[APP 2.2+] [ Tool ] Who is Tracking - which app tracking you - Paid Software Announcement and Discussion

Who is Tracking '
Paid app link :https://play.google.com/store/apps/details?id=com.appz.trackingpaid
The application will detect any malicious APPS or BLOATWARE trying to track your location and user information (Bluetooth, WiFi, Bank Accounts, Messages, GPS, Social Networks information, 2G & 3G, etc.).
Application - Features :
'Who is Tracking' will detect any malicious apps or bloatware trying to track your location using GPS, or tracking user data from incoming / outgoing call lists, messages, Wi-Fi network information, 2G/3G data, Gmail, Facebook and similar apps. (Few features works only paid). Using this applicaiton you can find-out any one HACKING or TRACKING your phone.
WiFi, GPS,2G,3G,4G,GPS,NFC & SERVER TRACKER: After running the detection test, you will receive a real time sound alert if any traces of tracking is found. In-case anyone is trying to track you, the sound will come automatically (Real time sound works only paid).
App Server Tracker : Track apps server location (Which country server the app is using) Gmail Server location, FB, Twitter, etc...
Sus App list : List Danger apps
App Permission Blocker - Block certain application permission..
Sound Alert : After running the detection test, you will receive a real time sound alert if any traces of tracking is found. In-case anyone is trying to track you, the sound will come automatically (Real time sound works only paid).
System Information : Know about your device system information (Processor, CPU Core , SD card, Memory).
Android OS : Manufacture info, Model No, Product Release, Version, Device Info, Open GL, Kernel info, etc.
App Permission : List of permission required by the apps.
User Installed App : List of applications installed by user.
System App : List of System apps.
'Who is Tracking 'provides a list of all apps which are accessing GPS, Wi-Fi, 2G/3G, Gmail and other apps, and also the reason why the apps need this info (Few features works only paid).
Allow Mock Allocation : Enable this feature to send mock GPS data if any app is trying to access GPS info for longer duration or multiple times.
[ Example : Yelp has permissions to access GPS data to triangulate on your current location to provide you with restaurants around you. But it accesses the data only once on initialization, but malicious tracking apps will keep accessing the GPS data to track your movements and location at all times in the background. ]
Select - Delete History : Deletes complete history information from your device (Few features works only on paid version).
Why 'Who is Tracking ' was created
There are communities in hacker forums and blogs whereby they push to develop and publish apps which can track your data and retrieve the extracted information (Ex. your contact information, email IDs, phone numbers, saved bank account details or any other important information).
Android, to a certain extent, can restrict such apps from being published in PlayStoreTM , but hackers bypass these by using techniques like reflection, API mirroring, etc.
Even though all the custom ROM developers take immense care in providing ultimate user data protection, still hackers copy the OS, modify the APIs to provide access to personal data and hidden / internal APIs. By this, they will be able to monitor, record and access the data created by you while sharing with various apps on your Android device.
We used a couple new features of ANDROID to stop hackers to track the information.
http://selinuxproject.org/page/SEAndroid
http://source.android.com/compatibility/
http://efytimes.com/e1/fullnews.asp?...date=6/10/2013
http://securitywatch.pcmag.com/mobil...ld-for-android
http://www.electronicsweekly.com/eye...droid-2013-03/
Any issue, feel free mail me.. we will release paid version very soon with complete features..
Please Don't forget to hit THANKS BUTTON.

seems useful. it's always frightining to know what android can do with your data. how it can very easily compromise your privacy. but,apps like these should be installed by default in base os. users have right to know what's happening to their data and where it is going. Thanks fir your effort. also, a quick question? if some apps have so much power to buypass security protocols and hack ur data,then what about custom roms? aren't they capable of doing that? can a developer tweek things and add scripts that very easily transfer almost all data my phone collects? like most people here on xda, i use a lot of custom roms for my devices and this is one of the questions i always wonder.
Sent from Heaven

delay response..
Check the inline comment....
lavinigam said:
seems useful. it's always frightining to know what android can do with your data. how it can very easily compromise your privacy. but,apps like these should be installed by default in base os. users have right to know what's happening to their data and where it is going. Thanks fir your effort. also, a quick question?
if some apps have so much power to buypass security protocols and hack ur data,then what about custom roms?
What is the meaning of custom rom, developed by the general user etc.... There are default behavior in android which no one will change.. its a flow... so once app can work for any device with any rom.. simple logic....
aren't they capable of doing that? can a developer tweek things and add scripts that very easily transfer almost all data my phone collects?
If the custom rom dev thing he can do that... its your wish to choose to use or not.... but 99.9% they will not.. its all about brand name.. no one here to spoil or hack data... we are here to save users.. as much as we can...
like most people here on xda, i use a lot of custom roms for my devices and this is one of the questions i always wonder.
Hope you understand my answer...
Sent from Heaven
Click to expand...
Click to collapse

Related

[Q] Secure Android ROMS for Milestone

Maybe this has come up earlier, but I cannot find much about it.
It's on the news more and more lately, Google and Apple having access to everything we talk about daily, mail about, IM about, where we are, where we took our pictures, etc.
All through our smartphones.
I personally really don't like this idea. I really care a lot about my privacy.
Besides that I still love my Milestone and would really like to keep using it.
So now my question is, are there any Android roms that focus on privacy, disabling all these trackers and tracers, syncs and whatever? I just want a phone that I can use to browse the internet, call and SMS, nothing more. I know providers also have the ability to track phones through their network, but you can't do much about that I think?
Regards,
Panzermeister
provider
you cant do anything about providers tracking you. (but afaik providers arent allowed to go shopping with your location data)
google
when you first enable your phone you can choose if google is allowed to save your location - i dont know where to disable this afterwards (im currently in between mods and my phone is not usable) -- and of course dont use latitude ect.
3rd party apps
as far as 3rd party apps are using your data - you're on your own - keep an eye on the permissions of the apps you install. there are a lot of apps that can access your location!

[APP] SwitchMe Root Profile Manager needs INCS testers please!

