To be rooted or not to be? [A Fundamental Question] - Galaxy Ace S5830 Q&A, Help & Troubleshooting

To be rooted or not to be? [A Fundamental Question]
I guess you already read the news at CyanogenMOD about there thoughts regarding not enabling root access by default but rather give the user the option to be aware of the risk, if he is gonna enabling it by his own decision?
As a user you also should take some minutes and rethink about data security measurements on your device. If you're only using the phone with a prepaid mobile card and don't store confidential data like passwords or credit cards numbers or even do online payments with it, then you don't have to bother with security at all. Just enjoy your phone with the newest and fanciest ROM you would like to.
But in case you're intending to use its full potential, then below is my take on this subject. Read on, if and only if you really want to know about my personnel preferences on this topic. If my post hurts your eyes, ears or mouth in anyway, then please keep them all closed and move on. I'm very sorry, if I've stolen your precious time up to this point. ... ^^
<point-of-no-return>
Stock or Custom? Stay with unmodded stock rom, if you don't need the features the cooked roms is offering you. If something goes wrong (dialer, keylogger, trojan, ...), then Samsung have to take all the blame and financial loss for you. But only, if you're really carefull yourself about third party Apps. Install only from trustworthy sources and ask yourself, if the App should really get all the permissions it is asking for. Maybe an alternative App will do the same work but beeing less demanding?
Root What? If you don't understand the consequences of root permissions, then it probably is not what you should looking for.
Opensource or Closed? Only entrust third party ROMs with opensource code. You might never take a look at it, but there are other tech savvy users/developers, who will raise the issues publicly, if there happens to be any, because they can read the source and point out the security holes and eventually fix them quickly too. Since I'm reading many questions about the PROS or CONS of unofficial and official CyanogenMODs: You should by now be able to answer this question yourself, if you're a security and privacy loving individual.
Themes or Hacks? If you're missing some features on your current phone, then reconsider to get your hands dirty and do the needed changes yourself. Or at least know howto take the supplied MODs apart and thoroughly compare the modified files with your current installed ones. There is a reason why big companies distributing files with at least a MD5 or SHA1 checksum, you know? But since ACE, GIO and the MINI (->galaxyics) are midrange devices targeting teens as consumers, security or privacy is something most of this users don't want/have to worry about. Anyway, if the changes are not applied to the executable codes (dex files) but rather considered as widely known as theming (change layout, PNGs, color or text codes), then you should be on the riskfree side to apply them without further notice. ...
Hope I could give the more concerned users some points to think about towards ROMs and MODs in general.
ToS
[x]

Related

[Application]XDA TV 1.0

Reminds me of something... But I cant put my finger on it
Mod Edit: Links removed - http://forum.xda-developers.com/showpost.php?p=4745624&postcount=8
Its skinned to remove all logos, The only thing I could not remove was the text. I made it for myself, keep that in mind. I am just sharing.
*edit* if the original does not work, I doubt this one will but use the same install information 555-555-5555 and you must have the widget on your home screen. Launch it from the widget preferably.
is there anything different about these apks? Are they wifi compatible?
I tried wifi compatibility and it is still in the works but as of now this is only for looks but I am working on wifi as I post this.
555-555-5555?? call that number while the widget is up?
On some of the sprint apps it makes you comfirm that you are a sprint customer, so instead of sending sprint our real phone numbers (caller id=your name) we send them fake ones, like 555-555-5555
this seems like not a smart thing for you to do.
DemoShadow said:
Reminds me of something... But I cant put my finger on it
Mod Edit: Links removed - http://forum.xda-developers.com/show...24&postcount=8
Its skinned to remove all logos, The only thing I could not remove was the text. I made it for myself, keep that in mind. I am just sharing.
*edit* if the original does not work, I doubt this one will but use the same install information 555-555-5555 and you must have the widget on your home screen. Launch it from the widget preferably.
Click to expand...
Click to collapse
so basically you just violated alot of copyright laws....
Unfortunately, some may think, we cannot allow links to modded paying software. The software in question is provided under licence to Sprint users only. Now, we try not to sensor knowledge here, so we not going to delete all references to the fact that this software can be ported to non Sprint devices and used free of charge in breach of terms and conditions, BUT we cannot permit links to the software that would actively encourage members to break the law.
Mike
Links will be removed
It's not the fact that it is Sprint software ported over to the G1. It is the fact that he removed all of Sprint's branding. That's like taking the the Google Maps app (or any Google app) and removing Google's name from it. It's simply just a breach of copyright.
tekkitan said:
It's not the fact that it is Sprint software ported over to the G1. It is the fact that he removed all of Sprint's branding. That's like taking the the Google Maps app (or any Google app) and removing Google's name from it. It's simply just a breach of copyright.
Click to expand...
Click to collapse
Well, that too but the whole subject of the Sprint / Telnav software has been raised and discussed with Mods and Admin so there are issues regarding the use of such software on non Sprint phones.
Mike
Wow. Mike you have got to be one of the fairest, most logical forum mods I have ever had the pleasure to read. I am very impressed with the way in which this was handled.
mike i thought your site got closed because u had all the htc breakdown videos and what of that? but i do understand the point so i say lets make a new site that will let you post or upload. that way we can get the goods and xda dont get the blame if i remeber november 27 windows came down on xda for the same ish so please pleas dont let it happen to android just look for a new method for the shares. but i do like the work and want the app i was to late late for the link !!!!! Thanx mike !!!!!
