(QUESTION) Is SP Flash Tool a virus? - Off-topic

Hello i'm gonna make a question and it's "SP Flash Tool is a virus"
I scanned the file "flash_tool.exe" with VirusTotal and it says "2 security vendors and no sandboxes flagged this file as malicious"
And the security vendors are "ClamAV" and Google, is a false positive or a small virus?

YoshiTheGamerYT said:
VirusTotal and it says "2 security vendors and no sandboxes flagged this file as malicious"
Click to expand...
Click to collapse
Personally, I wont really bother much (that starts for me at 3 or even 5 warnings) but doesn't hurt to check back with the dev/forum where you got it.

Thank you

Examine the details and relationships.
Error on the side of caution, and if installed do not let it download anything, firewall block it.
The amount of damage a malicious script alone can do can be significant.

blackhawk said:
Examine the details and relationships
Click to expand...
Click to collapse
Good idea, I try that usually but do you have any guidance what to look for?
Just dropped in something from my virus chest
https://www.virustotal.com/gui/file...edfb20e4192039c4bb4391a244f693569a7/relations
I cannot draw more info from that, aside from VT saying it's bad.

SigmundDroid said:
Good idea, I try that usually but do you have any guidance what to look for?
Just dropped in something from my virus chest
https://www.virustotal.com/gui/file...edfb20e4192039c4bb4391a244f693569a7/relations
I cannot draw more info from that, aside from VT saying it's bad.
Click to expand...
Click to collapse
Lol, Creation of an Executable by an Executable, blacklisted IP's, etc
That thing's a whole damn party mix...
I consider this one high risk. I run it firewall blocked. It's not near as evil as the one you posted Risk vs reward; in this case running my N10+ without be much more labor intensive and harder to secure. Otherwise it never be loaded...

Related

April Fool's Worm (READ!!!)

Please read this fully, I am going to try to make sure everyone's PC's stay safe and unharmed for the events of tomorrow which might occur.
If you haven't seen already on the news or internet, there is a rumor going around about a virus called April Fool's Worm, A.K.A "Conflicker.C."
This worm not only erases your hard drive if your infected, but also steal your usernames and passwords and other valuable data off your hard drive.
This is an confirmed report and seems to be just a rumor, but everyone is preparing for the worse. Anti-virus's are not ready for this worm at all. They do not have the codes and do not know the source of this worm, but most are going to be on the clock all day tomorrow ready to get the codes and sites to prevent as much of the attacks as possible.
Microsoft has released that they have no idea whether or not the worm will be deadly or just a harmless pop-up that says April Fools, or even if there will be a worm. Like I said they are preparing for the worse.
They are asking for everyone to make sure all of their Microsoft Updates are up to date and to make sure your anti-virus's are up to date as well. The virus could strike at anytime after twelve o'clock midnight tonight and for twenty four hours afterward.
Microsoft says the best bet is to disconnect your PC's from the internet or just shut them down for all of April 1st.
Sources:
http://www.eetimes.com/news/latest/showArticle.jhtml?articleID=216402054
http://www.cnn.com/2009/TECH/03/31/april.fools.computer.virus/
http://www.symantec.com/norton/theme.jsp?themeid=conficker_worm&inid=us_ghp_link_conficker_worm
http://tech.yahoo.com/blogs/null/128643
Remember: MAC's and Linux cannot be infected, so no worries here
Stay safe and stay protected,
Whosdaman
(Check back for more updates on what's going on and sites to stay away from. Also what anti-virus's have been updated to prevent the attack.)
Thanks for the info
Your welcome, the sad thing is, XDA is doing maintance tomorrow....I hope they kick this all the way offline because they might get wiped clean if not
What about our ppc?are they vunerable ?I read that the virus may already be in sleep mode on peoples pc which wll spring to life ion the 1st.Can the virus be transferred via active/sync? thanks.
fallenmonk said:
What about our ppc?are they vunerable ?I read that the virus may already be in sleep mode on peoples pc which wll spring to life ion the 1st.Can the virus be transferred via active/sync? thanks.
Click to expand...
Click to collapse
it might be, they have no clue right now
This worm really sucks. I had to spend a good 2 hours today making sure my systems are all secure and up to date. It's good that you posted this for the forum though.
Maybe it's good that this is happening though; my friend's company, and many others, seem to be taking much more interest in patching their systems now.
@fallenmonk, I doubt it. Conficker-C will change its primary goal tomorrow, but I don't think that it will infect Pocket PCs. What I think will happen will be some kind of distributed DoS attack on a major corporation(or corporations) or on Internet backbones. I think infecting millions of PCs just so you could infect a minuscule amount of Pocket PCs would be kind of pointless.
@whosdaman, I believe that at least AVG and McAfee are now prepared to remove Conficker with and on demand scan.
And even though it could turn out to simply be something more harmless, I am (and so should you) preparing for another SQL Slammer.
Another good news link
http://www.msnbc.msn.com/id/29956746/
Dave
I got it in december, my hard was wiped, I just reinstalled windows.
hopefully my symantec/norton security sftw is on top of this bad bug!
galaxys said:
hopefully my symantec/norton security sftw is on top of this bad bug!
Click to expand...
Click to collapse
Yeah
You mate have a good protection!
I´m also well protected using kaspersky 09
A good theme for a poll isn´t it?
"What virus protection program are you using?"
Cheers,
Whosdaman said:
This is an confirmed report and seems to be just a rumor, but everyone is preparing for the worse. Anti-virus's are not ready for this worm at all. They do not have the codes and do not know the source of this worm, but most are going to be on the clock all day tomorrow ready to get the codes and sites to prevent as much of the attacks as possible.
Click to expand...
Click to collapse
A virtual non-happening. I don't know what is more amusing to the hackers, to hack a worm that actually causes havoc, or to spread rumors about what is going to happen and then sitting back as the rumors proliferate and laugh at the ensuing false panic.
Microsoft has released that they have no idea whether or not the worm will be deadly or just a harmless pop-up that says April Fools, or even if there will be a worm. Like I said they are preparing for the worse.
They are asking for everyone to make sure all of their Microsoft Updates are up to date and to make sure your anti-virus's are up to date as well.
Click to expand...
Click to collapse
At least M$ and the anti virus sellers aren't playing it to the hilt to sell more software.
Microsoft says the best bet is to disconnect your PC's from the internet or just shut them down for all of April 1st.
Click to expand...
Click to collapse
Your welcome, the sad thing is, XDA is doing maintance tomorrow....I hope they kick this all the way offline because they might get wiped clean if not
Click to expand...
Click to collapse
Thanks XDA for keeping things in perspective and not falling all over yourselves on this.
Thanks for the GHOST technique.
Though my pc dosen't get infected by virus, I always reinstall the system with GHOST,which takes me 3 mins to rebulid
It seems over 1 million PC's were infected by days end, I have AVG but have not used my PC at all today....I also have Bitdefender, Kaspersky, McAfee, and Norton...all the full versions so i'll test them out and see if they have the protection now
Bitdefender FTW!!! Rated #1 Anti-Virus and Internet Security for 2009

