Giter VIP home page Giter VIP logo

Comments (21)

AndreasGassmann avatar AndreasGassmann commented on July 30, 2024 1

"Root needed." That doesn't make sense, as it removes all the security the phone has. Am I right?

Yes. In fact, AirGap Vault will not run if your device is rooted (there will be an error message).

As an iOS user myself, I have never heard of "Flyme" or "Meizu". Can't you just install a regular, plain Android installation with Play Store?

[...] what would I be looking for if I go buy another android, to avoid these problems?
Would an old iPhone be more/less secure in running Vault, compared to Android?

I can't give you any direct recommendations, but we have a couple "Galaxy" test phones and they all work fine. We also tested one of the newer budget Nokia phones, which also worked.

Regarding iOS vs Android, this is really a personal choice. I personally would choose an iPhone if I have the option, it's just more familiar to me. But the handling on Android (once everything is set up) is easier because you can use SD Cards to update the app, whereas on iOS you have to wipe the phone and start over to do it securely.

from airgap-vault.

AndreasGassmann avatar AndreasGassmann commented on July 30, 2024

After updating the webview to version 90, does the error screen actually reflect the updated webview version? The screenshot you sent in telegram (which I think you sent after you created this post) still shows webview version 44.0.xxx. Was that screenshot taken before you updated the webview?

vault-error

Some Android distributions/versions seem to have a "system webview" and third party webviews. If that is the case, then it should be possible to switch them somewhere in the settings.

Because of the vast amount of android distributions and different "environments", it is impossible for us to create such a list without community help. We have recently started building a "documentation" page for AirGap that contains Guides, FAQs and more. We were planning to add a guide on how to update the Webview (along with instructions on how to set it up on an offline device), but haven't gotten around to it yet. We can also create a list of distributions and versions that we know are working or not working (with community help). This is the new page, it's still not completely finished yet and contains some empty pages: https://support.airgap.it. We appreciate any feedback and contributions.

The source files for the documentation are located here: https://github.com/airgap-it/airgap-docs

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

After updating the webview to version 90, does the error screen actually reflect the updated webview version?

Right, I did notice that the webview did not change -- according to the error report -- even though webview was changed in the device prior to that run attempt and error report.

I definitely took that error report and screenshot AFTER updating webview.

In settings > about phone there's no mention of webview.
I've since downgraded the OS back to build number "Flyme 6.7.8.8G beta" just to try that OS again with the WebView 90, and still none of the installs will properly run.

Yes, I'll be happy to contribute to the airgap docs.

from airgap-vault.

AndreasGassmann avatar AndreasGassmann commented on July 30, 2024

After a quick google search I found these 2 sites, maybe they will help you to track down the error: https://forum.xda-developers.com/t/how-to-change-android-webview.3944297/ and https://github.com/Magisk-Modules-Repo/bromitewebview

Regarding the airgap-docs, feel free to create a PR if you know how, otherwise you can also open an issue so we can plan something.

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

Thanks! I'll check into those. If not, what would I be looking for if I go buy another android, to avoid these problems?
Would an old iPhone be more/less secure in running Vault, compared to Android?

As for the airgap-docs page - I'll check into PR creation, and otherwise open an issue.

On the Meizu android, I downloaded an app "full system info 2.6" apk from "it geeks" and it showed me that webview is in fact v.90.

I installed Vault 3.7.0 again, and ran it, and got the exact same error, reading "44.0.2403.146."

I have screenshots.

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

the comments seem to suggest that magisk is a root procedure - which is not what we want to do to maintain security.

Another comment mentions TiBU but a web search reveals:
https://forums.androidcentral.com/verizon-galaxy-nexus-rooting-roms-hacks/192528-how-tibu-easy-way.html

But I'm not sure if Galaxy info would pertain to a Meizu.

This is why I use Apple. None of this nonsense. But yeah, it's a closed system, which has its drawbacks, but still.

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

TiBU = Titanium Backup. "Root needed." That doesn't make sense, as it removes all the security the phone has. Am I right?

After all these wacky OS problems with Android OS, I have a hard time believing that an Android has a better secure element than an iPhone; but maybe I'm not seeing all the info.

https://play.google.com/store/apps/details?id=com.keramidas.TitaniumBackup

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

IMG_7436

IMG_7437

IMG_7438

IMG_7439

IMG_7440

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

Meizu does not allow any other install, other than their own Flyme Android OS. Unless I've missed something.

So they're using Android to attempt make a closed system.

I'll look for a low end Galaxy or Nokia as long as it does Android 6.0 minimum.

