nycebo

Awesome. Thanks.

alostpacket

You're welcome.

mez

++ sticky.

i just got had, ive reset my phone, and reinstalled only a handfull og my apps. im sticking to the stock ones where i can now.

__________________


HTC hero (orange branded 2.1 unlocked)
LG optimus 2x (unbranded 2.3.4) - LG sucks ass

alostpacket

I still need to add some info on IMEI this weekend but thanks for the bumps.

cdma

Morning Bump - Great write-up

alostpacket

Thanks for the bumps.

Just completed the latest edit adding in info about 2 more permissions including the phone state/IMEI one. Also added the

alostpacket

Added section on Public Wi-Fi

alostpacket

Question, do people want a section on Google Checkout or stolen phone security?



.

nycebo

I think that Stolen phone security would be brilliant. Indeed, I am already using a solution but don't want to distract from the core of the thread by making this a one version vs another version discussion. Thanks again.

alostpacket

Ok cool. I need to do a little bit of research and test some apps. I think in the mean time I might add something quick about google checkout.

alostpacket

A little birdie told me today was bump day.

(Also I got some clarification on 3 of the permissions I was unsure about and the descriptions were correct as I had them so removed the clarification needed notice on 3 of them. Still one that needs clarification though.)

Last edited by alostpacket; February 11th, 2010 at 11:57 AM.

nycebo

I don't understand why this isn't already stickied as a FAQ. Solid work, bud.

KlaymenDK

I concur. Stickied!

__________________

alostpacket

heh thanks guys, I'll do my best to keep it update if I learn anything new also

governmentslave

This is a very informative thread. I knew I had some questions about the general security of the phone, OS and marketplace, and you covered pretty much all of the ones I was wondering about. Thanks for putting the time into this for us not-so-experienced users!

gadzooks

As I understand things, Network & Location permissions are used by some apps for ads & ad-targeting (show me ads for things near me).

In & of itself, from a security perspective, this is mostly benign, to me.

Following ad links... well... goto exercise usual caution.

alostpacket

Thanks, i went to add this info but the edit buttons are gone lol Gonna contacts the admins and see what I can do to help edit the guide still.

gadzooks

Thank you for this very helpful, well-done writeup. We may be stuck, who knew...

KlaymenDK

I stickied this, I didn't intend to lock you out of your own post! (I wonder if that's how it's supposed to work, of if I did something wrong.)

I've unstickied the thread (for the time being), see if you can edit now.

alostpacket

Haha no worries, I actually talked to Phases in IRC and he said that was some temporary thing and edit buttons should be back soon.

Thanks though.

JRSIV

This is why I joined the forum! Info like this is invaluable for newcomers to Android phones...An excellent, common sense guide that every Android uder should read. Thanks!

alostpacket

Thanks JRSIV!


Updated it today with a disclosure that I am now a developer of applications on the Market too.

adamajah

Thanks, alostpacket.

I've been looking for this kind of info ever since I started downloading apps, and seeing all the permissions required.

What sucks is, almost all apps (and I only DL highly rated ones) require tons of sensitive permissions... so it seems risky to DL pretty much any app other than first party ones.

Hopefully as awareness increases, competition will grow, and you will be able to find decently coded apps that don't require lots of permissions. Right now our hands are tied... if you want a good app, you have to put up with it snooping through your data. There is no alternative. :\

lilfreek

Are you able to select or change permissions when downloading apps like with other phones. And that was some real good info. Thanks.

Rev. Po-Jay

Thank you for the information. As a newb to Android (ex BB user), I really appreciate it.

I really love how the explaination of "Open Source" is in itself Open Source!

KlaymenDK

Is this a question? If so, then the answer is no: you must either take the app with its requested permissions, or skip the app. It wouldn't make sense any other way, the app would most likely not work right.

Also: Welcome to the forum!

melissab

Wow! Awesome info for naive noobs such as myself. I never thought of checking during updates, always wanting to hurry. This is VERY useful.

Roze

Thanks alostpacket, I've been wondering what all of the various permissions were for, and your explanation clarified most of them for me <3

Dro205

This is probably the most helpful, informative post I've ever read. Thanks for taking the time to go through all that stuff... much appreciated!

Bluemumba

Hey so in my sleep I had this crazy dream where my eris was downloading an app that had a virus. JK this dream did not happen but I was thinking. Can I check a app for a virus on my computer. Like using spyswiper. Or can I not because the app is writen in a different code. Also i understand that I should not worry, but I just like to know if it can be done. Thx

__________________
Mobile Wizard

Lemurion

What I don't understand is why they could not have separated the read phone state and read identity permissions.

