Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Reminds me of the old days of running this tool - kitchen sink, https://forum.xda-developers.com/t/kitchen-android-kitchen-v... those days of cyanogenmod/rolling your own rom based off Gingerbread 2.3.7 and hacking... happy memories :)


I was into reverse engineering android apps in the same period, My toolchain at that time was -

Java Decompilation:

Method 1: Dare + JD Decompiler +Cavaj (or) DJ Decompiler

Method 2: dex2jar + JD Decompiler + Cavaj (or) DJ Decompiler

Method 3 : AndroChef Java Decompiler

Accessing Apk Resource Files:

Apk Tool.

Selecting Decompilation of System Files:

Smali, Backsmali

Later a tool called Procyon replaced many of the aforementioned tools.

P.S. Not including links for any of those tools as apart from being obviously outdated, Many of those tools started flagging for malware in later days; Perhaps they're just false positive considering their feature set but I don't want to risk it.


dex2jar + JD Decompiler was my go-to as well, but I spent a long time staring at Smali directly.


You recommend any projects that are similar to this and up to date?


LineageOS build guides are a great resource to get started: https://wiki.lineageos.org/build_guides


+ 1.

In case anyone wants to use Play store apps with push notifications(GCM) on LineageOS, I highly recommend MicroG+F-droid bundled version[1].

If not for privacy, De-googling results in excellent power backup.

[1]: https://lineage.microg.org/


I don't really know much about this, but since microG reimplements the GooglePlay API.. doesn't that mean it must phone back to Google servers?

If you want privacy, I assume you shouldn't use any of these?


For absolute Privacy (If that's even possible without going off-grid), Then yes.

But if you need to use apps which you trust but it depends upon proprietary Google bits then microG is the best alternative now.

microG > Open Gapps > Gapps

e.g. Signal needs GCM to send notifications, If it doesn't find one it will revert to pull notifications. Pull notifications are unreliable and are subject to being killed by battery management due to power consumption. Not to mention missing notifications during emergencies could be dangerous.

microG is totally configurable, You don't need a Google account to use it. So even if Google knows about your device, It would require parallel construction to identify you personally. I think that's even better than using any Google app on iOS.


One thing that not many people know: you don't need to have a Google account to use GCM/FCM even with official Gapps. You can simply not sign in to Google play and push will still work.

It's still running tons of spyware yes but it's an alternative on phones where MicroG is not an option. Eg Samsung phones with Knox enabled.


Okay, I was just checking. I thought maybe they run their own servers and thought it'd be worth trying

Yeah, I'm not a privacy fanatic, but literally having all my notifications funneled through one ad company .. that's on the far end of creepy/dystopian .. Thanks but no-thanks

I keep hearing this myth about how notifications can't work seemlessly without GCM. I don't believe it :)

I currently have GooglePlay disabled and I've never had issues with Signal notifications. However Instagram doesn't work at all. And Messenger is very inconsistent

If apps like WeChat do it then I don't believe it's impossible


> I thought maybe they run their own servers and thought it'd be worth trying

Unless the app you're using use the alternate push notification system e.g.Unified Push, There's no point in microG having their own servers. Demand your favorite app publisher to release a Non-GCM version of their app on F-Droid.

> I currently have GooglePlay disabled and I've never had issues with Signal notifications

Good for you, As I said its pull notification. In simple terms a scheduled local service asks the app's server whether you have new messages. The service needs to be active all the time consuming power, You'd probably seeing a pinned notification for it; Every pull notification app needs its own such service.

> I keep hearing this myth about how notifications can't work seemlessly without GCM. I don't believe it :)

Nothing to do with myth (or) belief system. Push (or) Pull is the technical fact w.r.t notifications.

[1] https://unifiedpush.org/




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: