iFont(Expert of Fonts) - harmful app, removed from play? - Xposed General

Yesterday, I got a "harmful app" notification to uninstall "iFont(Expert of Fonts)" which I had loaded as an Xposed module.
The app has disappeared from Google Play. It was previously at this URL:
https://play.google.com/store/apps/details?id=com.kapp.ifont&hl=en
It can still be found as an available Xposed module:
http://repo.xposed.info/module/com.kapp.ifont
I deactivated the Xposed toggle for iFont, set Xprivacy to block everything for it, rebooted, then froze it with Greenify.
I posted this to the security forum yesterday, and there have been no responses.
I just uninstalled it. The font that I like stayed, but I wonder if it left anything else behind.
Should this be suspended from the Xposed repository pending some explanation from Google? Can someone do that?

Why is there still no answer to this???

schumifer said:
Why is there still no answer to this???
Click to expand...
Click to collapse
Maybe because this app is still available in the play store?

this notification is inaccurate sometimes
Sent from my SM-G9550 using Tapatalk

C3C076 said:
Maybe because this app is still available in the play store?
Click to expand...
Click to collapse
Oooopsss sorry and thanks

Charlie R. said:
Yesterday, I got a "harmful app" notification to uninstall "iFont(Expert of Fonts)" which I had loaded as an Xposed module. The app has disappeared from Google Play. It was previously at this URL: https://play.google.com/store/apps/details?id=com.kapp.ifont&hl=en It can still be found as an available Xposed module:http://repo.xposed.info/module/com.kapp.ifont I deactivated the Xposed toggle for iFont, set Xprivacy to block everything for it, rebooted, then froze it with Greenify. I posted this to the security forum yesterday, and there have been no responses. I just uninstalled it. The font that I like stayed, but I wonder if it left anything else behind. Should this be suspended from the Xposed repository pending some explanation from Google? Can someone do that?
Click to expand...
Click to collapse
schumifer said:
Why is there still no answer to this???
Click to expand...
Click to collapse
C3C076 said:
Maybe because this app is still available in the play store?
Click to expand...
Click to collapse
yyh991013 said:
this notification is inaccurate sometimes. Sent from my SM-G9550 using Tapatalk
Click to expand...
Click to collapse
I've got a feeling that you saw something in the realm of the iFont App being Harmful to your device and, If so, then that is what's called a PSA (Poisoned System Directories) Warning from Google.
Google shows this warning for any app and such that Google determines what may be related to certain modifications (like SELinux for example) that can/may/will do damage to a device and always recommends that the individual uninstall it because it's harmful.
This Falls into one of 2 categories that are understandable...
Category 1: There are, in fact, apps and such that can affect a device in a way that CAN do harmful things to a system/device and those can happen even without the individuals knowing.
Category 2: There are, in fact, apps and such that affect a device that is NOT designed to do harm to a system/device BUT, the individual may not be (and should be) experienced enough to understand other actions that's performed and can potentially inadvertently harm their device.
Some apps ARE NOT, by design, aimed at doing anything harmful BUT, keep in mind that there are apps that ARE, by design, aimed to do harm to a device's system or even hardware. So keep this in mind.
In order to stop those PSA Warnings (ONLY If you desire to do so) then I've provided a link that has a little "how to" for Disabling those pesky "App is harmful" Security Alerts:
How to Disable the Android's (‘App is harmful’) Security Alert
I wish you all the best of luck!
***Please Note: As always, I welcome any member to help with further valuable information/clarification for any of my posts.
Sent via Communicator [d2vzw] from the Bridge of the U.S.S. Enterprise.

Ibuprophen said:
Google shows this warning for any app and such that Google determines what may be related to certain modifications (like SELinux for example) that can/may/will do damage to a device and always recommends that the individual uninstall it because it's harmful.
Click to expand...
Click to collapse
The app was removed from the Play store for several weeks.
I will note that the developer is Chinese, and several of the TTF faces that I've pulled are actually owned by others. My favorite typeface, Armani, is actually ITC Bauhaus when I examine it in CentOS.
The app could easily have been pulled for violation of copyright or malware detection.
The point is that I couldn't find it with ANY Android device, or from Windows browsers using a URL for the Play store. Thus, a local directory problem is unlikely the cause.

Related

Recent File Manager update (hating Alcatel right now)

