71–80 of 90 posts
Scripts like this empowering the end-user is why I consider the Android ecosystem superior.
*superior when evaluated against one of many different criteria for what’s important to many different users. (A good time to remind tech people: 98% of users are not our user persona)
It seems to be made for injecting Frida into APKs. I'm having trouble understanding what Frida is. Can I do something cool with it?
No need to recompile the app after making changes to smali (decompiled but modifiable language).
As you can just modify the js script and get the modified behavior.
Well, this is not a news site but a > news site.
Great!!!
While I'm here: What is going on with "Android Emulation on Linux???" I feel like I have to be missing something obvious, I can't see how it can be so darn hard to just run android apps on (desktop) Linux given..you know, that it is Linux.
Is it hard? Check out Waydroid if you haven't already. https://waydro.id/
FINE. Maybe this will be thing...
Earlier quoted context omitted.
+ 1. In case anyone wants to use Play store apps with push notifications(GCM) on LineageOS, I highly recommend MicroG+F-droid bundled version[1]. If not for privacy, De-googling results in excellent power backup. [1]: https://lineage.microg.org/
I don't really know much about this, but since microG reimplements the GooglePlay API.. doesn't that mean it must phone back to Google servers? If you want privacy, I assume you shouldn't use any of these?
But if you need to use apps which you trust but it depends upon proprietary Google bits then microG is the best alternative now.
microG > Open Gapps > Gapps
e.g. Signal needs GCM to send notifications, If it doesn't find one it will revert to pull notifications. Pull notifications are unreliable and are subject to being killed by battery management due to power consumption. Not to mention missing notifications during emergencies could be dangerous.
microG is totally configurable, You don't need a Google account to use it. So even if Google knows about your device, It would require parallel construction to identify you personally. I think that's even better than using any Google app on iOS.
Reminds me of the old days of running this tool - kitchen sink, https://forum.xda-developers.com/t/kitchen-android-kitchen-v... those days of cyanogenmod/rolling your own rom based off Gingerbread 2.3.7 and hacking... happy memories :)
I was into reverse engineering android apps in the same period, My toolchain at that time was - Java Decompilation: Method 1: Dare + JD Decompiler +Cavaj (or) DJ Decompiler Method 2: dex2jar + JD Decompiler + Cavaj (or) DJ Decompiler Method 3 : AndroChef Java Decompiler Accessing Apk Resource Files: Apk Tool. Selecting Decompilation of System Files: Smali, Backsmali Later a tool called Procyon replaced many of the af…
Earlier quoted context omitted.
I don't really know much about this, but since microG reimplements the GooglePlay API.. doesn't that mean it must phone back to Google servers? If you want privacy, I assume you shouldn't use any of these?
For absolute Privacy (If that's even possible without going off-grid), Then yes. But if you need to use apps which you trust but it depends upon proprietary Google bits then microG is the best alternative now. microG > Open Gapps > Gapps e.g. Signal needs GCM to send notifications, If it doesn't find one it will revert to pull notifications. Pull notifications are unreliable and are subject to being killed by battery…
Yeah, I'm not a privacy fanatic, but literally having all my notifications funneled through one ad company .. that's on the far end of creepy/dystopian .. Thanks but no-thanks
I keep hearing this myth about how notifications can't work seemlessly without GCM. I don't believe it :)
I currently have GooglePlay disabled and I've never had issues with Signal notifications. However Instagram doesn't work at all. And Messenger is very inconsistent
If apps like WeChat do it then I don't believe it's impossible
Earlier quoted context omitted.
For absolute Privacy (If that's even possible without going off-grid), Then yes. But if you need to use apps which you trust but it depends upon proprietary Google bits then microG is the best alternative now. microG > Open Gapps > Gapps e.g. Signal needs GCM to send notifications, If it doesn't find one it will revert to pull notifications. Pull notifications are unreliable and are subject to being killed by battery…
Okay, I was just checking. I thought maybe they run their own servers and thought it'd be worth trying Yeah, I'm not a privacy fanatic, but literally having all my notifications funneled through one ad company .. that's on the far end of creepy/dystopian .. Thanks but no-thanks I keep hearing this myth about how notifications can't work seemlessly without GCM. I don't believe it :) I currently have GooglePlay disable…
Unless the app you're using use the alternate push notification system e.g.Unified Push, There's no point in microG having their own servers. Demand your favorite app publisher to release a Non-GCM version of their app on F-Droid.
> I currently have GooglePlay disabled and I've never had issues with Signal notifications
Good for you, As I said its pull notification. In simple terms a scheduled local service asks the app's server whether you have new messages. The service needs to be active all the time consuming power, You'd probably seeing a pinned notification for it; Every pull notification app needs its own such service.
> I keep hearing this myth about how notifications can't work seemlessly without GCM. I don't believe it :)
Nothing to do with myth (or) belief system. Push (or) Pull is the technical fact w.r.t notifications.
If you haven't tried Jadx [1], give it a shot. It's by far the easiest way to reverse Android APKs. It doesn't do patching or reassembly, but I used it for reversing the Delong'hi APK for longshot [2][3] and the quality of output was fantastic. Note that scripts like this are extremely useful, but in the long term they're cobbling together a lot of tools and will become brittle or difficult to use across versions. I…
Java decompilers aren't intended to produce valid code that you can compile back. Sometimes they do, but it's more of a coincidence.
By the way. Another underrated reverse engineering tool is xposed framework. It was never intended to be one, but the ability to inject arbitrary code into any app and install hooks without having to modify the apk is a godsend.