*edit*( november 2007 )
llxll0m3g4llxll said:
mike i thought your site got closed because u had all the htc breakdown videos and what of that? but i do understand the point so i say lets make a new site that will let you post or upload. that way we can get the goods and xda dont get the blame if i remeber november 27 windows came down on xda for the same ish so please pleas dont let it happen to android just look for a new method for the shares. but i do like the work and want the app i was to late late for the link !!!!! Thanx mike !!!!!
Click to expand...
Click to collapse
I was shut down for a while and had to remove some things, but in the end reached a sort of unofficial compromise on intellectual property rights.
This is a delicate issue, in my case I don't offer folks something they would normally have to pay for through their network or otherwise. (I offer stuff they should not have, even if they have money to pay for it!!).
I guess our bottom line is that knowledge should be freely available, but handing folk the tools, to install stuff that is very close to being Warez, is off-limits. (Robbing banks with an uzi can be profitable = knowledge, but handing out uzis and suggesting you rob a bank, crosses the line)
.... and yes we know cooking ROMs and such is also a grey area, but even there we say that ROMs should not be cooked that include for free any software for which the user would normally have to pay.
If someone set up a site with Sprint software on it - that's entirely up to them. We would probably even accept a link to it if the poster said "hey here's a breakdown of a Sprint ROM" In fact that would probably be OK to post here - at least until someone asked for a "take-down"
The problem only comes when someone says you can load this stuff on non-Sprint phones and get stuff for free and just to help you do that here are the links. In other words that ceases to be a theoretical point of information and becomes an encouragement to do something naughty. If folks want t be naughty then they have to do so, by reading the knowledge and then looking for the tools from whatever source, here or elsewhere without our help.
These kinds of things have been debated many times here at XDA - there are no absolute rights and wrongs, only things we think are more or less safe for us to do - just like life generally I guess
Mike
mikechannon said:
These kinds of things have been debated many times here at XDA - there are no absolute rights and wrongs, only things we think are more or less safe for us to do - just like life generally I guess
Click to expand...
Click to collapse
Well said Mike. When I read it, I had a /foreheadslap moment thinking, "well duh, this should be pretty obvious," but im constantly reminded that there are users on here who simply feel they have a right or deserve to have any given piece of software if it is leaked online.
The bottom line is, do not post software that has not been explicity licensed as open source unless you have obtained permission to redistribute. As a general rule of thumb, if the software cannot be legally obtained unless you pay someone (e.g. it comes preloaded on a phone) or can be obtained free but only if you agree to a license agreement (downloading certain software update packages) then you should not redistribute it on xda or elsewhere.

[Q] Trojans/rootkits in custom ROMs

How to protect yourself from trojans/rootkits in custom roms? There should be some file checksum service, or a scanner. For example, someone might publish a "keyboard fix" which includes a keylogger etc
(facepalm)
why facepalm? it's a legit concern. as much as we like work of people like doc and other devs, we only "know" them thru da interweb. not saying any of the devs are suspicious or anything, but some healthy sceptism won't do harm.
to the original op, i suppose it's just like in real life - be careful, read up on feedbacks, watch the rom cooker's behaviour/history etc. if they have a long history of projects/been longtime helpful to the community etc, then good chance they are good guys. of course nothing is 100%, so if you're still worried, then stick to the official roms.
You can't protect yourself from that. If you use a custom Rom someone put together, you trust that person that he or she didn't have any bad intentions when he or she did so. If you can't trust that person... Well, use the stock ROMs and trust Samsung instead. Or maybe Apple. They're trustworthy. Keep their sheep locked up good.
Understandable that you are concerned but firstly, have you seen the amount of work put into these ROMs by the chefs? Why on earth would they even have viruses or let them slip through the ROMs? Custom ROMs have been around for years and that's never happened, i've cooked ROMs for the i900 and never ever thought about that.
There is an extremely slim chance that you will get a virus in a custom ROM.
sunwee said:
why facepalm? it's a legit concern. as much as we like work of people like doc and other devs, we only "know" them thru da interweb. not saying any of the devs are suspicious or anything, but some healthy sceptism won't do harm.
to the original op, i suppose it's just like in real life - be careful, read up on feedbacks, watch the rom cooker's behaviour/history etc. if they have a long history of projects/been longtime helpful to the community etc, then good chance they are good guys. of course nothing is 100%, so if you're still worried, then stick to the official roms.
Click to expand...
Click to collapse
Thats not a legit concern, thats paranoia and idiocy.
why? tell me, is it *impossible* to add a trojan to the unofficial roms?
sunwee said:
why? tell me, is it *impossible* to add a trojan to the unofficial roms?
Click to expand...
Click to collapse
For sure it's possible, especially if you download a repacked cooked ROM that wasn't uploaded by the ROM cooker himself.
Otherwise, it's purely paranoid feeling...
Sent from my GT-I9000 using XDA App
sunwee said:
why? tell me, is it *impossible* to add a trojan to the unofficial roms?
Click to expand...
Click to collapse
It is of course but that doesn't mean that someone would harm his/hers reputation here in the community by doing such a thing! If you are afraid then don't use custom roms!
I caught man flu once. i remember flashing a rom, answering a call, putting the phone to my ear. Next thing you know i was having cold sweats
rrva said:
How to protect yourself from trojans/rootkits in custom roms? There should be some file checksum service, or a scanner. For example, someone might publish a "keyboard fix" which includes a keylogger etc
Click to expand...
Click to collapse
I noticed you q in the doc_kalpik rom thread. The reasons for the keyboard fixes is that some apk's wont allow so high compression as others. Swype included.
