[CLOSED][APP][XPOSED][6.0+] XPrivacyLua - Android privacy manager [UNSUPPORTED]

Status
Not open for further replies.
Search This thread

Gerolianis

Senior Member
Nov 29, 2012
114
34
This notification is shown only when audio recording, video recording or using the camera is being restricted.
When initially activating all restrictions for a new application, how can I find out which restrictions were actually applied at runtime and possibly stopped the app from working properly? Looking at the logcat?

A notification level to display restriction notifications (all/default/none) might be nice and easier for unexperienced users
 

Orphee

Senior Member
Jan 31, 2008
1,726
791
Google Pixel 8
When initially activating all restrictions for a new application, how can I find out which restrictions were actually applied at runtime and possibly stopped the app from working properly? Looking at the logcat?

A notification level to display restriction notifications (all/default/none) might be nice and easier for unexperienced users
When an app is restricted, there is a timestamp in XPL for each restriction blocked. No timestamp means not try to access restriction.
 
  • Like
Reactions: Gerolianis

badabing2003

Recognized Contributor
Sep 17, 2012
4,933
9,138
If you start XPrivacyLua again the selection will be reset to 'All'. This is by design.



If I'm not mistaken, I think he means to describe a different problem which I also experienced.
While viewing all permissions, scroll down to an app and select the app's all permissions to block all for that app, sporadically, sometimes that selection reverts and all permission for that app is unchecked.
On few occasions even checking / unchecking one permission caused all permissions for that app to be unchecked.

It must be a minor glitch, perhaps refresh happening before save or something, perhaps a timing issue.
In any case nothing that we can't work around.
It happens very rarely and randomly, hard to reproduce, but it happens.

Thanks
BB
 

Tomek0000

Senior Member
Jun 14, 2015
526
143
I asked the same and no. It is not possible. It has to be special mode for app to monitor all activity without activating restrictions. But it is not supported.

---------- Post added at 04:59 PM ---------- Previous post was at 04:39 PM ----------

It must be a minor glitch, perhaps refresh happening before...

It can problem with refresh. Select specific restriction, select it for apps some time and refresh will come. It refreshes window without modifing daya but changes filter to all.
 
  • Like
Reactions: Namnodorel

badabing2003

Recognized Contributor
Sep 17, 2012
4,933
9,138
Who is going to determine or how can we determine what "safe to limit" ? Crowd source restrictions will only tell what people on average restrict or not restrict and don't really tell if it is safe or not. What safe means is also debatable.

I would label safe, the maximum restrictions applied (least leaked information) to keep the application functionality intact.

For example, a Bar code scanner can have all restrictions applied with only Use Camera unchecked
On the other hand, Retail app like Costco, which offers site locations in the app, should be allowed Get Location to keep the app location feature functional.

Obviously one can restrict location to Costco App, but that would be their choice to further restrict it.
The crowd approved version should allow Location so that the App works as intended without handicapping any functionality.

Paid apps would need to keep Read account name unchecked

This is the manual process I go through to apply the restrictions, if there was a feature that allowed me to fetch crowd approved version, it would be a starting point, and then of course I can tweak it to my liking.

Thanks
BB
 

M66B

Recognized Developer
Aug 1, 2010
26,751
57,998
If I'm not mistaken, I think he means to describe a different problem which I also experienced.
While viewing all permissions, scroll down to an app and select the app's all permissions to block all for that app, sporadically, sometimes that selection reverts and all permission for that app is unchecked.
On few occasions even checking / unchecking one permission caused all permissions for that app to be unchecked.

It must be a minor glitch, perhaps refresh happening before save or something, perhaps a timing issue.
In any case nothing that we can't work around.
It happens very rarely and randomly, hard to reproduce, but it happens.

Thanks
BB
It can problem with refresh. Select specific restriction, select it for apps some time and refresh will come. It refreshes window without modifing daya but changes filter to all.
The app list and restrictions are refreshed when new usage data arrives. Changing settings during this refresh, which takes a few moments, can result in the problem you are describing. I will see if I can solve this somehow, but first I will finish restriction definition management (!)
 
Last edited:

badabing2003

Recognized Contributor
Sep 17, 2012
4,933
9,138
Marcel,

Could Restricting Read network data cause an app into temporarily thinking that there is no network connection?
I'm asking because for the Spotify App, I have restricted everything except Read Identifiers, (If I block Read Identifiers, the app keeps me logged-out, I suppose they use device_id as part of the authentication, which makes sense).
The only restrictions that I see timestamp are Get application and Read network data.
When I connect the phone to the Car, where Android Auto is available, and connect to Spotify, the App temporarily displays that I need to login, but then logs me in properly.
That is why I'm asking if restricting Read network data can fool the app into briefly thinking that there is no network.

Again, not an issue, I'm just mentioning it to be thorough.

