have the option to install another ROM instead. OR as you said, strip **** out you don't want. But take into account that they're a Chinese company, with a vast majority of their user base probably is in China, so they want to cater that user base. I don't mind the visual aspects of 3.5, but you're right that more bloat is bad.
Click to expand...
Click to collapse
Running my own builds of CM13 here and don't think I will GI back to stock.

stryker09 said:
PSA if anyone hasn't already tried, installing a Substratum theme causes the phone to get stuck at 1+ logo upon reboot
Sent from my OnePlus One using XDA Labs
Click to expand...
Click to collapse
Hi!, you can open File Manager in TWRP and delete Substratum's APK and reboot phone

Now that official 7.1.1 is out, how many of you are still on Marshmallow?

I'm still running M, the biggest two reasons are for CMTE and the xposed framework. Now that official 7.1.1 was released, just wanted to do a quick poll and see how many people are still on M vs N (and maybe we have some L users too lol)

I'm on LOS. Xposed isn't the most important thing to me, and I'm waiting for CMTE to come out to Lineage. gotta be on that bleeding edge

N now:victory:

mituzora said:
I'm on LOS. Xposed isn't the most important thing to me, and I'm waiting for CMTE to come out to Lineage. gotta be on that bleeding edge
Click to expand...
Click to collapse
Then being on that rom is the last thing you want.
Not only are they the slowest to issues updates but they also are gonna have issues as CMTE is owned by CM as it is not all open source. So this might not happen. It was most likely sold along with the CM name.

zelendel said:
Then being on that rom is the last thing you want.
Not only are they the slowest to issues updates but they also are gonna have issues as CMTE is owned by CM as it is not all open source. So this might not happen. It was most likely sold along with the CM name.
Click to expand...
Click to collapse
Oh? I wasn't aware that cmte wasn't fully open source. Well, I don't stick on the same ROM very long anyways, and now that 7.1.1 is actually out, I'll probably switch to a stock/AOSP based ROM, and go with substratum.

mituzora said:
Oh? I wasn't aware that cmte wasn't fully open source. Well, I don't stick on the same ROM very long anyways, and now that 7.1.1 is actually out, I'll probably switch to a stock/AOSP based ROM, and go with substratum.
Click to expand...
Click to collapse
I wasn't aware either I won't hold out hope any longer for seeing the Nougat version then...

Donating N5 to my Dad. Keep on stock Marshmallow or upgrade to Oreo?

As said in the title, I'm giving my N5 to my father. Is it best to flash stock Marshmallow or try something a little speedier and secure but not as stable? What are your thoughts?
Thank you for all your recommendations.

Personally like marshmallow better because I think battery life longer.
Sent from my LGLS992 using Tapatalk

Keep marshmallow or upgrade to nougat, LOS 14.1

if you want to do a little work before you give it to him, this is my suggestion. this is what i did for a long time, before i started really messing with my N5. (instructions for clarification, you probably already know how this stuff works.)
TL;DR: flash stock M -> root -> remove junk [-> unroot]
ive never actually unrooted so i dont know the process, but if you feel its a good idea...
INSTRUCTIONS:
- download and flash stock Android M from the google stock ROM collection. (hammerhead).
- wait until it reaches Startup Wizard and then reboot into bootloader.
- flash TWRP recovery.
- reboot into bootloader again.
- from recovery, flash SuperSU to gain root.
- reboot into system.
- after setting up the phone, disable first and then remove (titanium backup is my choice) any unnecessary app.
note: make sure the app is disabled. sometimes after you hit the disable button it just uninstalls updates without actually disabling it. the app will say Disabled in the app list.
note: you can filter installed apps in titanium backup by Frozen status so the disabled ones are easier to find.
- reboot.
- if youd like, here you could unroot.
- reboot and enjoy.
REMINDER:
removing certain apps can prevent basic functionality from working properly. trial by fire, i know for a fact that the system cannot run without the Google app installed. Google Play Services is another necessary one.
i feel marshmallow was a fantastic generation of android. i was always learning new things i could do. also, as a human with a father i feel he would benefit more from stability than from extra performance or features.
have fun, and be safe.

Stick with marshmallow or, if you want to get rid of Google spying, go to lineageos 14.1.
What are you getting for yourself?

maybeme2 said:
Stick with marshmallow or, if you want to get rid of Google spying, go to lineageos 14.1.
What are you getting for yourself?
Click to expand...
Click to collapse
Two years ago I bought a OnePlus 3T, and I have been using a Pixel 2 for a year now. I wish Google released an improved Nexus 5. There are no good small phones anymore.

redsmith said:
Two years ago I bought a OnePlus 3T, and I have been using a Pixel 2 for a year now. I wish Google released an improved Nexus 5. There are no good small phones anymore.
Click to expand...
Click to collapse
I guess the OnePlus 3T didn't do it for you...
How does the Pixel 2 compare with the nexus 5?
I'm using lineageos 14.1 with MicroG, Xprivacylua, and AFWall on my N5 (no Google apps) and would probably do the same with a new phone.

Is he going to be using it as his main cell phone? If you need stability the best bet is likely LineageOS 14.1
Personally, I'm on darkrom 7.1.2 (& elementalx 8.14 kernel) for more than a year now as I need a stable phone but LOS is more up-to-date.

maybeme2 said:
I guess the OnePlus 3T didn't do it for you...
How does the Pixel 2 compare with the nexus 5?
I'm using lineageos 14.1 with MicroG, Xprivacylua, and AFWall on my N5 (no Google apps) and would probably do the same with a new phone.
Click to expand...
Click to collapse
Actually the OP3T is wonderful. The only reason I got a Pixel is because my wife's N5 died, so I gave her the OP3T and then I bought myself a Pixel 2. Like most of us, I'm the unofficial smartphone dealer in the family...
The Pixel 2 is great. The camera is unrivaled and stock Android is lightning fast as always. That said, I wish it was the same size as the N5. No current smartphone can match the ergonomics of the late N5. If I were Google, I'd release the N5 with the same exact dimensions, OLED screen, current camera tech, bigger battery, and stereo speakers. I'd buy the **** out of that phone.