I can see far more reasons to read phone state, and many of them don't need to know the phone identity. An audio player may need to know state to mute itself when a call comes in, but it doesn't need to know your phone's identity.

swiftwood

If you have your Android phone connected to a Linux system Is it possible to run an anti-virus program like AVG on the mounted drive?

Bluemumba

Ok thank so windows is out the question. I have to find linux and have my computer run a chose of two operating system.
I there anyway to do this without having to go through this step.

swiftwood

VMware will let you run multiple operating systems at the same time VMware Workstation - Run Multiple OS Including Linux on Windows on Virtual Machines

Booky

Hello to all! I'm new here and I have problem. I instaled app I thing it was Parlago or something like that, it's app for chat like E buddy so you can have msn account and others. So when app asked me to create msn account it stole all my money (my credit) I had 10 euros. I was in wonder and called support and they told me that is everything ok with my gprs account and to create new apn profile and try again. So I bought another 10 euros and created new apn account and try to connect on gprs or edge and what happend? The same damm thing, I lost all my money again (I unistaled Parlago or what ever in meantime)

So I restore my phone to factory set. and try again and the same damm thing. I lost all my money whenever I try to connect.

Any help friends please

MarcusMaximus

Very useful thread. Thanks.
Is there any list of dodgy apps. Or apps you wouldn't recommend.

theartfullodger

Thanks, good work, wish I'd read it when I got the 'phone...

Keep up the good work!!!

List of dodgy apps could be interesting, legally.

Obviously one would need to be careful with wording, eg I have heard others say "KarlMarxIsms" is suspect but I'm sure that can't be the case and have every confidence in it & it's developer...

Cheers!

Lodger

killacam2

First post ever... So hello forums =)

I could be wrong, but I did not see any mention of antiVirus anyone have any thoughts on it's helpfulness? I have it currently installed on my phone haven't had any problems, but I also haven't installed any unknown apps.

xfuchsiax

What are you thoughts on services like AppBrain and AppAware when it comes to helping users find safe apps?

__________________
Samsung Galaxy Nexus (not yet rooted)

Motorola XOOM 4G LTE (not yet rooted)

HTC Incredible (AMOLED) - ROM: Nils' Business GingerSense 2.1/3.0

outa9control8

As a new droid owner this is much appreciated. Iam just lost with my behold 2:/::.seems everything on internet needs java or adobe cant do much seems. But good lookin out.v thx

swiftwood

seems it really slows the phone down
http://androidforums.com/motorola-droid/32460-watch-out-app-antivirus-droidsecurity-inc.html

helenhunt

I am not a developer or programmer, some of the requests could be justified... like if I were downloading Checkers and it wanted permissions to my contact list... I would assume it was just a possible option to play against one of my friends!

Yuasa Battery

The_Verse

Awesome thread.

I am a new user and was wondering about the permissions. I just checked through some of my apps and wondered why Google Maps needed call access. It requires a lot of permissions, actually. I know it comes from a "trusted" source. However, I am still curious.

__________________

kamots

question . what does alogcat do? and will it hurt my phone if i clear all of those logs?

island78

thanks for the info. looking to buy my first android phone and don't know a whole lot about it so this was very helpful.

Last edited by island78; April 18th, 2010 at 02:21 PM.

island78

whoa didn't mean to post the whole guide. sorry.

KlaymenDK

That's okay -- if you fix it. Please press the "" button on your post and kindly delete the quote block. Thanks!

Also, welcome to the forum!

zafonic

I am new to Android, a week to be precise and only noticed this thread late last night. After reading this thread it' got me rather worried. Since having my Desire i have downloaded no more than probably 15 apps.

These are some of them:

Handcent SMS
Earth live wallpaper
plasma live wallpaper
Subsrate live wallpaper
flying balls live wallpaper
matrix live wallpaper
AK Notepad
Opera Mini 5
Coin Flip

Does anyone know if most of these are trusted apps, and going by part of the title of this thread if my phone got a virus how would i be able to tell?

EDIT: Can anyone tell me if the 'seeds of life' wallpaper app is safe at all?

Thanks

Last edited by zafonic; April 9th, 2010 at 09:48 AM.

ilikepie

i just wanted to say thanks for this!

Being completely new to the android market and Open community, this is a great insight and relief after getting a little freaked out at what some apps wanted access to, on my freshly bought phone.
Good to know what they all wanted and that its ok cheers!

androidforumsQuint

Thanks for your security checklist. It's a good start.

I have an additional question about the app authors here.