Anti-Virus for WP7

Being certified by Microsoft and specializing in Internet security, I know that Windows is the most targeted operating system for viruses, trojans, malware etc. Surely there must be an anti-virus by now for WP7.
After doing a search in the Market Place I didnt find any. There were anti-virus applications for WM6x, Iphone, Android and even Symbian but what about WP7. My guess is it wont be long before we need some sort of anti-virus protection for our devices. Picture this, you see a nice application from an independent website which wets your whistle. You install it by Toms Xap installer and your phone goes off. You try to restart but it refuses. The boot screen comes up with a message saying you are a victim of a virus which has now rendered your phone into a very expensive paper weight. It is possible and installing Xap applications through Toms Xap installer makes us even more exposed to malicious applications. WP7 Market Place scans applications and games to make sure you are protected. I'm not trying to scare people here so please dont get me wrong but I am trying to open peoples eyes and urge you to be cautious when installing applications which are not from WP7 Market Place or Xda.
I thought I would create this threat for the Xda community to share their views on this.
Personally I wont bother, its up to the users. Its all documented on Google.
see here: http://www.techgazing.com/2010/01/11/do-i-need-an-anti-virus-for-my-phone/
Russ
I would have to say that is a very interesting read. Nothing in there were mentioned about WP7. All I am saying is to be careful. That article claims there are 420 mobile phone viruses and most targeted is Symbian. This is because Symbian have been out longer than Android, Iphone and WM. Symbian certainly bought out more phones over the years so this would explain why they were targeted.
The case where the anti-virus company actually had a virus and passed it on through updates was shocking. That should never have happened and was very negligent of the anti-virus company.
Although people may think it will never happen to them, for the occasional few it does. People take out mobile phone insurance but how any people claim insurance? Why pay money for insurance when you dont take measures to backup your data and protect your device?
The internet is full of traps and data collecting nasties and you never can be sure that what ever you are downloading is 100% safe. Dont you think better to be safe than sorry should be a moto well remembered?
What you are missing is the fact that WP7 apps run completely sandboxed - they cannot reach out of their own little world.
Sure, installing a homebrew app which includes native code may circumvent this but I'd say that's the risk you take when geeking around with your phone
I think an antivirus-software is a totally useless investion of money for now.
You say, windows is the most targetted OS for viruses. Yeah, for sure, because most of people use it.
But its another thing if you look onto the mobile operating systems. The users are spread in 3-4 groups there: WM, Android, iOS and maybe the Blackberry OS.
So the virus-programmers need to choose first, for which platform they are going to write some malicious code. They are never gonna hit that much users as they would hit with Windows for Desktop.
I never heard of any popular virus for any mobilephone including WM-phones.
Secondly, WP7 is a totally new OS. For now, the count of people using this OS is way lower than that of Android and iOS - Users.
So why should hackers choose WP7 especially now as their victim?
My opinion for my last 5 years of using mobile operating systems is: You dont need it.
You have the same ability for sideloading apps with android and iOS too for now and they are much longer on the market than the new WP7 and I never heard of any viruses.
Anti-virus software is a complete waste of money, i dont use it on any of my 3 windows computers or any phones...
mideel said:
I never heard of any popular virus for any mobilephone including WM-phones.
Click to expand...
Click to collapse
Norton and Kaperski have both had anti-virus on Symbian and WM
scbrother said:
Anti-virus software is a complete waste of money, i dont use it on any of my 3 windows computers or any phones...
Click to expand...
Click to collapse
OMG are you trying to commit online suicide lol
AndHD2 said:
Norton and Kaperski have both had anti-virus on Symbian and WM
Click to expand...
Click to collapse
read my post again. I didnt mean anti-virus-software, I meant viruses!
mideel said:
read my post again. I didnt mean anti-virus-software, I meant viruses!
Click to expand...
Click to collapse
I think I had a Homer Simpson moment then.....Duh lol
i do not think antivirus on Phone is necessary. it will rather slow down stuff.
There is only 1 (ONE) existing virus for WM 6.x. Funny enough it was created by Kaspersky in order to demonstrate that viruses are possible and ppl should install AV software
Viruses for WP7 are almost useless as apps are completely sandboxed. Same thing with iOS. Only Android offers enough freedom for malicious code and then again only if rooted.
AndHD2 said:
Being certified by Microsoft and specializing in Internet security, I know that Windows is the most targeted operating system for viruses, trojans, malware etc. Surely there must be an anti-virus by now for WP7.
After doing a search in the Market Place I didnt find any. There were anti-virus applications for WM6x, Iphone, Android and even Symbian but what about WP7. My guess is it wont be long before we need some sort of anti-virus protection for our devices. Picture this, you see a nice application from an independent website which wets your whistle. You install it by Toms Xap installer and your phone goes off. You try to restart but it refuses. The boot screen comes up with a message saying you are a victim of a virus which has now rendered your phone into a very expensive paper weight. It is possible and installing Xap applications through Toms Xap installer makes us even more exposed to malicious applications. WP7 Market Place scans applications and games to make sure you are protected. I'm not trying to scare people here so please dont get me wrong but I am trying to open peoples eyes and urge you to be cautious when installing applications which are not from WP7 Market Place or Xda.
I thought I would create this threat for the Xda community to share their views on this.
Click to expand...
Click to collapse
Apparently the certificate and specialization doesn't help much when there is lack of reading. Sorry, you've started your post with that sentence and it only makes you look silly.
If you've read even ONE review of this OS you'd realize that it lacks multitasking! That saidb there is no possibility (yet) of an application (AV) running in the background to check files/processes. Besides this OS is so closed you can't even download unsupported files! Today I couldn't download a simple .rar archive - it said that WP7 doesn't support this filetype
As for sideloading applications it's not officially supported by MS so it's just one of the "risks" advanced users need to cope with as Microsoft is checking each application before posting it on the marketplace. Plus the applications written are all in managed code and we don't even have access to system functions. Even simple functions like reading the battery percentage are unsupported.
So there is technically an extremely low risk of viruses in this pretty much closed OS.
I can't imagine AV's impact on already poor battery performance on HD2 WM7.
P$YCH0 said:
Apparently the certificate and specialization doesn't help much when there is lack of reading. Sorry, you've started your post with that sentence and it only makes you look silly.
Click to expand...
Click to collapse
Agreed. And most of us are used to flashing a new ROM every week, which is all you'd really need to do to recover from a 'virus'. I'm struggling to see what the danger is, especially on WP7.
Poor battery performance?
iBimmer said:
I can't imagine AV's impact on already poor battery performance on HD2 WM7.
Click to expand...
Click to collapse
What exactly are you doing to cause poor battery performance with WP7 on your HD2? It is probably the best battery life I have had on my phone other than an energy rom.
whycali said:
What exactly are you doing to cause poor battery performance with WP7 on your HD2? It is probably the best battery life I have had on my phone other than an energy rom.
Click to expand...
Click to collapse
i think most ppl who say something about poor battery perfomance on wp7 hd2 never used push mail on their phones
whats more likely is that you get a virus on you PC that trashes your phone on flash.
ah the good old days when virus wiped BIOSs and totally ruined your day.
I think its highly unlikely anything could happn on the device its self for the reasons mentioned above, worst case you could hard reset, unlike PCs most stuff is backed up, hopefully everything soon (Myphone please MS!!) and it takes a few min to reinstall, doing the same on your PC would mean a day watching movies whilst you set it all back up again.
Obviously this is a pretty safe OS, but if they do get something like Lookout Security I'll get it, simply for peace of mind.
virus/worm problem
I landed here after a search for antivirus for wp7. i use a htc hd7 chevron unlocked and over the last two days i experienced unwanted outgoing email on my live.com account. i use live.com account on the phone and also on PC via live.com and also using outlook connector...
how can i check which is affected with a virus - pc scan using avg shows clean. the unwanted emails go out apparantly when my pc is off - so is the virus on my wp7 or actually on live.com?
according to this post, there couldnt be a virus on wp7 is it??
any help/thoughts will be much appreciated.
TIA
I think my HD2/WP7 has something dodgy monitoring my actions as after I registered my debit card with the Market & made the first 79p payment for the XDA app I get a dodgy email to my Live email claiming to be from my bank saying there has been unusual activity with a html attachment.
This is a fake, but they new my bank and Live email address and the fact that I made some unusual activity: as in the 79p app.
WP7 is open somewhere!