And i need time to time to fix the errors as bugfixes
You can easily compare the apk's against the leaked rom so no need to try to put in any bad hints about rootkits etc.
I ask me, who would do something like that?...
there are a lot of bad people out there. and if money come into the game a lot of trouble rise.
DocRambone said:
I noticed you q in the doc_kalpik rom thread. The reasons for the keyboard fixes is that some apk's wont allow so high compression as others. Swype included.
And i need time to time to fix the errors as bugfixes
You can easily compare the apk's against the leaked rom so no need to try to put in any bad hints about rootkits etc.
Click to expand...
Click to collapse
Sorry, no hint was intended specifically to your rom, that's why I started a different thread to ask about it in a more general way. It was just a question which struck me lately. Thanks for the explanation and for all your efforts, I've been using your roms and they are good work.
Bad people dont buy expensive phones
Nah, i think this is mainly paranoia, and what would the virus do anyway :O Delete ur data? Steal info?? Pshhh.
rrva said:
How to protect yourself from trojans/rootkits in custom roms?
Click to expand...
Click to collapse
There are 2 concerns here, both of them legit, but one difficult to protect against (and somewhat unlikely).
1) ROM chef installs a rootkit/malicious piece of code. No amount of scanning or MD5 hashes will help. The only solution is to cook your own ROM from trusted source files AND scan the source code yourself.
2) A person distributing/offering DL link to a cooked ROM adds an additional piece of malicious code to the rom. ROM chefs can offer protection against this by distributinh their orig roms with MD5 hash, against which users can compare other DLs.
I'm personally more worried about free software from various countries that I can DL off the Android Marketplace. There are already password harvesting apps there and the number is likely to continue.
Against this, there's no protection, unless somebody compiles TaintDroid and/or a better firewall into Android (DroidWall is not enough).
As for the motivation to do malicious code injection, plenty exist already (password harvesting, credit card info, bank connection interception, bot-net, telephony based billing, etc).
It will only get worse as time goes by, trust me.
akafitz said:
Bad people dont buy expensive phones
Nah, i think this is mainly paranoia, and what would the virus do anyway :O Delete ur data? Steal info?? Pshhh.
Click to expand...
Click to collapse
First of all its not just paranoid to think about that, cause ive caught myself a trojan on my sgs (not with a custom rom). But i dont think about getting any virus or trojan when i flash a custom rom.
And well why would anyone be interested in putting a trojan to ur android phone? Its quite simple... Many people buy apps from the android store. To pay for em they type in their credit card information, witch will be sent to the guy who programmed the trojan.
Sent from my GT-I9000 using Tapatalk
I think he is concered about a clean ROM and somebody repacks that rom and posts is as somebody elses rom
vasra said:
ROM chef installs a rootkit/malicious piece of code. No amount of scanning or MD5 hashes will help. The only solution is to cook your own ROM from trusted source files AND scan the source code yourself.
Click to expand...
Click to collapse
And you can't even circumvent this by putting up the sources and let people compile+compare them. Even if you give people the complete toolchain from start to end there will be differences in size and data of some compiled applications.
So in theory although I put up the sources of ULTK noone can actually test for 100% whether the image I put up is actually the same without any kinds of backdoors/trojans and such. And yes I did put a trojan in the compiled ULTK, just for fun... no, was only kidding
vasra said:
There are 2 concerns here, both of them legit, but one difficult to protect against (and somewhat unlikely).
1) ROM chef installs a rootkit/malicious piece of code. No amount of scanning or MD5 hashes will help. The only solution is to cook your own ROM from trusted source files AND scan the source code yourself.
Click to expand...
Click to collapse
You're right. But, a lot of what is on a ROM is a compilation of known good files copied from official/leaked roms. So, some checksumming would at least narrow down the search to what is different in a specific rom.

Should I root

Does rooting provide any protection against malware or does it make it worse?
Sent from my Nexus 7 using Tapatalk 2
Best protection against malware = user.
If you just root, and don't use a custom recovery and custom ROMs, immediately install SuperSU, antivirus, and make sure you protect yourself. SuperSU will at least notify you when an application is trying to use root permissions (aka - modify or access system files) which is not something you want every program doing.
The nice thing about having root is you can change things on your phone a launcher can't touch - boot animation, screen DPI, backup apps like Titanium Backup, and of course clearing out carrier bloatware.
If you do go with a custom recovery, TWRP for example, and flash ROMs, CyanogenMod for example, you are often provided with SuperSU tools and other options as part of the package. Just be very sure you are using images from reputable sources. Lord knows what kind of stuff someone who published a custom ROM could get off your device if they had ill intents.
If you are new to rooting, flashing, etc then I would suggest starting with root access only. Explore what you can do with it, learn it, and be conscious of security as you go. After you are comfortable with it, try CyanogenMod to see how a custom ROM really differs from stock.
Rooting will not give any protection against malware you have to install antivirus or use any app that will help you against this with root
Oh, and to answer the question 'should you root'... We tinker with all the things because we like to. We like knowing how all the things work. We like having more control of all the things. If you don't like this, then don't.
clago87 said:
Does rooting provide any protection against malware or does it make it worse?
Sent from my Nexus 7 using Tapatalk 2
Click to expand...
Click to collapse
Android is blamed for earning malware for your device but hey! the user of the device is 100% responsible for it. Stop clicking on spammy links and visiting those websites which allow you to earn malware Problem will be solved.
