[howto] get Orbot (Tor network) transparent proxying working - Samsung Epic 4G Touch

*REQUIRES ROOT*
Warning: Follow these directions at your own risk! I take no responsibility for any damage to your phone, personal information, dog, cat, or grandmother that may result from you voluntarily following these directions. If you blame me, I will laugh at you.
This information is partially from: http://forum.xda-developers.com/showthread.php?t=760472
This is my first topic post, so please let me know if you find it helpful!
I could not find a tutorial on getting Orbot transparent proxying to work on my SPH-D710, so this is how I got it working. I hope this is not a repost, but as I said I could not find a specific tutorial/howto.
It seems to me that the issue with Orbot on our phones has to do with the iptables that is included with Orbot. Even if you tell Orbot to use the default iptables (/system/bin/iptables), it still does not work.
(1) Install "Droidwall" and "Orbot" from the Android market.
(2) Open Droidwall so that it installs the necessary binaries.
(3) Do the following in adb or the terminal: (I prefer using adb)
Code:
[B]# cd /data/data/[/B]
[B]# find ./ -iname "*iptables*"[/B]
./com.mgranja.iptables
./org.torproject.android/app_bin/iptables
./com.googlecode.droidwall.free/app_bin/iptables_armv5
[B]# cp ./com.googlecode.droidwall.free/app_bin/iptables_armv5 ./org.torproject.android/app_bin/[/B]
[B]# cd /data/data/org.torproject.android/app_bin/[/B]
[B]# mv ./iptables ./iptables.ORIGINAL[/B]
[B]# mv ./iptables_armv5 ./iptables[/B]
(4) Open Orbot and go to (menu) -> Settings. Make sure to enable "Request Root Access," "Transparent Proxying" and "Tor Everything."
(5) On the bottom of the settings page, ensure that "Use Default Iptables" is NOT selected!
(6) Open Orbot, long press the 'power' button to start Tor. In the menu there is an option to make sure ("check") that you are connected through the Tor network.
Enjoy!
Sent from my SPH-D710 using Tapatalk

IPTABLES is your firewall.
So I wouldn't mess with them unless you know what you are doing.
You sound like you don't know what your doing if you have to "download" it.

kthejoker20 said:
IPTABLES is your firewall.
So I wouldn't mess with them unless you know what you are doing.
You sound like you don't know what your doing if you have to "download" it.
Click to expand...
Click to collapse
I agree that you shouldn't mess with it unless you know what you're doing. The app mentioned simply updates the version in /system/bin that came with your ROM -- whether or not you want to do this is up to you. (I just edited and removed the portion you made reference to.)
Regardless, in order to get Orbot working on the phone with transparent proxying, the main thing is to tell Orbot to use the default iptables in the ROM rather than the one Orbot comes with (/data/data/org.torproject.android/app_bin/iptables).
EDIT: With the edits made to my original post, this is now irrelevant.

I use to do this back in the day. At times it's handy however, the speeds are insanely slow so I stopped using it and just dealt with the fact that the carrier would see my every move on the network. They can do that regardless of the fact that you're using a proxy anyway so it just seemed like a waste. Slow speeds + they can still track me or fast speeds + they can still track me. Using Tor on a phone only prevents the site you're visiting from knowing who and where you are - not the carrier.
Just wanted to make that clear for anyone that doesn't know.

The speed is definitely a pain, but if you are willing to sacrifice some anonymity (probably a lot) you can configure Tor to only use nodes within your country - which I tested and got much faster speeds.
While your carrier can track that you are using their network, they cannot see what specifically you are doing. Tor encrypts all traffic from your phone -> entrance node -> intermediary nodes -> exit node (and vice versa). The only unencrypted leg of the journey is between the exit node and the destination host.
If anyone wants to read more https://www.torproject.org/about/overview.html.en
Sent from my SPH-D710 using Tapatalk

working
This worked for me, thank you so much. im runing a modded stock rom on my Lg Optimus black and it hasnt iptables, now everithing is fully working, thanks! now i can use facebook from mi phone on my work "restricted" network hehe

tor
You can also run tor from the terminal and from /data/data/*. It's much easier and you can delete all the iptables and orbot stuff. The default datadir for tor isn't working so I started tor with -datadir. For example tor -datadir /mnt/sdcard/tor.

Thank you I have been trying to get this running on my phone for a second.

Phpdna said:
You can also run tor from the terminal and from /data/data/*. It's much easier and I have deleted all the iptables and orbot stuff. Because the default datadir for tor isn't working on my device I started tor with -datadir. For example tor -datadir /mnt/sdcard/tor.
Click to expand...
Click to collapse
What are you doing exactly?
Can You explain more?

santasolo said:
What are you doing exactly?
Can You explain more?
Click to expand...
Click to collapse
I was trying to run tor without orbot. Orbot is too heavy for my mobile. I find tor is an app in /data and we can start it from the terminal with the datadir switch. I guess Orbot works, too, but I'm not so sure.

Very interesting post. Thanks for the info.

DankVader said:
Very interesting post. Thanks for the info.
Click to expand...
Click to collapse
If my answer is helpful please consider to thank me. Thank you!

I thought I did. But I must have forgotten to. Correcting that now. :victory:

Related

HTC Homeplug Weather fix - get your LOCAL weather! [New universal patch uploaded!]