Thanks
BB
 

M66B

Recognized Developer
Aug 1, 2010
26,751
57,998
Marcel,

Could Restricting Read network data cause an app into temporarily thinking that there is no network connection?
I'm asking because for the Spotify App, I have restricted everything except Read Identifiers, (If I block Read Identifiers, the app keeps me logged-out, I suppose they use device_id as part of the authentication, which makes sense).
The only restrictions that I see timestamp are Get application and Read network data.
When I connect the phone to the Car, where Android Auto is available, and connect to Spotify, the App temporarily displays that I need to login, but then logs me in properly.
That is why I'm asking if restricting Read network data can fool the app into briefly thinking that there is no network.

Again, not an issue, I'm just mentioning it to be thorough.

Thanks
BB
Maybe, this hook is responsible for that:
https://github.com/M66B/XPrivacyLua/blob/master/app/src/main/assets/hooks.json#L1074

Related documentation:
https://developer.android.com/reference/android/net/NetworkInfo.html#getExtraInfo()
 

umpalumpa1799

Member
Jan 22, 2015
37
9
Google Pixel 4a
Everybody who donated 10 euros or more for XPrivacyLua can request a copy of the XPrivacyLua Pro companion app for installation outside of the Google Play store by replying to the donation "thank you" e-mail.

For people who already installed the pro companion app this way: please download the pro companion app again to update it to the latest version, which will check for updates automatically now.

Thats great!
I sent you 10€ on 6.1.2018 and received the PayPal confirmation mail. Do you mean this mail to replay to, I did not received any other "thank you" mail.
 

badabing2003

Recognized Contributor
Sep 17, 2012
4,933
9,138

Thanks
That would be silly on the Spotify's part, null is a possible valid return.
In any case, nothing big.

I'm also using AFWall+, which blocks LAN access to Spotify, and I do see a toast from AFWall+ that it blocked LAN access.
If Network Data is faked or returned null, how is Spotify figuring out how to access LAN which AFWall+ is trapping?

Thanks
BB
 

M66B

Recognized Developer
Aug 1, 2010
26,751
57,998
Thats great!
I sent you 10€ on 6.1.2018 and received the PayPal confirmation mail. Do you mean this mail to replay to, I did not received any other "thank you" mail.
I do not mean the message from PayPal, but the message coming from the domain faircode.eu.
When in doubt, please contact me through this contact form, filling in your PayPal e-mail address: https://contact.faircode.eu/
 
  • Like
Reactions: Tletl

M66B

Recognized Developer
Aug 1, 2010
26,751
57,998
Thanks
That would be silly on the Spotify's part, null is a possible valid return.
In any case, nothing big.

I'm also using AFWall+, which blocks LAN access to Spotify, and I do see a toast from AFWall+ that it blocked LAN access.
If Network Data is faked or returned null, how is Spotify figuring out how to access LAN which AFWall+ is trapping?

Thanks
BB
Restricting network data is not meant to restrict internet access.
See also here: https://github.com/M66B/XPrivacyLua/blob/master/README.md#restrictions
 
  • Like
Reactions: Tletl

badabing2003

Recognized Contributor
Sep 17, 2012
4,933
9,138
Your LAN details are not faked. See the earlier referenced link for what is faked.



I'm not following.
From that link I see.
Read network data (hide cell info, Wi-Fi networks, fake Wi-Fi network name)
Does that mean, although the wifi network name is faked, it can still reach out to the wifi (without knowing the name) because it can use an established connection?

Thanks
BB
 

M66B

Recognized Developer
Aug 1, 2010
26,751
57,998
I'm not following.
From that link I see.
Read network data (hide cell info, Wi-Fi networks, fake Wi-Fi network name)
Does that mean, although the wifi network name is faked, it can still reach out to the wifi (without knowing the name) because it can use an established connection?
Yes, but because Android manages connections, not apps. Apps just use existing connection. They don't even need to know what type of connection it is.

Anyway, XPrivacyLua does not and will not have restrictions to block internet access. For that you can better use a firewall app.
 
  • Like
Reactions: badabing2003

badabing2003

Recognized Contributor
Sep 17, 2012
4,933
9,138
Yes, but because Android manages connections, not apps. Apps just use existing connection. They don't even need to know what type of connection it is.

Anyway, XPrivacyLua does not and will not have restrictions to block internet access. For that you can better use a firewall app.

Sure, I wasn't asking or even expecting that XPrivacyLua would block internet access.
I was wrongly assuming that it wouldn't be able to reach out to my LAN if it didn't know the details, which I was obviously wrong.
 
Status
Not open for further replies.

Top Liked Posts

  • There are no posts matching your filters.
  • 319
    XPrivacyLua

    banner_play_store.png


    Really simple to use privacy manager for Android 6.0 Marshmallow and later (successor of XPrivacy).

    Revoking Android permissions from apps often let apps crash or malfunction. XPrivacyLua solves this by feeding apps fake data instead of real data.

    Features:

    • Simple to use
    • Manage any user or system app
    • Extensible
    • Multi-user support
    • Free and open source

    See here for all details, including installation instructions and download link.

    Please read the frequently asked questions before asking a question.

