MoDaCo is undergoing planned maintenance. Site functionality may be reduced - follow @modaco or @paulobrien on Twitter for updates.

  • Announcements

    • Reminder - MoDaCo position on illegal content

      ILLEGAL CONTENT I'd like to just reaffirm MoDaCo's position regarding piracy and illegal content in the light of some recent questions / postings. Posts will be censored by myself or my moderation team if the contain or link to: Illegal / pirated / cracked software or sites that host such software
      Nintendo emulators / ROMs or sites hosting them (in light of Nintendo's legal stance)


      CUSTOM ROMS

      You may discuss and post links to custom device ROMs on MoDaCo, provided the following rules are adhered to: ROMs must not be hosted directly in topic via the MoDaCo attachment system
      ROMs must not contain any illegal 3rd party software (this includes trial versions included without permission)
      ROMs must give full credit to the original author
      This decision has been taken in light of the huge amount of interest in this area of device customisation within the community, and member feedback! Please note that custom ROM discussion should be kept in specific device sub-areas, (e.g. Kaiser.MoDaCo.com for Kaiser based devices). ISSUES If you have any issues with this policy, please contact me directly via PM. P
    • Support MoDaCo by signing up to a MoDaCo Silver or Gold membership

      To sign up to an annual MoDaCo Silver subscription which will eliminate all ads from the site (as well as giving you access to the MoDaCo Online Kitchens for Android) for only £9.99 using PayPal, Credit or Debit Card, ensure you are logged in to the site, and then click the link below, which will take you directly to the subscription store! You can also sign up to an annual MoDaCo Gold subscription for £29.99, which adds the benefits listed below! PURCHASE A MODACO SUBSCRIPTION - FREE Titanium Backup Mobile for Android worth $5.99! - FREE 1 year PrivateInternetAccess.com worth $39.95! - FREE 1 year LastPass Premium worth $12! - FREE CalcConvert for Pocket PC from Binaryfish worth $17.95! - FREE Calendar Bar for Pocket PC from OmegaOne worth $9.99! - FREE CamerAware for Pocket PC and Smartphone from MoDaCo worth £19.99 / $30! - FREE Chronos for Pocket PC from ActiveKitten worth $14.95! - FREE CodeWallet Pro for Smartphone and Pocket PC from DeveloperOne worth up to $24.95! - FREE Concentrix for Pocket PC from eSoft Interactive worth $9.95! - FREE FlexMail for Pocket PC and Smartphone from WebIS worth up to $59.90! - FREE FTouchSL for Pocket PC from Vekoff s.r.o. worth 10 euro / $12.50! - FREE Jewel Challenge for Pocket PC from eSoft Interactive worth $9.95! - FREE John Cody's Alerts Pro for Smartphone from Omnisoft worth $14.95! - FREE LingvoSoft Talking Dictionary 2008 English <-> Dutch for Pocket PC from Lingvosoft worth $49.95! - FREE LingvoSoft Talking Dictionary 2008 English <-> French for Pocket PC from Lingvosoft worth $49.95! - FREE LingvoSoft Talking Dictionary 2008 English <-> German for Pocket PC from Lingvosoft worth $49.95! - FREE LingvoSoft Talking Dictionary 2008 English <-> Italian for Pocket PC from Lingvosoft worth $49.95! - FREE LingvoSoft Talking Dictionary 2008 English <-> Spanish for Pocket PC from Lingvosoft worth $49.95! - FREE LingvoSoft Dictionary English <-> Dutch for Smartphone from Lingvosoft worth $49.95! - FREE LingvoSoft Dictionary English <-> French for Smartphone from Lingvosoft worth $49.95! - FREE LingvoSoft Dictionary English <-> German for Smartphone from Lingvosoft worth $49.95! - FREE LingvoSoft Dictionary English <-> Russian for Smartphone from Lingvosoft worth $49.95! - FREE LingvoSoft Dictionary English <-> Turkish for Smartphone from Lingvosoft worth $49.95! - FREE Note2Self for Pocket PC and Smartphone from WebIS worth up to $19.90! - FREE Opera 8.60 for Pocket PC and Smartphone from Opera Software worth up to $48! - FREE Pocket Informant for Pocket PC and Smartphone from WebIS worth up to $59.90! - FREE Pocket Launcher for Pocket PC and Smartphone from Conduits worth $9.95! - FREE PTab for Pocket PC and Smartphone from z4soft worth up to $60! - FREE Resco Explorer for Pocket PC and Smartphone from Resco worth up to $49.90! - FREE Safemode for Pocket PC from monocube worth $12.95 - FREE SplashPhoto for Pocket PC and Smartphone from SplashData worth up to $59.90! - FREE Sprite Backup for Pocket PC and Smartphone from Sprite Software worth $29.95! - FREE Teksoft Glyphs UI for Pocket PC and Smartphone from Teksoft €9.95! - FREE Teksoft HeadsetRemote for Pocket PC and Smartphone from Teksoft €4.95! - FREE Traffic Jam for Pocket PC from eSoft Interactive worth $9.95! - FREE unlock (1 per year) from imei-check.co.uk - DISCOUNT of 10% at MoDaCo FairDeal - DISCOUNT of 10% at Semsons.com - FORUM - AD FREE SITE - FORUM - custom rank / title - FORUM - double competition entries - FORUM - double post attachment space - FORUM - no search flood control - FORUM - priority event registration - FORUM - triple PM space
    • Reminder: Selling items on the forum directly is not allowed