Idol 4 6055u hidden update last week and File Manager is now like a 'Clean Master' clone with all the clean-your-phone and boost-your-phone notifications spam. And since there's no way to root it the app is not removable.
Anyone had any luck stabbing this one to death?
Sucks right? Mentioned it in a thread I made a few weeks back:
https://forum.xda-developers.com/idol-4s/help/alcatel-phone-t3634870
If possible, uninstalling updates or disabling the app should revert the app to its pre-spam state. If not, disabling the apps and using a less invasive file manager app is an option.
Alternatively a factory reset will return all system apps to their pre-spammy state if I recall correctly. From there, you can just avoid updating that individual app.
macallik said:
Sucks right? Mentioned it in a thread I made a few weeks back:
https://forum.xda-developers.com/idol-4s/help/alcatel-phone-t3634870
If possible, uninstalling updates or disabling the app should revert the app to its pre-spam state. If not, disabling the apps and using a less invasive file manager app is an option.
Alternatively a factory reset will return all system apps to their pre-spammy state if I recall correctly. From there, you can just avoid updating that individual app.
Click to expand...
Click to collapse
Unfortunately you can't disable the app, even though it appears you can under dev options (tried that, it just updates itself in the background again). Have tried uninstalling (updates) but it updates itself again and the spam reappears. It also places a perma-notification (can't slide off) at the top of the notifications.
BUT: The latest update to File Manager allows you to turn off notifications. Problem solved.
NOTE: You do have to give permissions for storage before you can get into the settings that allow turning off notifications/shortcuts.
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
Thanks, following these steps I think I got them tamed. Not all the apps show up in Google Play but disabling auto-update in 'Updates' (Alcatel's version) should take care of those...
yosemite610 said:
Thanks, following these steps I think I got them tamed. Not all the apps show up in Google Play but disabling auto-update in 'Updates' (Alcatel's version) should take care of those...
Click to expand...
Click to collapse
Several of Alcatel's Apps updates throught Google Play and other via Updates app. For example, sound recorder updates via Google Play. If it's already updated - just remove updates and Google Play app for Sound Recorder and forbid / deny future updates. In 'Updates' need to forbid updates of system apps too. I already done all of this steps for each preinstalled app which tries to update - all fine. There is no any unwanted push notifications.
Rip ._. I hate this phone so much.
They are pathetic. Updating all apps and adding ads to them.
DeckerSU said:
Several of Alcatel's Apps updates throught Google Play and other via Updates app. For example, sound recorder updates via Google Play. If it's already updated - just remove updates and Google Play app for Sound Recorder and forbid / deny future updates. In 'Updates' need to forbid updates of system apps too. I already done all of this steps for each preinstalled app which tries to update - all fine. There is no any unwanted push notifications.
Click to expand...
Click to collapse
Thanks for the tips and detailed info @DeckerSU. I had begun to prepare to unlock, root, and flash a custom ROM due to this adware and push notification nonsense. Up until the recent app updates, I had truly enjoyed the clean, stock android UI experience on my idol3 ... now I can relax again, the aggravation of those push notifications is gone!
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
thank you, I hadn't thought of step 3
I signed in just to thank you
edit: just realized this thread is for idol 4s, but it applied to my idol 3..
I didn't realize this is a problem on later phones.. so messed up
Very bad, all those spamming programs on a phone we paid for. They beter come out with a recent
Android update. Its a Shame for the alcatel brand.
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
Thanks for the tips! I was starting to think I would have to root the device... Very dissapointing to see this kind of behaviour from Alcatel
Cheers
It may be worse than you think!
It's bad enough for a SYSTEM app to be serving up potentially malicious advertising that could Pwn your device, but it ventures deep into dark waters if that SYSTEM app has the Facebook "Graph" API inside of it that could allow a developer (or in this case your Chinese phone manufacturer) to use your Facebook access token to pillage through your Facebook account and look through your photos, tags, pages visited, URL's, or even create Facebook posts or messages on your behalf!
Sound crazy?
Take a look at the Facebook "Graph" developer site for yourself:
https://developers.facebook.com/docs/graph-api/using-graph-api/
And if someone was familiar with some open source tools that could allow them to look inside an Android app:
https://github.com/iBotPeaches/Apktool
https://github.com/pxb1988/dex2jar
https://github.com/sreenivasmula/JDGUI
http://www.7-zip.org/download.html
That person might look to see if the app has the Facebook Graph API inside of it:
https://play.google.com/store/apps/details?id=com.jrdcom.filemanager&hl=en
Any one have a custom rom? Like Lineage or CM or AOSP any other one except the crapy stock rom?
Not good enough!
I no longer trust ANYTHING that is installed on my Alcatel device after the recent adware/spyware "upgrades"!
I installed TWRP and the (unofficial) Lineage ROM until I get a different phone all together.
https://forum.xda-developers.com/id...ficial-lineageos-14-1-idol36045x-5-5-t3615700
I will NEVER purchase another Alcatel device as long as I live and I will advise all my friends and family and anyone else that will listen to avoid Alcatel as well.
I also suggest that anyone with a stock Alcatel device not to use any "widgets" that create shortcuts that may use your access tokens for Facebook and/or Twitter until we know what is going on.
The Facebook Graph API on a native app has a greater access level than a web application and the token(s) don't expire for 60 days and can be extended.
I advise people to avoid logging in to apps or websites with their social media and/or Google credentials and to change your passwords and set up 2 factor authentication and remove any apps associated with your social media accounts.
Wtf
yosemite610 said:
Idol 4 6055u hidden update last week and File Manager is now like a 'Clean Master' clone with all the clean-your-phone and boost-your-phone notifications spam. And since there's no way to root it the app is not removable.
Anyone had any luck stabbing this one to death?
Click to expand...
Click to collapse
That update is from google play store! Not from alcatel.... Uninstall updates and don't let google play do whatever it wants in your phone!
That update is from google play store! Not from alcatel....
Click to expand...
Click to collapse
The update may have come the Google Play Store but is every bit Alcatel!
The "boost" function comes from TCL (Alcatel) owned Hawk app's "Super Cleaner" and the antivirus function comes from Hawk's Hi Security app that uses McAfee technology.
http://www.ehawk.com/en/
Can you help me to unlock a sharp phone?
DeckerSU said:
This is well-known problem, ads presents in all latest preinstalled Acatel's apps updates: File Manager, Sound Recorder, Weather, Launcher and others. All of them puts notifications with spam-news and in some cases tries to change default homepage of Google Chrome browser. To prevent this need to do the following things:
1. Uninstall all updates of these apps to revert it to stock-state.
2. Deny auto update of these apps in Google Play.
3. Deny auto update of system apps in standart Update application.
Click to expand...
Click to collapse
Can you help me to unlock a sharp phone?
I have the modem.elf file.
Following the advice on this thread, I was able to revert to the old versions of these apps back in October, and my phone stayed usable from then until about 2 weeks ago. Suddenly, the "updates" installed themselves (as part of a "critical system update" that I was notified my phone needed, and now, I don't have the option to uninstall the updates (or rather, it uninstalls to another spammy, bloatware version, not to the factory original).
Any ideas on what I can do now? Or is it time to throw this phone in the trash, and get one from a company that doesn't do this?
critical system update
Following the advice on this thread, I was able to revert to the old versions of these apps back in October, and my phone stayed usable from then until about 2 weeks ago. Suddenly, the "updates" installed themselves (as part of a "critical system update" that I was notified my phone needed, and now, I don't have the option to uninstall the updates (or rather, it uninstalls to another spammy, bloatware version, not to the factory original).
Click to expand...
Click to collapse
You have got to be kidding me!
Now Alcatel and McAfee are tricking users into installing their adware/spyware through the use of fake "critical update" patches?
I think it is high time to do a complete breakdown/inspection of the app and do a full public disclosure.
It isn't surprising that Alcatel would infect a users phone with adware/spyware but for a so-called "security" company like McAfee to be involved is both frightening and disturbing.