THIS SERVER HAS NOW BEEN DEACTIVATED - See below / my final post
WARNING! The old IP-based/Pocket Hosts method using my server HAS BEEN DEACTIVATED, as I have had to remove the code in question from the direct IP. This means that selecting the custom weather server purely via the HTC home customizing utilities without installing a patched version of the HTC Home DLL, it WILL NOT WORK and you will just get "unable to retrieve data" messages. If this is the case, please uninstall your existing HTC Home plugin, and use one of the ones off the download page.
You can, if necessary, set up your own IP address to base it on, if you can't use my system for some reason, and use the pocket host method that way (requires your own server). Otherwise, please use the cabs below.
NEW! UNIVERSAL PATCH PACKAGE
I've written a universal patcher, so people can now get the HTC Home package they want, and just patch the HTCHome.dll from \WINDOWS. Simply get the package, unzip, drop your HTCHome.dll file in the N2A-Patcher folder, and run the n2a-patcher script inside. It'll magically create you a package! (This won't work for DLLs which people have already patched, you need to use the unmodified original.) This should negate the need for me to create individual packages anymore. Feedback welcome! As a result, I won't be releasing any more complete packages - just install your personal favorite, get the \WINDOWS\HTCHome.dll from your device, drop it in the packager, and let it do it's magic, then install the newly created cab.
Coming soon, if I can figure it out - drop the installer in, and get a patched full installer out! Of course, I have to figure out how to batch extract the cabfile correctly first... *laughs*
I've also just created a DLL to CAB packager (so you can drop your own pre-patched DLL in, and it'll turn it into a ready-to-install cabfile), and a DLL patcher (which just patches the DLL itself, ready for cooking etc - perfect for all you flashers out there!) - all on the download page.
PLEASE DON'T PM ME ABOUT THIS - KEEP IT TO THE THREAD UNLESS I SPECIFICALLY REQUEST A PM OR PM YOU!
Help Request
If anyone has an unpatched Sprint Touch XML file, I could do with a backup copy, for those who corrupt their XML files...
If you've got a Touch, Kaiser/TyTN II or Sprint Touch...
There are specific device DLL replacement packages on the new file download page.
NEW DOWNLOAD AND INSTRUCTION SITE
I've moved all the downloads and instructions to a new page, which will hopefully make it clearer on what people need to download. It also contains full instructions on hexediting the DLL if you wish, and re-signing. I'm not entirely sure if it's more readable or not, but it's certainly more manageable! Feedback welcome. There's some specific overlays now for certain versions of the ROMs too.
FAQ:
Can I install colour customisations to this?
Sure. Take a look around the forum. There's plenty of guides elsewhere.
What does this do?
It reroutes the request to the AccuWeather server to my server instead, which then requests the appropriate data from the AccuWeather server, and translates it into the HTC Weather XML format.
Can I run this via my own server?
Yup. It's running on mine via PHP 5.2.x, using the SimpleXML extension. The code is downloadable from the main download page, and I've even commented it. Once you get it running, you'll need to hexedit the HTCHome.dll file in the same way as described for the ROM chefs. I'd recommend keeping the same length of file for replacement - using directories to pad it out if necessary - it could cause unpredictable results otherwise.
Do I need to run my own server to get my local weather?
Nope, feel free to use mine.
Your server isn't working!
Oops. It's a rarity, but occasionally network outages happen. The server won't be disappearing anytime soon though without any warning! I'm sorry to say that I'll be taking the server down for this shortly as I'm wrapping up my web hosting business and transferring it to another company, but quite a few other people seem to have hosted a copy if people still need it. I hope it's been of use over the years everyone!
Why have you done this?
It was really annoying me that I could only get the weather for a city 25 miles away, that had nothing to do with mine.
Can you make me an XML file for such-a-place?
No, I've done enough already, and it's documented fairly heavily above. If you can't follow instructions, give up and stop trying to hack your phone. I'm not here to hold your hand. I'll help fix bugs and obvious issues, but if you can't edit a textfile, you're on your own.
Release Notes
I've stripped most local data from the return info apart from the town/city and country, but the HTC plugin seems to ignore that anyway. Works for all international locations I've tested. I welcome feedback on anything that's not working though, and I'll try to get it nailed pretty quickly. As said above, also works on zip codes, which will make it easier for our US friends on here.
New release fixes countries that weren't in the list, by removing the country checks altogether - I'm confident it'll "just work" - in theory Report bugs in the usual way.
Known Issues
The WM5 version will NOT update over GPRS/3G, unless you are using an AKU3.3 ROM. WM5 Weather update over GPRS has been proven with Wizard AKU3.3 (like the T-Mobile or WM5SEr5). Other devices/ROM's still to be confirmed.
The temperature in Farhenheit can occasionally be a degree or two out, as I convert from the Celsius scale. To get both readings would mean two calls to the server, which would be more work and bandwidth for my server. I'm sure you can live with a degree out occasionally.
Kudos
Thanks PAPPL for the info on signing files, Schen for his great work on the plugin, and to all those who contributed to getting these plugins (and getting them working!) in the first place!
Enjoy!
As I've taken the server down, I've attached all the relevant files to this post. If someone does want to provide somewhere to point the weather.not2advanced.com domain to, I still own the domain and can add the appropriate A address to it for the purpose if they want to continue hosting for the many users that still seem to be using this plugin. Sorry I had to take it down, but I no longer run the hosting operation this was being held on, and it can be a bit heavy on resources at times.
- Rick
Wow, sounds like a lot of work went into this.
Do you think it would be possible, using this framework, to pull data from the NWS website instead of Accuweather?
Theroetically, I could, providing they set up an appropriate XML feed. However, I can only do one such setup per IP address (and the IP addresses I have are somewhat limited), but if someone wanted to set it up, I've no doubt it'd be possible. However, it wouldn't be trivial - I've had to manually grab bits of data from the XML and process it into the format the home plugin expects. As a UK resident, the NWS isn't huge amounts of use to me
On a more technical note though, it'd require a similar format - at least 5 days in advance for a particular area, and the exact parameters (or something that can be adjusted / mangled / processed into the exact parameters) that the plugin needs. (Take a look at the code in the zipfile if you want to see how much of a pain in the neck THAT was!) Adapting it would also need a complete conversion matrix, or a hacky method using (say) the RSS feed ID for the BBC, or however the NWS does it.
Will this work for cingular/att customer?
If it works already for the major cities, then it'll work the same way, but with more localised weather available.
If you're having trouble with the normal weather plugin setup though, you may still have trouble. Then again, it might work! I've no idea. Try it and find out
Yeeaah
Hi N2A / Rick.
Great job - really! I can't thank you enough.
It finally works for me.
Thanks
HTC Homeplug Weather
Hello,
Thanks for sharing your great work. (I am french so sorry for my poor english)
However, I working on HTC Homeplug Weather because it wont let me download weather forecast when I am using 3G connection.
It works great when I an using wifi connection so I think it is coming from the proxy of vodaphone France (SFR) wich is blocking the access. So I was wondering if I will be able to connect to your server ? (for the moment it is not working) or redirecting the plugin to my tunnel...
Second is there a way to be sure that htc weather plugin is trying to connect to htc.accuweather.com and not to another web site.
Thanks in advance
A french guy wich is also living in a small city and wishto have his weather forecast ;-)
TorbenKB said:
Hi N2A / Rick.
Great job - really! I can't thank you enough.
It finally works for me.
Thanks
Click to expand...
Click to collapse
You're most welcome Glad I could help.
gdbtg said:
Hello,
However, I working on HTC Homeplug Weather because it wont let me download weather forecast when I am using 3G connection.
It works great when I an using wifi connection so I think it is coming from the proxy of vodaphone France (SFR) wich is blocking the access. So I was wondering if I will be able to connect to your server ? (for the moment it is not working) or redirecting the plugin to my tunnel...
Second is there a way to be sure that htc weather plugin is trying to connect to htc.accuweather.com and not to another web site.
Thanks in advance
A french guy wich is also living in a small city and wishto have his weather forecast ;-)
Click to expand...
Click to collapse
Well, if it's the HTC accuweather site specifically blocked, then it will help you. If it's generically blocking sites, then it won't.
Re a tunnel - depends what you mean by it.
The HTC home plugin *always* tries to connect to htc.accuweather.com - hence the host file change, which diverts it to my server instead, which provides the correct data. (NO LONGER APPLIES WITH NEW PLUGINS!)
However, if it's still not working with the hosts file modification (may require soft reset, not sure!), then I'm afraid there's not a lot I can do, unless you can tunnel it as you said, but it depends on what you're using to tunnel.
HTC Homeplug Weather
Thanks for your quick answer !
It's still not worling ;-(
But I wondering how can I test if Pockets Hosts is redirecting properly the htc weather address.
Sincerely
gdbtg said:
Thanks for your quick answer !
It's still not worling ;-(
But I wondering how can I test if Pockets Hosts is redirecting properly the htc weather address.
Sincerely
Click to expand...
Click to collapse
***************** REMOVED OLD CONTENT, NO LONGER APPLIES WITH THE NEW PLUGINS *****************
HTC Homeplug Weather
Ok, I have got the web site and not the error message.
So there is something wrong.
Thanks for your help.
Befor I can try your nice work, I have a problem with the write protection of the hh_0407_weather... file. I dont get my own file in the folder. I tried some things but it didnt work.
Can you help me? I'm runing a B&B v3.7 Ger beta.
Thanks
gdbtg said:
Ok, I have got the web site and not the error message.
So there is something wrong.
Thanks for your help.
Click to expand...
Click to collapse
Reload pocket hosts - it should look something like the attached thumbnail. If it does, try a soft reset. However, if it's still refusing point blank, it's highly possible you're going via a proxy, and that is handling the DNS lookups. To bypass that will require a hack to the HTC plugin itself. I can set it up server side for it (which was going to be my initial approach!), but it'll need an appropriate hostname hacking into the binary. I'll see what I can do on that score tomorrow, both on the home plugin front and the server-side setup.
smallgermanboy said:
Befor I can try your nice work, I have a problem with the write protection of the hh_0407_weather... file. I dont get my own file in the folder. I tried some things but it didnt work.
Can you help me? I'm runing a B&B v3.7 Ger beta.
Thanks
Click to expand...
Click to collapse
I suggest using Total Commander - you can remove the read-only flag from there, and even edit it inside it. Works beautifully.
I use the Total Com, too. But when I open the file the Internet Explorer opens and displays the xml file. I tried to remove the flag but he didnt adopt it. So I looked at the attributes again and nothing has changed.
smallgermanboy said:
I use the Total Com, too. But when I open the file the Internet Explorer opens and displays the xml file. I tried to remove the flag but he didnt adopt it. So I looked at the attributes again nothing has changed.
Click to expand...
Click to collapse
I'm assuming that's after you've gone to the file properties. You should be able to unclick "Read-only" and "System" on it.
There's quite a bit of information on doing this scattered around the forums. Is it cooked into your ROM? (It'll have a tickbox by the "In ROM" box if that's the case.) But you want to clear the Read Only and System attributes from the file properties if you can, THEN edit it.
More information on this thread.
N2A said:
I'm assuming that's after you've gone to the file properties. You should be able to unclick "Read-only" and "System" on it.
Click to expand...
Click to collapse
I did this but when I open the properties again the attributes for "Read-only" and "System" are still on.
There's quite a bit of information on doing this scattered around the forums. Is it cooked into your ROM? (It'll have a tickbox by the "In ROM" box if that's the case.) But you want to clear the Read Only and System attributes from the file properties if you can, THEN edit it.
Click to expand...
Click to collapse
Its in the ROM.
There's your problem. I suggest copying it somewhere else on the device, editing it, and copying it back, but it may have issues doing it.
If you can't copy it back, apparently Resco Explorer is able to do it.
I used resco to do it. you have 14 days free trial so you can test it first.
http://www.resco.net/pocketpc/explorer/downloads.asp
And thanks N2A this is realy great. And works perfectly can find all the small places in Norway
ialu said:
I used resco to do it. you have 14 days free trial so you can test it first.
http://www.resco.net/pocketpc/explorer/downloads.asp
And thanks N2A this is realy great. And works perfectly can find all the small places in Norway
Click to expand...
Click to collapse
Thanks for both
I copied it with the resco and now it works perfekt. I tried several small cities in Germany and he found all. THANKS again
Thanks. works great. now i know it's going to rain all week here in abergavenny

[Q] Anyone with a Galaxy Nexus could you answer a question or two for me about ICS.