Now rooting. Rooting is the best way to taste your android device at fullest. Use custom ROM, tweak the kernel and much more
clago87 said:
Does rooting provide any protection against malware or does it make it worse?
Click to expand...
Click to collapse
I'm not an expert and have found the site to be filled with a lot of great, detailed information including howto instructions if you decide to root. I've rooted a few phones but not the N6 yet. I'm waiting for 5.1 to be available only because I'd rather the OTA download and didn't want it to break root and have to spend a day playing with the phone to get it set up again. Yes, lazy too. My two cents:
There were a few articles back when 5.0 was being released saying how root for this OS would need to bypass much of the built-in security features with this OS version. I don't have a clue if it is true. If I decide to root, I'll go back and see if this is a real problem.
Why root? The exposed framework gives you nice features. Apps can have access to the phone os/hardware that is blocked, for example, you can get the notification LED to work, the battery statistics allow more access so you can see what app is killing your battery. There was one or two other apps I used that required root, can't recall now.
Its easy to say malware is a user problem, some of it is like careless sideloading. But I have no idea if a web page is loading something on my phone. Worse, if you look at the permissions you grant apps, you would load very few on your phone. I find the service providers , like T-Mobile (mine) and Verizion (Fios) to be the worst in asking for access to the phone data for no apparent reason. Does my app to see visual voicemail really need access to my microphone and camera or apps I have loaded on the phone? In my opinion this is spyware as you have no idea what is being uploaded to the app developer. Many of the apps in google play have questionable permission requirements.
That's actually another reason to root, the xposed xprivacy module (haven't used it). Or, using a DNS that will filter malware web site (I think you need root to change the DNS in Android). I'm not sure about the status of xposed on the nexus 6 so you have to read the threads. I don't know why you want to root, so you have to determine if it is worth the effort.
Simple answer is No.
if you're asking if you should root then you do not know what root is and the benefits to it. if you are happy with the phone and all the apps you have suit your needs, then stay as you are and do not download any dodgy apps from the play store
IINexusII said:
Simple answer is No.
if you're asking if you should root then you do not know what root is and the benefits to it. if you are happy with the phone and all the apps you have suit your needs, then stay as you are and do not download any dodgy apps from the play store
Click to expand...
Click to collapse
Couldn't agree more. If you have to ask, the answer is no.
IINexusII said:
Simple answer is No.
if you're asking if you should root then you do not know what root is and the benefits to it.
Click to expand...
Click to collapse
Terrible answer! Just because someone doesn't already know something is piss poor justification for telling them not to learn it.
If someone asked the forum if there were any benefits in C#, would you tell them not to bother learning to program, just keep buying Microsoft products?
FFS...
Elnrik said:
Terrible answer! Just because someone doesn't already know something is piss poor justification for telling them not to learn it.
If someone asked the forum if there were any benefits in C#, would you tell them not to bother learning to program, just keep buying Microsoft products?
FFS...
Click to expand...
Click to collapse
What a terrible response. is root a programming language?
Elnrik said:
Terrible answer! Just because someone doesn't already know something is piss poor justification for telling them not to learn it.
Click to expand...
Click to collapse
No, it is the best answer. He is not asking to learn it, he is askign us to make a decision as to whether he should root or not. If he knows the benefits of root, he should make teh decision himself based on the usecase. If he doesn't know the benefits, he should read a sticky thread that lists the benefits. If he doesnt know whether he should root, then he shouldnt because it is not something to um and ahh over.
Rooting in and of itself will have no effect on your getting infected with malware or not. It may affect the degree in which something can muck up your system, because if rooted, that program can get further into the OS than if you were not.
Now, that said, the real meat of it is that if you allow sideloading, that's the one that will let apps install from downloaded files, etc.
Ever notice where they say all the android handsets are getting infected? not here in the US anyways.
If you stick to known downloads and are not trying to get hacked apps, you won't have to worry.
I have to agree with RootSU here, his last paragraph sums it up nicely.
IINexusII said:
What a terrible response. is root a programming language?
Click to expand...
Click to collapse
Well, I can't resist using your own logic... If you don't know that root isn't a programming language, you shouldn't root. You probably shouldn't even reply to posts. Further, If you can't understand the example I provided, I'm not going to waste my time and explain it. You should just go read the stickies on the benefits of examples, or something. After all, you shouldn't um and ahh over this.
Facetiousness aside, if you read my example you'd see that I in no way called root a programming language. My entire point is that there are better ways to tell someone not to root. If your point to the OP is this: No, you shouldn't root because it can be dangerous, can brick your device, and that you really need to do your homework on it before you just go and do it, then tell them that! Don't condescend to them and/or future readers of the thread that not knowing it is reason enough not to do it ever. It's insulting. At least it is to me. It IS a discouragement, and in IMO, and in the spirit of XDA, we should try to point people in the right direction so they can learn and make them aware of the risks and benefits so they can make informed decisions. Sure, if it's already been covered, post a link to the thread or sticky. No need to rewrite it. But sending the message of "If you don't already know, abandon all hope now" is crap.
If you disagree with me, then I'll agree to disagree with you.
That's the last I'll say about this.
Peace
Elnrik said:
Terrible answer! Just because someone doesn't already know something is piss poor justification for telling them not to learn it.
Click to expand...
Click to collapse
I interpreted it to mean that learning more about root and what it might offer/require of a user is probably best before actually rooting and then deciding later on if that's what you really wanted to do. That is, being conservative here is probably not the worst suggestion.