LG Package Disabler

The app is no longer available in the playstore. What is everyone using to uninstall bloat now?
That is very bad news. Why would Google do this ? And the BK Samsung debloat app is still up ?
This LG Package Disabler is a must have for this phone.
umm, can google remove apps just like that...
Last i recall, i paid for that app... and now it just vanish?
No mention of it removing purchase, now I cannot even find it in purchase history, so did they just remove the app along with purchase history and no refund??
You can still remove apps via adb. There have been a couple other posts on regarding how to and a quick search should reveal them.
edboy21 said:
The app is no longer available in the playstore. What is everyone using to uninstall bloat now?
Click to expand...
Click to collapse
Wow. I just jumped from Windows mobile to Android. I got the insurance company assurion to replace my 950 with a V30 (for the price of my $150 deductible). I had downloaded the package disabler app and it works great. One thing I miss about windows mobile is the ability to delete any bloatware you want and move entire apps to the sd card - not just the ancillary portions of an app.
I still have the app installed and found a contact email address in the app. I sent an email asking what happened. If I get a reply, I'll share the info.
Any update from the developer on still being able to get the app?
Damn, I was JUST about to jump on this bandwagon and give that app a shot, and now it's been pulled. Argh! Thank Odin I'm no stranger to ADB. Command Line, here we come!
lwinstead said:
Damn, I was JUST about to jump on this bandwagon and give that app a shot, and now it's been pulled. Argh! Thank Odin I'm no stranger to ADB. Command Line, here we come!
Click to expand...
Click to collapse
How do you use the ADB & command line to manually do this process?
I paid for the app and now it has been removed from the store. I guess i will just have to get the APK elsewhere...
The APK is still live: MOD EDIT: warez link removed
[email protected] said:
The APK is still live:
Click to expand...
Click to collapse
You can't post warez links for paid apps.
6. Do not post or request warez.
If a piece of software requires you to pay to use it, then pay for it. We do not accept warez nor do we permit members to request, post, promote or describe ways in which warez, cracks, serial codes or other means of avoiding payment, can be obtained or used. This is a site of developers, i.e. the sort of people who create such software. When you cheat a software developer, you cheat us as a community.
Click to expand...
Click to collapse
BE AWARE: Malware probably lurks in such pirated apps, so no one should download them before a mod removes the links.
Go here and join the discussion:
GUIDE: Make your V30 Faster and Smoother
https://forum.xda-developers.com/lg-v30/how-to/guide-make-v30-faster-smoother-t3693083
This paid app was discussed in depth, and reasons why it was probably removed from Google Play store. But also alternate methods were discussed on how to remove bloatware.
UCChemE05 said:
Any update from the developer on still being able to get the app?
Click to expand...
Click to collapse
If this was intended for me, then no. The devs have not responded to my email.
They have some version of Package Disabler available for purchase on their website (which is linked to in the LG Package Disabler "About" option). I'm just not willing to try the purchase right now. It seems kind of suspicious to me. The website seems to have some malfunctions (possibly because they're still linked to their Play pages which have now been removed.)
Oh guys, be careful when disabling apps. I had huge lag after disabling some of it using adb. No lag after apps are enabled again.
This is exactly what I want to know too. I'm wondering why it was even removed from the Play Store all together. I need it lol
Play on words
"so no one should download them before a mod removes the links."
So its only ok to use them after the mod removes the link...
/sarcasm
I used BK Package Disabler from the play store. Works better than LG Package Disabler, as it does not require you to install apk. Just a ADB command line from a computer to setup.
Just saying, I currently have not disable anything. The phone runs so much better without disabling stuff... Consider that I use VPN, chromecast and Google home, disabling stuff always seems to mess something up.
RoxAbout said:
"so no one should download them before a mod removes the links."
So its only ok to use them after the mod removes the link...
/sarcasm
Click to expand...
Click to collapse
Yeah, try to download from that post after the mod removes the link?
---------- Post added at 09:01 AM ---------- Previous post was at 08:59 AM ----------
comscier said:
I used BK Package Disabler from the play store. Works better than LG Package Disabler, as it does not require you to install apk. Just a ADB command line from a computer to setup.
Just saying, I currently have not disable anything. The phone runs so much better without disabling stuff... Consider that I use VPN, chromecast and Google home, disabling stuff always seems to mess something up.
Click to expand...
Click to collapse
Agreed. I haven't disabled anything and I use AdGuard VPN to block ads. Phone run very smoothly and very fast. I'm a big proponent of rooting (and I will root this phone), but I'm very wary of messing something up -- unintentionally causing lag because something is missing.
It is really strange that we have horrible lag after disabling some apps. Same thing on G6 and V30. After debloating Galaxy device, it's much easier to breathe for me and my phone. Here one the LG phone it is opposite.
Hmm guys.. 'Disable HW Overlays' option under developer options fixed all that horrible lag issues with my LG G6 and V30. Now it is smooth like Pixel phone when scrolling through web pages and apps like Instagram, Facebook etc.
This isn't permanent fix unfortunately. What should we do? Why is this happening? This option solve all stutter/lag/touchLatency problems with my LG devices. What can we do? LG won't fix this. I had the same problems in the era of the LG G2 and G3