Basically I need to know if the proxy settings in ICS support the use of "proxy scripts" or something of similar description.
I intend to get the Transformer Prime for use at university but really it's only useful to me if I can get the entire OS working online and not just the few apps that support proxy scripts (only found Opera to allow it so far) so I just want to know if that option is in the base OS this time around.
Thanks.
G8D said:
Basically I need to know if the proxy settings in ICS support the use of "proxy scripts" or something of similar description.
I intend to get the Transformer Prime for use at university but really it's only useful to me if I can get the entire OS working online and not just the few apps that support proxy scripts (only found Opera to allow it so far) so I just want to know if that option is in the base OS this time around.
Thanks.
Click to expand...
Click to collapse
There is something called 'Install web scripts' under Accessibility, but I am not sure what it does. It asks 'Do you want apps to install scripts from Google that make their web content more accessible?'.
But I don't know what it does or why it is there.
kristovaher said:
There is something called 'Install web scripts' under Accessibility, but I am not sure what it does. It asks 'Do you want apps to install scripts from Google that make their web content more accessible?'.
But I don't know what it does or why it is there.
Click to expand...
Click to collapse
Nah definitely won't be that. That's for people with sensual disabilities.
G8D said:
sensual disabilities
Click to expand...
Click to collapse
Hehe..................
Anyone able to help?
G8D said:
Anyone able to help?
Click to expand...
Click to collapse
Doesn't the config script mean it's an HTTP socket proxy? If so it can only work at the HTTP layer, which means you are pretty much limited to using browsers. An Android-wide setting would have to work at the TCP(UDP)/IP layer, which isn't concerned with this proxy.
Chirality said:
Doesn't the config script mean it's an HTTP socket proxy? If so it can only work at the HTTP layer, which means you are pretty much limited to using browsers. An Android-wide setting would have to work at the TCP(UDP)/IP layer, which isn't concerned with this proxy.
Click to expand...
Click to collapse
I've just tried something. I don't need the script.
I can deselect the script and just enter a "Proxy Server" (makes more sense if you were looking at LAN settings in Windows) which just appears to be an IP/port.

Blocking Unwanted Connections with a Hosts File/block ads, banners, 3rd party Cookies

MVPS HOSTS now includes entries for most major parasites, hijackers and unwanted Adware/Spyware programs!
What it does ...
You can use a HOSTS file to block ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and even most hijackers. This is accomplished by blocking the connection(s) that supplies these little gems. The Hosts file is loaded into memory (cache) at startup, so there is no need to turn on, adjust or change any settings with the exception of the DNS Client service (see below). Windows automatically looks for the existence of a HOSTS file and if found, checks the HOSTS file first for entries to the web page you just requested. The 127.0.0.1 is considered the location of your computer, so when an entry listed in the MVPS HOSTS file is requested on a page you are viewing, your computer thinks 127.0.0.1 is the location of the file. When this file is not located it skips onto the next file and thus the ad server is blocked from loading the banner, Cookie, or some unscrupulous ActiveX, or javascript file.
Example - the following entry 127.0.0.1 ad.doubleclick.net blocks all files supplied by that DoubleClick Server to the web page you are viewing. This also prevents the server from tracking your movements. Why? ... because in certain cases "Ad Servers" like Doubleclick (and many others) will try silently to open a separate connection on the webpage you are viewing, record your movements then yes ... follow you to additional sites you may visit.
Using a well designed HOSTS file can speed the loading of web pages by not having to wait for these ads, annoying banners, hit counters, etc. to load. This also helps to protect your Privacy and Security by blocking sites that may track your viewing habits, also known as "click-thru tracking" or Data Miners. Simply using a HOSTS file is not a cure-all against all the dangers on the Internet, but it does provide another very effective "Layer of Protection".
In case you're wondering ... this all happens in microseconds, which is much faster than trying to fetch a file from half way around the world. Another great feature of the HOSTS file is that it is a two-way file, meaning if some parasite does get into your system (usually bundled with other products) the culprit can not get out (call home) as long as the necessary entries exist. This is why it's important to keep your HOSTS file up to Date. How to get notified of MVPS HOSTS updates.
How to get notified of MVPS HOSTS updates.
This download includes a simple batch file (mvps.bat) that will rename the existing HOSTS file to HOSTS.MVP then copy the included updated HOSTS file to the proper location. For more information please see the Windows version that applies to you ...
Windows 8 requires special instructions - over there see here
Windows 7 requires special instructions - over there see here
Win Vista requires special instructions - over there see here
Manual Install Method - Unzip in a "temp" folder and place in the appropriate installed location:
If you are having trouble downloading or extracting the HOSTS file [click here]
Note: the below locations are for the typical default paths, edit as needed.
Windows 8/7/Vista/XP = C:\WINDOWS\SYSTEM32\DRIVERS\ETC
Windows DNS Client Service
In most cases the DNS Client Service is not needed, it is recommended to turn it off. These instructions are intended for a single (home-user) PC. If your machine is part of a "Domain", check with your IT Dept. before applying this work-around. This especially applies to Laptop users who travel or bring their work machines home. Make sure to reset the Service (if needed) prior to connecting (reboot required) to your work Domain ...
To resolve this issue (manually) open the "Services Editor"
Start | Run (type) "services.msc" (no quotes)
Win8 users - Control Panel > Administrative Tools > Services
Scroll down to "DNS Client", Right-click and select: Properties - click Stop
Click the drop-down arrow for "Startup type"
Select: Manual (recommended) or Disabled click Apply/Ok and restart.
My recommendation easy way to do it:
Hostsman includes an option to turn off the DNS Service [screenshot]
Workaround for using the MVPS HOSTS file and leaving the DNS Client service enabled (set to: Automatic)
If you find after a period of time that your browser seems sluggish with the DNS Client service enabled you can manually flush the DNS cache
Close all browser windows ... open a "Command Prompt" from the Start Menu > All Programs > Accessories > Command Prompt
Win8 users - Charms Bar > Search > (type) command prompt > Select: Command Promt (left pane) Ok the UAC prompt
(type) ipconfig /flushdns (press Enter) Then close the Command Prompt ...
A better Win8/7/Vista/XP workaround would be to add two Registry entries to control the amount of time the DNS cache is saved. (KB318803)
Flush the existing DNS cache (see above)
Start > Run (type) regedit
Win8 users - from the Charms Bar, select: Search (type) run and select Run (left pane) and (type) "regedit" (no quotes)
Navigate to the following location:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters
Click Edit > New > DWORD Value (type) MaxCacheTtl
Click Edit > New > DWORD Value (type) MaxNegativeCacheTtl
Next right-click on the MaxCacheTtl entry (right pane) and select: Modify and change the value to 1
The MaxNegativeCacheTtl entry should already have a value of 0 (leave it that way - see screenshot)
Close Regedit and reboot ...
As usual you should always backup your Registry before editing ... see Regedit Help under "Exporting Registry files"
P.S IT'S NOT MY WORK I JUST SHARE WHAT I FOUND SO PLZ SUPPORT DEVELOPER (MAIN WEB PAGE) IF YOU FOUND IT USEFULL
P.S 2 YOU AND ONLY YOU RESPONSIBLE FOR WHAT YOU DOING WITH YOUR PS
P.S 3 FEEDBACK AND TUBS UP IS REQUIRED
or use adblock for firefox and chrome and tracking lists in internet explorer (which also works on RT) rather than download dodgy 3rd party files with no source code which could just as easily be malware.