Hi everyone. Im one of the developers of SwitchMe, and app that allows multiple secure logins into separate installations of android on a single device. The pr is after the break.
I really need a few people to check into some issues people on some roms have been experiencing. There are some warnings involved:
- testers must perform a full nandroid backup before using the app, it is not our responsibility if you start getting boot loops
- if you report results or bugs, please use the "Write to us" function in the app whenever possible, and always describe the issue in the header of the logs you send
- if you post here, be sure to include your device type and rom
- if you have apps installed on sd, be sure to mention that as well
--------------------------------------------------------------------
SwitchMe is a unique application for root users that allows you to log in and out of multiple installations of Android just as you would on a desktop computer.
The technology behind SwitchMe saves all of your applications and data, protects it and stores it as a file in memory. You can then log out of an
account and log into a fresh installation of Android or another account with its own unique content.
You may create as many profiles as the memory is capable of holding. Some of these may require very little free memory because they contain few apps,
others will be larger as they contain many applications and lots of cache and data.
Why is this functionality useful?
Privacy - the most obvious benefit is that you can securely share one device among multiple users, which gives you privacy and peace of mind.
Testing - if you are a developer, you can use profiles as clean sandboxes to test your applications and their interaction with the system.
Gaming – with multiple installations of Android on a single device, you can now play online MMOs as different characters.
Speed - the games your kids play slow down your tablet, but with SwitchMe you can easily create profiles without games or instant messengers.
Battery life - when the battery is low but there are important emails or documents to edit later, switch to a profile which only contains these essentials.
These of course are only suggestions - there are plenty of other uses for the functionality SwitchMe offers.
Market link:
https://market.android.com/details?id=fahrbot.apps.switchme
The Lite version allows the creation of two profiles, enough to test on.
Screens:
Just started to test it, created 2 profiles : one main, one for testing the switching. After first switch, loading circle started, remained stuck for 10secs (same happens when switching back), then restarted. New loading screen showed up, first load took about 5-7mins. After all loaded, switchme requested SU perms and new google account interface started.
One possible bug i noticed, usually when new google account interface starts, the mobile data service is started so you would have connectivity. This time it didn't start (i had it turned off in profile 1, then switched to profile 2). Although it works properly, it just didn't start at first startup.
All my installed/downloaded applications are not included in the app drawer, so that works nice.
But a drawback i noticed. If the app is focused on the privacy part of sharing one device, gallery pics&videos are accessible from both profiles, so you might want to think of a way of restricting pics&vids accessibility only to the profile that created them (big challenge from my point of view).
All default installed application seem to work without a problem.
One strange thing i noticed, our custom ROM has Beats audio included - in profile 1 (my default one) switching Beats audio on/off works, but on profile 2 (newly created profile) switching it off makes it stuck on off (switching it back on has no effect on audio).
As i don't have a necessity for this app to run it as a daily profile switcher, can't test more in-depth scenarios, but if you want something tested/have a scenario, write it up here or send a PM. Good luck with the development.
Using Nik IncredibleS Trinity SensationXL4.0 ROM (2.3.5 android with 3.5 sense) with included 2.6.35.14 RCMIX VIVO kernel (with my HTC Incredible S S710e).
SwitchMe 1.2 has been rolled out and now includes a lockscreen replacement:
1.2
Added lock screen for logging in and out
More stable Fast switch implementation
Reworked UI colors
Now, its very important that we get some feedback on how this big new feature works, so please read up on it in the help and post your thoughts!
1.2.2 - HOTFIX 2
Reworked widget on qHD+ displays
Fixed widget text on HC and ICS
Fast switch improved on older devices
So guys, anything to report?
1.4.3.7
Fixed device specific switch screen crashes and issues
Fixed UI bug in switch screen preferences
If anyohe had problems with superuser before, this should fix them. Please let me know if that is the case, its important we get some feedback here!
Anything to report regarding yesterday's release?
By the way we released a new app today some of you might also find useful, you can find it here:
http://forum.xda-developers.com/showthread.php?t=1538222
PLEASE CHECK IT OUT AND BE KIND
Touch Blocker Beta - a simple but useful app that makes holding and using your device easier
There are two basic functions:
- create dead zones where touches do not register
- filter the screen when reading in low light
We are already in a relatively stable Beta release - whats left now is adding new features and making it all look pretty. You can follow this process at the thread here.
Please be sure to write suggestions - we are looking forward to engaging the community and building a useful and nifty application that many will enjoy!
Market link
https://play.google.com/store/apps/details?id=fahrbot.apps.touchblocker
Screens
Debugging
If you experience issues, the best way to help is by reproducing them and then clicking "write to us" - be sure to include a description of your error or we may not read the logs.
1.5.3.1
Fixed issue with lock on boot
Fixed some rare crashes on lock screen
Fixed MIPS and X86 Key compatibility
Is the latest version working well?
I take it everything is fine?
1.5.3.8
Fixed issue switching profiles (One X and others)
Fixed rare crash on adding/ removing profiles
Fixed many device specific issues from user logs
- Only bug/or maybe a feature I noticed is The app itself have different settings between logons. I mean If I optimize in one logon, I must made the same changes in other account too. Its sometimes frustating.
- And the setting "logout automatically" not worked correctly. When I speak to someone on phone and proximty turn of the screen, and I remove phone from my ear, It shows the logon screen, everytime.
Seems like everything worked flawlesly. But I have a question. What happens if I uninstall the program?
Özgürce said:
- Only bug/or maybe a feature I noticed is The app itself have different settings between logons. I mean If I optimize in one logon, I must made the same changes in other account too. Its sometimes frustating.
- And the setting "logout automatically" not worked correctly. When I speak to someone on phone and proximty turn of the screen, and I remove phone from my ear, It shows the logon screen, everytime.
Seems like everything worked flawlesly. But I have a question. What happens if I uninstall the program?
Click to expand...
Click to collapse
Lets use our brains to think logically. If it was possible to disable any security by calling the phone, what would be the point of any security at all?
ftgg99 said:
Lets use our brains to think logically. If it was possible to disable any security by calling the phone, what would be the point of any security at all?
Click to expand...
Click to collapse
You didnt get my point. This is happen when im on the phone with someone. I need to logon an account to hangup and this take time. If you think logically; I must be already logoned to a profile before starting to speak someone.
Sorry for my bad English.
Sent from my HTC Incredible S using XDA
Özgürce said:
You didnt get my point. This is happen when im on the phone with someone. I need to logon an account to hangup and this take time. If you think logically; I must be already logoned to a profile before starting to speak someone.
Sorry for my bad English.
Sent from my HTC Incredible S using XDA
Click to expand...
Click to collapse
Ah now i see what you mean. However, my logic is still right. You are using it on a phone, and phones are not well suited to automatic log off. I mean just how often do you need to switch profiles? Surely you should be doing it manually...
thank you for sharing
Sent from my HTC Incredible S using xda premium
How can I join switchme developers?
huazvi said:
thank you for sharing
Sent from my HTC Incredible S using xda premium
Click to expand...
Click to collapse
OK enjoy!
kabukinimo said:
How can I join switchme developers?
Click to expand...
Click to collapse
Are you saying you want to work for us?

