For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
1answer
29 views

Can't remove stolen phone from account

So I had an Android phone stolen - nearly two years ago now. When it was taken, I immediately reset my Google account password (and most others). I have 2-factor auth on my Google account. I have ...
0
votes
0answers
17 views

Custom ROM - easiest way to default to functional adb

When building a custom ROM (or for that matter, modifying existing) - what's the best way to make sure that the OS starts up with adb-USB enabled, and with the host's key already accepted?
0
votes
1answer
27 views

Keeping forensic cops out

I was just arrested and bonded out immediately. my phone was confiscated. It was an Android and is there anything I can do to keep them from accessing the contents of my phone? Would deleting my ...
1
vote
1answer
79 views

Phone number detected by a web page when browsing from chrome for android

I recently got subscribed to some alerts by the mobile provider automatically and some amount deducted from my phone balance. I called up the customer care centre and they agreed to refund the amount, ...
-1
votes
0answers
24 views

How to Decrypt Galaxy S5 and Memory card if phone was hard reset

I am using Galaxys5 with android 5.0, My memory card and internal storage were encrypted and I forgot to disable encryption before hard reset and update. I am unable to view all of my data on memory ...
1
vote
0answers
29 views

How to hide winrar or other apk files in general?

I have stored some important files in my android phone in rar format. I've hidden these files in .nomedea folder. I've also enabled password for these files via win rar. The problem is for opening ...
9
votes
1answer
204 views

Why fingerprint lock is considered less secure than pattern lock on Nexus 5X?

My Nexus 5X highly recommends to set up pattern lock in addition to fingerprint lock, and the pattern is asked upon every reboot. And my password manager (KP2A) recommends to use fingerprint unlock ...
-2
votes
0answers
25 views

Virus warning Z3 Sony Expedia Compact

.I was on a site via F/b reading an article on Cancer. There were other sites down side of page with sites for other strange, sexy weird things!! Suddenly a warning msg took up the whole screen. Said ...
0
votes
0answers
20 views

Protection from flashing ROM

Hi so i was trying to theft protection my android phone. I unlock screen lock code, Cerberus with root privileges and also I'm about to encrypt my phone(not that it helps much to recover your phone ...
-1
votes
0answers
46 views

How to protect an Android device against forensics

I want to hinder any attempt to extract data from my phone, while it is turned off or still running. I want to make sure its protected from devices like the CelleBrite UFED (which is capable of ...
-1
votes
2answers
54 views

Why aren't these UI “hacks” more often exploited?

I'm asking mostly about the global UI "hacks"1 in use by Facebook Messenger (specifically, chat heads) and the Facebook app itself (specifically, those really annoying "psuedo-Lollipop" notifications ...
3
votes
1answer
60 views

How to override default Android's default screen lock security policy?

I want my Android device screen to open without requiring password. So I chose "none" option in Security settings. But, when I needed to add a VPN connection, it required me to provide a password, ...
0
votes
0answers
26 views

Extract OS signing public key

I have got a OnePlus Two with OxygenOS (an Android ROM made by OnePlus). I modified my OS by installing Kali Nethunter, and I now want to flash back to stock OxygenOS. I found the .zip file on the ...
-1
votes
0answers
24 views

How do I get APP DETECTIVE on my phone?

Need to find out what the dates of applications installed on phone.
0
votes
1answer
54 views

Android rooting security considerations

I know this question has been asked many times, but I didn't see a clear answer to it from security experts, or it is from several years ago and things might have changed. My question is double: ...
-1
votes
1answer
58 views

Can a hacker simply copy shared prefs from one device to another to hijack a user session/state?

I'm an Android apps developer. I'm trying to address a security concern in one of my apps. I need to test a scenario in which someone will try to copy the shared prefs file (or files) from one ...
0
votes
2answers
18 views

How do I safely “copy” my gpg keys from kgpg on Linux to an Android app like openkeychain?