SixSixSevenSeven said:
or use adblock for firefox and chrome and tracking lists in internet explorer (which also works on RT) rather than download dodgy 3rd party files with no source code which could just as easily be malware.
Click to expand...
Click to collapse
Or you can just download it, check it and stop posting useless warnings. Although, not sure if you're able to decompile it.
Useless guy said:
Or you can just download it, check it and stop posting useless warnings. Although, not sure if you're able to decompile it.
Click to expand...
Click to collapse
Useless warnings? Come back to me when your computer is ridden in malware from carelessly downloaded files in a few months time.
Guys, calm down. @SixSixSevenSeven is right, though. I'd rather not download any weird files and copy them to my system32 directory, especially if there isn't any source available.
And anyways, isn't discussing this stuff against the rules?
You know, because we're all kinda developers and stuff, and that's how we make our money?
That host file is the exact same method used by android. There no compiling/decrypting/program or malware included. Is a text file ?
Thanks OP, it works as intended. Blocks all ads successfully.
D.O.C said:
That host file is the exact same method used by android. There no compiling/decrypting/program or malware included. Is a text file ?
Thanks OP, it works as intended. Blocks all ads successfully.
Click to expand...
Click to collapse
Yes, it may be the same method, but the hosts files are open source and you have open source apps which do the installation for you.
And I still think this thread is against the rules. ..
Sent from my GT-I9505 using XDA Premium HD app
http://someonewhocares.org/hosts/
Here's the host file I use. Works pretty good - no need for Android apps or anything.
Beatsleigher said:
Yes, it may be the same method, but the hosts files are open source and you have open source apps which do the installation for you.
And I still think this thread is against the rules. ..
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
Against what rules
vasiaeva said:
Against what rules
Click to expand...
Click to collapse
Against the XDA rules, which you read and accepted as you created your account
Sent from my GT-I9505 using XDA Premium HD app
Beatsleigher said:
Against the XDA rules, which you read and accepted as you created your account
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
Don't worry about XDA there is admins army who watch for that...
But i like you sense of humor :good:
Beatsleigher said:
You know, because we're all kinda developers and stuff, and that's how we make our money?
Click to expand...
Click to collapse
I don't see any developers here
Useless guy said:
I don't see any developers here
Click to expand...
Click to collapse
Thanks man. I guess you don't see me...
Sent from my GT-I9505 using XDA Premium HD app
Guys, there is nothing wrong with this - it's been going on for years in this exact format. Any ad-blocker that you use (apart from browser extensions/add-ons) will use this method.
The hosts file (yes, located in a sub-directory of System32 ) is what your PC looks at for address translation. It's a text file, so you can open it in a text editor (even notepad will do it) and check it there, but other than being used to translate domain names to IP addresses it is not in any way active.
If you're concerned about it I suggest you don't use it. If you're curious about it then open the hosts file and look at the contents. Other than that, it's nothing to worry about.
Beatsleigher said:
Yes, it may be the same method, but the hosts files are open source and you have open source apps which do the installation for you.
And I still think this thread is against the rules. ..
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
I really don't know what you are talking about, OP just shared a method to block ads, no application discussion whatsoever, never stated it was a "only method" or anything like it. You are definitively successful at changing topics though.
and BTW, it is not against forum rules.
The only thing that could possibly be against the rules is the fact that ads are getting blocked - but AFAIK XDA has nothing about that.
Perhaps you don't like how it uses a closed source utility (which is actually open source)? Well then you might not like 90% of ROMs on this site - for all we know they set all the text we type in to some Chinese servers.
SilverHedgehog said:
The only thing that could possibly be against the rules is the fact that ads are getting blocked - but AFAIK XDA has nothing about that.
Perhaps you don't like how it uses a closed source utility (which is actually open source)? Well then you might not like 90% of ROMs on this site - for all we know they set all the text we type in to some Chinese servers.
Click to expand...
Click to collapse
What? Dude. I'm a dev myself. I don't care if somethings closed source, as long as it has good enough documentation or unless I know exactly what the program's for...
And for all I know, from the IP address of the XDA servers, they're based in America. The only Chinese servers used in XDA are those of Chinese people wanting us to download their ROMs.
And I don't know what the OP uploaded, as far as U knkw it's a text file. But even text files can contain viruses, just like pictures can, which is why I'm not downloading it and think it could be against the rules. But never mind. If you want to download it, go ahead. I'm not and I'm using AdBlock Plus, which I built from source.
Sent from my GT-I9505 using XDA Premium HD app
Beatsleigher said:
What? Dude. I'm a dev myself. I don't care if somethings closed source, as long as it has good enough documentation or unless I know exactly what the program's for...
And for all I know, from the IP address of the XDA servers, they're based in America. The only Chinese servers used in XDA are those of Chinese people wanting us to download their ROMs.
And I don't know what the OP uploaded, as far as U knkw it's a text file. But even text files can contain viruses, just like pictures can, which is why I'm not downloading it and think it could be against the rules. But never mind. If you want to download it, go ahead. I'm not and I'm using AdBlock Plus, which I built from source.
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
You misunderstood me. I'm saying that closed source software could always have backdoors, even if it comes from XDA users.
Even if somebody did find an exploit that somehow executed code in a .txt file, they wouldn't be using it one some kids wanting to block ads, they'd make a lot of cash either by reporting that bug to Microsoft or by selling it on a black market.
Beatsleigher said:
What? Dude. I'm a dev myself. I don't care if somethings closed source, as long as it has good enough documentation or unless I know exactly what the program's for...
And for all I know, from the IP address of the XDA servers, they're based in America. The only Chinese servers used in XDA are those of Chinese people wanting us to download their ROMs.
And I don't know what the OP uploaded, as far as U knkw it's a text file. But even text files can contain viruses, just like pictures can, which is why I'm not downloading it and think it could be against the rules. But never mind. If you want to download it, go ahead. I'm not and I'm using AdBlock Plus, which I built from source.
Sent from my GT-I9505 using XDA Premium HD app
Click to expand...
Click to collapse
Mannn I didn't upload anything. If you check the link in OP its brings you to another XDA thread. Better double check before you say something that you don't now . ..
Sent from my SPH-L900 using Xparent Skyblue Tapatalk 2
vasiaeva said:
Mannn I didn't upload anything. If you check the link in OP its brings you to another XDA thread. Better double check before you say something that you don't now . ..
Sent from my SPH-L900 using Xparent Skyblue Tapatalk 2
Click to expand...
Click to collapse
There is a reason I donb't click on links like that. That is (mainly) because my laptop's dead and I'm using my mum's, which is a really cheapy-sh*tty thing which doesn't even support NX from sides of the CPU (Which means it can't run Windows 8 and/or 8.1).
And the other reason being: I don't trust any files which I, myself, downloaded from somewhere you can't always trust where someone wants me to copy it to my system path.
So, no. I won't check things out that 'I don't know'.
And what was the point of this thread, is if only leads to a different thread?