Removing 170 system apps for fun and profit

Long time ago, in the mid-2000s, there was such a fabulous concept as "PDA". Unfortunately, Microsoft let it slip and the concept went downhill.
Now for me it was the idea of a device that is not a phone (hence the existence of a separate "smartphone") and that is rarely online. It's bigger than "phone" and you use it to do serious stuff, not reading Twitter and ranting on Facebook.
I understand this concept is not very popular these days but this thread is for those of you security paranoids who are not risking putting your precious data online at all. But even if you are not so extreme you can safely get rid of more than 100 apps, you'll just have to experiment a little given my lists here.
Below are the apps I have removed to make my Note Edge run as smooth as ever, with battery lasting days on average use. I have been experimenting with this, gathering info about each problematic app from the internets; details and links are included below where I could find them.
What is removed: cellular/phone/messages/Qualcomm support, Samsung-only sharing/device features (quick share, direct share, beacon, TV, battery sharing, etc.), location services, Google/Samsung stuff, Dropbox/Evernote/Flipboard/other bundled stuff, backup/sync/cloud, tracking/remote management/locking (it had lots of this stuff), wearable stuff, environment sound detecting, payment/checkout, Chrome/Chromecast, Play/Samsung stores (install apps offline by APK), Car Mode, private mode, Knox, printing, S Finder, S Voice, Emergency Mode, SIM support, weather, Safety info, wizard appearing when you hard-reset the device (so all settings are set to defaults, you can customize them later anyway), Smart Remote, talkback, default video player, editing and trimming.
What is kept: all legit core functionality: external SD card, Internet (for offline browsing), Wi-Fi (but didn't try it), Bluetooth, NFC, camera and photo studio, Edge panel (Cocktailbar) features, S Pen including direct input, notes, snippets, etc., voice recorder/other tools, Easy Mode including reduced screen and side panel, Night Clock, S Health (tested pedometer, heart rate), service menus (e.g. *#0*#), ART/Dalvik runtimes work (instead of 300+ apps to optimize you get 143), USB features including MTP/debugging/adb, most native Samsung apps like Gallery and S Planner that are good. Dialing 911 seems to work which is surprising given all removed phone components.
After using this unbloated version of Kitkat 4.4.4 all apps still work fine except for some games that need Google Services Framework (however, it'll need other Google components, not just that - experiment). Not all though - Heroes 3 HD work just fine. Also note that if GSF is removed (partially or fully) while setup wizards are not you won't be able to get past the first run wizard as it will crash due to missing GSF. So either remove both or none.
I used this app to remove things. But you can probably freeze them with Titanium Backup with the same effect (except wasted disk space).
Removed apps (in alphabetic order):
Adapt Sound
AirWakeUp - this gesture drains battery like crazy, 10-15% per hour in sleep mode
AllShare FileShare Service - for playing content on other devices: http://www.shouldiremoveit.com/Samsung-AllShare-12424-program.aspx
ANT HAL Service - wearable support
ANT Radio Service
ANT+ Plugins Service
Automation Test - some say it can freeze the device, some say it's safe to remove: http://forum.xda-developers.com/galaxy-s2/general/jelly-bean-xxlsj-solution-to-battery-t2016419
AutoPreconfig - cellular stuff: http://www.w0lfdroid.com/2013/08/change-csc-samsung-galaxy-devices-s4.html
Backup
Basic Daydreams - appear when the device is locked like a screensaver (photos, etc.) instead of clock, etc.
BeaconManager
Beaming Service
Blurb Checkout
Briefing
CapabilityManagerService - Popups when headphone jack used: http://forums.androidcentral.com/sp...ng-galaxy-s3-sprint-version-stock-rooted.html
CarMode
CarModeRemote
CatchFavorites - Yahoo/Twitter stuff: http://forum.xda-developers.com/note-edge/general/themers-paradise-useful-information-t2946943
Chrome
ChromecastServerService
CloudAgent
com.android.backupconfirm
com.android.provider.partnerbookmarks
com.android.sharedstoragebackup
com.qualcom.qcom_qmi - cellular protocol: https://sigquit.wordpress.com/2012/08/20/an-introduction-to-libqmi/
com.qualcomm.interfacepermissions - seems to be safe to remove
com.sec.android.app.chromecustomizations
com.sec.android.app.sbrowsertry - probably safe to remove: http://techspooler.com/guides/remove-bloatware-apps/1868
com.sec.android.app.wfdbroker - All Share related: http://forum.xda-developers.com/showthread.php?t=1910885&page=2
com.sec.android.chromecastservice
com.sec.android.mimage.expressme
com.sec.android.minimode.res - there are no mini apps in Note, probably safe to remove
com.sec.android.pagebuddynotisvc
com.sec.android.SamsungDrmProvider
com.sec.bcservice - probably safe to remove, deals with system status (rooted, etc.): http://androidforums.com/threads/li...-de-bloat-your-boost-mobile-galaxy-s3.778877/ - http://forum.xda-developers.com/showthread.php?t=2285894&page=2
com.sec.chromecast.remoteplayer
com.sec.enterprise.knox.attestation - this and other 4 apps are safe to remove
ConfigUpdater - Automatically updates certificates, firewall config, sms list, timezone info, said to be safe to remove: http://blog.burrowsapps.com/2014/03/what-android-apps-are-safe-to-remove.html, http://forum.xda-developers.com/showthread.php?t=2727541
CSC - cellular stuff: https://spreadsheets.google.com/spr...1gdDJRekl4QmkyNmIzUmRvX2h3UDVkQXc&output=html, http://www.w0lfdroid.com/2013/08/change-csc-samsung-galaxy-devices-s4.html
DCMProvider - communicates with other Samsung devices: http://forums.androidcentral.com/samsung-galaxy-s5/380456-dcmprovider-what.html
DeviceTest (com.sec.factory) - service codes: http://androidforums.com/threads/all-bloatware-detailed-complet-list.871115/
DirectShareManager
Drive
Dropbox
DSMLawmo - Dedicated Security Management to remotely lock/reset/etc. the device: http://forum.xda-developers.com/galaxy-s2/help/dsmlawmo-t1863011
ELM Agent - multi-user support: http://androidforums.com/threads/elm-agent.825065/
Email
EmergencyManagerService
EmergencyProvider
Enterprise Sim Pin Service
EpsonPrintService
Evernote
Exchange Services
Favorite Contacts
Filter Installer
Filter Manager
FilterProvider
FixmoISA - some DoD stuff: http://gcn.com/articles/2013/05/29/breakdown-dod-security-controls--ios-android.aspx
Flipboard
Fused Location - location-related: https://developers.google.com/andro...android/gms/location/FusedLocationProviderApi
FWUpgrade - Upgrade client for AllShare app: http://forums.androidcentral.com/sp...ng-galaxy-s3-sprint-version-stock-rooted.html
GALAXY Apps Widget
Gmail
Google Backup Transport
Google Calendar Sync
Google Contacts Sync
Google Partner Setup
Google Play Books
Google Play Games
Google Play Movies & TV
Google Play Music
Google Play Newsstand
Google Play Services
Google Search
Google Services Framework - needed for Google apps
Google Text-to-speech Engine
Google+
Hangouts
HP Print Service Plugin
InCallUI
IndexService - S Finder-related, causes problems: http://forum.xda-developers.com/showthread.php?t=2461958
Intelligence Service - spying, Carrier IQ: http://forum.xda-developers.com/galaxy-s5/help/kill-com-samsung-android-t2811304
Keyguard wallpaper updator
KeyguardTestActivity
Kies Application BnR
KLMS Agent
Live weather
LocalFOTA
LocationServices
Maps
Market Feedback Agent
MDMApp - some remote management: http://www.samsung.com/global/business/mobile/solution/security/mobile-device-management
Mobile print
Mobile Tracker
MobilePrintSvc_CUPS
MobilePrintSvc_CUPS_Backend
My interests
My Places
Nearby devices
Nearby Service
OMACP - SMS-related: https://spreadsheets.google.com/spr...1gdDJRekl4QmkyNmIzUmRvX2h3UDVkQXc&output=html
PacProcessor - claimed to be safe to remove: http://blog.burrowsapps.com/2014/03/what-android-apps-are-safe-to-remove.html
Pay with PayPal
PEN.UP
Perso - call sound personalization: http://androidforums.com/threads/all-bloatware-detailed-complet-list.871115/
Post_T_Promo - Dropbox stuff
Power Sharing - transfer power to another Samsung device: https://play.google.com/store/apps/details?id=com.samsung.android.app.powersharing&hl=en
Preconfig - cellular stuff: http://www.w0lfdroid.com/2013/08/change-csc-samsung-galaxy-devices-s4.html
Print Spooler
Private Mode Service
Quick call contacts
Quick Connect
Quick Connect Interaction Service
RCPComponents - remote control: http://forums.androidcentral.com/samsung-galaxy-s5/396488-galaxy-s5-battery-life-getting-bad.html
Remote Controls - com.fmm.dm
Remote Controls - com.fmm.ds
Remote Controls - com.sec.pcw.device
RilNotifier - Radio interface layer: http://forum.xda-developers.com/gal...rom-v9-available-changelog-op-t2037363/page93
ringtonebackup
RootPA - looks like junk: http://forum.xda-developers.com/showthread.php?t=2523379&page=4
S Finder
S Voice
Safety Assistance
Safety Information
Samsung Account
Samsung Billing
Samsung Calendar SyncAdapter
Samsung Cloud Data Relay
Samsung Cloud Quota
Samsung Contact SyncAdapter
Samsung Content Agent
Samsung Galaxy
Samsung Link Platform - communication with other devices: http://www.androidpolice.com/2014/1...sier-share-media-across-devices-computers-tv/
Samsung Link Platform Connectivity
Samsung Memo SyncAdapter
Samsung Print Service Plugin
Samsung Push Service - notifications for ChanON, etc.: http://forums.androidcentral.com/verizon-galaxy-note-2/279259-samsung-push-service-what.html, https://play.google.com/store/apps/details?id=com.sec.spp.push
Samsung SBrowser SyncAdapter
Samsung setup wizard
Samsung Syncadapters
Secure UI Service - since it's from Qualcomm it's probably safe to remove
