Live data from Hacker News

Pokemon Go, Security, and Obsolescence

community.rapid7.com

61–70 of 109 posts

Re: Pokemon Go, Security, and Obsolescence

#61
post #34
post #32

You can unroot CyanogenMod running on the Nexus 4 & Pokemon Go will run just fine. You have to give the SuperSU app root privileges in order to unroot ironically, but it works just fine & you can always root your system from the bootloader in the future if it turns out that you need root for some reason. There’s an app in the Play Store that runs the tests the Google library that Niantic is using to check whether a p…

This is the app I've used in the past: https://play.google.com/store/apps/details?id=com.scottyab.s... Also I was under the impression that SafetyNet would only pass on stock ROMs (to include official CyanogenMod builds lacking root). Is that not true? Will it also pass on any custom ROM lacking root? Edit: According to http://androiding.how/use-android-pay-cm14-cm13/ , SafetyNet (the tamper detection API in use by A…

The SafetyNet API returns multiple booleans. The stricter version of the detection enforces that the system is an Android CTS-compliant device, but there are several levels below that. Apps using SafetyNet can decide how much they enforce. Unfortunately this testing app you linked doesn't seem to surface this at all and only shows the highest level (CTS).

Re: Pokemon Go, Security, and Obsolescence

#62
post #2

Now Niantic's decision to disallow root devices, imo, is pretty regretful, as serious botters will likely be able to get around that restriction regardless. This only serves to punish users who are stuck between having a root-enabled custom ROM or a stock ROM where critical root exploits may exist. One thing that I observed is that no one seems to be interested in producing a ROM that is both stable, has a variety of…

I honestly would be very happy with a ROM that copies stock Android entirely , without any added features or customizations, rather focusing solely on stability, security, supporting a wide range of devices, and tracking the official Android release schedule as closely as possible. Can someone point me to a ROM like this if one already exists?

> any added features or customizations

That's not only about UI. Most people want customizations / features that enable things like 4G radio, wifi and graphics. What would be the point otherwise?

Re: Pokemon Go, Security, and Obsolescence

#63

Earlier quoted context omitted.

Wait. When did expecting delivery of the product or service you paid for become "classic entitlement"?

Maybe my comment was unnecessarily rude, but demanding a refund and calling a company a piece of shit because you got banned for cheating is absolutely entitlement. Just because you spend money on a service does not entitle you to have unlimited access against TOS.

When you pay for a product or service, you're entitled to the receipt of the product or service that you paid for. If you think I'm breaking your Terms of Service, you have every right to refuse service to me, like any other establishment. However, you also have to refuse my money. If I've already paid, you give it back.

That's my moral standpoint, anyway. Arguments against it exist (should people who start fights in bars and get thrown out by the bouncer get their money back?), but in this case I'm not sure cheating actually hurts anyone. Which is what Niantec has got so totally incomprehensibly wrong about this whole thing. No one is hurt by the things they're preventing. All they're doing is chopping chunks off their user base.

Re: Pokemon Go, Security, and Obsolescence

#64

Earlier quoted context omitted.

I honestly would be very happy with a ROM that copies stock Android entirely , without any added features or customizations, rather focusing solely on stability, security, supporting a wide range of devices, and tracking the official Android release schedule as closely as possible. Can someone point me to a ROM like this if one already exists?

I was going to point you to the Pure series of roms by Beanstown, but I don't understand your question... You don't want ANY custom stuff at all or features, then what's the point? Just install stock android...?

"Stock Android" is only stock Android on Google-branded devices.

Re: Pokemon Go, Security, and Obsolescence

#65
post #54
post #40

Earlier quoted context omitted.

I left the game because: + Disabled footpad tracking made it less fun. + Some update made it sluggish on my 10-month-old phone. + They don't let you play with Root (I have a workaround, but it's a pain). + Gameplay is highly repetitive past lvl 20 I just feel constantly trampled on. I'll waste my time with someone who treats me like an adult.

> + Disabled footpad tracking made it less fun. That made me quit too. It's basically a slot machine now. You can't hunt anymore, you just have to accidentally stumble across something. > + Gameplay is highly repetitive past lvl 20 I would say gameplay is highly repetitive in general. You're basically just throwing Pokeballs around hoping something sticks. Sometimes a gym battle once you get to that point but most gy…

I started just after footpad tracking was disabled, but now "Sightings" lets me track down 'mons just fine. Maybe it's more work than footpad? I wouldn't know.

Re: Pokemon Go, Security, and Obsolescence

#66
post #59
post #31

Earlier quoted context omitted.

The FCC only has business in the US though.

Almost every country has something like that. The Dutch Agentschap Telecom will hunt you down for transmitting a fake GPS signal too. The thing is, nobody cares if you send a signal too weak to go beyond a meter of your pocket. That's why it's totally legal to send FM on registered frequencies as long as your output is under a certain amount. Same with WiFi even. I heard about someone looking into GPS spoofing once i…

This is not always true - FM transmitters were not legal in the UK, regardless of power, until 2011 or so. Can't imagine anyone was actually prosecuted for using one, though.