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

I bought a 2nd hand brand new X50 phone that runs Android 10. It was not messed with or rooted.

Trying to install any Vault 3.x gave a parse error (unable to parse package)

Vault 2.7.1 installed but would not run.

Green and Mycelium installed ok and run.

image

image

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

Parse error:

image

from airgap-vault.

AndreasGassmann avatar AndreasGassmann commented on July 30, 2024

Are you sure that phone is running Android 10? The error message indicates that it is running Android 4.4.2, which would also explain the very low WebView version of 30.0.0.

Can you make sure that you update both the WebView (as mentioned above), and also install the last version of the Chrome browser? And could you also post a picture of the settings screen that shows you that it's running Android 10?

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

from airgap-vault.

AndreasGassmann avatar AndreasGassmann commented on July 30, 2024

I have to agree with you that the Android landscape is very confusing compared to the iPhone world. But I have to say that I'm surprised you had so many issues with 2 separate phones. If I recall correctly, there was not a single phone (unless unable to install Android 5) where we weren't even able to get the app running. In 99% of the cases the solution is to update the WebView. The others were usually resolved after resetting the device. We also have a couple older phones that we use for testing and never had any issues.

Let's create a list for this so users can contribute. I have something like this in mind:

Mobile Phone Model Android Version Works Issue
Samsung Galaxy S8+ SM-G955FD 9 Yes
Samsung Galaxy A5 (2016) SM-A510F 7.0 (latest) Yes
Meizu (?) ? FlymeOS 7.8.8.31 No #58
X50 (?) ? 10 No #58

How does that look?

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

So for iphone it's not secure to download the Airgap updates from the App Store?

At some point I could check into updating the Meizu chrome browser to see if that does it.

Yay - I got rid of the X50 and bought a Galaxy A11 which installs and runs for Vault 3.7! Still need to connect it to the Wallet on the iPhone.

The chart looks good, seems like a fine layout. There can also be a space for update steps; to show the user that for iphone the secure method to install and update Vault is Wipe phone, Import new app into iTunes, etc, and what steps (if any) would do for the Meizu M5s for example. Steps could either be there in the chart (if concise enough) or your link to a issues page is probably also good since it shows the thought processes in checking the problem for that phone model.

from airgap-vault.

AndreasGassmann avatar AndreasGassmann commented on July 30, 2024

My idea would be to include the steps to make it work in a separate issue to not overload the table. If in the end it's usually solved by simple things like updating the WebView, we can consider adding it to the table as well.

So for iphone it's not secure to download the Airgap updates from the App Store?

Well, the fact that you have to connect the phone to the network to do that is the problem. An air-gapped / offline device should NEVER be connected to any network again. Sadly, for iPhones this means that there is no way to install updates (eg. you cannot load the update onto an SD card like you can on android). So, to securely update, you will have to wipe the phone and start from scratch, because wiping the phone will erase all the data.

One thing to note here. Apart from KSM and DOT, which seem to be having frequent breaking changes, you usually don't have to update your Vault when a new version is released, unless you want access to the new features. We always try to make as few breaking changes as possible in the communication protocol between Vault and Wallet.

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

Good to note that updates mostly don't break the connections between your apps.

Sounds good to have really short fixes in the chart, but anything longer simply links over to an issue page. I like the chart idea.

I won't have a Mac to check near me for awhile since I'm traveling - but I seem to remember updating apps by downloading the updates into the iTunes app on the desktop, and then syncing the updates with a Lightning cable to the phone. However Apple may have killed that method with one of their recent iTunes updates.

from airgap-vault.

AndreasGassmann avatar AndreasGassmann commented on July 30, 2024

We created a page now where we track compatibility of the Vault on different phones: https://support.airgap.it/airgap-vault/supported-devices/

from airgap-vault.

yeru83 avatar yeru83 commented on July 30, 2024

from airgap-vault.

babhong avatar babhong commented on July 30, 2024

Hi, I have a Samsung Galaxy S4, and AirGap Vault doesn't seem to work on it. I have updated both Android System Webview. Have updated Chrome as well. The phone is running stock OS. When I open AirGap Vault, it just gets stuck on the loading screen, with the white background and the AirGap logo. When I I leave the app and the screen goes dark, though — when I come back and wake the phone, I can briefly see the setup screen that I'm supposed to see — but it's very brief, and then the loading screen comes back, and I'm stuck there again.

from airgap-vault.

debeldami avatar debeldami commented on July 30, 2024

we now have a page that showa the requirement for AirGap.

from airgap-vault.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.