Security policy updates - automatic network updates for threat detection: https://play.google.com/store/apps/details?id=com.policydm&hl=en
Service Mode RIL
Setup Wizard - since it's Google must be safe to remove
SilentLogging - some surveillance stuff: http://mobilesyrup.com/2011/10/03/s...-phone-numbers-gps-data-email-addresses-more/
SIM Toolkit
SLLibrary
Smart Remote
SmartcardManager - SIM-related, 3rd party: https://code.google.com/p/seek-for-android/wiki/SmartcardAPI
SmartcardService
SnsImageCache - social networking: https://android.stackexchange.com/questions/12265/what-is-sns-app
Software update
Software Update
Sound detectors
SoundAlive - music playback effects
Street View
SysScope - tracks system status (rooted/official/etc.)
Talkback
Tap and pay
TcpdumpService
Travel wallpaper
Trim
Video
Video clip studio
Video Player
Video Trimmer
Weather
WlanTest - said to be safe to remove
WlucTest - said to be safe to remove
wssyncmlnps
YouTube
Apps you should leave alone and why:
3DTourViewer - some camera feature: http://forum.xda-developers.com/showthread.php?t=2790808&page=231
com.android.keyguard - screen lock (PIN, pattern, etc.): https://stackoverflow.com/questions/17689842/what-the-heck-is-the-keyguard-in-android
com.qualcomm.timeservice - network date/time sync, if removed clock will be screwed on each restart
com.samsung.android.app.catchme - breaks Night Clock if removed (someone says it's Yahoo/Twitter stuff: http://forum.xda-developers.com/note-edge/general/themers-paradise-useful-information-t2946943)
Easy Settings
EasyBottomPanel
EasyOneHand
EasySidePanel - if this and/or other Easy* is removed Side Panel and Reduce Screen no more works
FlashAnnotateSvc - S Pen/screenshot related: http://www.sammobile.com/2012/11/28/n7000xxlsa-–-galaxy-note-android-4-1-2-jelly-bean-test-firmware/
Heatlh Service - S Health doesn't start w/o it
HwModuleTest - probably what appears when dialing *#0*#
LogsProvider
MyScript ResourceManager - S Pen stuff: http://forum.xda-developers.com/showthread.php?t=2469681
QuickTool - Edge ruler, flashlight, etc.: http://forum.xda-developers.com/note-edge/general/themers-paradise-useful-information-t2946943
RootPa - might be causing problems if deleted
SapaMonitor - probably okay, audio input/jack monitor: http://forums.androidcentral.com/samsung-galaxy-note-3/360445-sapamonitor-jammonitorservice.html
Service Mode - internal info window: https://stackoverflow.com/questions/20248195/open-servicemode-menu-programatically-in-android
Service mode - may be related to service menu (*#0*#): http://forum.cyanogenmod.org/topic/30459-service-mode-servicemodeappapk-on-sgs/
Tags - NFC tags
Touchwiz Easy Home - if deleted Night Clock won't show up
Wi-Fi Direct
Wi-Fi Direct share
Attached are lists of safe-to-remove apps authored by different people that I've collected from various places in general for Samsung devices (I only used this as a reference, don't know how valid it is).
There's also a screenshot with installed apps in the standard launcher - just one incomplete page.
.
Update from me 1 year after: how was the experience?
http://forum.xda-developers.com/showpost.php?p=67600207&postcount=38
Great post. Thanks
so you've bought a Note Edge, disabled everything of use, and carry a separate device for calls, texts and web browsing? I'm not getting this!
Don't you use the interweb at all?? If you need a diary, just get a little black book.
I find that I can encrypt my device, use secure passwords and maintain all of the above securely in one package. Photos on SD which can be backed up to my NAS if I didnt want to keep images on google...
Sorry - really not trying to be rude but why?
bonerp said:
and carry a separate device for calls, texts and web browsing?
Click to expand...
Click to collapse
I don't. I own a cheap Philips cellphone that can only call and read/send SMS. I don't browse web while I'm away from my laptop - I read books, watch movies, play games, think about projects taking notes and making mind maps, etc. Then since you have BT you can easily share/receive stuff. GPS is also working - you just use offline maps which are better than Google's anyway (you can get routes, etc. without paying for traffic and even in the countryside).
Don't you use the interweb at all?? If you need a diary, just get a little black book.
Click to expand...
Click to collapse
Lol, and do you use your phone only for web surfing? I don't think so. There's so much you can do even without being online.
I find that I can encrypt my device, use secure passwords and maintain all of the above securely in one package.
Click to expand...
Click to collapse
That's useless in most cases. Even secure passwords are challenging - can you really type 20 symbols or more that are sufficiently random using just soft keyboard? Won't it drive you mad after a couple dozen of times?
Besides, stock ROM includes loads of spyware. And it's not just Samsung - read about Lenovo's recent spyware "Superfish" that read all user's communications (even encrypted).
fundaprob said:
That's useless in most cases. Even secure passwords are challenging - can you really type 20 symbols or more that are sufficiently random using just soft keyboard? Won't it drive you mad after a couple dozen of times?
Besides, stock ROM includes loads of spyware. And it's not just Samsung - read about Lenovo's recent spyware "Superfish" that read all user's communications (even encrypted).
Click to expand...
Click to collapse
But google/the device remembers passwords. If you happen to lose it, android device manager allows you to remotely wipe it. I'm not worried about this, but if you are, doesn't knox help to further secure your use? I've never really used it.
Good on you if it worries you that much regarding keeping your life secure, but there are ways without staying offline and disconnecting yourself from the outside world.
20 yrs ago we never had all this, but now I couldn't manage my life without it.:good:
bonerp said:
But google/the device remembers passwords. If you happen to lose it, android device manager allows you to remotely wipe it. I'm not worried about this, but if you are, doesn't knox help to further secure your use? I've never really used it.
Click to expand...
Click to collapse
Losing the device doesn't trouble me that much; what troubles me is that treats to mobile OSes are much bigger than to desktop because you have much less control over what goes in and out. Not just bad guys trying to trojan you but also manufacturers, ISPs, app writers - this is beyond the reasonable point. It's best to just keep the mobile device offline IMO. As an added benefit you see no more ads
Good on you if it worries you that much regarding keeping your life secure, but there are ways without staying offline and disconnecting yourself from the outside world.
Click to expand...
Click to collapse
I'm not disconnecting myself, I'm disconnecting my smartphone only for the reasons explained above. I'm still perfectly online but only when I want it.
This is fantastic. I have a large percent of these apps frozen in TB, and you are 100% correct, not just about phones being preloaded with various degrees of spyware, but freaking redundant spyware. Of all the potential things that could affect the performance of my phone, just "no" on SO many level.
One thing I've often wondered about re: debloating. Does AdaptSound have an effect on call audio quality? I've kind of always thought that it did to some degree, and gone through the test to set it up, and keep in installed alongside Viper (of course...). What I do for battery is have a shortcut straight to sound settings on my home screen (thank you kindly Nova Prime), and switch my mixer to Viper (with the Super Quality drivers, since I do this), then when I'm not listening to music, like 97% of the time, I just switch the mixer back to AdaptSound with the shortcut and two additional taps.
Thoughts on the above strategy / any value whatsoever to AdaptSound?
Edit: I probably meant SoundAlive at least half of the time I referred to AdaptSound above.. I suppose my question appilies to both...
this is insanity. why even bother with a smartphone if youre going to remove the smarts from it and not even use it as a phone.
none of that stuff is spyware. youre removing API libraries and interconnection stuff which is necessary to actually use the phone as a smartphone.
and ironically youre removing the security layer completely which is knox. that means your phone cant isolate your private data from apps installed on it.
zurkx said:
this is insanity. why even bother with a smartphone if youre going to remove the smarts from it and not even use it as a phone.
none of that stuff is spyware. youre removing API libraries and interconnection stuff which is necessary to actually use the phone as a smartphone.
and ironically youre removing the security layer completely which is knox. that means your phone cant isolate your private data from apps installed on it.
Click to expand...
Click to collapse
What he/she said.
Just get off the grid completely if you're that paranoid.
A bit extreme but great resource, thanks! I'll pick what to do. Good stuff.
Sent from my SM-N910H using XDA Premium HD app
If what OP did is not your cup of tea, why flame him? Just take it as a resource you can use incase you missed out any 'bloat' to remove.
Hes not telling you to do it, not that you guys will listen either.
Good info @fundaprob
but freaking redundant spyware
Click to expand...
Click to collapse