[Q] Protect against dumps? Michigan: Police Search Cell Phones During Traffic Stops

Is it possible to implement some sort of block for this kind of system dump?
Slashdot link
Could it be as simple as leaving USB debugging off and using a pin/pattern lock? Or would it require something as complex as whole-disk (card) encryption like TrueCrypt?
It really depends..
First.. those kinds of articles do have a way of getting blown out of proportion.
I've heard a lot about what people "can" do only to find out that when you really start digging into it... they made false/misleading claims.
Although if the article is to be believed.. a password wouldn't do any good as you can read "defeats password protection."
Something along the lines of truecrypt would be a prerequisite..
Also.. there are some major legal problems.. like sensitive data on phones ranging from a frisky girlfriend/boyfriend to confidential patient information in a doctor/lawyers email..
Pull battery
If I have helped press thanks.
Without a warrant, what they are doing is against the law. To obtain a warrant they would have to specify what was being looked for and need to be reasonably confident the phone have evidence leading to prosecution of believed criminal offense.
Remember, Lawful and Legal are two entirely different things. So they may be searching phones unlawfully while legally within bounds.
Law = Immutable rule, you know them with out being told (ex, Do not steal, Do not kill)
Statute = Legislation given the force of law (ex. seat belt , any "rule" you must be told of)
Code = Legislation given the force of law by Corp. (ex. local code- dry counties, no smoking in city bars, must wear black shoes to work at walmart < lol )
Encryption will stop this. I don't see it being a problem though due to the fact nothing found will be usable in ANY court of law without having obtained a warrant. Know and use your rights, as they will continue to be taken away until "YOU" draw the line in the sand and say No More.
Also: This is not new tech, they been doing this for some time, had the capability at least. Agree with Snow_Fox.... it is blown out of proportion, but for other reason. Its not that they cant, its that at this time, it is not a rampant thing. From there do what you will ......
Agreed with everything said with regards to legality. However, our government seems to do a lot of things illegally. It seems that all a law enforcement person has to say is "terrorism" and they get a hall pass for anything.
Sent from my SAMSUNG-SGH-I897 using XDA App
I am just glad to see such responses to this.. We need to spread the word.
Maybe its time to create a website dedicated to educating people of the (what should be shocking and horrifying) loss of rights we seem to be having.
halfsoul said:
Agreed with everything said with regards to legality. However, our government seems to do a lot of things illegally. It seems that all a law enforcement person has to say is "terrorism" and they get a hall pass for anything.
Sent from my SAMSUNG-SGH-I897 using XDA App
Click to expand...
Click to collapse
Oh yes, I agree, they will/do. The thing is we need to be brave enough to stand up and so NO and "enforce our rights", or they will surely continue to walk all over the scared general population.
Also, it is clearly illegal. To search your home pc, a warrant must be obtained. To get you home phone records, a warrant must be obtained. To listen to your phone calls, a warrant must be obtained. To look at your photo album in your hall closet, a warrant must be obtained. To search the locked trunk/glove compartment of your vehicle, a warrant must be obtained.
Smartphones are comparable to all of the above combined into one.A warrant less search is definitely illegal and unlawful and a violation of rights. Hold some feets to the fire, learn to say NO, consequences will never be the same
Snow_fox said:
I am just glad to see such responses to this.. We need to spread the word.
Maybe its time to create a website dedicated to educating people of the (what should be shocking and horrifying) loss of rights we seem to be having.
Click to expand...
Click to collapse
There is a website called eff.org
but unfortunately most Americas are too distracted and really don't care!
I f#$%n care while most of the people i know, have no idea what is happeneing!
My view is humans get used to small changes but not big changes. What people don't realize is the changes to our rights is small and slow but one day WE WILL WAKE UP to a world of complete control and the idea of freedom won't even be comprehendable to future generations!
Maybe Big Brother is inevitable but thanks to terrorism, it has only accelerated the progression to Complete Control!
Sent from my ADR6400L
bulletproof1013 said:
Pull battery
If I have helped press thanks.
Click to expand...
Click to collapse
Or turn it off?
Human smugglers get around police being able to look at their phones by keeping the battery out of the phone
Sent from my SAMSUNG-SGH-I897 using XDA App
I don't think pulling the battery or turning it off is reasonable. If someone has hardware to do a dump, surely they can provide power and turn it on.
I'm looking for something more along the lines of disabling the usb port or encrypting the sd cards.
Sent from my SAMSUNG-SGH-I897 using XDA App
halfsoul said:
I don't think pulling the battery or turning it off is reasonable. If someone has hardware to do a dump, surely they can provide power and turn it on.
I'm looking for something more along the lines of disabling the usb port or encrypting the sd cards.
Sent from my SAMSUNG-SGH-I897 using XDA App
Click to expand...
Click to collapse
Power without a battery? Tell me how and we'll make trillions!
Added: If you're that worried about what someone can discern from your phone, you got bigger issues.
it is soo vague i think this is a conceptual project and not something being deployed, if it were in use there would be more details, does it communicate over cellular? wifi? bluetooth? usb? are gsm phones safe?, are cdma phones safe?
can it be done without the driver knowing about it? or is it a search you can refuse? can you protect against it by encrypting the sd card, the sdcard + /system + /data +/cache?
what security exploits does it use?