- ooofest

Chainfire and Kingteam going head to head

Looks like kinguser and supersu are going head to head.
http://forum.xda-developers.com/showpost.php?p=61899071&postcount=1277
I sort of agree with kingteam on this, without their hard work there would be no root for a lot of people.
On the other hand they shouldn't force a third party app on to someone's device, but maybe offer it as part of the root process.
Still supersu doesn't block users from changing to another super user app, so they shouldn't neither.
So now we know why Chainfire won't support kinguser in flashfire.
hopefully Kingteam changes their policy about removing their propriety apps. Super-sume wouldn't have been made if it were for Kingteam's policies.
The question is why anyone who offers a rooting method wishes to force the use of their software.
louiscar said:
The question is why anyone who offers a rooting method wishes to force the use of their software.
Click to expand...
Click to collapse
Well i think thats obvious. If youve ever spent time and effort developing something you'd understand, its not nice that a developer puts all the effort in and then the glory is taken by another. Its obvious Kingteam put a lot of effort into their root methods and creating the root management for it to just be immediately removed without even trying it. Its actually quite good, i used it for months on my htc m8 to no ill effect.
Itd be a shame if they decided to throw in the towel and discontinue any more development because of it.
ashyx said:
Well i think thats obvious. If youve ever spent time and effort developing something you'd understand, its not nice that a developer puts all the effort in and then the glory is taken by another....
Click to expand...
Click to collapse
I don't think this is about glory. I understand your point but ... the whole idea of rooting is to gain control of your device, so prohibiting you from being able to choose what you have running on your device is defeating that purpose and fundamental principle.
Although I'm prepared to accept that their reasons for doing this may not be malicious it does little to encourage trust when they appear this desperate to stop you removing their software especially since it has root access. AFAIK this isn't open source and perhaps a lot of other stuff isn't but we have a basis of trust in most of those cases.
IMHO their strategy should be as any other dev who has gained a reputation, through the right channels (such as Chainfire). It takes time but their efforts and results would speak for itself and they could allay any fears by showing their code is safe. IF they really want people to TRY their software then the route to this is not to create fear and doubt about the integrity of their software but to do the exact opposite and allow people to have peace of mind whilst they give it a bash.
They claim that their reaction to Chainfire et al not responding to their communication has resulted in the denial to the user of the rights to choose what software runs on their devices. This reaction to me is rather childish and does little to persuade the likes of Chainfire or Supersume devs to change their minds.
They (Chainfire / Supersume) may or may not be actively trying to throw this software out or 'bad mouthing it as such', I don't know I've not heard their story but it could just be they are simply maintaining the ethics of user choice in offering to remove something that Kingroot team have deliberately made difficult to do.
On the other hand if they are telling people that Kinguser 'causes conflicts' they should back that up openly and offer the choice to remove purify or not - it is a request I note Kingxteam make and would be valid IMO unless there are good reasons why not. Good reasons would be closed source or why the code may conflict, if no one can verify the software is doing only what it is supposed to (now and in the future) it's a good reason not to have it in your device.
Call me sceptical but what is really in it for them? They aren't gaining any money by you running their software, but they sure act like there is something to gain. They spent a lot of time and effort in finding root solutions but they don't appear to be like other devs who do it for the challenge, or for themselves with a mind to share and who by the way don't try to 'sell' or 'force' their methods on us - you take it or leave it, and we do with thanks and donate or buy their pro versions to show appreciation.
Kingroot (Kingteam) on the other hand appear more like a company to me but who knows. That's the whole point, we don't seem to know a whole lot about their motives and that perhaps creates doubt whether rational or not.
And I agree providing there's nothing nasty in there it would be a shame if they threw in the towel but they are going the wrong way about it to gain people's trust - I'm sure many people would love to try their software and apps provided they don't have any nagging doubts.
You misunderstand what I'm saying. I don't condone the way they are going about things, but I do agree with their reasons. Its wrong that everyone is automatically removing kingroot/kinguser without even trying it.
Like I say I used it for a while and I actually preferred it to supersu, but now that devs like chainfire have prevented the use of kingsu with flashfire and only allows the use of his own or cwm there's no choice but to use supersu.
Now why has chainfire done that? He has basically forced people to use his own app. That's just as bad as what kingteam have done.
Don't get me wrong Chainfire is a stellar dev, but I dont understand that and that's how a lot of this has come about. Many have been converting to supersu to use flashfire. I bet there are loads that would have stuck with kinguser just for simplicity's sake if flashfire worked with it.
They don't prevent the removal of purify, I don't even think it gets installed as a system app, so its no big deal to remove. They shouldn't force install it though, that should be offered as a choice after successful root.
Neither do they prevent removal of kingroot and kinguser, it can all be cleanly removed from within kinguser.
As for being closed source that's no different to chainfires apps. His root solution is closed source and so is flashfire.
Kingteam have been around now for a while and have gained notoriety lately because their root solutions have worked for many. If they had any dishonorable intentions I'm sure it would have come out in the wash by now, but asfaik nothing untoward has happened to anyone.
I'm not protecting them in anyway just understanding their point of view, put it this way how many how have used their root exploit then clicked the link to their XDA thread and thanked them?
Probably not many, credit were credit's due I say.
Hard work deserves some recognition. Maybe I should add the link in my root thread.