      Please note that selling items on the forum directly is not allowed by the forum rules. There is a forum for eBay auctions whereby you can list the items on eBay and link to them there. This is the ONLY forum for this type of activity. You may also advertise links to the eBay forum in your signature. Please note that selling directly in contravention of these rules will result in a warning / suspensions / ban.
Sign in to follow this  
Followers 0

Building TaintDroid into a ZTE Blade Kernel

22 posts in this topic

Posted · Report post

It would be great if TaintDroid could also be integrated in a Blade ROM.

ZTE Blade users, please show you're support if you also wish to see TaintDroid implemented in a Custom ROM for your device.

Source of quoted background information: Protecting Privacy - Compiling TaintDroid into Kernel to find leaky apps

Most people don't yet know that many Android software leak all sorts of information to the internet with only scant user acknowledgement (basically what you accept when you install the app).

Due to this and the fact that there are already privacy information harvesting apps for Android on the marketplace - a team of security experts have created TaintDroid:

What is TaintDroid?

From the project's web page: "A realtime monitoring service called TaintDroid that precisely analyses how private information is obtained and released by applications "downloaded" to consumer phones."

From: http://appanalysis.org/index.html

How can I install TaintDroid?

As TaintDroid is currently compiled into the kernel, you cannot easily install it, but you have to cook your own kernel. Instructions (for Nexus 1) are available at the project web site: http://appanalysis.org/download.html

How does TaintDroid work?

Here's a video demonstrating how TaintDroid works once it is installed and configured:

http://appanalysis.org/demo/index.html

Why would you want to install this?

There can be many reasons for installint TaintDroid:

- You want to learn about privacy features and play with Android kernel

- As it is currently impossible to differentiate between innocent and sneaky Android apps based only on what access rights they request, you may want to dig in deeper

- You are worried about what apps are doing behind your back and you want to know which apps to uninstall

- You want to help create Android a more secure and privacy-protected platform, instead of the swiss cheese it currently is

What can you do?

As compiling kernels is mostly beyond the reach of mere mortals currently, consider cooking TaintDroid into your kernel, if you are cooking one yourself and offering it available for others to try and use.

Hopefully increased awareness and usage will bring this program eventually into other modders and perhaps even Google's attention and something more easily accessible is offered for the public at large.

BTW, I'm just a user, interested in getting TaintDroid on my own Galaxy S. I'm not affiliated with the research program, but I like what they are doing. This information is purely FYI.

0

Share this post


Link to post
Share on other sites

Posted · Report post

One for kallt_kaffe I'd suggest ...

0

Share this post


Link to post
Share on other sites

Posted · Report post

Wasn't this mentioned a while ago and the conclusion was it's easier to install wireshark?

0

Share this post


Link to post
Share on other sites

Posted · Report post

this is the only thread i've found by searching with taintdroid in it

0

Share this post


Link to post
Share on other sites

Posted · Report post

Wasn't this mentioned a while ago and the conclusion was it's easier to install wireshark?

What I liked about the TaintDroid demonstration video is that one would get this nice little notifications. As far as I understand Wireshark it requires standard Android users such as myself to be quite knowledgeable in order to distinguish legitimate from illegitimate data being send. I assume that most standard users would struggle with such a task.

I have found a Wireshark adaptation for Android at XDA-Developers:

Shark for Root

Could that be used to achieve something similar to TaintDroid if the implementation of TaintDroid proves too difficult?

0

Share this post


Link to post
Share on other sites

Posted · Report post

Looks like a good idea, but what's to stop shady app developers just encrypting or hashing personal info then phoning home?

0

Share this post


Link to post
Share on other sites

Posted · Report post

Looks like a good idea, but what's to stop shady app developers just encrypting or hashing personal info then phoning home?

Probably not much but it would only be done if TaintDroid would spread widely so that it's worth the effort. Furthermore, it would put a tiny bit more pressure on Google so that they can't just say that it's the users fault as they gave their permissions.

0

Share this post


Link to post
Share on other sites

Posted · Report post

I just had a look with wireshark and admob adverts take your unique phone ID and LOCATION :(

0

Share this post


Link to post
Share on other sites

Posted · Report post

I just had a look with wireshark and admob adverts take your unique phone ID and LOCATION :unsure:

Not only admob. See: Your apps are watching you. However, as Google are the giants in the internet advertising business it's not surprising that they don't have an interest to do anything that could prevent user profiling and data mining.

0

Share this post


Link to post
Share on other sites

Posted · Report post

I would like this on the ZTE Blade also.

0

Share this post


Link to post
Share on other sites

Posted · Report post

I'll be following the progress of this thread. I really don't like the fact that all these apps and the OS itself collect my personal data...

0

Share this post


Link to post
Share on other sites

Posted · Report post

+1, I'd also like to see this functionality in Blade ROMs please, a request to kallt_kaffe

0

Share this post


Link to post
Share on other sites

Posted · Report post

Oh yes, been meaning to post about this. Certainly would be good to see.

Use wireshark sometimes as part of my day job. Wasn't aware something simular was available for android. Will definitely try it.

My £0.02 suggestion, install adfree http://www.appbrain.com/app/adfree-android....android.adfree This will block some personal info going back to advertisers. Obviously if the recipient isn't an advertiser, then there is nothing blocking outward bound personal info.

Does taintdroid also block?

0

Share this post


Link to post
Share on other sites

Posted · Report post

great idea! i´d also like to have TaintDroid in the froyo kernel! i think this is an important thing to have.. hope kallt_kaffe is reading this threat..

including it in Japanese Jellyfish would be the bomb! :unsure:

0

Share this post


Link to post
Share on other sites

Posted (edited) · Report post

My £0.02 suggestion, install adfree http://www.appbrain.com/app/adfree-android....android.adfree This will block some personal info going back to advertisers. Obviously if the recipient isn't an advertiser, then there is nothing blocking outward bound personal info.

Does taintdroid also block?

I don't really like blocking revenue streams of free apps, but ads taking so much personal data is not on, just had a quick look at the admob docs and the app developers can choose whether admob is allowed access to location or not. Adfree seems to work fine, I also installed Droidwall which also seems to work well.

How long is it going to take before your IP/GPS location are sold to some GEO IP database :unsure:

Edited by Magnets
0

Share this post


Link to post
Share on other sites

Posted · Report post

I have opened a new thread in the Android software section on privacy-enchancing apps. Please post there any privacy apps that you happen to know. Thank you!

On a different note, I have sent a PM to kallt_kaffe a few days ago regarding TaintDroid but didn't hear back yet. I think it doesn't need to be necessarily kallt_kaffe who implements TaintDroid. Any other Custom ROM developer is invited to do so. We would like to hear from you.

0

Share this post


Link to post
Share on other sites

Posted · Report post

Giving it a bump now we have the 2.2 kernel source.

0

Share this post


Link to post
Share on other sites

Posted · Report post

+1, please implement this!

0

Share this post


Link to post
Share on other sites

Posted · Report post

Great idea. Long overdue.

Someone asked what is 'legitimate' traffic. I would say in an ideal world:

it pertains directly to the specific utility of software you are using (i.e Google maps needs to contact the server to get the map data)

But actually... you know what.. it's basically that data you are reasonably ok to have sent.

Sadly for people who care about privacy Google itself is a problem. It's the massive 800 lb gorilla in the living room that no one's talking about that much. Although there's been a few articles about it in the press.

In my ideal world I want:

No outbound data at all unless it's specifically to do with a service that I d/led the software for to begin with. So with Google map data. Not how much I've used my phone and who my contacts are. Not what my phone number is. Just a request to the server for map data. It's that simple really.

Apps like Dictionary.com are abusive spyware too and everyone's at it. Just a goldrush to see how much data can be collected. And frankly part of the reason is the mobile phone market encompasses a lot more dumb stupid people than the PC one.

Sorry I am rambling a bit.

But this is a really big problem. Glad someone's looking into it.

The other thing that's missing from Android and this really needs a seperate thread:

and that's system-wide encryption. Locally on the phone, things like notes, contacts, sms, folders whatever you want. Should be some API in Android that can do this.

I don't know what the score is on the iPhone for that, but I know OS X had things like filevault and keychain, although fv wasn't always practical.

0

Share this post


Link to post
Share on other sites

Posted · Report post

I just had a look with wireshark and admob adverts take your unique phone ID and LOCATION :D

Well, I agree with you about your concerns about ID, nút regarding location it is rather pointless to send swedish ads to a greek phone.

0

Share this post


Link to post
Share on other sites

Posted · Report post

Well, I agree with you about your concerns about ID, nút regarding location it is rather pointless to send swedish ads to a greek phone.

Location is also problematic - not on country level though. However, for that it would be sufficient to know the SIM-card provider. I don't want anyone to track my mobility. Especially if that data could be combined with other data sets, e.g. shopping behaviour or how affluent certain areas are.

Why does Angry Birds and its business partners need to know in which city I live?

0

Share this post


Link to post
Share on other sites

Posted (edited) · Report post

Location is also problematic - not on country level though. However, for that it would be sufficient to know the SIM-card provider. I don't want anyone to track my mobility. Especially if that data could be combined with other data sets, e.g. shopping behaviour or how affluent certain areas are.

Why does Angry Birds and its business partners need to know in which city I live?

To give you specific ads for your city like Groupon. It would not bring anything if you lived in München and would become offers for Köln.

Edited by Rotmann
0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

MoDaCo is part of the MoDaCo.network, © Paul O'Brien 2002-2015. MoDaCo uses IntelliTxt technology.