Device ID's leaking

[LazyZhu]

You can use this app to get the Device ID:
https://play.google.com/store/apps/details?id=com.redphx.deviceid

I would like to contribute, sadly i'm not familiar with android or java.

[M66B]

Device ID can already be restricted.

[LazyZhu]

Did you even test it?
This Device ID is different from Android Id Info's Android ID.

[M66B]

I will certainly look into it.
It should be restricted if you use the category identification and/or phone.
You can help me by providing a logcat from device startup.
See the FAQ, question 22 of you don't know how.
https://github.com/M66B/XPrivacy#frequently-asked-questions

[LazyZhu]

I use the category identification and phone restriction for both app, you can see the different result above.
I'll get logcat as soon as possible.

[M66B]

I test myself with the Android Id Info app and for me everything is restricted.
What version of Android are you using?
Which ROM are you using?
Start 'adb logcat' before you power up your device, because I need to see if all method hooking succeeds.

[LazyZhu]

I test myself with the Android Id Info app and for me everything is restricted.

Yes, me too. I'm talking about the other app, please test it with XPrivacy:
https://play.google.com/store/apps/details?id=com.redphx.deviceid

What version of Android are you using?
Which ROM are you using?

huawei 4.1.2 stock rom

Start 'adb logcat' before you power up your device, because I need to see if all method hooking succeeds.

I'll get logcat as soon as possible.

[LazyZhu]

@M66B
Here is logcat for device:
http://pastebin.com/QJnTVmJS

[M66B]

Thanks for the logcat.
The hooking seems to be okay, but I don't see the device ID app starting, is that correct?

[LazyZhu]

@M66B

The hooking seems to be okay, but I don't see the device ID app starting, is that correct?

Yes.

Here is logcat for app with everything restricted:

E/dalvikvm( 782): GC_CONCURRENT freed 719K, 12% free 16046K/18119K, paused 12ms+2ms, total 49ms
I/XPrivacy/XAccountManager( 2781): get com.redphx.deviceid/getAccountsByType accounts=true *
I/ActivityManager( 412): Displayed com.redphx.deviceid/.MainActivity: +191ms
I/MsmCpuGovernorPolicy( 740): the same as current scene, do nothing.
W/WindowManager( 412): statePower =normal
E/WindowManager( 412): getkey down, keyCode =true, 4
W/WindowManager( 412): statePower =normal
E/WindowManager( 412): getkey down, keyCode =false, 4
E/dalvikvm( 412): GC_FOR_ALLOC freed 939K, 39% free 12874K/20999K, paused 54ms, total 56ms
I/MsmCpuGovernorPolicy( 740): the same as current scene, do nothing.

[M66B]

Is this the only XPrivacy logging for the app?

I/XPrivacy/XAccountManager( 2781): get com.redphx.deviceid/getAccountsByType accounts=true *

[LazyZhu]

@M66B Yes. I only can see this.

[M66B]

Could you please try if this issue also exist in version 0.41 of XPrivacy?

[LazyZhu]

Could you please try if this issue also exist in version 0.41 of XPrivacy?

Yes, Both 0.42 and 0.41 have same result.

[M66B]

Could you please provide me with the XPrivacy logging for 'Android Id info', since for me everything shown in this app is restricted. I did some testing with the device ID app: the accounts are restricted, but the device ID isn't. Despite all the different ID's I have restricted, there seems to be one more, but I have no idea yet which number the device ID app shows. Rest assured, I will figure it out somehow.

[LazyZhu]

I test my two android devices without XPrivacy. The Device ID's Device ID and Android Id Info's Secure.ANDROID_ID are different things, they have different values.

[M66B]

If you can figure out which number is show, please let me know.
You can look here which ID's already restricted (a lot!):
https://github.com/M66B/XPrivacy#restrictions
(categories identification and phone)

[LazyZhu]

If you can figure out which number is show, please let me know.
You can look here which ID's already restricted (a lot!):
https://github.com/M66B/XPrivacy#restrictions
(categories identification and phone)

Yes, this is new data to be restricted.
I do some search, there are two way to get Device ID
From http://codekiem.com/2012/02/24/apk-downloader/

I guess the Device ID is generated by GoogleServicesFramework.apk

[M66B]

Is ##8255## showing the same device ID as the app for you?

[vipere]

The app uses the following method to retrieve the Device ID
http://blog.codepainters.com/2012/01/17/how-to-obtain-gtalk-android-id/

[M66B]

Thanks for figuring this out!
Now we have to find the package/class name of the content provider to hook it.

[LazyZhu]

Thanks for @vipere,
I tested @M66B , the Device ID is generated by GoogleServicesFramework.apk: By removing GoogleServicesFramework.apk then Device ID gone, when reinstall GoogleServicesFramework.apk then new Device ID generated.

[M66B]

Good work here guys!

[M66B]

Class name is probably com.google.android.gsf.gservices.GservicesProvider
Thanks @vipere