Package Disabler Pro experience and comment on their authenticity

After 2 weeks of attempts to make it work, after several emails sent to the PoliceDeveloper team, here is my conclusion. This product is malicious or doesn't work.
Notice: I do not work for Samsung nor I've ever worked for PoliceDeveloper. I have no interest at all posting this except warning the next users. I'm simply a guy a bit pissed off by Samsung bloatwares.
Maybe my experience could bring some additional answers to a certain post reported on reddit and named: package_disabler_question.
This app is weird for several reasons explained below:
The developer team doesn't support you. The process is well documented nowhere, even in their emails, really absolutely nowhere. Apparently it doesn't work and when you show them the proof that you are dealing with an installation issue, they don't dare to reply, they simply ignore you or reply with an automated template. Truly disrespectful when you trusted them buying the app on the store.
Their website seems to refer to wrong versions only (based from my own experience). From the Google store, versions sometime work, sometime they doesn't. It was mentioned somewhere (app itself or their website) that you have to install a "PDP engine". When it's done, it still doesn't work, you write to the team and at that moment they state by email you don't need to use it anymore. So why is there a PDP engine to install at the very begining?? And the strangest thing is you don't know at all which tool is doing what, because nothing is explained anywhere.
The tool needs an internet connection, but you don't know what is it for? You guess, seeing what happens on your screen, that Knox validate the license. But is it even a genuine popup? I asked to the team what was this connection requirement for. Strange, after this email, silence from the team until the date I'm sharing my experience here.
Now if it was only about some painful installation and comunication with the dev team, I would only rank it with 3 or 4 stars, complimenting them for the great work. But there is much annoying, the tool maybe does not do what it pretends to do. When you achieve to install it and make it work after several emails, you want to disable some packages, they become indeed displayed in a disabled app list within PackageDisabler, good! But when you check the Android built-in task manager, nothing is in the Android disabled app list. I tried to run one of the recently disabled package and the app can't start. So does it do the job or does it make you think it does... I'm not an Android specialits so I simply asked about this to the team, not a single answer.
They state Samsung is trying to block their app. They just explain that maybe in the purpose to work under the radar sending you an apk by email, and of course you have to give Admin permission to that app. So is it even true Samsung is fighting them? And if it was true, why? You will tell me because they want to protect their juicy bloatware apps. Based on my experience, I'm begining to think maybe Samsung simply tries to protect their platform end users from that app...
I asked for a reimbursement. Yes even for 2$, it doesn't work on my Galaxy S9 so help me or give me my money back. No answer from PoliceDeveloper...
So I let you make your own judgement about all of these.
In my opinion, when you buy an app and ask for what the app needs/does, or simply why it seems not to do what the developer claims, you should get your answers. Otherwise there is something sleazy.
Note: Galaxy S9 Duos - Exynos here...
No problems here. I've been using it for some time and the only problem I've ever had was a minor one that was fixed with a new update.
Tel864 said:
No problems here. I've been using it for some time and the only problem I've ever had was a minor one that was fixed with a new update.
Click to expand...
Click to collapse
May I know which phone you are using?
yecundha said:
May I know which phone you are using?
Click to expand...
Click to collapse
S9, US Snapdragon
Been using on my s9 exynos for 2 months now. Perfect!
I actually bought package disabler pro from the play store couple days ago (s9) and it has worked fine. I found it actually helpful on reading details on apps installed. Giving it admin permission does bother me, but its permanent.
elstano2k7 said:
I actually bought package disabler pro from the play store couple days ago (s9) and it has worked fine. I found it actually helpful on reading details on apps installed. Giving it admin permission does bother me, but its permanent.
Click to expand...
Click to collapse
I would guess that for it to interact with other apps or system services it would need admin.
Works fine here on exynos s9 after update. Had bought the original app and they gave me a voucher for the new one.
It works for me but it does look hacky. It acts as a device administrator, like what a corporation might give you as a condition of using the LAN. It can not modify or uninstall apps but it can refuse their use. I would have returned my S9+ if not for this app. Samsung ads were constantly popping up even after two days of trying to get rid of them. The phone was unusable until the bloat was disabled.
kevinmcmurtrie said:
It works for me but it does look hacky. It acts as a device administrator, like what a corporation might give you as a condition of using the LAN. It can not modify or uninstall apps but it can refuse their use. I would have returned my S9+ if not for this app. Samsung ads were constantly popping up even after two days of trying to get rid of them. The phone was unusable until the bloat was disabled.
Click to expand...
Click to collapse
It's just a UI for the adb uninstall commands, but backs them up so you can restore them, even the uninstall adb commands don't really uninstall them, you need root for that
working just fine for me, responsive developer (email them and give me the serial number from previous apps.), and no malicious problem here. all green
What apps are recommended to uninstall?
I'm checking now and I can hardly believe how much crap came with this phone. No wonder I couldn't get it to work before. Essentially, I disabled anything that was:
- Running in the background or using data even though I don't use it
- Popping up advertisements (all Samsung apps)
- Location spyware like weather apps and dynamic keyguards
- Bixby everything
- No chance of being needed (this will vary greatly by person)