That's right, they're not comfortable with just one or two, they want a few dozens just in case. Like FixmoISA from what I have read is aimed at DoD compliance. But why on Earth it is preinstalled at my device?! What if I buy this outside of USA at all? Do you think it's removed from foreign firmware? It's surely not. And that's just one example - there's also a bunch of SilentLogging, SLLLogging, marketing, tracker apps that are running in background. Even if you're fine with giving away your personal data to whoever is there on the other side of the wire then think about your battery life at least. Running this mess doesn't add to it you know.
Does AdaptSound have an effect on call audio quality?
Click to expand...
Click to collapse
Since I'm not using Edge as a phone I can't tell how it affects the mic. However, I haven't noticed any ill effect on audio/video playback. I suspect that AdaptSound is constantly running as a background service - just like any other sensor it drains the battery even when you're not using that specific feature (audio). Unlike adaptive brightness this doesn't look too useful to me so I've got rid of it.
and switch my mixer to Viper (with the Super Quality drivers, since I do this)
Click to expand...
Click to collapse
This may work but I wanted to avoid having to do any special actions to concerve the battery on the dialy basis. With your approach I'll be in and out switching the mixer several times a day. Not good
Besides, like I've said I see no effect of AdaptSound. Especially since 90% of the time I'm using headphones, it can hardly have any use for this.
About SoundAlive I'm not sure, I also have seen no effect of it.
if youre going to remove the smarts from it and not even use it as a phone.
Click to expand...
Click to collapse
If they would still produce PDAs I would buy them in bulk. But since they don't I'm happy to turn a smartphone into one. Seriously, have you never ended up with smartphone's battery completely drained when you most needed it?
It's not my fault that manufacturers suddenly decided that devices with screens of 3-4-5+ inches also qualify as the "phones".
none of that stuff is spyware. youre removing API libraries and interconnection stuff which is necessary to actually use the phone as a smartphone.
Click to expand...
Click to collapse
No, really. You'd do better by reading the links I've left in the list. Besides, 2/3 of the stuff has no purpose if you don't own devices that use it or features that you need, like remote locking. Otherwise there's no explanation why I am able to use every single app I have tried normally, with more than 50% of preinstalled stuff gone.
AirWakeUp - this is meant for the gesture that does drain 10-15% of the battery in sleep mode. What for do you need it if not using it?
ANT - this is meant to communicate with other devices (http://www.thisisant.com/directory/ant-radio-service). Since I have none, why do I need it?
BeaconManager, Beaming, QuickConnect, DirectShare, DCMProvider, Power Sharing - these all are meant for sharing stuff but mostly with other Samsung devices. Since I don't have any and since I can as well use Bluetooth - why do I need these?
Blurb Checkout, Pay with Paypal, Tap and Pay - these are completely off the wall for me. I'm not going to use my device as a wallet. There exist credit cards.
CarMode - I don't use it hence don't need it.
Chromecast - I don't have any TV that supports it. If at friend's I can always stick a USB drive which won't even drain the battery.
KNOX - I'm not in corporate environment, my KNOX counter is tripped and I see no use for this. Why keep it?
DSMLawmo (http://forum.xda-developers.com/galaxy-s2/help/dsmlawmo-t1863011), FixmoISA (http://gcn.com/articles/2013/05/29/breakdown-dod-security-controls--ios-android.aspx), Intelligence Service (http://forum.xda-developers.com/galaxy-s5/help/kill-com-samsung-android-t2811304), MDMApp (http://www.samsung.com/global/business/mobile/solution/security/mobile-device-management), RCPComponents (http://forums.androidcentral.com/samsung-galaxy-s5/396488-galaxy-s5-battery-life-getting-bad.html) - these are stuff to remotely mess up with your device. Whether it's you or not you can't even be sure. I'm not going to trade potential one time use of these for the possibility of spying on me 24/7.
Printing drivers - I don't even have a printer.
the list goes on
and ironically youre removing the security layer completely which is knox. that means your phone cant isolate your private data from apps installed on it.
Click to expand...
Click to collapse
Funny thing is that these days even malware doesn't run without active Internet connection. Okay, let's say it grabs all my passwords, photos and documents. Now what? It will disappear the next time I do hard reset, with all the traces and stuff it has collected. Have you seen malware that bricks device on purpose? I think 99% of it nowadays is meant for extracting profit. Even if we take cryptolockers (which serve exactly this purpose) they only start working after obtaining the public key from the server. No connection - no key.
There's more to it than you think at first.
Just take it as a resource you can use incase you missed out any 'bloat' to remove.
Click to expand...
Click to collapse
Exactly. I'm not suggesting everyone follows my steps. I'm only suggesting that you look through the lists and see that you can remove a number of obvious bloatware that you can identify after a bit of googling (which I did for you). There are also a few lists of other people I've collected that I've updated the post with.
There's no need to criticize him for doing what he wants with his phone. He just shows that it's possible, and if others want to do the same, they can. He even provided a list of all apps he could remove without breaking anything he didn't want, which is awesome.
I for instance rarely use ROMs with a lot of tweaks and extras, as I like it as stock as possible. I rarely use custom kernels, except when they're superior and minimal compared to stock. I don't lash out against those who choose to use the ROMs and kernels with more features.
If everyone were to complain about everything that didn't fit their preferences, this forum would be a mess.
zurkx said:
this is insanity. why even bother with a smartphone if youre going to remove the smarts from it and not even use it as a phone.
none of that stuff is spyware. youre removing API libraries and interconnection stuff which is necessary to actually use the phone as a smartphone.
and ironically youre removing the security layer completely which is knox. that means your phone cant isolate your private data from apps installed on it.
Click to expand...
Click to collapse
Haha, good one.
Archiimonde said:
There's no need to criticize him for doing what he wants with his phone. He just shows that it's possible, and if others want to do the same, they can. He even provided a list of all apps he could remove without breaking anything he didn't want, which is awesome.
I for instance rarely use ROMs with a lot of tweaks and extras, as I like it as stock as possible. I rarely use custom kernels, except when they're superior and minimal compared to stock. I don't lash out against those who choose to use the ROMs and kernels with more features.
If everyone were to complain about everything that didn't fit their preferences, this forum would be a mess.
Haha, good one.
Click to expand...
Click to collapse
oh please. lets not enable paranoia - and illogical paranoia at that. do you really think OPs crippled phone with "spyware" removed is secure ?
While removing all the actually useful features his phone has also been stripped of basic security. he does not have a knox encrypted container which means his phone data can be accessed using the modem baseband processor and all the data copied off it. Since his phone is no longer a phone he wouldnt even see the activity. Removing "location services" APIs do nothing since the phone is going to ping the towers anyway regardless of whether it has a SIM or not and since it has no SIM it will ping *all* the towers instead of the ones it is registered to. So everyone with a basic stingray can track his location at all times. Removing the cellular control protocol disables modem control using flight mode so even in flight mode the phone would be pinging everything in sight. bravo. awesome "security". and how does OP make it even more secure ? I know .. lets strip out the basic modem key loading so your baseband modem is now open completely to anyone with a spoofed cell tower with zero encryption keys loaded on it in default factory config! woo! home run.
He might as well buy an etch a sketch instead of a phone at this point since he converted his $900 smartphone into an insecure brick. there is nothing useful to be gained by stripping out functionality while reducing security in the name of "hiding from the man" when the "man" can easily get access to anything on your phone anyway and its kept there unencrypted for easier access. My stock 910U with encrypted knox container, DoD CAC enabled and switched to flight mode is waay more secure than his stripped down insecure brick.
I think that android is perfect for those people that want to customize their phones the way they like it. that's what we're all here for and that's what the dude have done. *however* I can't feel that this wasn't done properly as the OP took the smart out of the phone. to the OP- you just own a 1990's phone now. maybe thats the way you like it but frankly I don't get why getting a 700$ phone for only calls/sms. if that's what you want i'd just get an actual old yearly 2000's phone that doesn't even have 3g, or the cheapest smartphone available today and do the same thing- just there it would make more sense(as all of the smart features are slow anyway). and as much as I agree regarding the lack of privacy these days- I'm also realistic. there are a few billions of people around the world and even more mobile phones. yes, google can locate you when you use location services. so what? if you are not a terorrist, not the NSA or anybody else gives a damn about it. there is no privacy today, and it's not necessarily worst thing possible.
