For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
0answers
30 views

Android root sandbox?

On Windows I would use a sandbox to easily see file-changes made by shady programs to see how it would affect my system. What are easy methods (except decompiling and looking at the actual program ...
1
vote
0answers
48 views

Checking activity of unknown user on my phone

Yesterday I took my new phone to a mobile service shop... I wanted them to put a protection layer on my display. I have a pattern lock on my phone so I just put the display to sleep and gave it to him....
0
votes
0answers
36 views

Implications of an unlocked bootloader

I've been using android for about 5+ years now. Each of my phones usually rooted and rolling a custom Rom. But in the last one year or so, Especially the way in which android N is headed, it feels as ...
0
votes
0answers
21 views

How do I decode gzipped packets?

I am trying to do some analysis on a mobile app to see what data is being sent to the owner's API. I thought this would be a simple case of installing "Packet Capture" and viewing the data, however it ...
1
vote
1answer
33 views

How can I limit the number of fingerprint attempts before fallback to other login type?

I've got a Nexus 6P and would like to reduce the number of allowed failures before it blocks fingerprint as an allowed login mechanism - according to https://support.google.com/nexus/answer/6285273 ...
0
votes
1answer
37 views

How can I securely install an older version of Chrome on a device that won't support newer versions?

I have an Android device that runs Android 4.0.2 and can't be updated any further. When I tried to install Chrome from the Play Store, I was told: Your device isn't compatible with this version. ...
0
votes
0answers
16 views

SELinux policy loading and enforcement on Android

In the most recent versions of Android, SELinux enforcement is enabled in the kernel and is static, but how can this work before a policy has been loaded? Is the policy embedded in the kernel? If not, ...
0
votes
0answers
54 views

How do I remotely log-out my Android device without reporting it as stolen?

Today I sent my phone in for servicing but I forgot to log-out/disassociate my account beforehand. Is there a way I can do this remotely other than: Changing my Google password---but it's been less ...
0
votes
0answers
25 views

Internet Safety on Phone. I really don't understand

I'll make this brief, and I apologize in advance for my ignorance. If you click a link and it redirects you to somewhere that is not the intended target, is this a major concern? This recently ...
1
vote
2answers
42 views

aptoide How to report potential abuse without becoming a member?

The aptoide store is an alternative platform where you can get android apps. I found an app on aptoide store via google that has a size of 3.3 MB. The same app with the same app-version in fdroid ...
0
votes
3answers
37 views

Entering very long Google password during setup

If I have a new phone how can I enter my Google password in a secure manner during setup without having to type it (it is VERY long at over 30 random alphanumeric characters and a pain to type). ...
0
votes
0answers
45 views

Can info still be accessed when device is locked?

If my device is lost/stolen and I lock it remotely, can someone still access my info by connecting it via usb cable to laptop and opening my files?? Or does lock completely freeze ALL data on phone?...
0
votes
1answer
94 views

Android AccountManager security

I've asked this question before, but got no suitable replies, so here I go again. How does the Android AccountManager which is used to store your Google, Facebook, Twitter, etc... usernames and ...
0
votes
0answers
20 views

Work Gmail connected to Android - can employer access mobile data?

Today, my Sony Xperia Z3+ (Android) suddenly showed a notice about performing an "Authentication" and I noticed that have been sent an email about the "MyXperia Protection" to both, my private Gmail ...
0
votes
0answers
81 views

“The certificate was not installed” error when installing a CA root certificate

I am developing an Android mobile application and want to test that the application behaves as expected. I am using the OWASP ZAP intercepting proxy for this purpose. The application communicates to ...
1
vote
1answer
66 views

Android for work with KNOX 0x1

I have a device supported by Android for Work (Samsung Note 4, Android 6.0.1) but the security policy will not install saying "there is a custom OS installed". Device security status is "Official", ...
0
votes
0answers
191 views

Pattern Lock removal via Android Device Manager not working (NOW FIXED)

The black screen saying "Locked by Android Device Manager" is visible, but there is no input space for a password. I was unable to correctly enter my pattern (which I put right after installing ...
0
votes
1answer
157 views

Increase 30 seconds lock time after incorrect attempts

If I try to unlock my Samsung Galaxy A3 (Android Version 5.0.2) with an incorrect password 5 times I have to wait 30 seconds before I can try again. I want to increase this waiting time: how can I do ...
0
votes
1answer
105 views

How can I prevent installation of NEW applications on an Android 5.1 device, but keep auto-updates of existing applications?