Briefing, Yelp, Knox Enrollment Service, Galaxy Essentials Service, Galaxy Essentials Widget, Samsung Keyboard, Weather, Samsung Internet, Samsung Billing, SystemUIBixby, Samsung+, Secure your stuff, Secure Folder, Sports, Finance, Bixy Vision, Samsung Themes, Samsung Pay Framework, Samsung Cloud, Autofill with Samsung Pass, Samsung Pass, Samsung Experience Service, Keyguard Wallpaper Updator, Gear VR Service, Game Tools, Game Launcher, Find My Mobile, Secure Wi-Fi, Email, SmartThings, BixyVision Framework, Voice wake-up, Samsung voice input, Bixby Service, Bixby Global Action, Bixby Voice Stub, Bixy Voice, Smart Things, com.samsung.android.app.watch.managerstub, Bixby Home, AirCommandManager, Samsung account, KnoxVpnPacProcessor, Google VR Services, Google, Gmail, Facebook App Installer, Facebook Services, Facebook App Manager, Game Optimizing Service, Dictionary, CNN for Edge Panel
To the op: it needs internet for two reasons. To connect with knox servers to allow the app to do what it does, that's Samsung's requirement. And to verify the license for the actual app, to prevent piracy.
And for why it's not working... You didn't really describe what's happening, so we can't help you... But i mean, a lot of people have a great experience with PDP for samsung devices... I can only assume its user error... Maybe you refuse to Grant it permissions, have a device that's restricted with knox by your employer, or you're rooted (or were)...
Pretty good list.
kevinmcmurtrie said:
...Knox Enrollment Service, Samsung Experience Service, Google
Click to expand...
Click to collapse
Kinda surprised it still worked after partially disabling the service that makes it possible (knox)... No doubt you're getting some extra cpu drain from the errors that's causing, run a log cat, guarantee you've got a lot errors happening.
And for the Samsung Experience Service, you must be using a third party launcher, because that's essentially touchwiz.
As for Google, don't quite see the benefit of disabling that. It's where google assistant is, and hardly does anything at all in the background.
Otherwise, great list.
Tip for everyone, after disabling apps, run a logcat (google "adb log cat" or download the cat log app) and just look for the words "error", "warning", "failed, "doesn't exist", and "found"... The more time you see any of those, more than likely that means more resources wasted because of missing packages. (Services call on other services, and they tend to cause tantrums when they don't get a response)... Probably a good idea to also do it before disabling anything, to establish a baseline.
I disabled the annoying app that kept asking me to sign up for Knox services. I don't think there's any means to disable Knox itself since it's part of the bootloader. There are plenty of errors spewing in logcat but they all appear to be sloppy code rather than any specific problem.
Nova Launcher Prime replaces Samsung Experience.
Google Search is disabled because I'm not using the search bar and it seems to pre-fetch a LOT in the background. I'm not a fan of Google cross-linking everything in inappropriate ways so I'm not using their apps.
MailDroid Pro replaces Email and GMail.
I noticed that Google now spams your phone's GMail account asking you to use Google apps. There's no opt-out, of course.
Nye-uhls said:
To the op: it needs internet for two reasons. To connect with knox servers to allow the app to do what it does, that's Samsung's requirement. And to verify the license for the actual app, to prevent piracy.
And for why it's not working... You didn't really describe what's happening, so we can't help you... But i mean, a lot of people have a great experience with PDP for samsung devices... I can only assume its user error... Maybe you refuse to Grant it permissions, have a device that's restricted with knox by your employer, or you're rooted (or were)...
Pretty good list.
Kinda surprised it still worked after partially disabling the service that makes it possible (knox)... No doubt you're getting some extra cpu drain from the errors that's causing, run a log cat, guarantee you've got a lot errors happening.
And for the Samsung Experience Service, you must be using a third party launcher, because that's essentially touchwiz.
As for Google, don't quite see the benefit of disabling that. It's where google assistant is, and hardly does anything at all in the background.
Otherwise, great list.
Tip for everyone, after disabling apps, run a logcat (google "adb log cat" or download the cat log app) and just look for the words "error", "warning", "failed, "doesn't exist", and "found"... The more time you see any of those, more than likely that means more resources wasted because of missing packages. (Services call on other services, and they tend to cause tantrums when they don't get a response)... Probably a good idea to also do it before disabling anything, to establish a baseline.
Click to expand...
Click to collapse
Any diference with AdHell 3 when disabling the apps? I'm using AdHell (is free), but I'd like to know if the uninstallation performed by PD is deeper.
Shaglok said:
Any diference with AdHell 3 when disabling the apps? I'm using AdHell (is free), but I'd like to know if the uninstallation performed by PD is deeper.
Click to expand...
Click to collapse
Adhell 3 uses KNOX, Package Disabler Pro uses ADB
*Detection* said:
Adhell 3 uses KNOX, Package Disabler Pro uses ADB
Click to expand...
Click to collapse
Thanks, but sorry for the (surely silly) question. The result is the same? I mean, disabling via ADB is like disabling via Knox? Or one method is better than other?
Enviado desde mi SM-G950F mediante Tapatalk
Shaglok said:
Thanks, but sorry for the (surely silly) question. The result is the same? I mean, disabling via ADB is like disabling via Knox? Or one method is better than other?
Enviado desde mi SM-G950F mediante Tapatalk
Click to expand...
Click to collapse
Different methods, same result
*Detection* said:
Adhell 3 uses KNOX, Package Disabler Pro uses ADB
Click to expand...
Click to collapse
Package Disabler pro on samsung devices also uses Knox, it uses adb for non-samsung devices.
kevinmcmurtrie said:
Nova Launcher Prime replaces Samsung Experience.
Google Search is disabled because I'm not using the search bar and it seems to pre-fetch a LOT in the background. I'm not a fan of Google cross-linking everything in inappropriate ways so I'm not using their apps.
MailDroid Pro replaces Email and GMail.
I noticed that Google now spams your phone's GMail account asking you to use Google apps. There's no opt-out, of course.
Click to expand...
Click to collapse
Well right on, you've got your replacement apps. I couldn't do that personally (even before i got hooked on Google Assistant).
And you can turn off a LOT of the pre-fetching, and the cross linking that the Google app and others do, but of course there will always be some (web and app activity in google account. Others in the google app, like contacts, calendar, call logs, sms, etc)
I'd be interested to know how your battery life compares, because while the Google apps can be... Busy... They do their business in pretty light-weight ways.