OK, so we've established that different people use their devices in different ways. Moving on... take a look at the system apps on your phone. What percent percentage of them perform a function that you're aware of? How many of them provide the exact same function as other (in many cases system) apps? If either question is difficult to answer some research can be VERY illuminating.
Rather than jumping all over the OP for removing certain things due to personal preference, consider mine. I recently had 301 system apps on my phone (have begun uninstalling certain things I've just had frozen before). Of those 301 apps, I had 104 frozen. Determining the purpose of an app before ditching it, I've lost ZERO featues / functionality and hardly ever see an OOM error which happened somewhat often before debloating.
The fact is that there are pre-installed apps on your phone that are very likely just taking up space, or doing things that you would explicitly prohibit if you were aware / able to. OP has provided an excellent resource for determining to some extent what these apps are doing. What he's personally chosen to remove is a matter that's really of no concern to anyone but himself.
zurkx said:
While removing all the actually useful features his phone has also been stripped of basic security.
Click to expand...
Click to collapse
Now we're talking. What you are saying makes sense but to be completely sure you should provide some links or other proof that it is exactly as you describe. Because I am not sure that the following is true:
zurkx said:
Removing the cellular control protocol disables modem control using flight mode so even in flight mode the phone would be pinging everything in sight.
Click to expand...
Click to collapse
I have just tried this: enable flight mode (side note: it's permanently on for me), go to Phone, dial 911 and then observe the screen saying "enabling radio, please wait". If what you are saying is true - i.e. if I have removed cellular controls - then (1) how it would be enabling, if no control interface is present? (2) how would it actually call the number (by this I mean that I could hear the other guy)?
Something is wrong here.
Then, you are missing another point. For some reason you are assuming that whatever I have done was done for "security". But it was not. Sure, I am eager to strip off unwanted spyware (please, don't object that Fixmo and co. produces something useful for us). But I am as well eager to remove unnecessary processes to conserve the battery and make the device run smoother. This actually happens. Attached is screenshot of the battery stats - 20 hours on battery with about 5-6 hours of active usage (1.5 hours of gaming) and limited charging while transferring stuff via USB. It virtually doesn't use the battery in sleep mode as you can see. 39% remains, that's given that the device was charged up to 60% or so in the beginning. Sounds good to me unless I interpret it wrong.
(You can also see short Mobile signal spikes - that's my 911 calls. Doesn't look like the device no more controls what happens with its cellular module, does it?)
And to be clear: I understand that it's possible to spy on probably everyone depending on who does that. But stock "spyware" spies on everyone just in case. It's not targeted, it's common. That's what I am against. Targeted spying is completely another story and not my case (bad guys use another means to get rid of it, I'm sure).
zurkx said:
My stock 910U with encrypted knox container, DoD CAC enabled and switched to flight mode is waay more secure than his stripped down insecure brick.
Click to expand...
Click to collapse
I think it is but is it faster and has better battery life? Also, what happens once you switch off flight mode? It happily pours all the sniffed data to the other side. When you have data going not only in but out (online) you are always in catching-up position because patching broken defence by definition takes time after the breach happens (virus, etc.) and before the patch is on your device. Since defences are studied beforehand it doesn't matter how good they are because otherwise there would be no viruses whatsoever.
Now, zurkx, I don't want to offend you or anything but you sound angry and not very constructive. Try this: think of all the features I have removed/lost with my modification and write them down on one side of a piece of paper. Now think of all that remain and write on the other side. I am sure that the left list would be cluttered with "Chromecast", "Clever house", "Fitness clocks", "Mobile printing" and things like that. The other side will stay with "Awesome camera", "1080p video", "Extreme games that don't even heat up the device", etc.
Obviously, the latter is more important to me. I have no use in devices I will never own. It is imprudent to just leave them consuming CPU cycles and battery life.
tal123 said:
you just own a 1990's phone now. maybe thats the way you like it but frankly I don't get why getting a 700$ phone for only calls/sms.
Click to expand...
Click to collapse
Guys! I have ONLY removed cellular connectivity and various wireless stuff. I have NOT taken out the CPU, NFC, GPS or whatever. I can still watch video, use regular apps, play games and whatnot.
I do own a cellphone that can only send/receive calls and SMS and has no 3G but it costs $39, not $900. Mind you. I charge it once a month and happy with that.
No, seriously, I can't get it. Can you play World of Tanks on Nokia 3310? What are you saying man? The life doesn't end with LTE!
jazzmachine said:
What percent percentage of them perform a function that you're aware of?
Click to expand...
Click to collapse
True and that also doesn't mean that you should just leave the obvious garbage take its place. Because then you can as well abandon HTTPS when using online banking, or turn off WPA2 encryption just because if they wanted to spy on you that wouldn't stop them, so why bother? Also, you never know if your laptop is not preinstalled with another "Superfish" that works around TLS so all that is useless anyway.
Hopefully it's clear that I'm ironizing.
jazzmachine said:
Determining the purpose of an app before ditching it, I've lost ZERO featues / functionality and hardly ever see an OOM error which happened somewhat often before debloating.
Click to expand...
Click to collapse
Oh heaven, somebody has got his senses. I thought something was wrong with me. Hurray.
question- so if you have a phone just for calls/texts and all you wanted is a device just for games, etc- and that's why you stripped everything from your note 4 and made it just for offline apps- why not just get an ipod touch?
This is a very comprehensive list on which apps are safe to remove and which are not. And to get the list from a person who is willing to strip off this much is even better as they will tell you all the apps that are sefe to remove because they were not afraid to take them off.
Thank you for this list I am going to go through it and remove the apps that make sense for me to remove.
One question though, How much space did you free up by uninstalling all of these apps? It might be good to add the weight of each app next to them as well for easy refrence. Just a thought. Great job by the way!
zurkx said:
oh please. lets not enable paranoia - and illogical paranoia at that. do you really think OPs crippled phone with "spyware" removed is secure ?
While removing all the actually useful features his phone has also been stripped of basic security. he does not have a knox encrypted container which means his phone data can be accessed using the modem baseband processor and all the data copied off it. Since his phone is no longer a phone he wouldnt even see the activity. Removing "location services" APIs do nothing since the phone is going to ping the towers anyway regardless of whether it has a SIM or not and since it has no SIM it will ping *all* the towers instead of the ones it is registered to. So everyone with a basic stingray can track his location at all times. Removing the cellular control protocol disables modem control using flight mode so even in flight mode the phone would be pinging everything in sight. bravo. awesome "security". and how does OP make it even more secure ? I know .. lets strip out the basic modem key loading so your baseband modem is now open completely to anyone with a spoofed cell tower with zero encryption keys loaded on it in default factory config! woo! home run.
He might as well buy an etch a sketch instead of a phone at this point since he converted his $900 smartphone into an insecure brick. there is nothing useful to be gained by stripping out functionality while reducing security in the name of "hiding from the man" when the "man" can easily get access to anything on your phone anyway and its kept there unencrypted for easier access. My stock 910U with encrypted knox container, DoD CAC enabled and switched to flight mode is waay more secure than his stripped down insecure brick.
Click to expand...
Click to collapse
There's no need to rant. I never said the phone was more secure. You claimed that nothing of what he removed was spyware, which is wrong. I'm sure your phone is more secure. I agree with OP though that you statements make sense, but I'd also like to see some sources.
And to be clear: I understand that it's possible to spy on probably everyone depending on who does that. But stock "spyware" spies on everyone just in case. It's not targeted, it's common. That's what I am against. Targeted spying is completely another story and not my case (bad guys use another means to get rid of it, I'm sure).
Click to expand...
Click to collapse
This is what I meant.

