January 23, 2018, 11:52:22 AM

collapse

* 'Like' And 'Follow' Us!

* Sero 7 & 8 Market

Author Topic: Security, Firewall, Xprivacy - Still Some Holes  (Read 2261 times)

Offline shneor

  • Sr. Member
  • ****
  • Posts: 368
  • Popularity: 16
    • View Profile
Security, Firewall, Xprivacy - Still Some Holes
« on: January 23, 2015, 05:22:45 PM »
I recently had a quick battery drain, so I activated Network Log before going to bed last night. Network Log lists all network communication, including number of packets, total bytes, originating app, etc. I found some anomalies and unexpected data flows. Tons of traffic to google backup transport (how to turn this off?); skype (going to "skype.raider.com"), etc. so I'll be spending more time with xprivacy.


Shneor
Sero 7 Pro, Dopa 5.1

Offline LuckyMe

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2497
  • Popularity: 194
    • View Profile
Re: Security, Firewall, Xprivacy - Still Some Holes
« Reply #1 on: January 26, 2015, 12:25:54 PM »
Hi Shneor,

any additional info on this?

A nandroid is a man's best friendainol Venus-Firomi v3.2
S7P DoPa Lollipop 5.1
Vidaa Pad 8 Oma V1.1

Offline shneor

  • Sr. Member
  • ****
  • Posts: 368
  • Popularity: 16
    • View Profile
Re: Security, Firewall, Xprivacy - Still Some Holes
« Reply #2 on: January 26, 2015, 02:17:51 PM »
There's more to Network Log than I thought, there are options. The default is to list all attempts to access the internet. But as it turns out, there's an option to only list what the firewall accepts. So I repeated the process using this option. The result: nothing got through the firewall. So my fears turned out to be unfounded.

Now if only Netstat could do what it does on my PC - close connections - I'd be happier.
Shneor
Sero 7 Pro, Dopa 5.1

Offline LuckyMe

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2497
  • Popularity: 194
    • View Profile
Re: Security, Firewall, Xprivacy - Still Some Holes
« Reply #3 on: January 26, 2015, 03:44:44 PM »
well that's good news!

A nandroid is a man's best friendainol Venus-Firomi v3.2
S7P DoPa Lollipop 5.1
Vidaa Pad 8 Oma V1.1

Offline shneor

  • Sr. Member
  • ****
  • Posts: 368
  • Popularity: 16
    • View Profile
Re: Security, Firewall, Xprivacy - Still Some Holes
« Reply #4 on: January 29, 2015, 04:13:40 PM »
Well, it's too soon to rejoice. Here's what happened: I installed the Netflix app and ran it. It loaded and told me that I needed to update my Google Play Services system app. When I went to do that, I saw an enormous list of new permissions required, and well as a long list of existing permissions (76, I think). Among those was one which allowed permission to access all logs so (I'm paraphrasing) Google can see what you are doing. Other permissions required were similar in their disregard for privacy. Xprivacy does not list the app separately, but in conjunction with other Google Play apps and the list of permissions that could be restricted was small, far less than the number of permissions existing, let alone the many more it wanted to add for the update. Bottom line: There's no privacy. I'm looking for an app that can locate and erase logs, but so far, I have found none, not even in the long Xposed Installer app list. I may do this in the linux base, if I can find where the logs are.   
Shneor
Sero 7 Pro, Dopa 5.1

Offline shneor

  • Sr. Member
  • ****
  • Posts: 368
  • Popularity: 16
    • View Profile
Re: Security, Firewall, Xprivacy - Still Some Holes
« Reply #5 on: January 30, 2015, 01:36:59 PM »
And there's much more. After I discovered that there seemed to be no restrictions on Google Play Services ability to read everything on my Sero and comunicate that beck to Google, I installed a couple of apps to at least read my system logs. The apps are Alogcat and CatLog. The running logs show that there's constant activity from apps that I had assumed were not running at all and were not trying to start up at boot time (I use Boot Manager to prevent many apps from starting up at boot). No doubt, that's a battery drain. 

I purchased the pro license for Xprivacy, but now I need to learn what the micro-permissions really do. And it turns out that Netflix runs just fine without the updated Google Play Services. It's just Google trying to steal more of my data.
Shneor
Sero 7 Pro, Dopa 5.1