Sounds to me like a technology that is available and there is no evidence yet that it is being abused. Odd though that the article has obvious errors, stating that Michigan has no cell phone laws, as texting and driving will get you pulled over. This opens the door to more abuse by police than worrying about them illegaly searching my phone. All they have to do is see you looking at your phone and they can claim that you appeared to be texting, thus justifying the traffic stop. I in no way condone texting/driving but it seems that we have given the police free reign to pull anyone over virtually at will given the plethora of "primary" offenses.
cappysw10 said:
Power without a battery? Tell me how and we'll make trillions!
Added: If you're that worried about what someone can discern from your phone, you got bigger issues.
Click to expand...
Click to collapse
Please tell me you're joking. The micro usb cable provides power + data simultaneously, try it for yourself if you don't believe me. And freedom & privacy should be everyone's biggest issue -- at least, all Americans.
Dani897 said:
it is soo vague i think this is a conceptual project and not something being deployed, if it were in use there would be more details, does it communicate over cellular? wifi? bluetooth? usb? are gsm phones safe?, are cdma phones safe?
can it be done without the driver knowing about it? or is it a search you can refuse? can you protect against it by encrypting the sd card, the sdcard + /system + /data +/cache?
what security exploits does it use?
Click to expand...
Click to collapse
If you followed the links to read the articles you would see that it is already deployed and in use, hence the ACLU FOIA request.
According to Cellebrite's website here, the Captivate is by cable (screencap attached).
Not much info about the exploits' particulars, but here are some choice snippets from Cellebrite's site:
Superior handset support - Over 3,000 handset models supported, with monthly software updates for newly released devices prior to carrier launch. The system includes more than 85 data cables for connecting 95% of all handset models worldwide. Cellebrite has exclusive carrier agreements and works directly with cellular phone manufacturers to receive pre-production handsets prior to retail launch.
Complete extraction of mobile phone data - Contacts, SMS Messages, pictures, videos, call logs (dialed, received, missed), ESN/IMEI, audio files, and deleted SMS/Call History from the SIM/USIM.
Memory Dump - Complete dump of phone file system for select handsets, providing the ability to extract otherwise inaccessible files, and user passwords.
Click to expand...
Click to collapse
And here you can see it in action.
halfsoul said:
Please tell me you're joking. The micro usb cable provides power + data simultaneously, try it for yourself if you don't believe me. And freedom & privacy should be everyone's biggest issue -- at least, all Americans.
Click to expand...
Click to collapse
ACTUALLY you may want to try it yourself. the phone DOES NOT RUN OR MOUNT without battery. take out battery, plug it in, and dont post anything on xda until it mounts to your PC... I'll wait here for you...
If you Plug it in first and remove the battery it will run for 22 seconds then shut off (with official Samsung AC charger) and 4 seconds with aftermarket "USB" charging
bulletproof1013 said:
Pull battery
If I have helped press thanks.
Click to expand...
Click to collapse
Yeah, that's going to do a lot of good.
Surely if they are asking for the phone they will also either ask you to stop taking out the battery or if you have already done so, ask for the battery also?
In either case it is no different than simply refusing to give the phone. Either you get away with it because they are taking advantage of people being intimidated into giving them permission or they arrest you for refusing to give them the phone or the battery.
Even worse, taking the battery out just makes you look like a smartass if they see you doing it.
TRusselo said:
ACTUALLY you may want to try it yourself. the phone DOES NOT RUN OR MOUNT without battery. take out battery, plug it in, and dont post anything on xda until it mounts to your PC... I'll wait here for you...
If you Plug it in first and remove the battery it will run for 22 seconds then shut off (with official Samsung AC charger) and 4 seconds with aftermarket "USB" charging
Click to expand...
Click to collapse
You're right, I stand corrected.
jimk9 said:
Yeah, that's going to do a lot of good.
Surely if they are asking for the phone they will also either ask you to stop taking out the battery or if you have already done so, ask for the battery also?
In either case it is no different than simply refusing to give the phone. Either you get away with it because they are taking advantage of people being intimidated into giving them permission or they arrest you for refusing to give them the phone or the battery.
Even worse, taking the battery out just makes you look like a smartass if they see you doing it.
Click to expand...
Click to collapse
Exactly. Especially for those of us with cases.
In addition, this has broader application than just keeping your info private from authorities. What about if your phone is lost or stolen? You wouldn't have an opportunity to pull the battery.
but im sure if they have a dump computer, it wouldnt be a far reach at all to have a variable voltage power supply with 2 tiny clip on leads....
but there is any EASY fix for this,
but not capable on our captivate, needs some programming...
in the newer phones they have NFC chip readers, (Near Field Communication)
get a micro chip NFC implanted into your body, and have the new generation phones encrypt its whole OS to your Chip ID on first boot, and needs your chip near by to do anything at all or unlock it by storing your chip in flash memory temporarily until locked again.
easy fix.
As long as there are devices that that store information there will be devices that can swipe it. As for if it is right or not, that is not my place to say. A simple lock will require that the cops get a search warrent for it, so just keep it locked.
I personally hate people who text and drive but there will always be people that do it no matter who they hurt while they do it.
There will be no true way to stop this if what they are saying is true. As they would need to be working with the OS makers for it to work. So while these devices may have just come into light, they have been around for awhile. We will keep an eye on it, but to be honest all that one could really do is not keep anything on the phone that you have to worry about the cops seeing.