We will soon have to provide a phone to a person who is obviously not familiar with IT stuff at all, and not capable of learning anything about information security, etc. (and probably not capable of ...
3
votes
2answers
119 views

How to prevent two-factor code being exposed on lock screen in messages notification?

On Lollipop, the text message notification on the lock screen includes some of the content of the text message. For two-factor code text messages, this will display the two factor code to anyone ...
1
vote
0answers
24 views

How to Have 2nd Step Verification for Making Calls in 6.0?

I would like to use 2nd Step Verification always for Making Calls. I can use a second device to get those codes; etc second Gmail account; or a similar encryption device as used by banks. I do not ...
-1
votes
1answer
61 views

Disable toast when screen is pinned in Android

When passing my phone to someone, I pin the screen for safety reasons. Is there a way to disable those ugly toasts which keep popping up and giving them a gist of what's happening?
0
votes
1answer
58 views

How to Prevent CM13 Calling by Itself?

I noticed today that my Samsung Galaxy S4 with CM13 (unofficial Kyasu's ROM) called two my contacts itself; those contacts were those which I keep in my blacklist; which was also why I had react to ...
0
votes
0answers
13 views

When is the secure element initialized?

I am new to SE and Global Platform. As far as I know from the spec, when you want to do something, you need to finish the external authentication first. Since the authentication requires a S-ENC key, ...
0
votes
1answer
104 views

What are all these security certificates on new phone?

This is a new T-Mobile Samsung Galaxy S7. Is it normal to have all these certificates? Many look dodgy. Image resized. Click to see full-version
1
vote
1answer
54 views

Hard brick phone exchange and deleting data

I have a Samsung Galaxy Note 4. While it was charging (it was near full charge) it rebooted on its own and continued to charge. It then must have shut itself down because it was off. I could not turn ...
-1
votes
1answer
40 views

What application is “using my screen” with some kind of overlay? [duplicate]

I want to turn on accessibility permission to Greenify app. But I'm unable to click "ok". I also have Twilight and since some security built in the system, I have to disable, stop or uninstall the ...
0
votes
0answers
232 views

Problem with some Apps trying to install

I have a problem with my Android 5.1 When the screen is locked, and I to unlock it, a popup shows, that some unknown applications are trying yo install. I have formatted the mobile twice, but it ...
4
votes
2answers
2k views

Apps trying to install in background

I recently wanted to install a metronome app, so I downloaded one from the Play Store, but in the "install" step nothing happened. The app just wasn't there. I installed another one and forgot about ...
1
vote
0answers
49 views

Android 2.2 security in 2016

I have an old Samsung Dart t499 that I would like to give to my son for simple texting and phone calls. Assuming that (1) we don't install any apps and just use the ones that came by default on the ...
-1
votes
1answer
34 views

When an app wants permissions, is it isolated from others?

