For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
0answers
10 views

When is the secure element initialized?

I am new to SE and Global Platform. As far as I know from the spec, when you want to do something, you need to finish the external authentication first. Since the authentication requires a S-ENC key, ...
0
votes
1answer
30 views

What are all these security certificates on new phone?

This is a new T-Mobile Samsung Galaxy S7. Is it normal to have all these certificates? Many look dodgy. Image resized. Click to see full-version
1
vote
1answer
28 views

Hard brick phone exchange and deleting data

I have a Samsung Galaxy Note 4. While it was charging (it was near full charge) it rebooted on its own and continued to charge. It then must have shut itself down because it was off. I could not turn ...
-1
votes
1answer
19 views

What application is “using my screen” with some kind of overlay? [duplicate]

I want to turn on accessibility permission to Greenify app. But I'm unable to click "ok". I also have Twilight and since some security built in the system, I have to disable, stop or uninstall the ...
0
votes
0answers
69 views

Problem with some Apps trying to install

I have a problem with my Android 5.1 When the screen is locked, and I to unlock it, a popup shows, that some unknown applications are trying yo install. I have formatted the mobile twice, but it ...
2
votes
0answers
914 views

Apps trying to install in background

I recently wanted to install a metronome app, so I downloaded one from the Play Store, but in the "install" step nothing happened. The app just wasn't there. I installed another one and forgot about ...
1
vote
0answers
29 views

Android 2.2 security in 2016

I have an old Samsung Dart t499 that I would like to give to my son for simple texting and phone calls. Assuming that (1) we don't install any apps and just use the ones that came by default on the ...
-1
votes
1answer
23 views

When an app wants permissions, is it isolated from others?

When an app asks for permissions for my media folder for example, does this mean it can access anything in my media folder? Are apps isolated to only save/read from a subfolder inside my media folder ...
3
votes
1answer
58 views

Secure Android browser

The desktop versions of Firefox and Chrome use Google’s Safe Browsing service to warn the users about known bad websites. Looking at a Samsung handset running Android v5 I noticed that neither the ...
0
votes
0answers
33 views

How to Forget All App Passwords

I haven't been able to find any sort of app or topic on here which allows a device to stop remembering passwords for apps, such as Facebook, Snapchat, Reddit, etc. I have strong passwords, and I ...
0
votes
0answers
68 views

Unable to send S/MIME Encrypted Emails; Galaxy S6 Edge/Marshmallow

This refers to the Galaxy native email client running on Android 6.0.1 on a Galaxy S6 Edge. I have successfully added my Comodo SHA-256 Client Authentication and Secure Email certificate to an Office ...
0
votes
0answers
25 views

Unable to download here maps

Guyzz I am trying to download here maps on my redmi 2. But it's not working I mean while downloading maps for India it keep on saying preparing. To download nothing happens further. Please help me to ...
0
votes
0answers
28 views

adware site through Phishing attack activated a VAS on my android

I suddenly got an sms from my service provider (Vodafon IN) that Silk Pack is active on your number as requested and rental of Rs. 15 has been deducted I had made no such request so i ...
5
votes
0answers
48 views

Are there any Google devices that support capabilities in their default kernel?

If I systemless root (no modification done to /system partition) a nexus device, would I be able to able to set capabilites on executables without changing the original kernel binary ? I often want ...
0
votes
1answer
117 views

Can I bypass the Google Verification on my Huawei Mate 8? [duplicate]

I just bought a Huawei Mate 8 and I can't set it up due to the Google account verification in the setup process. I've messaged the seller asking for the account details but he doesn't know. I don't ...
4
votes
1answer
637 views

How to disable pin/pattern lock in android device

I am not sure this is the right place to ask this question.? I have enabled pattern lock in my android device. Just for curiosity I am trying to disable and keep only swipe to unlock option but I ...
0
votes
0answers
31 views

Can I use encrypted phone as a means of secure storage?