The title says most of it. I have a key pair setup on kgpg running under Kubuntu 12.04 Linux on my notebook. My smartphone (Galaxy S3) has no SD card slot. I want to be able to transfer files between ...
1
vote
0answers
105 views

Is sensitive data safe on manufacturer-provided Android OS? [closed]

Computer On my computers I wipe the HDD and install a Linux distribution (e.g. Ubuntu, Debian). Linux is free software with the public's eyes on it, and I'm getting it over HTTPS. I think it's ...
0
votes
0answers
35 views

Disable android call dialer/function for public 3G tablet

I'm putting an Android tablet at a public display area and the tablet needs to be powered by a 3G sim card. I don't want anybody to dial out using this tablet. I read somewhere that I can disable ...
0
votes
0answers
47 views

Make a app Package For android

I have made a "Security" phone for my personal use. I have about 49 apps and about 7 wallpapers. Can I make a package that when flashed in a Custom Recovery It installs all of the apps and make the ...
1
vote
0answers
34 views

How are internal components of Android tested before releasing?

How are the internal components of Android such as Zygote and Binder tested before being released? I tried looking around for answers to this but most resources (blog posts and research papers) I ...
0
votes
0answers
65 views

Disable Screenshot Security

Some apps don't allow screenshots so how can I still take a screenshot? It is my phone and I should be able to do whatever I want with it so why is there even a feature to disallow screenshots? ...
0
votes
0answers
88 views

Change google Play Games Username?

Can I change my Google Play Games username? I have looked for the setting everywhere, but can't find it. I have KitKat. Thanks, Ruchir
4
votes
0answers
73 views

Joining a public WiFi made the owner able to send me a Facebook friend request. How?

I walked by a bar with free, unsecured WiFi. My device auto-joined it, and a minute later I had a friend request on Facebook from that very bar. How did they get my Facebook identity just from ...
3
votes
0answers
23 views

Safely buy a used mobile

Is there any step I need to take after buying a used Android phone from a stranger? Is restoring the device to defaults enough? The hardware should be fine; I'm talking more about the OS itself and ...
0
votes
1answer
118 views

How to turn off Android Device Manager on the web

My phone got stolen yesterday. I have never downloaded Android Device Manager or enabled it on my phone but for some reason, when I go onto the ADM web page, it could track my phone (up until a day ...
1
vote
1answer
37 views

Is there any SSH OS support in Android?

I am reading the article Jolla and SSH push Sailfish Secure as “European alternative” mobile OS. I have used third-party applications for SSH in my phone but would like to have OS supported. How ...
0
votes
0answers
32 views

AccountManager: how can passwords be stored and retrieved without also storing the decrypt key?

Can the Android AccountManager be hacked and its account passwords retrieved? I mean, how is the decrypt key stored in a way that is safe from being retrieved by password-spoofing software? Is special ...
1
vote
0answers
38 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
-1
votes
1answer
34 views

How do I tell if a given Android phone is vulnerable to CVE-2012-4221, CVE-2013-2596, CVE-2013-2597, CVE-2013-6282?

I want to determine if a given Android Phone + OS is vulnerable to a set of CVEs. What process do I need to do to do to determine if a given Phone is vulnerable?
0
votes
0answers
79 views

App sending spam messages to my contacts

My phone sent the following message to all of my contacts: Install this voice messenger just to talk http://mrv.withmechat.us/Cun I know I didn't send this message and not to mention it sent it ...
0
votes
0answers
42 views

Turn off pin without pin

I've just got a new Android phone with fingerprint recognition. I set a fingerprint to unlock and a pin. For some reason I've forgotten the pin. I can unlock the phone fine with the finger print, ...
-1
votes
1answer
159 views

How to remove Taboola adware?

I have factory-reset my mobile, and had already scanned with antivirus for adware, which it found but it couldn't remove. What should I do?
1
vote
0answers
136 views

How can an organization control when or when not an update for an app is installed in their Android smartphones?

