views:

193

answers:

1

Please bear with me for a moment. I'm working on a master's thesis and want to demonstrate how bad a malicious application can be. I'm looking for a pre-installed application on the application on the android emulator or an application that has "brick" permission on the device. Rather than bricking my device, I would much prefer bricking the emulator instead!

PS: My device is a samsung galaxy i7500 just in case.

EDIT: Please do care to leave a comment as to why this question might annoy you (I promise not to serial downvote you)! I understand the topic may seem "very suspicious", but then I would not be linking myself publically to something that may be malicious in nature and I intend to pull off! Thanks for your consideration.

+3  A: 

You won't find any apps on the Android Market that do this. Just try the code for yourself:

Not granting permission android.permission.BRICK to package com.example.app (protectionLevel=2 flags=0x4444)

Only applications with the same signature as the system can use the BRICK permission (protectionLevel=2).

You'd need to build the Android platform yourself in order to attempt this.

See also BrickReceiver for an example of how it supposedly should work.

Christopher
So basically the report published by SMobile http://threatcenter.smobilesystems.com/?p=1887. That there are 8 applications in the market place that are capable of bricking a phone, false?
Shouvik
That an app *requests* the permission doesn't mean that the system will *grant* it, as per my example above. I'd imagine that's what's happening here.
Christopher
Okay, this is news to me! If an application requests for a permission, the system can deny it at install time, yet the application will be installed onto the device?
Shouvik
Yes, the "Not granting permission" snippet I posted above was logged by the device when I tried to install an app with BRICK permission. The app is installed; it'll just fail at runtime if you try to use that permission.
Christopher
Thanks will accept your answer if I don't get a response in another couple of days. For now I will give you a +1. Thanks.
Shouvik
I can not belive that call exist.
Macarse
@Macarse - Ummm, care to elaborate? are you referring to the answer or just expressing your surprise?
Shouvik
@Shouvik: Just expressing my surprise :)
Macarse
Two words: remote wipe :)
Christopher
@Christopher: Seven words: OMFG WTF! hehe :)
Macarse
If its true then on searching the installed apps on my device, I should technically find this app!? do I need to root my device for this app to turn up bcoz I can see all the system apps.
Shouvik
Sorry, which app are you're expecting to see?
Christopher
The remote wipe application...
Shouvik
ha ha, guess what I found... :) http://www.androidzoom.com/android_applications/tools/allpermissions_hniq.html
Shouvik
Yup, and when you install it 56 of the 114 requested permissions are refused by the phone.
Christopher
Thanks for all the help. Appreciate it.
Shouvik

related questions