Why did the FBI shutdown Megaupload?

Unfortunately, FBI shutdown Megaupload. Is there any way that they would be back up and running again or they are screwed. Furthermore, would the paid members of megaupload get their money back if they can't provide service?
Hosting pirated software and movies etc. is illegal. Do it enough and you get shut down.
The official thing I read said that they had been profiting from hosting copyrighted materials so they were shut down.
The usual mantra of saying that they can't be held responsible for what people upload to their service finally failed these guys.
I worry that it doesn't bode well for some other services, if they can prove that companies are profiting from copyright materials in the same way.
Technically even Youtube could fall foul of it too. Even though they have their method for reporting and taking down videos - which is flawed in itself and is abused by film, music and tv companies anyway
Archer said:
Hosting pirated software and movies etc. is illegal. Do it enough and you get shut down.
Click to expand...
Click to collapse
That's a totally simplistic (too simplistic) view on the matter. Megaupload was responding to DMCA takedown notices, so from this perspective, the "safe harbor" rules of the DMCA applied. Well, they should have. But of course the media industry came up with a whole bunch of stuff that removed the safe harbor protection from Megaupload. And the people behind MU were being a bit stupid as well, that helped the media industry make their case. This can serve as a lesson to others, to not repeat the same mistakes.
Gusar321 said:
That's a totally simplistic (too simplistic) view on the matter. Megaupload was responding to DMCA takedown notices, so from this perspective, the "safe harbor" rules of the DMCA applied. Well, they should have. But of course the media industry came up with a whole bunch of BS that removed the safe harbor protection from Megaupload.
Click to expand...
Click to collapse
If there was no illegal material on the site it would still be up and running.
Archer said:
If there was no illegal material on the site it would still be up and running.
Click to expand...
Click to collapse
Why are you here at XDA? There's "illegal" material here. So by your simplistic views, XDA should be shut down. Also, Google links to "illegal" material, and even caches some of it in their internal caches. Down with Google!! Etc, etc, etc, I think you get the picture (or probably you still don't).
Gusar321 said:
Why are you here at XDA? There's "illegal" material here. So by your simplistic views, XDA should be shut down. Also, Google links to "illegal" material, and even caches some of it in their internal caches. Down with Google!! Etc, etc, etc, I think you get the picture (or probably you still don't).
Click to expand...
Click to collapse
Er, I didn't actually state an opinion on the matter. What makes you think I agree with it at all?
I was just answering a question.
who cares...
Archer said:
If there was no illegal material on the site it would still be up and running.
Click to expand...
Click to collapse
That comment is just too ignorant and shows that u dont have actual knowledge of the case.
Illegal is a broad term, so broad that it can mean your mom having a photo on her desktop that you shot with your camera and she put without permission
And personally i dont think the site went down just because of that..
Xxul said:
That comment is just too ignorant and shows that u dont have actual knowledge of the case.
Illegal is a broad term, so broad that it can mean your mom having a photo on her desktop that you shot with your camera and she put without permission
And personally i dont think the site went down just because of that..
Click to expand...
Click to collapse
It's not in the slightest bit ignorant, and neither am I. There's quite a lot of assumption going on in this thread about my posts.
sadly this will be the way of most all sharing sites.....eventually me thinks
peer to peer = piracy (mostly) i kind of like this though
Archer said:
It's not in the slightest bit ignorant, and neither am I. There's quite a lot of assumption going on in this thread about my posts.
Click to expand...
Click to collapse
Because we all love u and care about u
I believe that they closed megaupload or filesonic today for one and mostly reason!Which are the money!The big companies want share from their profits because we are talking about millions!Thats why they care about it!
Xxul said:
Because we all love u and care about u
Click to expand...
Click to collapse
Maybe I'm slightly skeptical, but I detect sarcasm.
So... how are we going to share ROMS or programs that is built by developers? Even the government legalized rooting phones and tablets, so I wonder how would the distribution be like. Otherwise, we might need a private web space to be able to by-pass FBI. I mean yeah, I am against piracy and all that crap. But this legal stuff that we are sharing through Android Dev, businesses will slow down. I know there are many options out there but, after several months? perhaps, they could be shutdown as well.
MegaUpload was the best file hosting service online I've ever used. Too bad they get theirself in this kinda crap.
Although,they are already rebuilding megaupload in other country,where those laws aren't applicable.
man this really sucks. i use that website all the time.
one word SOPA
dsr17eagle said:
one word SOPA
Click to expand...
Click to collapse
Me gusta a la sopa
Well even though FBI tries hard enough to muzzle internet's freedom, I think people that care about it, will always be a step ahead and find different ways to share files, thoughts and everything!

