For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
1answer
1k views

ActiveSync/Exchange security policy

On my HTC DNA I recently changed from the integrated ActiveSync client to Touchdown. My corporate IT policy required a PIN to access the device when using the Android client. Now that I switched to ...
0
votes
0answers
8 views

Android root sandbox?

On Windows I would use a sandbox to easily see file-changes made by shady programs to see how it would affect my system. What are easy methods (except decompiling and looking at the actual program ...
11
votes
3answers
136k views

How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?

There are a load of sites that do this now, and it's really annoying: I visit a content site on my Android device. 10-15 seconds after loading starts the site hangs for a few seconds. Google play ...
1
vote
0answers
44 views

Checking activity of unknown user on my phone

Yesterday I took my new phone to a mobile service shop... I wanted them to put a protection layer on my display. I have a pattern lock on my phone so I just put the display to sleep and gave it to him....
0
votes
2answers
814 views

Disable Screenshot Security

Some apps don't allow screenshots so how can I still take a screenshot? It is my phone and I should be able to do whatever I want with it so why is there even a feature to disallow screenshots? ...
0
votes
0answers
682 views

App sending spam messages to my contacts

My phone sent the following message to all of my contacts: Install this voice messenger just to talk http://mrv.withmechat.us/Cun I know I didn't send this message and not to mention it sent it ...
3
votes
1answer
1k views

Does Wunderlist store data in the server in encrypted form?

How secure and private is Wunderlist? For example does it only transfer data in encrypted form but stores it unencrypted? I would like to be able to store passwords relating to work on my phone but am ...
0
votes
0answers
35 views

Implications of an unlocked bootloader

I've been using android for about 5+ years now. Each of my phones usually rooted and rolling a custom Rom. But in the last one year or so, Especially the way in which android N is headed, it feels as ...
0
votes
0answers
19 views

How do I decode gzipped packets?

I am trying to do some analysis on a mobile app to see what data is being sent to the owner's API. I thought this would be a simple case of installing "Packet Capture" and viewing the data, however it ...
2
votes
3answers
5k views

Blocking 'Android System,Battery Warning,com.media tek,Common Data Service…' from connecting to the Internet

I am using NoRoot Firewall to block Internet access to some apps. It recently notified me that this/these app(s) are attempting to access the Internet: "Android System,BatteryWarning,com.media tek,...
1
vote
1answer
32 views

How can I limit the number of fingerprint attempts before fallback to other login type?

I've got a Nexus 6P and would like to reduce the number of allowed failures before it blocks fingerprint as an allowed login mechanism - according to https://support.google.com/nexus/answer/6285273 ...
3
votes
2answers
119 views

How to prevent two-factor code being exposed on lock screen in messages notification?

On Lollipop, the text message notification on the lock screen includes some of the content of the text message. For two-factor code text messages, this will display the two factor code to anyone ...
0
votes
1answer
32 views

How can I securely install an older version of Chrome on a device that won't support newer versions?

I have an Android device that runs Android 4.0.2 and can't be updated any further. When I tried to install Chrome from the Play Store, I was told: Your device isn't compatible with this version. ...
0
votes
0answers
13 views

SELinux policy loading and enforcement on Android

In the most recent versions of Android, SELinux enforcement is enabled in the kernel and is static, but how can this work before a policy has been loaded? Is the policy embedded in the kernel? If not, ...
1
vote
2answers
40 views

aptoide How to report potential abuse without becoming a member?

The aptoide store is an alternative platform where you can get android apps. I found an app on aptoide store via google that has a size of 3.3 MB. The same app with the same app-version in fdroid ...
0
votes
0answers
53 views

How do I remotely log-out my Android device without reporting it as stolen?

Today I sent my phone in for servicing but I forgot to log-out/disassociate my account beforehand. Is there a way I can do this remotely other than: Changing my Google password---but it's been less ...
0
votes
0answers
45 views

Can info still be accessed when device is locked?

If my device is lost/stolen and I lock it remotely, can someone still access my info by connecting it via usb cable to laptop and opening my files?? Or does lock completely freeze ALL data on phone?...
0
votes
1answer
4k views

Used device manager once, now I can't set security to 'none'

Phone is an LG Nexus. I was messing around with security settings and decided to try using a pattern to unlock my phone. No more than 5 minutes later, I completely forget the pattern I set. Did some ...
4
votes
5answers
8k views

Remote factory reset and changing Google password

In case I ever lose my Nexus 4 phone, I've opened to the Google Settings app, then tapped "Android Device Manager" and from there, I've enabled both "Remotely locate this device" and "Allow remote ...
0
votes
0answers
24 views

Internet Safety on Phone. I really don't understand

I'll make this brief, and I apologize in advance for my ignorance. If you click a link and it redirects you to somewhere that is not the intended target, is this a major concern? This recently ...
23
votes
8answers
55k views

How do I avoid the server-specified security policies for my work e-mail?

When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?: I just received a Nexus 7 and signed ...
0
votes
3answers
37 views

Entering very long Google password during setup

If I have a new phone how can I enter my Google password in a secure manner during setup without having to type it (it is VERY long at over 30 random alphanumeric characters and a pain to type). ...
8
votes
1answer
5k views

How to export SSL certificate from Android, Chrome

I have a Nexus 5 with the latest Android 4.4.2. I'm registered on using Chrome . They use client certificates to authenticate the user. I installed the certificate and could successfully use the site ...
4
votes
2answers
2k views

Apps trying to install in background

I recently wanted to install a metronome app, so I downloaded one from the Play Store, but in the "install" step nothing happened. The app just wasn't there. I installed another one and forgot about ...
0
votes
1answer
91 views

Android AccountManager security

I've asked this question before, but got no suitable replies, so here I go again. How does the Android AccountManager which is used to store your Google, Facebook, Twitter, etc... usernames and ...
28
votes
3answers
7k views

What are the security disadvantages of rooting an Android phone?