Sad that this situation has occurred. I am very appreciative of Kingroot providing a method to root my Tab S without tripping KNOX. Without it I would not have rooted until my warrenty had come close to expiring. Unfortunitely I would have removed Kingroot apps for SuperSU for a few reasons
1) I already paid for SuperSU Pro and use it on my other devices
2) Flashfire providers most of my custom recovery needs which Kingroot does not. There is an argument for Flashfire being decoupled from SuperSU but not the development overhead when you flash an updated firmware ( e.g. B0E2 to B0E3). Flashing an upgrade requires the preservation of the root manager. I want OS updates that automatically preserve root so need Flashfire. Of course I've not mentioned other Flashfire features but I'm trying to stay relevant to the topic.
3) SuperSU's policies have provided methods to work around Samsung's bootloader SELinux enforcement. Without it I would not be able to use Viper4Android and an Ext4 formatted OTG microSD card.
I would have been happy to donate money to Kingroot for their rooting service but to the best of my knowledge they do not have a donate option. I would have only done so through PayPal or the Playstore. That brings me to my hesitation to using rooting methods from sources I do not know. I can say I was hesitant to use Kingroot at all and let others be the guinea pigs. Call me paranoid but I've seen first hand and read everyday the malicious nature of the net. At least Chainfire is a known developer on the Playstore.
In the end what maybe more of a question is the lack of rights that customers who purchased, not rented, their devices have. Why are unlocked bootloaders not a right with root management built in? Where do the manufacturers get off restricting me from doing what the heck I want with my devices? Sure limit my warrenty in some way (e.g. Overclocking burnout) but if hardware becomes faulty independent of rooting why should they be off the hook?
I hope some balance/compromise can be met between these important contributors.
Sent from my SM-T800 using XDA Premium HD app
ashyx said:
Its wrong that everyone is automatically removing kingroot/kinguser without even trying it.
Click to expand...
Click to collapse
Can you say that? The main reason people do it is because of the doubt and uncertainty of something new. Getting root is one thing and people are grateful for that but running something they are not familiar let alone trust is another.
And of course as for me too this is one of my reasons:
3DSammy said:
1) I already paid for SuperSU Pro and use it on my other devices
Click to expand...
Click to collapse
.. and I'm used to using it. I should have that choice surely? And his other reasons are good and valid too.
ashyx said:
... devs like chainfire have prevented the use of kingsu with flashfire and only allows the use of his own or cwm there's no choice but to use supersu.
Now why has chainfire done that? He has basically forced people to use his own app. That's just as bad as what kingteam have done.
Click to expand...
Click to collapse
I agree and I wish they'd discuss it more. I would like to know what is really going on with all this.
ashyx said:
I bet there are loads that would have stuck with kinguser just for simplicity's sake if flashfire worked with it.
Click to expand...
Click to collapse
I'm sure but it's difficult to know how many more would. Some people just want root to get some degree of control. Not all are flashaholics. Doubt and uncertainty are more prevalent here because of the immediate perceived need to remove it as soon as possible.
ashyx said:
Neither do they prevent removal of kingroot and kinguser, it can all be cleanly removed from within kinguser.
Click to expand...
Click to collapse
If you don't mind losing root. So it's a pointless exercise and it's a kind of blackmail.
ashyx said:
As for being closed source that's no different to chainfires apps. His root solution is closed source and so is flashfire.
Click to expand...
Click to collapse
But as I say there is a basis for trust that doesn't exist with Kingroot ... yet anyway.
ashyx said:
Kingteam have been around now for a while and have gained notoriety lately because their root solutions have worked for many. If they had any dishonorable intentions I'm sure it would have come out in the wash by now, but asfaik nothing untoward has happened to anyone.
Click to expand...
Click to collapse
Let's just turn on [paranoia mode] for a moment. They aren't doing anything now perhaps they just want to get as many devices running it then on a future update ..... [/paranoia mode off]
3DSammy said:
I would have been happy to donate money to Kingroot for their rooting service but to the best of my knowledge they do not have a donate option. I would have only done so through PayPal or the Playstore. That brings me to my hesitation to using rooting methods from sources I do not know. I can say I was hesitant to use Kingroot at all and let others be the guinea pigs. Call me paranoid but I've seen first hand and read everyday the malicious nature of the net. At least Chainfire is a known developer on the Playstore.
Click to expand...
Click to collapse
Exactly the point. Again what is their motivation? What are they getting out of all this furious hard work on multiple devices? I looked at the purify thread - it's a fully responsive engagement of support which is not unlike a company that has a paid product out there and keen to support it for more sales.
Cloud servers, a large (don't know) team of people? Often devs like Chainfire have little time to engage on this level, they are too busy on the product AND with their own lives / jobs. This is not their full time job in most cases.
This psychology isn't unusual. If someone came to you and offered you a free lunch you are going to be suspicious right? The first thing you are going to think of is 'what's in it for them'. Right or wrong this is how we work.
3DSammy said:
I'm not protecting them in anyway just understanding their point of view, put it this way how many how have used their root exploit then clicked the link to their XDA thread and thanked them?
Probably not many, credit were credit's due I say.
Hard work deserves some recognition. Maybe I should add the link in my root thread.
Click to expand...
Click to collapse
You are right - their threads do have a lot of thanks but perhaps not nearly as many as have used their solution - perhaps because of threads like yours where you provide a solution for a particular device so we don't automatically go to the Kingroot thread and leave our thanks. But bear in mind that the appearance of threads like yours in the first place were to tell people how to get rid of Kinguser after rooting.
Yes put a link and prompt to give thanks to them it's right.
For my part I would like to see some pressure or prompting for both parties to get something sorted out. Kingxteam to stop throwing toys out of the pram and writing restrictive code into their apps and Chainfire et al to come out and discuss their own restrictive policies and explain their concerns.
Welcome to a free world.