I have an encrypted Android phone. Can I mount this device to my computer and save files to it as a means of secure storage?
0
votes
0answers
25 views

marshmallow security update bug

The April security update left my Nexus 5 with a mac address of zeros. How can I rollback this latest update?
0
votes
1answer
35 views

What are the implications of an old Android version?

There have been various bugs and security flaws found in different versions of Android. Many have been pached in newer versions, but the non-updated devices remain bugged/vulnerable. My questions ...
1
vote
1answer
45 views

How to check that an Android device isn't being used in a botnet / sending spam emails?

I've discovered that my home network IP address has ended up on several blacklists after spam traps received emails from this IP address. I've tested the one PC that uses this network, and it seems to ...
-1
votes
0answers
22 views

How to remotely release my Android phone for a new user? [duplicate]

A. I own an Android phone (Note 5). B. I left it at a friend's who leaves abroad. I reset the phone manually through the recovery menu (that's how I have always reset my Android devices). C. Now, my ...
0
votes
2answers
59 views

How to remove gunpowder virus?

I have recently been having problems on my device which includes random apps appearing on my phone and some chinese app that somehow was "pre-installed". As i scoured the internet for answers, i ...
0
votes
1answer
49 views

anyway to find stolen device location through android device manager while location is off?

My android device was lost few days back and now someone has it, unfortunately location setting was off on device so I can't find it through device manager but its telling me device was online 2 hours ...
1
vote
1answer
31 views

FB Messenger Security

Does anyone know how secure Facebook Messenger communication is? If you are having 1x1 chat (writing messages) or making a voice call, is it encrypted (end to end)? I know if you are using ...
6
votes
1answer
69 views

What are the security implications of using an app built “for debug”?

I've just come upon several .apk files hosted with Github projects which are "compiled for debug" (i.e. having application-debuggable set, which one can e.g. check using aapt dump badging /path/to/apk ...
0
votes
0answers
39 views

Move all my Authenticator credentials to a new phone

I have enabled 2 factor authentication, using Google Authenticator, for 6 services: LastPass, Dropbox, Evernote, Wordpress, Tumblr and Google. How can I transfer them all to my new phone? I followed ...
0
votes
1answer
43 views

How to protect all my passwords saved in Google if I lost a phone?

I save many passwords in Chrome. I used Chrome in my laptop and my android phone. If I lose my phone, how I can protect my passwords?
3
votes
1answer
76 views

Require fingerprint to answer call?

A friend has a problem with other people answering their phone and thereby intercepting their calls. Is anybody aware of an app, setting, or Android distro that requires a fingerprint swipe to answer ...
1
vote
1answer
91 views

Google password compromised?

A few days ago I noticed my phone notify me about my Google play account as if I had changed my password. Yesterday I found out I had been infected with a rootkit and a packet sniffer. I was able to ...
0
votes
0answers
42 views

Preventing users removing managed accounts

I've been using Android For Work (Google Admin) for a while now and I'm fairly happy with its range of policies available. Some of the main policies I've been applying for enrolled devices are ...
1
vote
1answer
159 views

6.0.1 fails to send MMS over PIA Always-On VPN when using 4G LTE

Yesterday, I set up a PIA VPN. I've configured it to use IPv4 over T-Mobile 4G LTE. I'm unable to send or receive MMS while connected to the VPN -- they can be sent/received as normal when the VPN ...
0
votes
0answers
48 views

Brute Forcing Android Lock; How Long Does It Take?

We've seen that iPhone calculation takes 80 milliseconds per trial to complete. And there's further increasing time penalty with each wrong trial. Android uses scrypt to generate its Encryption key, ...
6
votes
1answer
115 views

Login to Android 6.0 with NFC card and Password

I am evaluating MI5 and its NFC functionality. I am considering to compliment my Samsung Galaxy S4 GT-i9506 with MI5 because of various significant improvements in the hardware, software and ...
0
votes
0answers
22 views

Is 4,294,967,295 the conceptual limit of apps installable to a android device? [duplicate]

This is a somewhat conceptual question. I know that other limits (i.e. like memory limit the number apps installed much more). Question According to the security guide of android.com sandboxing (and ...
0
votes
0answers
77 views