I know there was a discussion previously BUT they didn't talk about security. E.g.: if I root my phone will all my apps run with root permission? Related: Are there any risks to rooting a device?
2
votes
1answer
2k views

Android 4.x doesn't require lock screen at home

In Android 4.x, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting proximity to my ...
0
votes
0answers
20 views

Work Gmail connected to Android - can employer access mobile data?

Today, my Sony Xperia Z3+ (Android) suddenly showed a notice about performing an "Authentication" and I noticed that have been sent an email about the "MyXperia Protection" to both, my private Gmail ...
1
vote
1answer
66 views

Android for work with KNOX 0x1

I have a device supported by Android for Work (Samsung Note 4, Android 6.0.1) but the security policy will not install saying "there is a custom OS installed". Device security status is "Official", ...
0
votes
0answers
78 views

“The certificate was not installed” error when installing a CA root certificate

I am developing an Android mobile application and want to test that the application behaves as expected. I am using the OWASP ZAP intercepting proxy for this purpose. The application communicates to ...
0
votes
1answer
156 views

Increase 30 seconds lock time after incorrect attempts

If I try to unlock my Samsung Galaxy A3 (Android Version 5.0.2) with an incorrect password 5 times I have to wait 30 seconds before I can try again. I want to increase this waiting time: how can I do ...
8
votes
3answers
9k views

IMEI number publicly displayed whenever connected to Wifi

I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...
0
votes
2answers
50 views

Where can I report vulnerabilities to Google?

Where can I report glitches/bugs/vulnerabilities to google? I would look it up, but I don't know how to word it. Besides, I am working on more devices I can count (don't ask) and I have found some... ...
0
votes
0answers
184 views

Pattern Lock removal via Android Device Manager not working (NOW FIXED)

The black screen saying "Locked by Android Device Manager" is visible, but there is no input space for a password. I was unable to correctly enter my pattern (which I put right after installing ...
12
votes
1answer
46k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
47
votes
5answers
4k views

Is an antivirus really needed for Android?

I use Linux for half a decade now, so I am not used to dealing with viruses anymore. To my surprise, I saw some discussion about antiviruses in Android. I haven't installed any yet, but this bugs me: ...
0
votes
1answer
105 views

How can I prevent installation of NEW applications on an Android 5.1 device, but keep auto-updates of existing applications?

We will soon have to provide a phone to a person who is obviously not familiar with IT stuff at all, and not capable of learning anything about information security, etc. (and probably not capable of ...
4
votes
2answers
2k views

Encrypted phone no longer asks for pattern when turning on?

Nexus 6 running stock 5.0.1 not rooted. It used to ask me for my pattern every time I turned it on from a powered off state. Now it seems to boot fully without asking. Under Settings > Security it ...
0
votes
1answer
57 views

How to Prevent CM13 Calling by Itself?

I noticed today that my Samsung Galaxy S4 with CM13 (unofficial Kyasu's ROM) called two my contacts itself; those contacts were those which I keep in my blacklist; which was also why I had react to ...
1
vote
0answers
24 views

How to Have 2nd Step Verification for Making Calls in 6.0?

I would like to use 2nd Step Verification always for Making Calls. I can use a second device to get those codes; etc second Gmail account; or a similar encryption device as used by banks. I do not ...
9
votes
3answers
179 views

Pros and cons of rooting using apps (“Soft Root”) compared to other methods (“Hard Root”)

There are quite a few app based rooting methods. A recent review 9 free software apps to root Android devices, points to some of them and there may be more apps, paid or otherwise. From what I ...
-1
votes
1answer
58 views

Disable toast when screen is pinned in Android

When passing my phone to someone, I pin the screen for safety reasons. Is there a way to disable those ugly toasts which keep popping up and giving them a gist of what's happening?
0
votes
0answers
13 views

When is the secure element initialized?

I am new to SE and Global Platform. As far as I know from the spec, when you want to do something, you need to finish the external authentication first. Since the authentication requires a S-ENC key, ...
1
vote
1answer
53 views

Hard brick phone exchange and deleting data

I have a Samsung Galaxy Note 4. While it was charging (it was near full charge) it rebooted on its own and continued to charge. It then must have shut itself down because it was off. I could not turn ...
0
votes
1answer
99 views

What are all these security certificates on new phone?

This is a new T-Mobile Samsung Galaxy S7. Is it normal to have all these certificates? Many look dodgy. Image resized. Click to see full-version
-1
votes
1answer
40 views

What application is “using my screen” with some kind of overlay? [duplicate]

I want to turn on accessibility permission to Greenify app. But I'm unable to click "ok". I also have Twilight and since some security built in the system, I have to disable, stop or uninstall the ...
1
vote
0answers
31 views

Can Samsung patch security faults on their devices by an update?

There was an exploit that turns Samsung Galaxy phones into remote bugging devices (reference: ArsTechnica) As many as 600 million Samsung phones may be vulnerable to attacks that allow hackers to ...
0
votes
0answers
215 views

Problem with some Apps trying to install

I have a problem with my Android 5.1 When the screen is locked, and I to unlock it, a popup shows, that some unknown applications are trying yo install. I have formatted the mobile twice, but it ...
0
votes
1answer
88 views

Can I remotely unlock my phone after I've remotely locked it?

Someone has stolen my phone s4 and is trying to extort me for 100 $. If I remotely lock my phone can I unlock my phone remotely? to let him know that I'm going to shut it down if he doesn't act.