Kingroot are free to make their software anyway they want.
Chainfire is free to make his software any way he wants.
You (the user) is free to use one or the other or neither if you want.
If you dislike how kinguser is handeling this situation, but you still want a way to root without tripping knox then, you are free to design and write that code yourself.
Also as for what is in it for the kingxteam remember google, facebook, and quite a few others made products with not very solid monetarization ideas and now they are worth quite a bit. Much of the internet age has been make a product many ppl use and figure out a way to turn a profit afterwords.
Agreed, user choice at the end of the day, we get this same attitude in the HTC forum regarding sunshine s-off.
If you don't like it don't use it or remove it, they don't stop you doing that.
As for the fear factor of using an unknown app, isn't that what millions of people do everyday when installing apps on their device?
The average user never pays any mind to the permissions some of those apps use.
If it works they use it, simple as.
If your happy to let an exploit hack your device and gain high level privileges to it you can't be that concerned with Security otherwise you wouldn't root in the first place.
Too much paranoia going on here me thinks.
Personally I don't give a fig about kingteam planting a time bomb on my device, what's the worst that can happen? Once I get root I can weed out any naughty stuff.
Today's devices are becoming very secure for the average user, but the tinkerers don't like that, so what do the majority do? Root, flash custom kernels, Roms and recoveries and override all that security that's been implemented.
And were worried about a couple of little apps? Come on.
acdbrn2000 said:
Welcome to a free world.
Click to expand...
Click to collapse
There's always someone who'll come up with the age old saying of 'well if you don't like it don't use it.'
Frankly there's not a lot left to say to such posts and that is probably a good point to leave it.
Well it's quite interesting to read this over a year later and seeing how Kingroot has an app in the play store but I have looked everywhere and it's installed as a system app on my phone, I was actually researching FlashFire hoping to be able to get an OTA update and now I am looking to uninstall KingRoot 5.0.0 to go back to an older version of KingRoot. I would like to be able to switch out KingSU for supersu. But each belongs to each developer.

PLEASE HELP ME! my phone is "rooted" with 3 third-party apps my BF installed!

PLEASE HELP ME! my phone is "rooted" with 3 third-party apps my BF installed!
I noticed that my nexus 6 was acting funny, and since my boyfriend purchased this phone for me- he set the entire thing up. The day it arrived, he plugged my phone into his laptop and started typing away at what looked like a black screen and a boxy white font with a bunch of rom codes etc(at this point, i was totally clueless and oblivious to what he was doing)...
Then, he would sporadically bring up specific texts that i had sent, and at times would randomly pinpoint specific addresses and times and asked me about them(mind you, they were my friends homes) which left me to wonder "how the hell did he even know about that text or specific location unless my phone is hacked??"
so, i took my phone to a specialist who confirmed that my phone was rooted with a custom ROM along with 3 third-party apps "kernel adiutor", "pure nexus", and "xda labs".
Once i called tech support for my phone, they said they couldn't help me because they're third party apps that are not legal to use in the first place.
long story short, his mom confirmed recently that he in fact has my phone hacked. can somebody please give me insight on the apps he installed and the purpose they serve?? what kind of access/capabilities does he have now that my phone is rooted even if i restore my phone???
Kernel Auditor Xda labs and pure nexus are not phone hacking apps Xda lab is app by xda community and Kernel Auditor is for tweaking the kernel and i think Pure Nexus is a Custom Rom for the Nexus
If you want to get rid of this you can ask service centre to flash Stock Rom of Nexus phone
Sent from my SM-A9000 using XDA-Developers mobile app
Download a factory image from here: https://developers.google.com/android/nexus/images
Follow the instructions on the webpage. Doing this will wipe your phone and put it back to 100% stock.
Also lol @ this:
vneedshelpASAP said:
Once i called tech support for my phone, they said they couldn't help me because they're third party apps that are not legal to use in the first place.
Click to expand...
Click to collapse
You have a very *very* serious problem.
As khanboyz007 says, the apps you mention are entirely pukka, totally normal, nothing suspicious.
But...
If you can't trust your boyfriend so much that you have to post for help from anonymous strangers, then your problem is far deeper than your Nexus 6. From the technical side of your description, he's done nothing at all wrong, but from reading between the lines you don't trust him, and *that's* a dealbreaker.
Why are you asking us instead of him? Give him a chance to explain. Maybe there's nothing more sinister than you (clearly without any technical knowledge... sorry...) don't have your phone password-protected and he's just looked at your texts - in itself a breach of trust, but still not justifying posting in a public forum to strangers.
dahawthorne said:
You have a very *very* serious problem.
As khanboyz007 says, the apps you mention are entirely pukka, totally normal, nothing suspicious.
But...
If you can't trust your boyfriend so much that you have to post for help from anonymous strangers, then your problem is far deeper than your Nexus 6. From the technical side of your description, he's done nothing at all wrong, but from reading between the lines you don't trust him, and *that's* a dealbreaker.
Why are you asking us instead of him? Give him a chance to explain. Maybe there's nothing more sinister than you (clearly without any technical knowledge... sorry...) don't have your phone password-protected and he's just looked at your texts - in itself a breach of trust, but still not justifying posting in a public forum to strangers.
Click to expand...
Click to collapse
I wouldnt say that at all. If he can tell where she has been and what text she is sending then he installed one of the many monitor apps onto her phone which is illegal.
My advise would be to completely wipe your device. Flash a stock rom and dont let him touch your device.
As for your personal life no one can or has any right to say anything about that. Do what you think is best.