Anyway to make superuser auto allow on fire tv 2nd gen?

I have a rooted box and on certain programs that require root access it removes the allow screen too fast for me to click allow and therefore cannot use the addon. Is there a way to make it simply auto allow everything? On the 1st get I was able to do this but not on the second gen. And when clicking on supersu you cannot launch it to edit any options so basically I am stuck.
Have you tried editing /data/data/eu.chainfire.su/files/supersu.cfg? In particular, change "access=2" to "access=1" as the default.
retyre said:
Have you tried editing /data/data/eu.chainfire.su/files/supersu.cfg? In particular, change "access=2" to "access=1" as the default.
Click to expand...
Click to collapse
No I have not. Not exactly sure what that means. Is that an adb command?
danknasty said:
No I have not. Not exactly sure what that means. Is that an adb command?
Click to expand...
Click to collapse
Open the file in any text editor (e.g., ES File Explorer has a Note Editor) and make the change to the default. If you can't, do an adb pull of the file, edit on another device, and put it back to its original location. Make sure you set permissions back to 600.
retyre said:
Open the file in any text editor (e.g., ES File Explorer has a Note Editor) and make the change to the default. If you can't, do an adb pull of the file, edit on another device, and put it back to its original location. Make sure you set permissions back to 600.
Click to expand...
Click to collapse
I was going to try this but remembered that rooting on fire tv uses the a to a usb cable method and all the files are transferred automatically. I do not have a super user file... would I install another one and overwrite it on the box?
sure you do. How would you have root without su? Just look for the file mentioned above and edit it as per retyre's post above.
danknasty said:
I was going to try this but remembered that rooting on fire tv uses the a to a usb cable method and all the files are transferred automatically. I do not have a super user file... would I install another one and overwrite it on the box?
Click to expand...
Click to collapse
Regardless of the method used to root, rooting involves the install of su and something like SuperSU to make it easier to work with. The fact that you're being prompted to allow su access is proof enough.
Install a root file explorer (I use ES File Explorer), allow it su access, go to the root of the device ("/") and look for the file in the location mentioned above.
retyre said:
Regardless of the method used to root, rooting involves the install of su and something like SuperSU to make it easier to work with. The fact that you're being prompted to allow su access is proof enough.
Install a root file explorer (I use ES File Explorer), allow it su access, go to the root of the device ("/") and look for the file in the location mentioned above.
Click to expand...
Click to collapse
I wasn't saying I didn't have supersu just that the method I use doesn't allow me access before I transfer but I see what you mean I can do this from the box itself. Was hoping I could do it to the supersu file on the computer so that when I root another box I wouldn't have to change the text file again. But I'll try this out later and see how it goes.
retyre said:
Regardless of the method used to root, rooting involves the install of su and something like SuperSU to make it easier to work with. The fact that you're being prompted to allow su access is proof enough.
Install a root file explorer (I use ES File Explorer), allow it su access, go to the root of the device ("/") and look for the file in the location mentioned above.
Click to expand...
Click to collapse
I tried accessing supersu in two root browsers and it gives me a bunch of greyed out permissions... I am not sure how to even open it with notepad on es file explorer. This is a little different than the first gen as everything must be installed through tw recovery. Before Supersu would just ask me if i wanted to approve everything I clicked ok and never had to check it again. Is there any way I can edit any of the text that is being injected into the box when installing the firetv recovery via the usb cable method.. I believe this is where supersu is being transfered.
update: ok I found supersu inside the prerooted rom... I opened it as a text file and its pages and pages of random symbols etc.
harlekinade said:
Comedy gold.
I suggest you swipe left.
Or start reading what other people actually posted in here before. Or this: https://en.wikipedia.org/wiki/Compiler or what a filepath is, or why you shouldnt try to resell Fire TVs - just in case...
Here is why - I havent encountered any case where the allow root access prompt would be on screen for less than 15 seconds during which you have to press down/right/enter to grant it permissions - and it only pops on when you are actively launching anything that tries to pull root rights - so you already have the remote in your hands.
Automating root prompt behavior to grant root by default is a really bad idea in general and you asking not only how to automate it, but also automate further installations of such a setup, suggests that maybe you are battling with user behavior of folks that don't know what a superuser prompt is and that go with default settings in most cases. Ethically it is hard to support any of this.
Click to expand...
Click to collapse
Wow that was really presumptuous and didn't at all relate to anything or help me.... excellent work. I suggest before attempting to troll a post you read the entire post so you can at least have a firm grasp on your ridiculous comments. 9 posts in you're doing great. Lol "ethically it is hard to support any of this." At least you made me laugh. I guess it's unethical in your opinion for me to paint my car red also since it comes from the dealership blue. Btw it never occurred to me to push down right then enter with the remote thanks problem solved.....
danknasty said:
I tried accessing supersu in two root browsers and it gives me a bunch of greyed out permissions... I am not sure how to even open it with notepad on es file explorer. This is a little different than the first gen as everything must be installed through tw recovery. Before Supersu would just ask me if i wanted to approve everything I clicked ok and never had to check it again. Is there any way I can edit any of the text that is being injected into the box when installing the firetv recovery via the usb cable method.. I believe this is where supersu is being transfered.
update: ok I found supersu inside the prerooted rom... I opened it as a text file and its pages and pages of random symbols etc.
Click to expand...
Click to collapse
Why are you trying to edit SuperSU (the app)? You should edit supersu.cfg, which is the text config file for SuperSU. Look for supersu.cfg in the location mentioned earlier.
retyre said:
Why are you trying to edit SuperSU (the app)? You should edit supersu.cfg, which is the text config file for SuperSU. Look for supersu.cfg in the location mentioned earlier.
Click to expand...
Click to collapse
The only supersu I was able to find using es explorer was the supersu file in the system folder... data showed up as black. I was finally able to find it using a different root browser I changed the setting for the app it self to 1 and it works. The only program that this gives me this issue with is teamviewer and I am wondering if it has to do with using a launcher version of kodi as it always kicks me out of the allow root selection screen, automatically disallows root and jumps to the kodi screen. But doing what you recommended worked. Thanks
harlekinade said:
Thank you for explaining your issue a little bit further. Changing the default of a superuser prompt to "yes" is something that shouldnt be considered an "easy fix" you could integrate into an image an then roll out on several devices.
Even if you LOL at the ethics of this, as you so eloquently put it - its still not something you should consider doing, generally speaking.
Just like you - trying to edit the Superuser binary in a texteditor - people can ruin their devices beyond repair, the default on "no" is a behavioral crutch to make it less likely that they find themselves in that situation.
Not sure if it would work for you - but I posted a teamviewer alternative in the general section (Exposed modules and root apps thread), that you might want to take a look at, as it doesnt require the app to be launched every time you want to access the Fire TV via VNC - as it runs as a service in the background.
I'm not exactly sure what you try to accomplish with teamviewer and why you want to roll out this configuration on multiple devices - so I'm not sure if it fits your purpose, but it might.
Click to expand...
Click to collapse
My issue was explained in the first post but i think you're really thanking me for telling you that I don't intend to sell rooted fire tv's with super user permissions on yes by default for malicious purposes... as you so eloquently put it.. I was actually laughing at the fact that you are on a forum that is primarily devoted to rooting and customizing devices but you draw the line at me wanting to default the supersu permissions on my devices because of ethical reasons. Anyways I'll check out that alternative to teamviewer you spoke of. I intend to use teamviewer for the purpose it was created which is to remotely access devices from my computer.
I actually did confirm that it was the launcher version of kodi that was kicking me out of the supersu prompt for anyone that was interested.. I turned off the xposed module to confirm.
harlekinade said:
You wanted support, you did get what you asked for, and then you almost ruined your device, because you din't see the file you were told to edit, and decided to open a different one. Then you blamed it on your root explorer app.
In the opening posting you stated that you wanted to change the default, but not why - and when I criticized this as being not needed in general, risky - and if you'd planned to roll it out to several installations, other people might use - as your postings intended, even unethical.
Unethical because of two concepts -
- You usually don't think about automation for mass deployment - if you don't plan an reselling devices, and we have a big problem with resellers in this community, not taking the responsibility "clause" seriously. Because of a principle you could describe as "sell and vanish". Which almost ruined the Kodi community, and arguably has impacted this one as well.
There is this distinct sense of "wasteland" after a general interest crowd was allowed to promote their interests (ad hoc, personal problem solving assistance) for a few months, by moderators that have no stake in this specific scene at all. I can only repeat that.
- It is ethically problematic to tell users like you how to change an important default and not what comes with it. The entire filesystem model and security in operating system depends on escalating user account rights. With root - you always grant access to everything.
Yes XDA (or what this community stood for in the past) is all for root (the rights to do whatever you want in an OS) - but ostensibly not for handing those permissions over to every user, or making sure that root level rights are granted by just pressing the big OK button on a TV remote, whenerver a popup comes up. The prompt is there for a reason. So is the default to no. If you want to change that because of a very specific personal problem, thats fine - you can (thats the "self empowerment" part), its the "mass rollout" of this configuration you hinted at - that rang some alarmbells - so to speak. Just from a "you might cause more problems than you solve" in the longterm - standpoint.
Click to expand...
Click to collapse
Well just to clarify not at one point did I ever almost ruin my device that's just pure imagination on your part furthermore I did not blame any program for my own actions I stated my experience. Secondly I can do whatever I want with a device I purchase, are you attempting to police the entire community with our own personal "ethical" standards on what should and should not be done with their property? I can tell you're biased because people sell these and it makes you upset. I've identified as not part of that community and honestly I don't owe you any explanation on what I want to do with my devices period. The quantity is also irrelevant can one not own more than two tvs? But again the issue was solved mainly by the aid of the others contributing to this post thanks for your ethical input though. Lol.
harlekinade said:
Then a simple question.
Did you plan, at any point, to sell rooted AFTVs with Teamviewer on them and Superuser modified in a way that defaults to granting root rights to any process that asks for them?
Because thats a major issue. Not only because we saw in here over the past few months what happens if some peaple sell other people "free and easy" and then arent able to assist them if something breaks. The influx of technically illiterate users - having been sold on "free" and then not getting what they paid for in the end, looking for "support" everywhere they could think of, has scared the enthusiasts community in this sector for years to come.
And amazons moves surrounding it (explained away by product bloggers as "easier for most people" and "necessary") ended up establishing blacklists on consumer android devices for the first time in history (?), and almost killed Kodi as an afterthought (there was money to be made, if you faltered and bowed to amazons restrictions).
Resellers were and still are misusing this community by playing out entities that at no point had a self concept of becoming "product support helplines" and destroying the open source ethos by funneling a mainstream clientel through small community channels, that werent created to handle them.
If you look around you - in this forum, on reddit - even on aftvnews - this is what is left at this point, and some of us have no interest in rekindling the hype.
Part of demanding questions from an open source community is also, that you reflect, contrast, rethink and tinker with ideas in the open. XDA becoming a place for the masses to get personal support services - actually destroys communities like this. People demanding that you attend to their personal needs first, and always are respectful, charming and considerate can become problematic also.
When you had opened the Superuser binary in the texteditor, complaining that it only shows you "cryptic symbols" you were exactly one or two steps away from ruining Superuser on your device. Namely - changing ANY of those cryptic symbols and then saving the file you had already opened with the intent to edit.
Click to expand...
Click to collapse
You're still on about me reselling devices I don't know what to tell you I'm not gonna respond to it anymore. I was never close to bricking my device but I love how you decided to map out a scenario where I could have. You seem to be dead set on policing this forum (this post) and I find it odd you're talking about the history of this community after just 10 posts. I never demanded anything, this is a forum as you stated. I made an inquiry you can either help or you can ignore (I thanked those who helped). Or you can force your own moral agenda down everyone's throat that would be option c, the one you chose. Anyway there's really nothing left to be said my issue was resolved with the help of those interested in the actual question. I know people sell these things so does everyone else, this is not relevant to this post however.
harlekinade said:
I have a history in here beyond those 10 postings - but thats a story for another day..
My intent may have been to rattle some notions - but not to "police" by mentioning the concept of ethics once. I'm merely a peasant at this point in time, with a handful of soil in his hand, muttering "what have you done to this place"..
If I had any real power left to wield in here, arguing over concepts would be higher rated than providing "easy solutions". It isn't.
Also, sorry that I have borrowed your thread - and thank you for the conversation. I enjoyed it.
Click to expand...
Click to collapse
I figured there was more to your ten post history. Perhaps maybe you were not so ethical at one point to have lost those powers??? [emoji50] But hey like I said you made me laugh so no complaints here. Continue to enjoy the forum as will I.