[Discussion] Snapchat Locked Accounts Thread Magisk

This forum is meant for people who are getting locked out of their accounts due to "3rd Party Plugins or Applications"
We need to stop this from happening so share your experiences and thoughts on the matter.
I have 2 devices: a Nexus 6P running Pie (Pixel Experience) and a Pixel 3XL on the stock Pie rom. Both are rooted with Magisk Canary builds and both have Magisk Hide turned on. Snapchat never detects root on the Nexus but ALWAYS detects it on the Pixel. I've even repackaged Magisk on the Pixel but that doesn't help. I've read that it's easier for apps to detect root on A/B partition devices so maybe the newer, updated Snapchat apps have code to detect it. When I have time, I'll try an old version and see if it works...
Note that I don't believe Snapchat bans just by detecting root. It is detecting certain apps that are somehow triggering it. If you check the list of apps that you have given permission for superuser, it would be one of those. The app that I had that was triggering Snapchat was an app named app ops. I had downloaded it and just giving it permissions alone was getting me banned on Snapchat. I think this problem only affects users running Oreo or higher for whatever reason. I myself had an old phone running marshmallow with app ops and never experienced a ban. I don't think that any of the people reporting the problem had anything lower than Oreo. If you have somehow discovered the app causing your problems, uninstalling it may not fix your problem. I had to wipe my phone in order to fix it because I was still receiving bans despite uninstalling the app that was causing my problems
I've never installed app ops so that's not my problem.
As for A/B partitioning, I'm on a Samsung galaxy Note 8 and it didn't come out with this on my device so yeh ?
The main thing I found out that I had to do, was repackage the manager and I haven't been banned for the last 4 days
I am on the S8 plus and was locked out for 12 hours before. Snapchat continued to lock me out even when I fully uninstalled magisk. I decided to clean install a different Rom which seemed to do the trick. A month later I decided to go back to my original Rom and guess what? Can't even login coz of some mod I think.
So I would say it depends on what mods you have installed yourself or packaged with the custom ROM.
Snapchat ban
I have same problem. Yesterday they gave me ban but i was unbanned with their site. But today they give me one more ban but now is for 24h ... anyone know how to fix snap or maybe hide root? S7 9.0 blackdiamond v3
Downloaded an early January 2019 version of Snapchat and signed up for a new account on my Pixel 3XL. All was good at first then I closed the app. When I tried to sign back in, I got the "problem connecting to server" error which requires an update to the most current version. I updated and after just a few hours, I got the "12 hour account locked" message for "3rd party apps". I've had Magisk Manager repackaged but that obviously didn't help. BTW, I have not repackaged Magisk on my Nexus 6P and it's still works. I found a comment by a user of the Bitmoji app (which I use on my Pixel but not my Nexus) that reported his Snapchat was locked by this app so I uninstalled it. We'll see how it goes when my 12 hour ban is up...
Update: I uninstalled Bitmoji. I also added the systemless host module in Magisk and enabled systemless mode in Adaway. That is supposed to prevent Adaway from modifying the system partition but neither worked. I'm on a 24 lock now....
newkydawg said:
Update: I uninstalled Bitmoji. I also added the systemless host module in Magisk and enabled systemless mode in Adaway. That is supposed to prevent Adaway from modifying the system partition but neither worked. I'm on a 24 lock now....
Click to expand...
Click to collapse
What apps have you given superuser? The app causing you problems is likely in that list
I had this happen before to me, i uninstalled edXposed and i was able to use snapchat even while on a 24 hour ban
iMystic said:
What apps have you given superuser? The app causing you problems is likely in that list
Click to expand...
Click to collapse
Nope. I have the same apps on my Nexus 6P and it doesn't get locked out. In fact, my wife's Nexus 6P has the same apps, is rooted with SuperSu and she doesn't get locked out so IDK...
newkydawg said:
Nope. I have the same apps on my Nexus 6P and it doesn't get locked out. In fact, my wife's Nexus 6P has the same apps, is rooted with SuperSu and she doesn't get locked out so IDK...
Click to expand...
Click to collapse
I don't know if this would affect you but an app that was causing the problems on my phone with Android 9.0 has no affect on an old phone running Android 6.0.1. I don't know why this happens but if you were running a new version of Android such as Android 9.0, an app that may not cause problems on your 6P may cause problems for you. And again, I have no idea why this happens but I can guarantee that was my problem and I haven't had a ban since
iMystic said:
I don't know if this would affect you but an app that was causing the problems on my phone with Android 9.0 has no affect on an old phone running Android 6.0.1. I don't know why this happens but if you were running a new version of Android such as Android 9.0, an app that may not cause problems on your 6P may cause problems for you. And again, I have no idea why this happens but I can guarantee that was my problem and I haven't had a ban since
Click to expand...
Click to collapse
Both my Pixel 3XL and Nexus 6P are running Android 9 rooted with Magisk Canary (19005). Both have the same apps with superuser rights. All this to say that Snapchat was working fine on both for months and for about the last 6 weeks, my Pixel 3 XL's account gets locked and my Nexus 6P does not.
Thanks for trying to help and glad you figured your problem out.
I'm copying this from the SnapFreedom thread who's problems obviously mirror your own. I'll be editing parts out, but some of it should still apply if you guys are getting locked out.
XPrivacyLua
Install it from FDroid or Xposed Repo and check the boxes for "Determine activity" and "Get applications" in Snapchat's tab. You can also enable "Get location" to spoof your location and still use SnapMaps.
Magisk
A few points, these probably don't apply, but they're still worth doing.
Repackage it through Settings -> Hide Magisk
Make sure to block all components under "Google Play Services" and "Google Play Store". There's a few things that aren't blocked by default that might trigger SafetyNet.
Snapchat