How do you monitor your competitors?

Hey everyone,
I'm wondering what is everybody doing to stay on top of competing apps and other app market changes? What tools do you use? I've been working on a project to solve this problem and I'd love some input and feedback.
Thanks!
Here are some basicly tools for it: (1)appinner.com, it is an app internal data analysis platform, with it you can find which advertising platform sdk your competitor choose, how does they construt their apps,etc.
(2)flurry. it is a tool to track your apps performance, give you detailed insight in your users count, session length etc. (3)appannie. you can check the keywords and ranking List of apps.
https://sensortower.com is a must check. It will give you very valuable insight on what to do and what not about keywords and rankings (with a pretty cool daily email that reports you all you need to know about your app and his ranking).
As JimmyG20 said too, appannie is a must check too.
4 Simple Ways to Monitor Your Competitor's -
1. Sign up to receive their email or newsletter
2. Explore their website
3. Like and follow on social networks
4. Give them a call.
Useful sources to track
Hey,
These may be:
Sensortower with TOP charts
Appannie - also store stats
Statista sometimes publishes the stats abour certain apps

Samsung services dialling home to China (360.cn and 360safe.com) after Pie upgrade

Having ran NetGuard in logging mode for a few days now I've noticed that many of Samsung's in-built services are contacting web services associated at multiple DNS subdomains under:
- *.360.cn
- *.cloud.360safe.com
A lot of them on unsecured HTTP port 80 (some go via HTTPS port 443).
Services I've observed this behaviour so far are:
- Samsung ApexService
- ANT+ HAL Service
- Application installer (com.sec.android.preloadinstaller)
- Assistant Menu
- AirCommandManager (com.samsung.android.aircommandmanager)
- Plus too many other default services to list (most of which cannot be disabled)
Phone's running on stock unbranded SM-N960F build number PPR1.180610.011.N960FXXU2CSA2.
I've scanned the phone using bundled Device Care's McAfee security scan with no findings.
Has anyone else observed this behaviour?
sengork said:
Having ran NetGuard in logging mode for a few days now I've noticed that many of Samsung's in-built services are contacting web services associated at multiple DNS subdomains under:
- *.360.cn
- *.cloud.360safe.com
A lot of them on unsecured HTTP port 80 (some go via HTTPS port 443).
Services I've observed this behaviour so far are:
- Samsung ApexService
- ANT+ HAL Service
- Application installer (com.sec.android.preloadinstaller)
- Assistant Menu
- AirCommandManager (com.samsung.android.aircommandmanager)
- Plus too many other default services to list (most of which cannot be disabled)
Phone's running on stock unbranded SM-N960F build number PPR1.180610.011.N960FXXU2CSA2.
I've scanned the phone using bundled Device Care's McAfee security scan with no findings.
Has anyone else observed this behaviour?
Click to expand...
Click to collapse
I haven't looked at this as closely as you have,but,I'm guessing it's all tied-in from the Device Maintenance section of the phone.
The name of the company Samsung is currently in bed with is QIHOO:
https://en.wikipedia.org/wiki/Qihoo_360
https://seekingalpha.com/article/4165136-cheetah-mobile-lost-samsung-relevant-risks
Remember/heard of Cheetah Mobile (of Clean Master infamy) ?
https://www.prnewswire.com/news-rel...mobile-security-and-innovation-300043298.html
Well,that's who used to be in partnership w/Samsung & the Device Maintenance aka built-in Clean Master to most,if not all Samsung mobile products.
Fast-Forward to present day & we still have the crapware on our phones,likely scraping info & selling it to anyone interested.
Now,it's just with another company,presumably one with friendlier terms for Samsung.
As you've probably noticed,you can't fully disengage/disable/deny all permissions here,less root (or ADB disabling/package disabler apps).
At least you have a phone that's rootable & can cruise the ROM scene for one that leaves this crap off the phone.
If root isn't an option:
Set up your phone & apps,fine-tune as you like for battery optimization on a per app basis/permissions/etc....
Then,either via ADB or a package disabler,disable the apps responsible for the crapware,especially the ones related to Device Maintenance.
https://forum.xda-developers.com/ga...laxy-note-9-bloatware-removal-thread-t3857508
Follow the link in the OP to the S9/S9+ forum/thread,it gives a better idea of what each .apk actually is/ties into.
Here's the app I use to disable crapware/things I don't use:
https://play.google.com/store/apps/details?id=com.wakasoftware.appfreezer
As to which apps to disable,the S9/S9+ thread,while not an exact match,should give you info on what to disable to stop the phone from pinging the 360 mothership & hopefully,not having any ill effects on the apps you want to keep on-board.
If you want a better idea of how each app is interconnected throughout the phone,use these two apps to take a look:
https://play.google.com/store/apps/details?id=com.ubqsoft.sec01
SD Maid (Pro):
https://play.google.com/store/apps/details?id=eu.thedarken.sdm&hl=en_US
(See the App Control & file manager sections of SD Maid for detailed app info).
Anyhoo,back to curbing the nonsense:
Whichever method you use to disable,should you choose to do so,start with this one:
com.samsung.android.lool (Device Maintenance).
This will make the entire Device Maintenance section inaccessible as well.
That is why I suggest disabling vs outright uninstalling (which necessitates a factory reset to get it back).
You may need to access Device Maintenance for whatever reason from time to time,hence the recommendation for disabling vs uninstalling.
Continue monitoring for a day or so & see if the pinging to the Mothership subsides,or hopefully puts a full-stop to it.
Please keep us updated on what,if any actions you take w/the results. :good:
Excellent overview, it's quite an eye opener thanks for the info.
I've disabled and force-stopped "com.samsung.android.lool" (amongst other junkware) and so far NetGuard hasn't shown a single network log entry to any of the 360 domains. I've uninstalled all 4 Facebook packages. Continuing to monitor this closely. My thought is that I can re-enable "com.samsung.android.lool" from time to time whenever maintenance is needed and then disable it again. Even better Adhell3 might be useful for blocking "com.samsung.android.lool" network attempts whilst retaining it for device management purposes however I haven't tried this yet.
For reference, here is my current list of disabled packages:
Code:
package:com.monotype.android.font.rosemary
package:com.samsung.android.app.ledcoverdream
package:com.sec.android.widgetapp.samsungapps
package:com.samsung.android.app.galaxyfinder
package:com.samsung.svoice.sync
package:com.cnn.mobile.android.phone.edgepanel
package:com.samsung.android.easysetup
package:com.samsung.android.provider.stickerprovider
package:com.samsung.android.app.sbrowseredge
package:com.samsung.android.rubin.app
package:com.sec.android.cover.ledcover
package:com.samsung.faceservice
package:com.monotype.android.font.foundation
package:com.sec.android.widgetapp.easymodecontactswidget
package:com.samsung.android.app.settings.bixby
package:com.sec.android.app.billing
package:com.samsung.android.app.selfmotionpanoramaviewer
package:com.samsung.android.game.gamehome
package:com.samsung.daydream.customization
package:com.sec.enterprise.knox.attestation
package:com.samsung.systemui.bixby2
package:com.dsi.ant.service.socket
package:com.microsoft.skydrive
package:com.samsung.SMT
package:com.samsung.android.drivelink.stub
package:com.android.hotwordenrollment.xgoogle
package:com.samsung.android.sm.devicesecurity
package:com.dsi.ant.sample.acquirechannels
package:com.samsung.android.aircommandmanager
package:com.samsung.android.bixby.service
package:com.samsung.android.smartface
package:com.android.egg
package:com.samsung.android.emojiupdater
package:com.samsung.android.bixby.agent
package:com.android.printspooler
package:com.android.hotwordenrollment.okgoogle
package:com.samsung.android.hmt.vrsvc
package:com.samsung.storyservice
package:com.android.dreams.basic
package:com.android.bips
package:com.samsung.android.game.gametools
package:com.samsung.android.app.simplesharing
package:com.samsung.android.service.peoplestripe
package:com.samsung.android.da.daagent
package:com.dsi.ant.plugins.antplus
package:com.samsung.android.app.taskedge
package:com.google.android.webview
package:com.samsung.android.app.mirrorlink
package:com.dsi.ant.server
package:com.samsung.android.allshare.service.fileshare
package:com.samsung.android.universalswitch
package:com.sec.android.app.apex
package:flipboard.boxer.app
package:com.google.android.printservice.recommendation
package:com.monotype.android.font.chococooky
package:com.android.dreams.phototable
package:com.samsung.android.bixbyvision.framework
package:com.samsung.android.game.gos
package:com.android.wallpaper.livepicker
package:com.samsung.android.beaconmanager
package:com.sec.enterprise.mdm.services.simpin
package:com.samsung.android.stickercenter
package:com.samsung.android.bixby.wakeup
package:com.samsung.android.samsungpass
package:com.samsung.android.spayfw
package:com.linkedin.android
package:com.samsung.android.lool
package:com.samsung.android.knox.analytics.uploader
package:com.samsung.android.sm.policy
package:com.sec.android.emergencylauncher
package:com.samsung.android.visionintelligence
package:com.samsung.android.app.watchmanagerstub
package:com.samsung.android.svoiceime
package:com.samsung.android.mateagent
package:com.enhance.gameservice
package:com.google.vr.vrcore
package:com.hiya.star
package:com.sec.enterprise.knox.cloudmdm.smdms
package:com.samsung.android.app.appsedge
package:com.samsung.android.samsungpassautofill
package:com.monotype.android.font.cooljazz
package:com.samsung.android.allshare.service.mediashare
package:com.samsung.android.app.clipboardedge
package:com.samsung.android.app.motionpanoramaviewer
package:com.samsung.android.bio.face.service
package:com.samsung.android.bixby.agent.dummy
sengork said:
Excellent overview, it's quite an eye opener thanks for the info.
I've disabled and force-stopped "com.samsung.android.lool" (amongst other junkware) and so far NetGuard hasn't shown a single network log entry to any of the 360 domains. I've uninstalled all 4 Facebook packages. Continuing to monitor this closely. My thought is that I can re-enable "com.samsung.android.lool" from time to time whenever maintenance is needed and then disable it again. Even better Adhell3 might be useful for blocking "com.samsung.android.lool" network attempts whilst retaining it for device management purposes however I haven't tried this yet.
For reference, here is my current list of disabled packages:
Code:
package:com.monotype.android.font.rosemary
package:com.samsung.android.app.ledcoverdream