How do I root Nexus 6 marshmallow?

can anyone pointe to the thread to root a nexus 6 with marshmallow on it please? i search but i see a lot of old, conflicting and outdated reports
I just want solid instructions that somebody here already used
cpugeeker said:
can anyone pointe to the thread to root a nexus 6 with marshmallow on it please? i search but i see a lot of old, conflicting and outdated reports
I just want solid instructions that somebody here already used
Click to expand...
Click to collapse
Here are the steps I used:
- flash/upgrade to Marshmallow
- flash modified boot.img
- flash/boot TWRP and sideload latest v2.50+
No. Not that unless you want unknown evil invading your phone and stealing your private information.
Use this instead;
http://forum.xda-developers.com/nexus-6/general/root-t3231211
doitright said:
No. Not that unless you want unknown evil invading your phone and stealing your private information.
Use this instead;
http://forum.xda-developers.com/nexus-6/general/root-t3231211
Click to expand...
Click to collapse
WOW what happen with them? I found some readings but now all. What exactly went down? Any good reads on this?
doitright said:
No. Not that unless you want unknown evil invading your phone and stealing your private information.
Use this instead;
http://forum.xda-developers.com/nexus-6/general/root-t3231211
Click to expand...
Click to collapse
lol. I appreciate your work on providing other root access methods, but you really shouldnt go around claiming made up info as fact and trying to spread fear everywhere you can. You have no proof whatsoever of the things you claim.
EniGmA1987 said:
lol. I appreciate your work on providing other root access methods, but you really shouldnt go around claiming made up info as fact and trying to spread fear everywhere you can. You have no proof whatsoever of the things you claim.
Click to expand...
Click to collapse
You obviously don't know the first thing about security, or the gravity of offering root control to an unknown entity.
To make it simple, unless you can *prove* that something is safe, the only rational assumption is that it isn't.
In other words, it is not my place to prove them unsafe. It is your responsibility to prove that they are safe, and frankly, that is an impossible task.
Feel free to use whatever you like. But don't go recommending to somebody that they take dangerous risks that are unnecessary.
---------- Post added at 01:33 AM ---------- Previous post was at 01:27 AM ----------
cpugeeker said:
WOW what happen with them? I found some readings but now all. What exactly went down? Any good reads on this?
Click to expand...
Click to collapse
It was almost acceptable when it was maintained by a single individual, but at some point fairly recently, the code was transferred/sold to an outfit that has been buying up all the root control software that can be found on play store.
Although the original author continues to make the software available under his pseudonym, there is no indication of the contract in place between him and the software's new owners, and no indication of their motives.
That makes the situation incredible frightening and dangerous.
doitright said:
You obviously don't know the first thing about security, or the gravity of offering root control to an unknown entity.
To make it simple, unless you can *prove* that something is safe, the only rational assumption is that it isn't.
In other words, it is not my place to prove them unsafe. It is your responsibility to prove that they are safe, and frankly, that is an impossible task.
Feel free to use whatever you like. But don't go recommending to somebody that they take dangerous risks that are unnecessary.
Click to expand...
Click to collapse
So something that has always been a bit closed, yet still trusted and used, gets transfered to a newly made company started through XDA leaders and still maintained currently by Chainfire for a while, and suddenly this means secret organizations with corrupt ties have suddenly taken control of the Android root world?
EniGmA1987 said:
So something that has always been a bit closed, yet still trusted and used, gets transfered to a newly made company started through XDA leaders and still maintained currently by Chainfire for a while, and suddenly this means secret organizations with corrupt ties have suddenly taken control of the Android root world?
Click to expand...
Click to collapse
It doesn't guarantee that it's bad. But for it to not be controlled by the creator (a first ballot Hall of Famer in this community) and ownership switched to an unproven entity, it turns it from solid and secure to who knows what. The new owners could be just as good. But we should skeptically wait and see
EniGmA1987 said:
So something that has always been a bit closed, yet still trusted and used, gets transfered to a newly made company started through XDA leaders and still maintained currently by Chainfire for a while, and suddenly this means secret organizations with corrupt ties have suddenly taken control of the Android root world?
Click to expand...
Click to collapse
It is not really a newly made company and no where are the XDA leaders involved.
Now make no mistake. Chains SU will be around for a very long time. Will there be other options? Sure, there are many already. If not as mainstream. Apps like this will come and go. It is the nature of the beast.
Now before people start bashing others they better have something to prove it. Other wise they have nothing to say worth listening to.
zelendel said:
It is not really a newly made company and no where are the XDA leaders involved.
Click to expand...
Click to collapse
Could you provide some info on the company to the people here then? Because business filings say that you are wrong on that. The filings for the company were done on August 11th of this year and they rent a virtual office space at the Trump Building on Wall Street. Chainfire himself also said that the XDA leadership was involved in getting his project moved over to this company. Now maybe he wasnt supposed to let that slip, IDK, but he did say it.
EniGmA1987 said:
Could you provide some info on the company to the people here then? Because business filings say that you are wrong on that.
Click to expand...
Click to collapse
Just look deeper and you will see. Just because they have a different name, or make an off shoot doesnt really make them a different company. If you read you will see that they already have their fingers into a few SU apps already. Dont you think that is odd for a new company?
XDA admins only made introductions. I personally dont really care. Nor should anyone really. If you are using SU then you know the risks you run and how to spot them.
zelendel said:
Just look deeper and you will see. Just because they have a different name, or make an off shoot doesnt really make them a different company. If you read you will see that they already have their fingers into a few SU apps already. Dont you think that is odd for a new company?