Hidden Google Account + Hidden Systemadminapp in LineageOS | Privacy infiltrated?...

Is the builtin app named "Storagemanager" a hidden system administrator in LineageOS 19.1?
I ask this because in LineageOS 14.1 Storagemanager is a systemadministrator app.
In LineageOS 14.1 under > settings > apps > special app access > deviceadministrators, nothing showed up by default, but then i pressed the three dots on the top right and selected "show system", then storage manager was shown as active system administrator app.
I had the option to disable it, which i did, as i dont want ANY app to be administrator as i consider myself as the device owner being the administrator in place, no need for an app to have any such administrative permissions.
Now in LineageOS 19.1 when you navigate to > settings > apps > special app access > deviceadministrators > the three dots on the top right corner to show system apps ARE GONE.
This makes me think storage manager is a secret/hidden system administrator that cannot be disabled in lineageOS 19.1 because the three dots at the top right have been removed in 19.1 basically making it IMPOSSIBLE to the device owner to remove unwanted systemadministrator apps.
If infact storagemanager is a secret systemadministrator app, why is that so, why was the option to disable this app from being a system administrator removed??
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Another question, in LineageOS 14.1 when i tried to open the calendar app, there was a prompt/popup saying "to use the calendar app you must add atleast one google account to your phone".
To be honest that scared me... considering that i use LineageOS purely for privacy and Google is the opposite of privacy.
That being said please keep in mind (this is very important), in LineageOS 14.1 when i opened the calendar app i was asked to add a Google account...
Here comes the things, in LineageOS 19.1 when i open the calendar app the prompt/popup says this: "before you can use the calendar app you must add atleast one calendar account".
That sounds very suspicious to me, because in 14.1 it was called google account and now in 19.1 its called callendar account, obviously my question is now... is the callendar account a google account just being called out in another way...?? If yes this is obviously a major manipulation because not naming google here will trick most likely any LineageOS user to creating a callendar account without even knowing that in reality what they just did was to create a goolge account on their privacy phone...... what sort of manipulative person would make such a nightmare come true? At this point i must ask if LineageOS even is a privacy option anymore... or has it been inflitrated by google already...
Another suspicous change i detected after switching from LineageOS 14.1 to 19.1 is that under > settings > apps > special app access > useage access, zero apps are listed, but once i pressed the three dots in the top right corner, bluetooth, media storage, nfc service, package installer, permissions controller, phone services, shell, storage manager, and systemui where ALL shown as "access to useage data = allowed". This really makes me woonder what is going on with LineageOS, what reason is there to grant all these apps access to useage data by default?? In LineageOS 14.1 there was not a single app even the system ones, that had useage data access set to allowed, infact in 14.1 all apps where set to be not allowed to access useage data. What is going on here and why??
Another change i noticed from LineageOS 14.1 to 19.1 is that under > settings > privacy, in 14.1 i was able to edit individual app permissions and enable or disable the privacy mode, in 19.1 there seems to be a new service so called "trust" which is responsible for privacy, im fine with that, however i am missing a very important privacy setting that was present in 14.1 but is not in 19.1 and that is "start on boot". On 14.1 i was able to select any specific app and deny or allow it's access to start itself on boot. Why is this important setting not present in 19.1?
In 19.1 under > settings > privacy > permissions manager, there is no option to deny apps to "start on boot".
My guess is, either 19.1 blocks all apps from starting on boot by default, or it allows it by default for all apps and there is simply no option to stop that which would be a major privacy downgrade compared to older versions...
thank you for posting this, my eyes have been opened.
Already 100+ views but only 1 comment, hmm...
Nobody knows anything?
I seriously want to get ansers to the above questions... these are real concerns to me.
My questions don't seem to get to much attention here, not even to mention a reply.
Does anyone know a forum or another place where i can ask what is written above?
I wan't answers, these are real privacy concerns!
Hmmm. I don't have answers to your specific questions. In another thread, you posted, generally, that most people don't care about your concerns. Very true. I wholeheartedly support you advocating your views; however encourage you to tread lightly if you want people to reply to you.
The only sure answer to your situation, and for me, also, is to grab the source of the rom which suits you, one without gapps, and then hire a dev to help go through the source to answer your questions. Then edit as needed and re-compile.
I am familiar enough with the process in general however don't have the skills to do it myself. LOS and its variants are probably a good place to start. I am using a vanilla build of RROS on A10 on a Oneplus8 pro. Since we have tools for A11 that is good but the tools generally aren't available for some time after a new Android release.
Your question might be asked of the Lineage devs, though I am sure they are busy and they are not forcing you to use their (free) product. There are also Linux phones available, although so far the hardware I have seen is not great.
What phone are you using? If you are serious about this, and are willing to support a dev project as above, we would have to settle on one or two similar OSes on the same Android version, and hire someone for a few days. This would be expensive. I, for one, would contribute. If we found 10 or 20 like minded people a crowdfunding page could be set up. If we did not reach the necessary amount then the money could be refunded.
To tell the truth, G keeps putting more obstacles in the way of modders and I am getting to the point where its not worth the trouble. Hopefully the hardware for Linux phones will improve.
Thoughts??
gregpilot said:
Hmmm. I don't have answers to your specific questions. In another thread, you posted, generally, that most people don't care about your concerns. Very true. I wholeheartedly support you advocating your views; however encourage you to tread lightly if you want people to reply to you.
The only sure answer to your situation, and for me, also, is to grab the source of the rom which suits you, one without gapps, and then hire a dev to help go through the source to answer your questions. Then edit as needed and re-compile.
I am familiar enough with the process in general however don't have the skills to do it myself. LOS and its variants are probably a good place to start. I am using a vanilla build of RROS on A10 on a Oneplus8 pro. Since we have tools for A11 that is good but the tools generally aren't available for some time after a new Android release.
Your question might be asked of the Lineage devs, though I am sure they are busy and they are not forcing you to use their (free) product. There are also Linux phones available, although so far the hardware I have seen is not great.
What phone are you using? If you are serious about this, and are willing to support a dev project as above, we would have to settle on one or two similar OSes on the same Android version, and hire someone for a few days. This would be expensive. I, for one, would contribute. If we found 10 or 20 like minded people a crowdfunding page could be set up. If we did not reach the necessary amount then the money could be refunded.
To tell the truth, G keeps putting more obstacles in the way of modders and I am getting to the point where its not worth the trouble. Hopefully the hardware for Linux phones will improve.
Thoughts??
Click to expand...
Click to collapse
My knownledge on programming is very limited, i would not be able to contribute to any meaningful software really. Indeed my language can quickly become not so nice when it comes to privacy, i don't like how the masses throw away their freedom.
Think about it, google chrome holds around 60% market share, then combine all chromium browsers and we are at around 90% while Firefox is at around 4%. Then think about how many people use Gmail and how many use privacy alternatives like Protonmail. Think about how many people use the standard google android os on their phone and how many have iphones and compare that to how many people use a linux phone or a custom os like lineage or graphene...
Anyone can protect their privacy, there are many great videos on youtube.
Here are some examples:
The Hated One
Creating deeply researched and well-sourced essays critiquing some of the most important issues of our time in a non-partisan, non-sectarian way. Mass surveillance is a backdoor into freedom of speech. Knowledge is power. And power corrupts. https://twitter.com/The_HatedOne_...
yewtu.be
Rob Braxman Tech
I'm the Internet Privacy Guy. I'm a public interest hacker and technologist. I use my extensive knowledge of cybersecurity and tech to serve the public good. I care about privacy. I warn you of digital manipulation, disinformation, mass surveillance. I also discuss alternative communication...
yewtu.be
Techlore
Techlore was built to prove privacy & security are not just achievable - but simple and accessible. We manage several projects, communities, and content to spread privacy & security to the masses. Visit our Website: https://techlore.tech
yewtu.be
Mental Outlaw
Only cool people visit https://based.win/
yewtu.be
Naomi Brockwell: NBTV