If he knows the locations you've been at its possible he has your google+ share location set where it's shared with him. Or possibly he had set up an email for you on it and is signing into it to track your location. As far as the apps you mentioned they are %100 percent legal, most carrier don't know anything about rooting or custom Roms and will not give you adequate advice. But as they said, you can just flash the stock image, make your own Gmail to sign in or make sure to change your Gmail password. After you do make sure that that you put a password on your device that he doesn't know.
"then he installed one of the many monitor apps onto her phone"
Isn't that what I said...? No trust. This isn't in any way a technical question - it's about their relationship.
And since I've seen your many posts here over the years I know you've got a fair amount of life experience, in which case I can assume that you know of Occam's Razor - the simplest explanation is likely to be the correct one, and the simplest explanation here is not that he's installed a monitoring app but is simply looking at the phone. I stand by my comments.
"no one can or has any right to say anything about that"
Yes, I agree, it would be none of my business - *if* she hadn't asked for my advice (as well as yours).
If she has so little trust in her partner, and has asked for advice (technical or otherwise), then the answer has to be "Look very carefully at your relationship".
(P.S. To avoid the inevitable "sexist" comments, yes, I've assumed it's a female poster, but I'm aware that there are alternatives).
To be honest I think it might be a moot point as he is most likely part of this forum and has seen this post.
Then he's got the message...
Or this is just a prank. Like I'm getting private messages from people who haven't even posted yet to fix their phones.
istperson said:
Or this is just a prank.
Click to expand...
Click to collapse
Yes, that same thought had occurred to me. I give the benefit of the doubt unless there's a clear sign that it's a joke, and this one does come close to the edge...
A lot of effort for a not-funny joke though. It would be good if the OP provides some feedback - I do get very fed up with people asking for advice, which is given maybe by half a dozen people who have taken the time and trouble to provide it, only for the OP to vanish into the ether without so much as a "thank you" button press.
Step one, flash the phone back to stock using the links provided eariler posts.
Step two, dump the loser - he is too controlling, and this will never change...
Now that the personal advice has been given, let's bring this thread back to troubleshooting device issues, not relationship issues . Thanks for your cooperation.
vneedshelpASAP said:
.... my boyfriend purchased this phone for me- he set the entire thing up.
Click to expand...
Click to collapse
Your friend has set up your phone the same way as he should do for himself.
There nothing wrong with rooting and the apps you mentioned.
My idea is that ask him very friendly to flash the latest official stock Rom.
Tell him that you prefer the official rom of Google.
Because you want official support when there is something wrong. And you don't need root acces because you only use 'normal' apps.
As everything there are disadvantages.
A rooted phone allows you to install layers. That makes it possible to choose dark themes. And that's important when you need a better battery life.
I Bet he's using Cerberus. Go into your settings>apps, select to include system apps. You'll be looking for a app name: system framework. If you see this He is tracking you using Ceberus, . This app/service is pretty awesome. I was able to track my phone down, see the texts sent, turn the mic on and listen to where my phone was at. .
Like everyone said flash a new rom. clean slate. Then dump dude, there should be no need for that crap.
Here's the link: https://play.google.com/store/apps/details?id=com.lsdroid.cerberus&hl=en
vneedshelpASAP said:
I noticed that my nexus 6 was acting funny, and since my boyfriend purchased this phone for me- he set the entire thing up. The day it arrived, he plugged my phone into his laptop and started typing away at what looked like a black screen and a boxy white font with a bunch of rom codes etc(at this point, i was totally clueless and oblivious to what he was doing)...
Then, he would sporadically bring up specific texts that i had sent, and at times would randomly pinpoint specific addresses and times and asked me about them(mind you, they were my friends homes) which left me to wonder "how the hell did he even know about that text or specific location unless my phone is hacked??"
so, i took my phone to a specialist who confirmed that my phone was rooted with a custom ROM along with 3 third-party apps "kernel adiutor", "pure nexus", and "xda labs".
Once i called tech support for my phone, they said they couldn't help me because they're third party apps that are not legal to use in the first place.
long story short, his mom confirmed recently that he in fact has my phone hacked. can somebody please give me insight on the apps he installed and the purpose they serve?? what kind of access/capabilities does he have now that my phone is rooted even if i restore my phone???
Click to expand...
Click to collapse
to me, a "specialist", it sounds like he did you a favor, by rooting your device, and adding apps that you will need to control your own phone. your "own" i say because otherwise you are just using someone elses device, that you happened to pay for with your money. so, instead of posting a pissy thread, id do a little more research on how to control your own phone, and then tell him thank you.
oh, btw, just because the apps arent from the play store, it does not make them illegal to use, at all. you can use whatever app you want, from wherever you want, LEGALLY.
I'm coming round to istperson's point of view - this thread is beginning to look more and more like an elaborate pointless hoax, and not a very funny one.
There are far too many of these threads where people ask a question and then disappear without the courtesy of a sign-off or even a "thank you". Very discouraging, and makes me less keen on spending my time here trying to help timewasting ingrates...
I'm gonna close this thread for now. If the OP has anything else to add they can contact me again to reopen it.
Not all apps are legal. It really depends on where you are living. As an example. Things like keyloggers, call recorders (depending on local laws) screen recorders and things of this nature are completely legal in some countries like China, while being completely illegal in other places in the world.
Also installing tracking software of any kind on someone's device is also illegal.
We have to remember that many people search for help on something, reg to the forum to get the answer and dont come back until they have another issue. This is becoming far more common as of late.

Categories

Resources