Profile

Cover photo
Jake Hsien
1,977 followers|756,912 views
AboutPostsPhotosVideosReviews

Stream

Jake Hsien

Shared publicly  - 
 
草莓会跑步?🍓畅玩涂鸦水果游戏!🏃 g.co/fruit/03 🌟 #GoogleDoodle
 ·  Translate
Google 应用中有免费游戏供您畅玩!
1
Add a comment...

Jake Hsien

Shared publicly  - 
 
什么情况??不挂代理能上基家??
 ·  Translate
1
Add a comment...

Jake Hsien

Shared publicly  - 
 
卧槽!污!!
 ·  Translate
 
辣鸡
 ·  Translate
1 comment on original post
1
Add a comment...

Jake Hsien

Shared publicly  - 
 
 
I've made a quick video to demonstrate to novice users how to mitigate the most probable exploit of the Android Stagefright security hole (see: http://www.androidcentral.com/stagefright-exploit-what-you-need-know ).  

The video below is for users who use Google Hangouts for SMS/MMS messaging.

If you're using the stock Android "Messages" app, watch this video instead:  https://www.youtube.com/watch?v=UnXlZInrnbE
View original post
1
Add a comment...

Jake Hsien

Shared publicly  - 
 
后台管理软件在5.1.1已失效,这个分析很不错
 ·  Translate
 
This week Google released Android update "LMY48I", to correct the "stagefright" security vulnerability on its Nexus devices.  The "stagefright" vulnerability had been heralded as one of the most dangerous in the history of Android.

Unfortunately, the update also contains intentional changes that render many system utilities, security tools, and antivirus products less effective (or even non-functional).  SystemPanel is one of the tools severely affected by this change, and in the current version many features will not work on Android 5.1.1 versions with build numbers after LMY48I.

The reason for this issue is that Google removed the ability for applications to determine what other applications are running on a device.  That is, you are no longer allowed to see what applications are running in the background on your phone or tablet.  In my opinion, removing this ability has a significant negative security consequence.

The developer documentation for this now-removed feature is unchanged, and in fact still describes it with the suggestion that it be used to build applications like SystemPanel, i.e., "Note: this method is only intended for debugging or building a user-facing process management UI."  See http://developer.android.com/reference/android/app/ActivityManager.html#getRunningAppProcesses%28%29

This breakage is unquestionably deliberate: it's described in the LMY48I changelog.  And of course, Google-preinstalled system apps will be unaffected and retain their abilities, it's only applications that you as the user wish to install that will be negatively affected.  Removing this functionality was not necessary to correct the "stagefright" security vulnerability.

The one bit of good news here is that SystemPanel should be able to survive this.  I am working feverishly to get a beta together that works on this crippled release of Android, and most functionality will be restored.

This is possible by using lower-level Linux APIs (e.g. the /proc pseudo-filesystem) to retrieve  information about running applications.  It is not a complete replacement though, and some data will no longer be available.

The situation may take a turn for the worse when Google releases Android M, as that version's SELinux implementation appears to hide even more information from the user.  In Android M (Developer Preview 2), the user is entirely restricted from seeing information about Linux system processes which are not Android applications.  This statement is based on my own observations of the Android M Preview's behavior, and it may not be the case in the shipped product.  If things stay as they are in the current developer preview though, Android M will be providing a convenient shelter for malware or battery-draining processes to operate without the possibility of detection.

I still do recommend that everyone install the update that fixes the "stagefright" vulnerability ASAP, even if SystemPanel is temporarily broken and reduced in functionality as a result.  An updated version of SystemPanel will be made available very soon.
43 comments on original post
1
Thempty Hearse (Deerstalker)'s profile photoJake Hsien's profile photo
2 comments
 
+Thempty Hearse indeed. It's a long time my friend. Hope everything is going well 😊
Add a comment...

Jake Hsien

Shared publicly  - 
 
好玩!! +Daniel Q​快来试试!
 ·  Translate
ON SALE FOR A LIMITED TIME!Lifeline is a playable, branching story of survi...
3
Daniel Q's profile photoJake Hsien's profile photo
3 comments
 
+Daniel Q 哈哈,不是才0.99刀吗?
 ·  Translate
Add a comment...

Jake Hsien

Shared publicly  - 
 
 
让微信回到Android design的小技巧,据说最初来源于酷安评论

让用户选择想要的设计是合适的做法,这一点微信做得很不错。
 ·  Translate
64 comments on original post
2
1
Add a comment...
Have him in circles
1,977 people
Raghib Suleman's profile photo
hei ye ng's profile photo
尹晓娈(小白)'s profile photo
葉安琪's profile photo
沒尾巴 森林小妖精's profile photo
Zigzag Keh's profile photo
BiG Xu's profile photo
季风's profile photo
knight shady's profile photo

Jake Hsien

Shared publicly  - 
 
竟然不挂代理能上基家??我来发个清纯的小视频~~
 ·  Translate
1
Mos Autif's profile photowill we's profile photo
2 comments
will we
 
超级性感爽妞
 ·  Translate
Add a comment...

