Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've a question regarding security in a rooted device.

Being superuser means that you can access the /data/data directory, and that's a lot of personal data (I think it is almost all the data there can be in the phone).

So if a rooted phone is stolen, anyone can connect to the device via adb and perform a complete "audit" of the data, including mail, sms, search and browser history, contacts, etc. It is in fact easier than with a non-rooted phone. I see a big vulnerability here. Is there a way to prevent adb connecting to the phone like, for instance, a password?

share|improve this question
up vote 5 down vote accepted

The adb can connect to an android device only if "USB debugging" is enabled in Settings->Applications->Development. If this setting is disabled and a password lock is set for unlocking the device, there should be no worries.

Also there are many apps such 'Lookout' which provide the ability to remotely wipe data from a phone if it gets stolen.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.