When an app asks for permissions for my media folder for example, does this mean it can access anything in my media folder? Are apps isolated to only save/read from a subfolder inside my media folder ...
3
votes
1answer
88 views

Secure Android browser

The desktop versions of Firefox and Chrome use Google’s Safe Browsing service to warn the users about known bad websites. Looking at a Samsung handset running Android v5 I noticed that neither the ...
0
votes
0answers
42 views

How to Forget All App Passwords

I haven't been able to find any sort of app or topic on here which allows a device to stop remembering passwords for apps, such as Facebook, Snapchat, Reddit, etc. I have strong passwords, and I ...
0
votes
0answers
206 views

Unable to send S/MIME Encrypted Emails; Galaxy S6 Edge/Marshmallow

This refers to the Galaxy native email client running on Android 6.0.1 on a Galaxy S6 Edge. I have successfully added my Comodo SHA-256 Client Authentication and Secure Email certificate to an Office ...
0
votes
0answers
41 views

Unable to download here maps

Guyzz I am trying to download here maps on my redmi 2. But it's not working I mean while downloading maps for India it keep on saying preparing. To download nothing happens further. Please help me to ...
0
votes
0answers
36 views

adware site through Phishing attack activated a VAS on my android

I suddenly got an sms from my service provider (Vodafon IN) that Silk Pack is active on your number as requested and rental of Rs. 15 has been deducted I had made no such request so i ...
7
votes
0answers
56 views

Are there any Google devices that support capabilities in their default kernel?

If I systemless root (no modification done to /system partition) a nexus device, would I be able to able to set capabilites on executables without changing the original kernel binary ? I often want ...
0
votes
1answer
217 views

Can I bypass the Google Verification on my Huawei Mate 8? [duplicate]

I just bought a Huawei Mate 8 and I can't set it up due to the Google account verification in the setup process. I've messaged the seller asking for the account details but he doesn't know. I don't ...
4
votes
1answer
751 views

How to disable pin/pattern lock in android device

I am not sure this is the right place to ask this question.? I have enabled pattern lock in my android device. Just for curiosity I am trying to disable and keep only swipe to unlock option but I can'...
0
votes
0answers
32 views

Can I use encrypted phone as a means of secure storage?

I have an encrypted Android phone. Can I mount this device to my computer and save files to it as a means of secure storage?
0
votes
0answers
28 views

marshmallow security update bug

The April security update left my Nexus 5 with a mac address of zeros. How can I rollback this latest update?
0
votes
1answer
46 views

What are the implications of an old Android version?

There have been various bugs and security flaws found in different versions of Android. Many have been pached in newer versions, but the non-updated devices remain bugged/vulnerable. My questions ...
1
vote
1answer
52 views

How to check that an Android device isn't being used in a botnet / sending spam emails?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
0
votes
2answers
118 views

How to remove gunpowder virus?

I have recently been having problems on my device which includes random apps appearing on my phone and some chinese app that somehow was "pre-installed". As i scoured the internet for answers, i ...
0
votes
1answer
71 views

anyway to find stolen device location through android device manager while location is off?

My android device was lost few days back and now someone has it, unfortunately location setting was off on device so I can't find it through device manager but its telling me device was online 2 hours ...
1
vote
1answer
43 views

FB Messenger Security

Does anyone know how secure Facebook Messenger communication is? If you are having 1x1 chat (writing messages) or making a voice call, is it encrypted (end to end)? I know if you are using facebook....
6
votes
1answer
77 views

What are the security implications of using an app built “for debug”?

I've just come upon several .apk files hosted with Github projects which are "compiled for debug" (i.e. having application-debuggable set, which one can e.g. check using aapt dump badging /path/to/apk ...
0
votes
0answers
165 views

Move all my Authenticator credentials to a new phone

I have enabled 2 factor authentication, using Google Authenticator, for 6 services: LastPass, Dropbox, Evernote, Wordpress, Tumblr and Google. How can I transfer them all to my new phone? I followed ...
0
votes
1answer
52 views

How to protect all my passwords saved in Google if I lost a phone?

I save many passwords in Chrome. I used Chrome in my laptop and my android phone. If I lose my phone, how I can protect my passwords?
3
votes
1answer
203 views

Require fingerprint to answer call?

A friend has a problem with other people answering their phone and thereby intercepting their calls. Is anybody aware of an app, setting, or Android distro that requires a fingerprint swipe to answer ...