package:com.sec.android.widgetapp.samsungapps
package:com.samsung.android.app.galaxyfinder
package:com.samsung.svoice.sync
package:com.cnn.mobile.android.phone.edgepanel
package:com.samsung.android.easysetup
package:com.samsung.android.provider.stickerprovider
package:com.samsung.android.app.sbrowseredge
package:com.samsung.android.rubin.app
package:com.sec.android.cover.ledcover
package:com.samsung.faceservice
package:com.monotype.android.font.foundation
package:com.sec.android.widgetapp.easymodecontactswidget
package:com.samsung.android.app.settings.bixby
package:com.sec.android.app.billing
package:com.samsung.android.app.selfmotionpanoramaviewer
package:com.samsung.android.game.gamehome
package:com.samsung.daydream.customization
package:com.sec.enterprise.knox.attestation
package:com.samsung.systemui.bixby2
package:com.dsi.ant.service.socket
package:com.microsoft.skydrive
package:com.samsung.SMT
package:com.samsung.android.drivelink.stub
package:com.android.hotwordenrollment.xgoogle
package:com.samsung.android.sm.devicesecurity
package:com.dsi.ant.sample.acquirechannels
package:com.samsung.android.aircommandmanager
package:com.samsung.android.bixby.service
package:com.samsung.android.smartface
package:com.android.egg
package:com.samsung.android.emojiupdater
package:com.samsung.android.bixby.agent
package:com.android.printspooler
package:com.android.hotwordenrollment.okgoogle
package:com.samsung.android.hmt.vrsvc
package:com.samsung.storyservice
package:com.android.dreams.basic
package:com.android.bips
package:com.samsung.android.game.gametools
package:com.samsung.android.app.simplesharing
package:com.samsung.android.service.peoplestripe
package:com.samsung.android.da.daagent
package:com.dsi.ant.plugins.antplus
package:com.samsung.android.app.taskedge
package:com.google.android.webview
package:com.samsung.android.app.mirrorlink
package:com.dsi.ant.server
package:com.samsung.android.allshare.service.fileshare
package:com.samsung.android.universalswitch
package:com.sec.android.app.apex
package:flipboard.boxer.app
package:com.google.android.printservice.recommendation
package:com.monotype.android.font.chococooky
package:com.android.dreams.phototable
package:com.samsung.android.bixbyvision.framework
package:com.samsung.android.game.gos
package:com.android.wallpaper.livepicker
package:com.samsung.android.beaconmanager
package:com.sec.enterprise.mdm.services.simpin
package:com.samsung.android.stickercenter
package:com.samsung.android.bixby.wakeup
package:com.samsung.android.samsungpass
package:com.samsung.android.spayfw
package:com.linkedin.android
package:com.samsung.android.lool
package:com.samsung.android.knox.analytics.uploader
package:com.samsung.android.sm.policy
package:com.sec.android.emergencylauncher
package:com.samsung.android.visionintelligence
package:com.samsung.android.app.watchmanagerstub
package:com.samsung.android.svoiceime
package:com.samsung.android.mateagent
package:com.enhance.gameservice
package:com.google.vr.vrcore
package:com.hiya.star
package:com.sec.enterprise.knox.cloudmdm.smdms
package:com.samsung.android.app.appsedge
package:com.samsung.android.samsungpassautofill
package:com.monotype.android.font.cooljazz
package:com.samsung.android.allshare.service.mediashare
package:com.samsung.android.app.clipboardedge
package:com.samsung.android.app.motionpanoramaviewer
package:com.samsung.android.bio.face.service
package:com.samsung.android.bixby.agent.dummy
Click to expand...
Click to collapse
:good: THX for the update,much appreciated! :good:
I was gonna post this in a bit (just noticed it myself this afternoon,LOL) ,but,it looks like you have added the other two .apks to your disabled list:
https://forum.xda-developers.com/showpost.php?p=78103170&postcount=123
It'a a shame the mfgs aren't required to be more up-front & state ,in common use language where the print is larger than a gnat's ass, the exact nature of the .apks & even more control over the services installed on them.
KOLIOSIS said:
It'a a shame the mfgs aren't required to be more up-front & state ,in common use language where the print is larger than a gnat's ass, the exact nature of the .apks & even more control over the services installed on them.
Click to expand...
Click to collapse
The closest to a manufacturer application list I came across was:
- https://support.samsungknox.com/hc/en-us/articles/115015195728-Common-Criteria-Mode
- For example https://docs.samsungknox.com/CCMode/N960F_O.pdf
This seems to relate to computer security certification known as Common Criteria:
- https://en.wikipedia.org/wiki/Common_Criteria
So the dial home behaviour seems to have passed this security certification (or perhaps the network flows were not part of the certification process). We can only guess...
I've had to reenable the following items to get APK installs to function (either through Play Store or locally stored APKs):
Code:
com.samsung.android.sm.policy
com.samsung.android.sm.devicesecurity
https://forum.xda-developers.com/ga...val-thread-t3857508/post78744845#post78744845
Continuing to monitor with NetGuard. So far ~1hr I haven't seen the packets repeat.
sengork said:
I've had to reenable the following items to get APK installs to function (either through Play Store or locally stored APKs):
https://forum.xda-developers.com/ga...val-thread-t3857508/post78744845#post78744845
Continuing to monitor with NetGuard. So far ~1hr I haven't seen the packets repeat.
Click to expand...
Click to collapse
IIRC,something like this was mentioned in the S9/S9+ debloat thread.
I didn't mention it earlier as you hadn't reported any issues,but,glad you were able to figure it out/find the same info I'd stumbled upon.
Well after a day of usage I can say that battery life is poorer without "com.samsung.android.lool". I've enabled it again now and blocked its domains via Adhell 3:
Code:
360.cn
360safe.com
*.360.cn
*.360safe.com
Furthermore I have disabled its WiFi and Mobile network access in Adhell 3. However this block is bypassed whenever applications using Android's native VPN facility are switched on so its not absolutely fool proof. Similar blocking can be done using NetGuard itself as long as you keep it switched on and filtering continuously.
I'll keep an eye on which other domains it attempts to contact.
sengork said:
Well after a day of usage I can say that battery life is poorer without "com.samsung.android.lool". I've enabled it again now and blocked its domains via Adhell 3:
Code:
360.cn
360safe.com
*.360.cn
*.360safe.com
Furthermore I have disabled its WiFi and Mobile network access in Adhell 3. However this block is bypassed whenever applications using Android's native VPN facility are switched on so its not absolutely fool proof. Similar blocking can be done using NetGuard itself as long as you keep it switched on and filtering continuously.
I'll keep an eye on which other domains it attempts to contact.
Click to expand...
Click to collapse
How much of a difference in battery life are we talking about?
It felt to be about 20%. Is Pie without Device Maintenance expected to put applications to sleep? I am guessing sleep is the major factor here (opposed to cleaning up caches and other storage capacity functions of Device Maintenance app).
sengork said:
It felt to be about 20%. Is Pie without Device Maintenance expected to put applications to sleep? I am guessing sleep is the major factor here (opposed to cleaning up caches and other storage capacity functions of Device Maintenance app).
Click to expand...
Click to collapse
I would like to think so,hoping Device Maintenance isn't ingrained to the level where it breaks the native Doze feature in Android.
JMHO,Device Maintenance seems to be just like Clean Master,running on top of Android/counterproductive,putting a hat on a hat,so to speak,LOL.
I haven't had a Nexus device since the N6 & never had a Pixel,but,I'm pretty sure none of 'em have DM..................................
Whenever I decide to update to Pie,I'm going to continue as I am now:
Battery Optimize all apps that I don't rely on for auto-updating or push notifications & then disabling Device Maintenance.
If something starts acting up,only then do I re-enable DM,take a look at Battery Optimizing for whatever is affected & again,disabling DM.
Guessing you've just recently updated to Pie.......
If it were me,I'd continue to disable DM & give the new OS upgrade a week or so,see what your battery life looks like then.
Battery life loss could be due to some user-installed apps that aren't playing nice w/Pie & not due to DM being disabled.
You will find the logo or text "powered by 360" on storage screen in Samsung device management app.
KOLIOSIS said:
Battery Optimize all apps that I don't rely on for auto-updating or push notifications & then disabling Device Maintenance.
If something starts acting up,only then do I re-enable DM,take a look at Battery Optimizing for whatever is affected & again,disabling DM.
Click to expand...
Click to collapse
I have taken your advise a few weeks ago and have concluded that removing DM whilst manually optimising all individual apps has resulted in no battery loss (in fact it has probably improved but this is within a margin of error). Thanks for your guidance.
Unless you need to connect to a Chinese domain for whatever reason, just block *. cn for good and forever about it.
hello guys i have bought galaxy note 9 in China and there is not preinstalled google play store app...
can anyone tell me how to install safely ))?? thank you ...
hey thanks for your attention but i dont need to access i have vpn i know how to access i want to know how to install because it is not installed so do you have some ideas ?))) how to do it
sandro comaia said:
hey thanks for your attention but i dont need to access i have vpn i know how to access i want to know how to install because it is not installed so do you have some ideas ?))) how to do it
Click to expand...
Click to collapse
Just side-load this .apk & you should be good to go:
https://www.apkmirror.com/apk/googl...5-22-all-0-pr-254908059-android-apk-download/
Was original poster was the only one who had this issue?
Is this a samsung thing or all androids?
Can this be a security risk?
There was a link to the s9 bloatware thread but it doesn't work
https://forum.xda-developers.com/ga...laxy-note-9-bloatware-removal-thread-t3857508
Says 404 not found for me
Nameduser6 said:
Was original poster was the only one who had this issue?
Is this a samsung thing or all androids?
Can this be a security risk?
There was a link to the s9 bloatware thread but it doesn't work
https://forum.xda-developers.com/ga...laxy-note-9-bloatware-removal-thread-t3857508
Says 404 not found for me
Click to expand...
Click to collapse
Should be only Samsung phones. Interestingly i haven't seen it dial home since my original post and up until i uninstalled the Device Care package. Samsung might have changed the domains the tool dials home to.
Sent from my SM-N960F using Tapatalk

Categories

Resources