    This XDA thread is about using the latest version of XPrivacyLua. Off topic comments are allowed as long they are related to XPrivacyLua and are in the general interest of the followers of this thread, but anything not related to privacy is not allowed.

    If XPrivacyLua doesn't work and/or when "module not running or updated" is shown, this is almost always caused by an Xposed problem.

    Discussions about purchases are not allowed here, please contact me via here instead.

    XPrivacyLua is being maintained and community supported, but new features won't be added anymore.

    Custom hook definitions will always be part of XPrivacyLua, but there will be community support only. This means that I won't respond to questions about defining custom hooks anymore. See this thread for the reasons.

    If you value your privacy, please consider to support this project with a donation or by purchasing pro features.


    XPrivacyLua is not a permission manager, but a privacy manager. XPrivacyLua doesn't block things and doesn't revoke permissions, but does replace real data by fake data. This means you can grant Android permissions to an app and still let XPrivacyLua prevent the app from seeing privacy sensitive data. Revoking permissions can result in an app refusing to work and/or to crash. However, replacing real by fake data generally doesn't let an app crash.

    Currently restrictions are quite crude because they mostly replace real data by no data. For example restricting the contacts app from getting contacts will result in an empty contact list. In the near future it might be made possible to select the data an app may see, for example just one group of contacts.

    About feature requests and bug reports:

    The goal is to have a tool that can properly protect the privacy of many in the near future. However, it isn't paid work, so I do whatever I like whenever I like it.

    You can request features in this XDA forum. I will read them, but I will not respond to them and they might or might not be implemented. If I know for sure something will not be implemented, I will let you know.

    You can report any problem you have here. There will be no issue tracker on GitHub.

    For now I have decided to not implement restrictions that are useful to prevent tracking only. There are simply too many data items that can be used for tracking and it would take too much time to develop restrictions for all these data items.

    The basic idea is to restrict only things that 'define' you, so which contacts you have, where you are, which apps you use, etc.

    Maybe we can widen the definition of things that the core of XPL covers to "What defines you, and what can be used to spie on you"? This would include camera/audio, but not tracking.

    XPrivacyLua is pretty feature complete and will be maintained and supported and when there is a need new hook definitions will be added to better protect your privacy. For the rest this FAQ applies:

    https://github.com/M66B/XPrivacyLua/blob/master/FAQ.md#FAQ4

    As said before, development will also depend on Xposed development, which is just minimal unfortunately.

    XDA thanks and donations are appreciated.

    XPrivacyLua is supported with Xposed only. There is no support for VirtualXposed and TaiChi.
    68
    I have just released beta version 0.5 in the Xposed repository.

    The XPrivacyLua framework and user interface seems to be stable enough to call this a beta release.

    Besides several bug fixes and improvements two new restrictions were added:
    • Read account name, which mostly holds your e-mail address and will be replace by 'privacy@private.com' when restricted
    • Read clipboard, which will be replaced by the text 'Private' when restricted

    Furthermore the ability to restrict Android system (be careful!) and to restrict system apps was added. It is possible to restrict all of these individually (XPrivacy could not do that).

    Be sure to take a look at the help page in the app again (use the ?-icon), since there were some useful hints added.

    If you appreciate what I am building here, please let me know by means of an XDA thanks and/or a donation, so that I don't get the feeling 'What am I doing this for?'.
    59
    I have just released alpha version 0.12 in the Xposed repository.

    This version has been redesigned for Android Oreo compatibility. The user interface and the restrictions work properly for me, but be aware that a lot has been changed on the inside ("it is bigger on the inside", lol), also for earlier Android versions. There is one thing I know of that needs improving and that is that the user interface might be updated too often with a lot of restrictions, which might cause delays and hangs. I will look into this tomorrow.

    This change was necessary, but it was a lot of work, so XDA thanks and donations are appreciated.
    56
    I have just released beta version 0.25 in the Xposed repository.

    Changelog:

    With this release XPrivacyLua restriction's can be compared with XPrivacy's. There are now over 100 restriction definitions!

    XDA thanks and donations are appreciated.
    53
    @CHEF-KOCH You have been given enough time to respond here. Now I just think it is pretty cowardly to write critical about XPrivacyLua, but not to tell what can actually be improved, especially because you were invited to do so.

    I still like to hear how XPrivacyLua can be improved, but I don't want to hear what is wrong with XPrivacyLua. You'll need to keep the scope of XPrivacyLua in mind (in short: privacy, not security), see the opening post and previous discussions about this for more information.

    Also, if you really know better, I like to see an original work from your hands to prove that. Actions speak louder than words.

    As it is now, you are discouraging one of the few people in the world who really did something substantial to improve privacy on Android. And don't go talking about VPNs, TOR, etc because your private information, like your contacts, will still leak.

    I also think you are pretty ungrateful for what I did so far.

    To others: if you see someone reference one of his blogs, please reference this comment in response.

    Edit: if you agree with this, please add an XDA thanks to this comment, so it will show up in the right column as a reference for others.