Hoo boy...
Don't use anything higher than, and including, 10.41.6.0. It's pretty much a ban-fest. With SnapTools, we use 10.20.5.0 and 10.26.5.0. Those are probably your safest bets. Also, if you plan on downgrading, use any 10.39 app. Something in how logins work has changed in the later versions, so apps like Preferences Manager don't work.
Theming your app should be okay. I did it for months and never got a ban.
Only give it the bare minimum permissions. Storage, Camera, and Microphone. Location too, if you're into being tracked by your friends and Snapchat.
Do NOT use modified apps. At all. Ever. They're the easiest things to detect.
If you want to block ads reliably, you can use this Magisk Module. This WON'T stop bans.
Snapchat also logs your device ID. If you've received a temp-ban prior to this, make sure to change your Device ID. If you're on Oreo, you can use this app. If not, you can use Titanium Backup to change it. The latest version with this function is version 8.2.2. But honestly, the most reliable way is to reflash your ROM.
TevW said:
I'm copying this from the SnapFreedom thread who's problems obviously mirror your own. I'll be editing parts out, but some of it should still apply if you guys are getting locked out.
XPrivacyLua
Install it from FDroid or Xposed Repo and check the boxes for "Determine activity" and "Get applications" in Snapchat's tab. You can also enable "Get location" to spoof your location and still use SnapMaps.
Magisk
A few points, these probably don't apply, but they're still worth doing.
Repackage it through Settings -> Hide Magisk
Make sure to block all components under "Google Play Services" and "Google Play Store". There's a few things that aren't blocked by default that might trigger SafetyNet.
Snapchat
Hoo boy...
Don't use anything higher than, and including, 10.41.6.0. It's pretty much a ban-fest. With SnapTools, we use 10.20.5.0 and 10.26.5.0. Those are probably your safest bets. Also, if you plan on downgrading, use any 10.39 app. Something in how logins work has changed in the later versions, so apps like Preferences Manager don't work.
Theming your app should be okay. I did it for months and never got a ban.
Only give it the bare minimum permissions. Storage, Camera, and Microphone. Location too, if you're into being tracked by your friends and Snapchat.
Do NOT use modified apps. At all. Ever. They're the easiest things to detect.
If you want to block ads reliably, you can use this Magisk Module. This WON'T stop bans.
Snapchat also logs your device ID. If you've received a temp-ban prior to this, make sure to change your Device ID. If you're on Oreo, you can use this app. If not, you can use Titanium Backup to change it. The latest version with this function is version 8.2.2. But honestly, the most reliable way is to reflash your ROM.
Click to expand...
Click to collapse
There are all the reasons why i purely stopping to use Snapchat, and also due to the fact that the application is so badly optimized for Android (even since the complete redesign of the application), in the end considering my use so irregular, I just uninstalled it, so no problem.
The time of Snapprefs and Snaptools was fun and funny, and especially less vicious as a concept than the basic one.
The good old days, but all good things must come to an end.
Rom said:
snip
Click to expand...
Click to collapse
It's what happens when a company becomes complacent and puts more effort into blocking modifications instead improving their terrible app.
Update:
About 2 weeks ago, I flashed the May rom update for my Pixel 3 XL, installed Snapchat ver. 10.41.6.0, hid SC and all components of Google Play Services and Google Play Store in Magisk and I haven't been banned! I detach SC from the Play Store with TiBu but it somehow gets reattached. I just don't update it. Thanks @TevW !!!
I have got a problem, I have a Nokia 7 Plus, stock fw no changes at all!
And I keep getting banned... Support is a joke, I just get automatic replies...
The only reason i may have for getting bans is if snap scans the sd card, where I have magisk and roms files from other devices...
Any tips ???
newkydawg said:
Update:
About 2 weeks ago, I flashed the May rom update for my Pixel 3 XL, installed Snapchat ver. 10.41.6.0, hid SC and all components of Google Play Services and Google Play Store in Magisk and I haven't been banned! I detach SC from the Play Store with TiBu but it somehow gets reattached. I just don't update it. Thanks @TevW !!!
Click to expand...
Click to collapse
I tried to follow the instructions but snapchat keeps saying there was a connection problem with the server.
TevW said:
I'm copying this from the SnapFreedom thread who's problems obviously mirror your own. I'll be editing parts out, but some of it should still apply if you guys are getting locked out.
XPrivacyLua
Install it from FDroid or Xposed Repo and check the boxes for "Determine activity" and "Get applications" in Snapchat's tab. You can also enable "Get location" to spoof your location and still use SnapMaps.
Magisk
A few points, these probably don't apply, but they're still worth doing.
Repackage it through Settings -> Hide Magisk
Make sure to block all components under "Google Play Services" and "Google Play Store". There's a few things that aren't blocked by default that might trigger SafetyNet.
Snapchat
Hoo boy...
Don't use anything higher than, and including, 10.41.6.0. It's pretty much a ban-fest. With SnapTools, we use 10.20.5.0 and 10.26.5.0. Those are probably your safest bets. Also, if you plan on downgrading, use any 10.39 app. Something in how logins work has changed in the later versions, so apps like Preferences Manager don't work.
Theming your app should be okay. I did it for months and never got a ban.
Only give it the bare minimum permissions. Storage, Camera, and Microphone. Location too, if you're into being tracked by your friends and Snapchat.
Do NOT use modified apps. At all. Ever. They're the easiest things to detect.
If you want to block ads reliably, you can use this Magisk Module. This WON'T stop bans.
Snapchat also logs your device ID. If you've received a temp-ban prior to this, make sure to change your Device ID. If you're on Oreo, you can use this app. If not, you can use Titanium Backup to change it. The latest version with this function is version 8.2.2. But honestly, the most reliable way is to reflash your ROM.
Click to expand...
Click to collapse
Does this mean that I can't use energized adblock magisk module? Do I have to use only the Snapchat adblock magisk module that you linked for any kind of adblocking on the device.
Thanks!

