Appendix:Pokémon GO Player's Guide/Malware: Difference between revisions

m
It's misleading to not indicate that these checksums are SHA-256, not SHA-1
(Created page with "'''Pokémon GO''' has become very popular, incredibly so. For this reason, many people got it on release date. There was a problem, however. It was only released in very...")
 
m (It's misleading to not indicate that these checksums are SHA-256, not SHA-1)
Line 53: Line 53:
==Verifying if the file has been changed==
==Verifying if the file has been changed==


Another method, though not as simple, involves looking at the [https://en.wikipedia.org/wiki/SHA-1 SHA-1 hash], which is a string of characters that tells whether a file has been changed. The first string of characters below is the one associated with the legitimate app. The second is one that is known to have been used by a DroidJack version.
Another method, though not as simple, involves looking at the [https://en.wikipedia.org/wiki/SHA-1 SHA-1 hash], which is a unique string of characters that tells whether a file is unaltered compared. The first string of characters below is the one associated with the legitimate app. The second is one that is known to have been used by a DroidJack version. Both are SHA-256 checksums.


<code>8bf2b0865bef06906cd854492dece202482c04ce9c5e881e02d2b6235661ab67</code> - Legitimate app.
<code>8bf2b0865bef06906cd854492dece202482c04ce9c5e881e02d2b6235661ab67</code> - Legitimate app.
Line 59: Line 59:
<code>15db22fd7d961f4d4bd96052024d353b3ff4bd135835d2644d94d74c925af3c4</code> - App using a DroidJack version.
<code>15db22fd7d961f4d4bd96052024d353b3ff4bd135835d2644d94d74c925af3c4</code> - App using a DroidJack version.


In order to check the SHA-1 hash, you must use a tool from an external source (there’s no method of finding it that’s predownloaded in your phone). There are a few online tools that allow you to do this, one good example being this: http://onlinemd5.com/ (You’d upload the app’s file onto this tool in much the same way you’ve sidedownloaded the app to your phone).
In order to check the hash, you must use a tool from an external source (there’s no method of finding it that’s predownloaded in your phone). There are a few online tools that allow you to do this, one good example being this: http://onlinemd5.com/ (You’d upload the app’s file onto this tool in much the same way you’ve sidedownloaded the app to your phone).


If the app is malicious, then it can be deleted from the application manager, similarly to any other app.
If the app is malicious, then it can be deleted from the application manager, similarly to any other app.
638

edits