Jake Hsien

Shared publicly  - 
 
 
#拒绝消费苦难
无一例外,从上到下,从公众媒体到自媒体,铺天盖地的各种样板戏情节:“明星点蜡,大V祈福,领导批示,张三加油,李四不哭,大爱无疆,英雄出世,多难兴邦。”这不是个人社会责任的崛起,是消费苦难的作孽,是掩盖矛盾的把戏,是人性麻木的惯性。国人往往不缺乏善良,但普遍缺少良知。什么是良知?知善知恶并为善去恶是为良知。弱者往往被利用,成为罪魁祸首的帮凶。善良是弱者的本能表现,善良并不能给他人带来坚强,只能是鲁迅先生笔下铁皮屋里的垂死挣扎。良知才是强者之道,乱则以刚克乱,绝不心慈手软;治则顺应潮流,一力锦上添花。为生者河清海晏,为逝者讨还公道,这才是真的启蒙与崛起。
 ·  Translate
View original post
2
Thempty Hearse (Deerstalker)'s profile photo
 
你好久没上G+了。
 ·  Translate
Add a comment...

Jake Hsien

Shared publicly  - 
 
大部分后台管理软件在5.1.1已失效,这篇分析很不错~~
 ·  Translate
 
This week Google released Android update "LMY48I", to correct the "stagefright" security vulnerability on its Nexus devices.  The "stagefright" vulnerability had been heralded as one of the most dangerous in the history of Android.

Unfortunately, the update also contains intentional changes that render many system utilities, security tools, and antivirus products less effective (or even non-functional).  SystemPanel is one of the tools severely affected by this change, and in the current version many features will not work on Android 5.1.1 versions with build numbers after LMY48I.

The reason for this issue is that Google removed the ability for applications to determine what other applications are running on a device.  That is, you are no longer allowed to see what applications are running in the background on your phone or tablet.  In my opinion, removing this ability has a significant negative security consequence.

The developer documentation for this now-removed feature is unchanged, and in fact still describes it with the suggestion that it be used to build applications like SystemPanel, i.e., "Note: this method is only intended for debugging or building a user-facing process management UI."  See http://developer.android.com/reference/android/app/ActivityManager.html#getRunningAppProcesses%28%29

This breakage is unquestionably deliberate: it's described in the LMY48I changelog.  And of course, Google-preinstalled system apps will be unaffected and retain their abilities, it's only applications that you as the user wish to install that will be negatively affected.  Removing this functionality was not necessary to correct the "stagefright" security vulnerability.

The one bit of good news here is that SystemPanel should be able to survive this.  I am working feverishly to get a beta together that works on this crippled release of Android, and most functionality will be restored.

This is possible by using lower-level Linux APIs (e.g. the /proc pseudo-filesystem) to retrieve  information about running applications.  It is not a complete replacement though, and some data will no longer be available.

The situation may take a turn for the worse when Google releases Android M, as that version's SELinux implementation appears to hide even more information from the user.  In Android M (Developer Preview 2), the user is entirely restricted from seeing information about Linux system processes which are not Android applications.  This statement is based on my own observations of the Android M Preview's behavior, and it may not be the case in the shipped product.  If things stay as they are in the current developer preview though, Android M will be providing a convenient shelter for malware or battery-draining processes to operate without the possibility of detection.

I still do recommend that everyone install the update that fixes the "stagefright" vulnerability ASAP, even if SystemPanel is temporarily broken and reduced in functionality as a result.  An updated version of SystemPanel will be made available very soon.
43 comments on original post
1
Jake Hsien's profile photoCalixto Dai (Kuma)'s profile photo
3 comments
 
+Jake Hsien google挤牙膏的方式是不会做的
 ·  Translate
Add a comment...

Jake Hsien

Shared publicly  - 
 
国内的东西看来都不太可信
 ·  Translate
2
Add a comment...

Jake Hsien

Shared publicly  - 
 
简单好玩~~
 ·  Translate
Alphabear is an original word puzzle game by Spry Fox, the developer of the...
1
Daniel Q's profile photoJake Hsien's profile photo
2 comments
 
+Daniel Q 是啊,之前玩那个《三重镇》多欢乐呀,哈哈
 ·  Translate
Add a comment...
People
Have him in circles
1,977 people
Raghib Suleman's profile photo
hei ye ng's profile photo
尹晓娈(小白)'s profile photo
葉安琪's profile photo
沒尾巴 森林小妖精's profile photo
Zigzag Keh's profile photo
BiG Xu's profile photo
季风's profile photo
knight shady's profile photo
Basic Information
Gender
Male
Other names
Raymond
Apps with Google+ Sign-in
  • Transmission
  • BombSquad
  • Roll the Ball:unroll me
  • City 2048
  • Shadow Fight 2
Story
Tagline
#SaveGoogleReader
Introduction
I am not going to love Google any more without Google Reader.
Bragging rights
→◡→
Links
YouTube
Public - 4 years ago
reviewed 4 years ago
1 review
Map
Map
Map