Imagine an organization that have a legitimate fear to automatic updates. That organization thinks that an automatic update may break a business use case. For example, when the VPN client is update ...
0
votes
0answers
25 views

Moving an app out of a myKNOX container

Is it possible to move an app back out of a myKNOX container? I have an app that I have written myself and loaded onto a samsung xcover3 via eclipse and a USB cable. I then installed myKNOX and ...
0
votes
0answers
27 views

To configure tethering as two step login?

I have given my password of wifi stations to group of people. However, I want to allow only specific people to login at specific time. Attempt I could not enable a basic MAC filtering for devices. ...
1
vote
1answer
79 views

What data flows through AirDroid's servers?

When using AirDroid do your text messages and/or data get transmitted through AirDroid's servers or is that data kept locally between your Android device and your computer? My understanding is that ...
0
votes
1answer
31 views

Is it safe to use this app and will it cause problems in 6.0?

Classic Dialpad for KitKat and Lollipop Just wanted to check if there's any reason not to use this, here's what the permissions looks like. Click image to enlarge I'm assuming its just a ...
0
votes
0answers
69 views

Samsung KNOX equivalent for other device manufacturers

Are any other device manufacturers offering a samsung KNOX type solution? Maybe the other big players, i.e. Motorola, HTC or Sony have a similar technology available for securing their Android ...
0
votes
2answers
96 views

Does Android locally encrypt your fingerprint?

I got myself a Nexus 6P with a fancy fingerprint scanner. So far I'm a bit reluctant to use it because I can't find any info on how Android Marshmallow stores those fingerprints. Are they hashed (as ...
0
votes
0answers
32 views

Why sometimes my device doesn't try to recognize trusted face?

I set up trusted face in the smart lock security section of my Nexus 6. When I press power button in attempt to unlock my device usually I see a face/person symbol on the bottom of the screen, as a ...
0
votes
1answer
100 views

Unknown sources, root, and the Android security conundrum [closed]

This question has 2 aspects, both are related and equally important from a security standpoint: 1) The "Allow installations from unknown sources" option under Security settings. Most other mobile ...
0
votes
1answer
49 views

Do devices with a fingerprint scanner prevent access to the bootloader/recovery

Pretty simple question but as I have never owned a device with a fingerprint scanner... basically I was wondering: If you secure your device with your fingerprint - is it possible to access the ...
0
votes
0answers
42 views

How to add private key to keychain in Android?

I do not want to type my passwords all the time, but instead, just the password to my private keys. I am using Samsung Galaxy 4 and Android 5.0.1. How can you add private key to your Android ...
0
votes
0answers
11 views

Two factor authenticator app which works when we lost our phone but able to use back same phone number

Currently, I'm using Google Authenticator in my phone. If I lost my phone, but able to get a new phone device, and use back my previous old phone number, will Google Authenticator continue to work? ...
0
votes
1answer
116 views

Calculator WiFi usage on Marshmallow, Nexus 5? What?

I have not used the calculator app. I also don't know why it would be using the wifi or any kind of external data. Yet behold, below: I flashed 6.0 recently and restored some apps from an old ...
0
votes
1answer
44 views

Firefox for Android mysterious connections after turning everything off in settings

I created a user.js that incorporates support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections and other tweaks, yet Firefox for Android still attempts to connect to several ...
0
votes
1answer
154 views

is there a keylogger in my phone

I have an Android phone accent a400 and I sent it to a repair store to change the broken screen. After receiving the phone, I noticed that they did a reset to the phone and the internal memory doesn't ...
1
vote
1answer
131 views

Is Snowden snowing us with his “Smurfs Suite” interview?

I hope this is not too off-topic. This morning when I read news it was full of articles quoting Snowden in his most recent interviews. Apparently the UK's GCHQ and the USA's NSA can (1) turn your ...
0
votes
0answers
69 views

How to log all user interaction on my device?

I would like to know whether on an Android device it is possible to: Log the date and time of every time a password is entered on my Android phone (this security measure would mean that if someone ...