Re: Pokemon Go, Security, and Obsolescence

#67
post #21

After all, the root blocking in Pokémon Go is pretty weak. All I had to do was to rename/move the 'su' binary and then it worked again.

This did not work for every user - for example my buddy bought an Asus Zenfone 2 (ZE551ML) specifically to play this game. I warned him not to buy from a China seller but he proceeded because he was finding guides that told him it was a great phone for the game - he literally bought this phone to play this game.

I attempted to remove root however this has now forced the phone to be stuck on Edge network (he can play but now only on WiFi :/) I have attempted to re-flash the physical ROM's (as well as the recovery matching those ROMs) from ASUS (successfully) and it still is stuck on edge. I've contacted his phone company (T-mobile) - insured the proper bands were being requested, 5x checked the APN settings and yet the phone still doesn't want to connect past edge. Here is the kicker, I scan for nearby cellular networks and T-Mobile (LTE) shows up, the phone registers, yet still won't obtain the connection.

Honestly that issue is probably due to some other restriction but it shows the frustration some users have had to deal with because of this move.

I even tried re-rooting the phone just to get his network back because he'd rather have his phone than Pokemon GO yet the phone had something special done to it to allow the network to work under root.

No one should have to go to those extremes especially when they aren't cheating and they are a paying customer.

In all honesty I don't believe the ban on root was done to deter hacking - my belief is that it was done because on average users only root because they want paid apps for free (a lot claim it's to tweak the UI and remove bloatware, but as more and more phone's get released we are starting to see this less and less of a requirement). While many rooted players (due to pre-rooting) are actually paying customers it still doesn't outweigh the paying customers who are not rooted and therefore it was more then likely a move to remove users who are less likely to put money into the game.

Every move they have done really reflects that they only want more money with the least amount of work and that is why I only keep the game installed to keep my 1 star reviewed from being weighted down due to being a review for an older version.

One of the big guys who is involved in creating a usable tracking system via a third-party map has made a wonderful statement about the many failures of Niantic [1]. From unnecessary obfuscation that only slows down older models, to banning the devices that aren't the reason cheating is happening, to not creating a good way to achieve feedback (apart from "critical errors" which is built into the app - maybe I should start complaining about the critical "Niantic" bug and that it needs to be fixed ASAP, but complaining won't really get anywhere if the company isn't listening to those problems) Niantic truly is on a path to destruction and I hope Nintendo doesn't let this amazing idea die if Niantic falls.

It really doesn't make sense to why they are making these decisions. The developers should know that banning rooted devices won't deter hackers - in fact I would have to say it's grown a few hackers/cheaters due to the frustration of dealing with lack of communication and oddly made decisions.

[1] http://www.twitlonger.com/show/n_1sp6pkg

Re: Pokemon Go, Security, and Obsolescence

#68
post #41

When I have a choice between Pokemon Go or root, I choose root every single time. I loathe Niantic for this stupid decision. The equivalent would be if Riot decided that League of Legends can only be played on PCs with a guest account and not an admin account. Completely pointless and dumb. I can't believe I bought some stuff in the Pokemon Go store, I want a refund. They robbed me, a legitimate and paying customer,…

There is it's called Magisk (it's not as simple as installing but it does exist!)

Re: Pokemon Go, Security, and Obsolescence

#69

Earlier quoted context omitted.

I was going to point you to the Pure series of roms by Beanstown, but I don't understand your question... You don't want ANY custom stuff at all or features, then what's the point? Just install stock android...?

"Stock Android" is only stock Android on Google-branded devices.

I don't understand this sentence. Google only has a single phone that has only been out for like 1 day now, the Pixel. And it's not even stock Android, it's got extra features that the stock Nougat doesn't have. Again though, I think this whole thing is moot, because lots of phones have roms on xda that is basically just stock android with no customizations, so just install that and be done with it.

Re: Pokemon Go, Security, and Obsolescence

#70

Earlier quoted context omitted.

Maybe my comment was unnecessarily rude, but demanding a refund and calling a company a piece of shit because you got banned for cheating is absolutely entitlement. Just because you spend money on a service does not entitle you to have unlimited access against TOS.

When you pay for a product or service, you're entitled to the receipt of the product or service that you paid for. If you think I'm breaking your Terms of Service, you have every right to refuse service to me, like any other establishment. However, you also have to refuse my money. If I've already paid, you give it back. That's my moral standpoint, anyway. Arguments against it exist (should people who start fights in…

Niantec is falling in the classic 'never trust the client' trap, just like every other multiplayer game out there. At first the game works great for everyone, but some cheating is possible. They freak out about the cheating, start trying to prevent it (which is impossible, since they are trusting the client) by installing intrusive software on the client's device.

The real hackers don't really care. They just reverse the game's network protocol and talk to the servers directly, completely ignoring the anti cheat business. Or they work around the anti cheat, which is of course possible, because they control the client.

But the legitimate users? Their machines will become sluggish, they will get hit with false positives and banned for nothing, and in the worst cases their privacy is also forfeit as everything they do on their own system gets monitored by some game company.

Post reply on HN