www.nbtv.media NBTV teaches people how to reclaim control of their lives in the digital age. We give people the tools they need to take back their data, money, and free online expression. - Your Money - Your Data - Your Life Empower Yourself. Created and hosted by Naomi Brockwell Our...
yewtu.be
Louis Rossmann
I discuss random things of interest to me. This is, and always will be, my personal variety show. I teach Macbook component level logic board repair from a common sense, everyman's perspective. I try to make it seem viable, and entertaining. I also go over business concepts & philosophy that...
yewtu.be
The Linux Experiment
Making Linux accessible: no techno lingo, no super technical content. Just Linux desktop news, simple tutorials, application spotlights, and opinion pieces trying to stay positive, without gatekeeping. đź‘Ź SUPPORT THE CHANNEL: Get access to a weekly podcast, vote on the next topics I cover, and...
yewtu.be
I use yewtu.be over youtube.com to avoid google.
See, google chrome and google search know all of your browsing history, there is no privacy, they make a profile of everyone who uses any of their services. Even if you use google without an account chances are they can identify you and your device. Same with gmail... it reads (scans) all of your emails and sell the content to adverstisers. I don't know how people can be ****** enough to use these services when you can simply switch to alternatives that are working perfectly flawless and don't spy on you.
Privacy can be easy.
Instead of google chrome > Firefox or even better Librewolf
Instead of google search > brave search or duckduckgo
Instead of gmail > protonmail
Instead of google android > lineage or graphene
It's not that hard...
Nobody forced me to use lineageos obviously i installed it on my own, i don't like the changes from 14.1 to 19.1 as they seem very suspicious to me, but i will still preffer LOS at any time over the standard google crap.
Before using a google phone id rather not use a phone at all.
Speaking about phones, people who buy iphones have lost their mind, i mean it.
My phone is a samsung S7, as long as it is functional i will not buy a new phone, besides i don't have the money now... your suggestion sounds interesting but i'm not into that really.
In the mean time i will repeat what you said, we can only wait for linux phones to support modern hardware and get one of those in the future.
GrapheneOS seems like the best choice as of now but it's really ironic that it works only on google pixel phones...
Most people don't care that they are been spied on. They are after the they easy life. Want all the mod cons to make things easier. Unfortunately you can't change peoples habits. Have started seen a lot of custom rooms with suspicious files, that makes a person wonder if google is paying the devs to include their software.
ShaunSmit said:
Most people don't care that they are been spied on
Click to expand...
Click to collapse
Well, plenty of people do. For example, just see XDA's thread for FairEmail:
https://forum.xda-developers.com/t/...en-source-privacy-oriented-email-app.3824168/
Privacydroid said:
builtin app named "Storagemanager" a hidden system administrator in LineageOS 19.1?
Click to expand...
Click to collapse
Privacydroid said:
My questions don't seem to get to much attention here
Click to expand...
Click to collapse
Well, I am interested in and have subscribed to this topic... it's just that LOS19 is still not really a hot topic for me yet (still fighting with LOS18, lol).
SigmundDroid said:
Well, plenty of people do. For example, just see XDA's thread for FairEmail:
https://forum.xda-developers.com/t/...en-source-privacy-oriented-email-app.3824168/
Well, I am interested in and have subscribed to this topic... it's just that LOS19 is still not really a hot topic for me yet (still fighting with LOS18, lol).
Click to expand...
Click to collapse
My bet lineage 1.18 is also affected by what i described above.
there might be some privacy oriented custom roms. have you checked ?
e Foundation - deGoogled unGoogled smartphone operating systems and online services - your data is your data
your data is YOUR data
e.foundation
or
Purism– Librem 5
Introducing the – Librem 5 by Purism
puri.sm
Fytdyh said:
there might be some privacy oriented custom roms. have you checked ?
e Foundation - deGoogled unGoogled smartphone operating systems and online services - your data is your data
your data is YOUR data
e.foundation
or
Purism– Librem 5
Introducing the – Librem 5 by Purism
puri.sm
Click to expand...
Click to collapse
Never heared about https://e.foundation/ will have a look at that one.
The librem 5 has outdated hardware and is expensive, but that's not the problem... the shipping times are totally ******. Can take years for you to ever recive that phone.
Besides, that doesn't anser any of my above questions about LOS, guess that wasn't your intention anyways.
Privacydroid said:
Never heared about https://e.foundation/ will have a look at that one.
The librem 5 has outdated hardware and is expensive, but that's not the problem... the shipping times are totally ******. Can take years for you to ever recive that phone.
Besides, that doesn't anser any of my above questions about LOS, guess that wasn't your intention anyways.
Click to expand...
Click to collapse
about your privacy related inquiries, i recon that Lineage, while it used to stand for privacy in the first years, it started to be seen more as a way to get updates on no longer supported devices. and given that almost every user that uses lineage also had flashed gapps, makes sense for them to add gapps in their everyday custom rom as well. Google has its sets of downsides and upsides. Privacy is good, but functionality is more important. a lot of good apps rely on google implemented functionality. Say that i would need to drive around the country. Privacy is my preference, but i need a fully functional bugless waze. Waze without google play services is a mess, if you get it working. Android Auto without gapps isnt possible.
For my devices, at least, Lineage did not have gapps baked in. For me, a good thing. There are a few vanilla roms left out there. Even without gapps, there are still leaks to google (the captive portal connectivity check, for one) but the footprint is much smaller.
For me, I have found open source alternatives to ALL of googles bloat and spyware. Not as convienient, sure. Pain in the a** sometimes, yes. Wayze? Host your own cameras, use openstreetmap (osmand) instead. google has made it very convienient with their ecosystem. I, for one, do not wish to share my life with them.
Fytdyh said:
about your privacy related inquiries, i recon that Lineage, while it used to stand for privacy in the first years, it started to be seen more as a way to get updates on no longer supported devices. and given that almost every user that uses lineage also had flashed gapps, makes sense for them to add gapps in their everyday custom rom as well. Google has its sets of downsides and upsides. Privacy is good, but functionality is more important. a lot of good apps rely on google implemented functionality. Say that i would need to drive around the country. Privacy is my preference, but i need a fully functional bugless waze. Waze without google play services is a mess, if you get it working. Android Auto without gapps isnt possible.
Click to expand...
Click to collapse
No idea why people use gapps or microg, it's anti privacy so i do not ever use any of that.
I do not use any google services in my life and i don't miss them or need them for anything, i have alternatives.
I have to disagree on this phrase "Privacy is good, but functionality is more important".
If you are forced to give up privacy to use a service or product then the service or product is not worth being used.
Privacy is way more important than functionality, besides 90% of the time you can find perfectly working privacy friendly alternatives for almost anything.
Instead of google maps for example i use these:
Map at DuckDuckGo
DuckDuckGo. Privacy, Simplified.
duckduckgo.com
OpenStreetMap
OpenStreetMap is a map of the world, created by people like you and free to use under an open license.
www.openstreetmap.org
Not sure if that is helpful while driving, would be fine for me, never heared about waze.
I banned Google of my life and im happy with that, wasn't that hard after all.
gregpilot said:
For my devices, at least, Lineage did not have gapps baked in. For me, a good thing. There are a few vanilla roms left out there. Even without gapps, there are still leaks to google (the captive portal connectivity check, for one) but the footprint is much smaller.
For me, I have found open source alternatives to ALL of googles bloat and spyware. Not as convienient, sure. Pain in the a** sometimes, yes. Wayze? Host your own cameras, use openstreetmap (osmand) instead. google has made it very convienient with their ecosystem. I, for one, do not wish to share my life with them.
Click to expand...
Click to collapse
My lineage version also doesn't have gapps in it, atleast nothing that is visible or accessable to me..
Not sure about the calendar thing described above..
What do you mean by captive portal connectivity check, what's that?
I beleve LOS uses Googls SUPL Server's too.
Great to meet someone with the same mindset, way to many people throw away their privacy which is equal to freedom, for "convienience"... It's crazy.
What do you mean by captive portal connectivity check, what's that?
I beleve LOS uses Googls SUPL Server's too.
Click to expand...
Click to collapse
Every time your device makes a network connection (wifi or cellular) it pings "connectivitycheck.gstatic.com". Not really a ping, its a http request to check for internet connectivity. Successful completion will remove the "x" by the wifi and/or cell data icon. Although if the address is blocked on your router the "x" will remain, and your device will complain about not having internet access....but it does! (so long as your wifi router/cell net has access). But wifi calling won't work.
For more, go here:
https://forum.xda-developers.com/t/guide-how-to-avoid-the-captive-portal-checkin-to-google.3927561/
You can host your own check server, or....just disable the check.
I have confirmed this works on A9 and A10 AOSP roms. There are different variants of this command for different roms. You may have to try several of them.
From an adb shell: (needs root)
Code:
:/ # settings put global captive_portal_mode 0
***********THIS DISABLES GOOGLE CONN CHECK***** A9 and 10
To verify it is disabled:
Code:
:/ # settings list global | grep portal
Should return "captive_portal_mode=0"
If you do connect to a captive portal page (public wifi, open connection) where the owner wants a login cred then the side effect of this is that it won't work.
The issue is that everytime the check is run, google will get your IP address and browser/OS and can infer your coarse location even if location services are turned off. I have all google domains blocked on my wifi so to keep my wife happy I disable the check on her phone also so she does not get the "no internet" notification.
Another hole is the agps (assisted gps) database downloaded from google or your phone carrier regardless of enabled location. I believe you can edit the server which is contacted, again, will require root.
This post says you can edit the gps.conf file:
https://forum.xda-developers.com/t/a-gps-supl-protocol-and-privacy-breaching.3602863/
Anyone try that? What abour removing "supl" from the apn type?
But I'm not there, yet, I usually have location selected off. Rob Braxman has a good vid here, use freetube:
https://github.com/FreeTubeApp/FreeTube
https://www.youtube.com/watch?v=vbBkZ-MROEk?
Again as stated earlier the best fix is to find a AOSP source of a rom you like, edit (or hire a dev) to edit out all of the bloat and google tracking which may remain, and re-compile.
gregpilot said:
Every time your device makes a network connection (wifi or cellular) it pings "connectivitycheck.gstatic.com". Not really a ping, its a http request to check for internet connectivity. Successful completion will remove the "x" by the wifi and/or cell data icon. Although if the address is blocked on your router the "x" will remain, and your device will complain about not having internet access....but it does! (so long as your wifi router/cell net has access). But wifi calling won't work.
For more, go here:
https://forum.xda-developers.com/t/guide-how-to-avoid-the-captive-portal-checkin-to-google.3927561/
You can host your own check server, or....just disable the check.
I have confirmed this works on A9 and A10 AOSP roms. There are different variants of this command for different roms. You may have to try several of them.
From an adb shell: (needs root)
Code:
:/ # settings put global captive_portal_mode 0
***********THIS DISABLES GOOGLE CONN CHECK***** A9 and 10
To verify it is disabled:
Code:
:/ # settings list global | grep portal
Should return "captive_portal_mode=0"
If you do connect to a captive portal page (public wifi, open connection) where the owner wants a login cred then the side effect of this is that it won't work.
The issue is that everytime the check is run, google will get your IP address and browser/OS and can infer your coarse location even if location services are turned off. I have all google domains blocked on my wifi so to keep my wife happy I disable the check on her phone also so she does not get the "no internet" notification.
Another hole is the agps (assisted gps) database downloaded from google or your phone carrier regardless of enabled location. I believe you can edit the server which is contacted, again, will require root.
This post says you can edit the gps.conf file:
https://forum.xda-developers.com/t/a-gps-supl-protocol-and-privacy-breaching.3602863/
Anyone try that? What abour removing "supl" from the apn type?
But I'm not there, yet, I usually have location selected off. Rob Braxman has a good vid here, use freetube:
https://github.com/FreeTubeApp/FreeTube
https://www.youtube.com/watch?v=vbBkZ-MROEk?
Again as stated earlier the best fix is to find a AOSP source of a rom you like, edit (or hire a dev) to edit out all of the bloat and google tracking which may remain, and re-compile.
Click to expand...
Click to collapse
Thank you for this interesting reply, i will attempt to remove captive portal connectivity check / connectivitycheck.gstatic.com with adb by following your provided command
settings put global captive_portal_mode 0
settings list global | grep portal
However you mentioned this needs root, my device is not root so this basically wont work without root?
I could use magisk for rooting.
Rob Braxman is great, watching all of his content. But i couldn't find any instructions to disable googles SUPL.
I also don't think rob has a video for captive portal connectivity check, or does he?
From my experience with his videos he acts as if degoogled phones with lineage are 90% better than normal phones, so i guess the other 10% are things like SUPL and captive portal connectivity check which are not that easy to disable..? If google knows my locations on a degoogled device with lineageos by using captive portal connectivity check then hell, that#äs really disturbing i had no idea that they still know where my phone is / where i am, very scary...
However you mentioned this needs root, my device is not root so this basically wont work without root?
Click to expand...
Click to collapse
Yes, the command needs root. Also there are some differences based on your version of Android.
The following is old, but has some good stuff:
https://www.reddit.com/r/privacy/comments/cldrym
The biggest help for this is to not install google services, and use a vanilla rom without it.
As far as captive portal, that is fixable.
The DNS servers can be changed from googles, but it is less straightforward.
NLP is not present without gapps, from what I have read
The SUPL issue, for me, is a WIP. I will happily deal with slow GPS TTFF. What I don't know:
1. Editing (removing) the supl entry in the APN file, what affect, if any;
2. Editing /vendor/etc/gps.conf (newer roms have the file in /vendor) to show a non g server;
3. the big question, which GPS radio chips may or may not have SUPL on the hardware level and therefore, if so, we are unable to fix.
gregpilot said:
Yes, the command needs root. Also there are some differences based on your version of Android.
The following is old, but has some good stuff:
https://www.reddit.com/r/privacy/comments/cldrym
The biggest help for this is to not install google services, and use a vanilla rom without it.
As far as captive portal, that is fixable.
The DNS servers can be changed from googles, but it is less straightforward.
NLP is not present without gapps, from what I have read
The SUPL issue, for me, is a WIP. I will happily deal with slow GPS TTFF. What I don't know:
1. Editing (removing) the supl entry in the APN file, what affect, if any;
2. Editing /vendor/etc/gps.conf (newer roms have the file in /vendor) to show a non g server;
3. the big question, which GPS radio chips may or may not have SUPL on the hardware level and therefore, if so, we are unable to fix.
Click to expand...
Click to collapse
I just tried using your solution for the onnectivitycheck.gstatic.com issue by using the provided command
:/ # settings put global captive_portal_mode 0
Before i that i rooted the phone with magisk, the command did not work (i attempted executing the command on cmd in windows inside the adb/fastboot folder, usb drivers are also installed.
I was able to start the daemon by using adb devices but the command you provided didn't work.
The phone was booted normally during the test, maybe i should instead go to downloadmode or recovery mode? The link you send for more instructions says we should use a cmd app on the phone to exectue this command (a pc is not mentioned), however i don't find any cmd app on the phone (lineageos 19.1).
Privacydroid said:
I just tried using your solution for the onnectivitycheck.gstatic.com issue by using the provided command
:/ # settings put global captive_portal_mode 0
Before i that i rooted the phone with magisk, the command did not work (i attempted executing the command on cmd in windows inside the adb/fastboot folder, usb drivers are also installed.
I was able to start the daemon by using adb devices but the command you provided didn't work.
The phone was booted normally during the test, maybe i should instead go to downloadmode or recovery mode? The link you send for more instructions says we should use a cmd app on the phone to exectue this command (a pc is not mentioned), however i don't find any cmd app on the phone (lineageos 19.1).
Click to expand...
Click to collapse
No, the command is made from a root shell on the phone directly, or through an adb shell.
First:
open a cmd window on your pc, cd to your adb folder. Do you have "minimal adb and fastboot" installed on your pc? Its on the forums here.
Plug in your phone to USB, do not boot to recovery or download mode. Just the normal system.
From the open cmd window, issue "adb devices". What appears?
If "unauthorized", you have to enable adb debugging in developer options. You have that enabled, right? If you do you will get a prompt on the phone to allow adb debugging access when you connect over USB.
If you get "device XXXXX", I do not recall the number of characters, then you can proceed.
issue "adb shell"
you should get a shell prompt (your phone cmd shell)
Issue "su"
If you are rooted magisk may prompt you to allow root
issue "whoami", this has to return "root".
Then issue the command I gave you. " settings put global captive_portal_mode 0"
The second string "settings list global | grep portal" is only to verify the success of the first command.
You don't need adb for this, you can also enable the "local terminal" in developer options. Or use your favorite terminal. I like Termux.
Open the terminal from your app drawer
issue "su"
Again, you should get a magisk prompt requesting permissions, allow it
issue "whoami" , verify root
then issue the same two commands.
What version of Android are you on?

Categories

Resources