S-Push TAN still detects Magisk (Also Canary Build)

Hey, I did things like:
-Applied Magisk Hide
-Selected all in Push TAN
-Applied package rename of Magisk
And s push tan still detects fcking root/ magisk.
The only way it works is to freeze the magisk app with another app. But this solution is trashy and I dont want to every time freeze magisk if I need s push tan.
Are there some fixes? Or even APK edits which I can install?
#****ThoseBankingApps
You can rebuild the stub as described/discussed in this github issue:
https://github.com/topjohnwu/Magisk/issues/1084
Didgeridoohan said:
You can rebuild the stub as described/discussed in this github issue:
https://github.com/topjohnwu/Magisk/issues/1084
Click to expand...
Click to collapse
fck off dude. Where its "described" in your eyes? There is nothing usefull and not even links BRUH
Suakey said:
fck off dude. Where its "described" in your eyes? There is nothing usefull and not even links BRUH
Click to expand...
Click to collapse
It is, but you might have to scroll back quite a few posts (it'll be from August or September, IIRC).
And please be mindful of your language. I'll let it slip this one time, but before posting anything further I suggest you take a look at the forum rules.
Hello again. A small update with some background info I didn't have time to add earlier...
The reason it's almost impossible to hide the Magisk app, even with it repackaged with a random name, is Android's poor privacy. Up until now, any app could query any other app on your device... Now that should change though. From August 2021 all new apps and from November 2021 all app updates in the Play Store will be forced to target API 30 (Android 11). This means that they're forced to conform to new privacy changes that make it so that they no longer can query other apps on your device.
In other words: the real solution is to wait until S-Push TAN gets its next update or so and it should no longer be able to detect the Magisk app.
Didgeridoohan said:
Hello again. A small update with some background info I didn't have time to add earlier...
The reason it's almost impossible to hide the Magisk app, even with it repackaged with a random name, is Android's poor privacy. Up until now, any app could query any other app on your device... Now that should change though. From August 2021 all new apps and from November 2021 all app updates in the Play Store will be forced to target API 30 (Android 11). This means that they're forced to conform to new privacy changes that make it so that they no longer can query other apps on your device.
In other words: the real solution is to wait until S-Push TAN gets its next update or so and it should no longer be able to detect the Magisk app.
Click to expand...
Click to collapse
Thanks for this information.
But how can it be that the devs of Magisk cant block those requests of other apps? I mean then "magisk HIDE" is completely nonsene in my eyes.
Suakey said:
Thanks for this information.
But how can it be that the devs of Magisk cant block those requests of other apps? I mean then "magisk HIDE" is completely nonsene in my eyes.
Click to expand...
Click to collapse
MagiskHide (and from now on Deny) hides what Magisk (the actual service, not the app) changes. Because of the above mentioned privacy limitations in Android up until Android 10 it has been practically impossible to fully hide the app without Xposed style modules (of which there are a couple that also can do the job). Since Magisk isn't Xposed (or at least hasn't been up until now when Zygisk now is live) it's been impossible for Magisk to do this by itself. And now there's no longer any need once the A11 updates for the apps on the Play store goes live (hopefully).
Didgeridoohan said:
MagiskHide (and from now on Deny) hides what Magisk (the actual service, not the app) changes. Because of the above mentioned privacy limitations in Android up until Android 10 it has been practically impossible to fully hide the app without Xposed style modules (of which there are a couple that also can do the job). Since Magisk isn't Xposed (or at least hasn't been up until now when Zygisk now is live) it's been impossible for Magisk to do this by itself. And now there's no longer any need once the A11 updates for the apps on the Play store goes live (hopefully).
Click to expand...
Click to collapse
So that means actually that I have zero chance because im on Android 10? XD...

Categories

Resources