Found this on Google+ today:

***
If you have a 4.2 Android powered device :
- Open the People/Contact
- Search for : "debug debug!"
- open the menu

Yeah, you can export contacts databases like a pro!
***

source: https://plus.google.com/u/0/115877168682250173283/posts/GfKSP7v8NZD

Works as advertised on my Nexus 4 with Android. It only takes a minute to 
export and email the zip with all contacts and images.

***
$ ls -lah *
databases:
total 11968
drwxr-xr-x@ 6 x  y   204B 17 Jan 16:15 .
drwxr-xr-x@ 5 x  y   170B 17 Jan 16:15 ..
-rwxr-xr-x@ 1 x  y   5,4M 17 Jan 13:09 contacts2.db
-rwxr-xr-x@ 1 x  y     0B 17 Jan 13:10 contacts2.db-journal
-rwxr-xr-x@ 1 x  y   448K 17 Jan 13:09 profile.db
-rwxr-xr-x@ 1 x  y     0B 17 Jan 13:09 profile.db-journal

files:
total 0
drwxr-xr-x@   4 x  y   136B 17 Jan 16:15 .
drwxr-xr-x@   5 x  y   170B 17 Jan 16:15 ..
drwxr-xr-x@ 130 x  y   4,3K 17 Jan 16:15 photos
drwxr-xr-x@   3 x  y   102B 17 Jan 16:15 profile

shared_prefs:
total 16
drwxr-xr-x@ 4 x  y   136B 17 Jan 16:15 .
drwxr-xr-x@ 5 x  y   170B 17 Jan 16:15 ..
-rwxr-xr-x@ 1 x  y   108B 17 Jan 13:09 ContactsUpgradeReceiver.xml
-rwxr-xr-x@ 1 x  y   351B 17 Jan 13:09 
com.android.providers.contacts_preferences.xml
***

***
$ sqlite3 contacts2.db
SQLite version 3.7.15 2012-12-12 13:36:53
Enter ".help" for instructions
Enter SQL statements terminated with a ";"
sqlite> .tables
_sync_state               photo_files               view_entities           
_sync_state_metadata      properties                view_groups             
accounts                  raw_contacts              view_raw_contacts       
agg_exceptions            search_index              view_raw_entities       
android_metadata          search_index_content      view_stream_items       
calls                     search_index_docsize      view_v1_contact_methods 
contacts                  search_index_segdir       view_v1_extensions      
data                      search_index_segments     view_v1_group_membership
data_usage_stat           search_index_stat         view_v1_groups          
default_directory         settings                  view_v1_organizations   
directories               status_updates            view_v1_people          
groups                    stream_item_photos        view_v1_phones          
mimetypes                 stream_items              view_v1_photos          
name_lookup               v1_settings               visible_contacts        
nickname_lookup           view_contacts             voicemail_status        
packages                  view_data               
phone_lookup              view_data_usage_stat
***

Is this a feature or simple a bug? Not a big fan of such easy data exfiltration 
"options". Yes, you need physical access to the device, but only for a minute 
or two (think like a short break, quick talk etc.)

Regards
Corsin



Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to