Click to expand...
Click to collapse
What would be incredibly useful and go a long way in putting people's minds at ease, would be a realistic explanation of the MOTIVATIONS of this company, WHICH IS NEW, regardless of your perception of it being a simple name change, for acquiring and controlling ALL of the different mechanisms for controlling root on Android.
Frankly, I can imagine only a few motivations, none of which ANYONE should be ok with;
1) Charging for it,
2) Forcing ads that the user cannot control,
3) Backdoor/botnet/etc.
You need to remember that while their software will prompt you when some OTHER software tries to access root, it has the ability to hide its own use of root, as well as to wipe evidence from the logs.
Root access should ONLY EVER be open source.
doitright said:
What would be incredibly useful and go a long way in putting people's minds at ease, would be a realistic explanation of the MOTIVATIONS of this company, WHICH IS NEW, regardless of your perception of it being a simple name change, for acquiring and controlling ALL of the different mechanisms for controlling root on Android.
Frankly, I can imagine only a few motivations, none of which ANYONE should be ok with;
1) Charging for it,
2) Forcing ads that the user cannot control,
3) Backdoor/botnet/etc.
You need to remember that while their software will prompt you when some OTHER software tries to access root, it has the ability to hide its own use of root, as well as to wipe evidence from the logs.
Root access should ONLY EVER be open source.
Click to expand...
Click to collapse
The open source was done once. It didnt last very long and due to the nature of SU will never stay open source and mainstream at the same time. If someone wants to charge for the SU app then ok let them. Heck most already paid for the SU pro anyway. No point in going on a witch hunt before there is something to hunt. All we can do is sit back and wait. If chain trusts them then I am willing to give them a chance. Root itself is a security risk and anyone that does root should know just what they are doing. If not then they get whats coming to them.
This is not this companies first root app. As stated they own/profit from just about all the root apps that are around.
zelendel said:
The open source was done once. It didnt last very long and due to the nature of SU will never stay open source and mainstream at the same time.
Click to expand...
Click to collapse
I have no idea how to respond to that besides saying to you that this statement is *ABSURD*.
The open source root was the *FIRST* root, and has persisted. In fact, the root that *I* am working on, is the extension of that very same *ORIGINAL* root done by Koush. It has remained *the* primary mechanism for controlling root access from 2009 to present, except for a brief loss of maintenance during the reign of Android 5.x.
Further, the nature of root REQUIRES it to be open source.
And will be THE ONLY mainstream method of providing root access control for anyone who has ANY consideration for security.
If someone wants to charge for the SU app then ok let them. Heck most already paid for the SU pro anyway.
Click to expand...
Click to collapse
Only because they are being denied simple and mandatory features. This isn't a voluntary charge, this is coercion and even RANSOM.
No point in going on a witch hunt before there is something to hunt.
Click to expand...
Click to collapse
But there IS a witch to hunt: SECURITY. Or lack thereof.
All we can do is sit back and wait. If chain trusts them then I am willing to give them a chance.
Click to expand...
Click to collapse
You are a fool. Not only did the author of that binary root NEVER actually do anything to EARN your trust, the fact that you put your trust into a business arrangement that doesn't even involve you is tremendously scary... for you.
Root itself is a security risk and anyone that does root should know just what they are doing. If not then they get whats coming to them.
Click to expand...
Click to collapse
No. This is entirely invalid. Root is not a security risk when done correctly, in open source, and treated with *respect*.
Binary root control *IS* a security risk, and unfortunately you are wrong again on this, since knowing what you are doing DOES NOT protect you from it. There is NOTHING you can do to protect yourself from binary software that you VOLUNTARILY put into a sensitive position of high trust.
This is not this companies first root app. As stated they own/profit from just about all the root apps that are around.
Click to expand...
Click to collapse
That is a TERRIFYING prospect for reasons I've already discussed.
doitright said:
I have no idea how to respond to that besides saying to you that this statement is *ABSURD*.
The open source root was the *FIRST* root, and has persisted. In fact, the root that *I* am working on, is the extension of that very same *ORIGINAL* root done by Koush. It has remained *the* primary mechanism for controlling root access from 2009 to present, except for a brief loss of maintenance during the reign of Android 5.x.
Further, the nature of root REQUIRES it to be open source.
And will be THE ONLY mainstream method of providing root access control for anyone who has ANY consideration for security.
Only because they are being denied simple and mandatory features. This isn't a voluntary charge, this is coercion and even RANSOM.
But there IS a witch to hunt: SECURITY. Or lack thereof.
You are a fool. Not only did the author of that binary root NEVER actually do anything to EARN your trust, the fact that you put your trust into a business arrangement that doesn't even involve you is tremendously scary... for you.
No. This is entirely invalid. Root is not a security risk when done correctly, in open source, and treated with *respect*.
Binary root control *IS* a security risk, and unfortunately you are wrong again on this, since knowing what you are doing DOES NOT protect you from it. There is NOTHING you can do to protect yourself from binary software that you VOLUNTARILY put into a sensitive position of high trust.
That is a TERRIFYING prospect for reasons I've already discussed.
Click to expand...
Click to collapse
He has done alot to earn my trust. You would know that had to been around as long as I have been.
I am fully aware of the first root. And the reasons behind him stopping its development. The only ones that I am aware of that was even using it was CM and they are almost as much of a joke as MIUI.
I am fully aware of what you are working on and to be honest not something I or many others would use would even use as you are unknown and to be honest not really trusted. Maybe after you have been around a while more people will put faith in you and your projects. Not to mention your attitude is enough to make many not bother with it.
Root is a security risk. Just as any real developer. Even Google is making things like root harder to obtain because they see the risk. But to be honest as I have already said "Mobile security is and illusion" If I was truly worried about security I would not unlock my bootloader or bother with rooting.