How to Implement fix for Samsung's CVE-2015-7888 in CM13

I run the security checkup of DuoSecurity lab here. They say my phone has the vulnerability CVE-2015-7888 in Samsung Galaxy S4 GT-I9506 which is using CyanogenMod 13. CVE-2015-7888 Remote Code ...
0
votes
1answer
104 views

Prevent USB data transfer (when phone is in use) and being charged

I would like to know how to protect my data when I use public battery charger in public places. I know that if I do not unlock my screen when charging, my data is safe, but what if I would like to ...
0
votes
0answers
69 views

How to show SSL fingerprint of a self-signed certificate in Firefox for Android

I set up a website with a self signed SSL-certificate. As this website is just used by me for now, I'm fine with checking the fingerprint when connecting to it. This works just fine with Firefox or ...
6
votes
1answer
451 views

How to get the latest security updates for CyanogenMod?

I have installed CyanogenMod in February 2016, and the device information showed Android version "5.1.1", and the security patch level was "November 2015". This hasn't changed until today ...
0
votes
0answers
19 views

Is it possible to require “initial unlock” for smart lock

Is it possible to enforce initial unlock while using smart lock? For example, I'm using smart unlock with "Trusted places" and I would prefer it didn't automatically unlock when I get in range of my ...
10
votes
0answers
266 views

Canonical explanation of Android Encryption and Vulnerabilities

Note: Well, the bounty expired and one possible reason could be effort required to address as I gather from comments. Seeing the number of upvotes, it appears to be of interest to others as well. I ...
0
votes
0answers
19 views

marshmallow and personal security/privacy [duplicate]

I've been reading the news in the US about a court order for Apple to help the FBI bypass the security check present on devices running iOS8+. Since iOS8, Apple has stopped storing encryption keys on ...
12
votes
2answers
604 views

Does full device encryption protect my data from Google and the government?

Apple recently made waves within the tech community by refusing to comply with law enforcement in regards to accessing encrypted user data. Their statement was that they do not have the technical ...
0
votes
1answer
51 views

Famoc & KNOX on Samsung XCover 3

I have a problem, I have a phone with Famoc & KNOX enterprise security applications. I was able to root the device with Odin, I've installed twrp-2.8.7.0 & SuperSu. I've removed this Famoc ...
0
votes
1answer
51 views

What can be accessed if phone is lost?

If a phone has not had its bootloader unlocked, has not been rooted, has a finger print lock as well as a pin lock if the fingerprint lock doesn't work. How much can a thief access on the phone? Will ...
0
votes
0answers
33 views

What does stop somebody from flashing a custom recovery and pulling all user data?

For example, I was able to install a Clockworkmod recovery on my Samsung Galaxy Ace 3 phone via Odin and back up all the data in a few clicks. But if I could do it, what would stop somebody else who ...
3
votes
1answer
49 views

Protect from theft at flash level

There are a lot of apps that could block your phone in case of theft, take picture of thief remotely and such, but in case of reset any of this security methods will be useless So I was wondering if ...
2
votes
1answer
143 views

Can't remove stolen phone from account

So I had an Android phone stolen - nearly two years ago now. When it was taken, I immediately reset my Google account password (and most others). I have 2-factor auth on my Google account. I have ...
0
votes
0answers
23 views

Custom ROM - easiest way to default to functional adb

When building a custom ROM (or for that matter, modifying existing) - what's the best way to make sure that the OS starts up with adb-USB enabled, and with the host's key already accepted?
0
votes
1answer
38 views

Keeping forensic cops out

I was just arrested and bonded out immediately. my phone was confiscated. It was an Android and is there anything I can do to keep them from accessing the contents of my phone? Would deleting my ...
1
vote
1answer
178 views

Phone number detected by a web page when browsing from chrome for android

I recently got subscribed to some alerts by the mobile provider automatically and some amount deducted from my phone balance. I called up the customer care centre and they agreed to refund the amount, ...