Now we can argue this back and forth and never get anywhere. So We can end this here.
doitright said:
You obviously don't know the first thing about security, or the gravity of offering root control to an unknown entity.
To make it simple, unless you can *prove* that something is safe, the only rational assumption is that it isn't.
In other words, it is not my place to prove them unsafe. It is your responsibility to prove that they are safe, and frankly, that is an impossible task.
Feel free to use whatever you like. But don't go recommending to somebody that they take dangerous risks that are unnecessary.
---------- Post added at 01:33 AM ---------- Previous post was at 01:27 AM ----------
It was almost acceptable when it was maintained by a single individual, but at some point fairly recently, the code was transferred/sold to an outfit that has been buying up all the root control software that can be found on play store.
Although the original author continues to make the software available under his pseudonym, there is no indication of the contract in place between him and the software's new owners, and no indication of their motives.
That makes the situation incredible frightening and dangerous.
Click to expand...
Click to collapse
This is almost the most amazing post on xda. :good:
Could you kindly prove that the Google Factory Image is safe? Otherwise I would advise you destroy your handset immediately as its probably not safe.
zelendel said:
He has done alot to earn my trust. You would know that had to been around as long as I have been.
Click to expand...
Click to collapse
I've been around longer than you. Try again.
I am fully aware of the first root. And the reasons behind him stopping its development. The only ones that I am aware of that was even using it was CM and they are almost as much of a joke as MIUI.
Click to expand...
Click to collapse
I won't argue with CM being a joke, but MOST people used Koush's superuser up until they were stopped by selinux.
I am fully aware of what you are working on and to be honest not something I or many others would use would even use as you are unknown and to be honest not really trusted. Maybe after you have been around a while more people will put faith in you and your projects. Not to mention your attitude is enough to make many not bother with it.
Click to expand...
Click to collapse
Speak for yourself, but don't you DARE to speak for others.
As far as the trustworthiness of my work goes... go ahead and AUDIT IT. The code speaks for itself.
Root is a security risk. Just as any real developer.
Click to expand...
Click to collapse
I ask myself. Answer is that you have no idea what you are talking about.
Even Google is making things like root harder to obtain because they see the risk. But to be honest as I have already said "Mobile security is and illusion" If I was truly worried about security I would not unlock my bootloader or bother with rooting.
Click to expand...
Click to collapse
Google is correctly worried about the dangers of binary root. As YOU should also be.
Now we can argue this back and forth and never get anywhere. So We can end this here.
Click to expand...
Click to collapse
Only because you have degenerated into personal attacks rather than rational argument.
---------- Post added at 06:07 PM ---------- Previous post was at 06:05 PM ----------
Amos91 said:
This is almost the most amazing post on xda. :good:
Could you kindly prove that the Google Factory Image is safe? Otherwise I would advise you destroy your handset immediately as its probably not safe.
Click to expand...
Click to collapse
I can't prove that google factory image is safe. I can make a strong argument to suggest that it most likely is, and I can prove that AOSP is safe.
FYI: I use a Nexus, so I'm not limited to factory images, as implied by your last sentence.
Well, I'm no techie, I'm just an end-user of other people's talented work, but I'm with doitright on this one. I have trusted Chainfire for years - I have a number of his apps on my device, all of them paid for even though most work perfectly as free apps, simply because I do trust his work. Even if it's closed source black box stuff, he has always appeared to be a straight-up guy.
Still, once the black box passes into company ownership, at that point my trust ends. Companies are not charities hoping for donations. They want some return on whatever investment they've put into taking over SuperSU. Bottom line, I don't trust companies - and yes, that does include Google or Alphabet or whatever piece owns Android these days. I live with the knowledge that I am the product - my choice.
It's also my choice to opt for an open-source solution over a black box one. If doitright's superuser can be audited by people who know what they're looking at (I don't) then that'll do it for me.
And as an afterthought, yes, doitright is a spiky character. So is Torvalds. So what? As long as he comes up with the goods I have no problem with it. He comes across as passionate, doesn't suffer fools gladly (and that is just a saying, I'm not referring to any posters), and since I'm pretty much the same, if a bit more politic in the way I write, I can't criticise that...
doitright said:
Feel free to use whatever you like. But don't go recommending to somebody that they take dangerous risks that are unnecessary
Click to expand...
Click to collapse
Risk = Chance * Effect.
doitright said:
I've been around longer than you. Try again.
I won't argue with CM being a joke, but MOST people used Koush's superuser up until they were stopped by selinux.
Speak for yourself, but don't you DARE to speak for others.
As far as the trustworthiness of my work goes... go ahead and AUDIT IT. The code speaks for itself.
I ask myself. Answer is that you have no idea what you are talking about.
Google is correctly worried about the dangers of binary root. As YOU should also be.
Only because you have degenerated into personal attacks rather than rational argument.
---------- Post added at 06:07 PM ---------- Previous post was at 06:05 PM ----------
I can't prove that google factory image is safe. I can make a strong argument to suggest that it most likely is, and I can prove that AOSP is safe.
FYI: I use a Nexus, so I'm not limited to factory images, as implied by your last sentence.
Click to expand...
Click to collapse
I only speak for the developers I have talked to about using your root set up instead of chains. Got the same answer from all of them.
As for being around longer then me in the modding area. I would put a bet on that. I have been modding phones before a smart phone was even a thought.
You were the first to throw insults. As seems to be your way. Anyone that doesn't agree with you is called a fool or other wise.
Nope you are right. I have no idea what I'm talking about. Now excuse me I have some bugs to fix thanks to Google messing things up.

Categories

Resources