For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
3answers
3k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
1
vote
1answer
30 views

How to remove an account from Google Hangouts?

I logged in to Google Hangouts using an account (which is NOT the account I use in play store). But now I cannot remove it. I can sign out, but to sign back in, it does not for the password and ...
0
votes
0answers
26 views

Web proxy for Android 4.2.2

I need to cut off access to Flash and HTML5 videos on several devices for a project. Is there any app like a proxy to perform this? If I could deny a list of webpages it will be perfect.
1
vote
1answer
19 views

Can I “Wipe data/Factory reset” a phone that doesn't even boot via USB?

I have a Razr HD (XT925 GSM) which suddenly shut down and can't be turned back on (pressing or long pressing the power button does nothing, nor does connecting it to the wall). I have a lot of ...
21
votes
4answers
9k views

My phone was just stolen an hour or so ago. Are there any options for tracking?

I realize this is a long shot, but my phone was lost or stolen a few hours ago. At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my ...
16
votes
1answer
12k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
2
votes
2answers
49 views

Allow login with multiple passwords

Is it possible to setup multiple accepted passwords for the login to Android? Or perhaps an alternative secure login. (Note: facial recognition and fingerprint does not count as secure, but an RSA/NFC ...
2
votes
1answer
5k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
3answers
40 views

How to know if an keyboard/input related app is safe to use

I am Vietnamese and I cannot type my language on my Android phone i.e. Samsung Galaxy S4 So I look for apps that help me to input Vietnamese. My issue is that I'm affraid the apps will bug me and ...
0
votes
1answer
17 views

Does encryption, factory reset, encryption make a safer used phone?

I recently purchased a used Moto X. I know the person I bought it from so I'm not terribly worried but here is my idea to shore up the security on a used device. Don't put in your SIM card or log ...
0
votes
2answers
11 views

can an android device be in danger on a malicious site?

I accidentally went onto a site via Google images and went off after half a second, (the page had been quarter/half loaded. I accidentally hit the undo button and it opened again, and I closed it ...
0
votes
0answers
20 views

Block all root connections except to certain IP destinations using Iptables

I am using rooted Android 4.4.4 system. I want to block all the network connections associated by processes that run by root except to certain Ip targets. Something like this Block all network ...
0
votes
1answer
30 views

How do I remove Selfmite worm?

In June this year I experienced what I've found to be called the "Selfmite" worm on my Nexus 5 smartphone. On 24.06 and 29.06 it sent the message "Dear [contact name], Look The Self-time, ...
6
votes
2answers
16k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
1
vote
1answer
582 views

ActiveSync/Exchange security policy

On my HTC DNA I recently changed from the integrated ActiveSync client to Touchdown. My corporate IT policy required a PIN to access the device when using the Android client. Now that I switched to ...
1
vote
1answer
523 views

how to root your Android or at least understand how it works

I do not know exactly how rooting works or if it can even by done on my Android (Samsung GT-N8013) device. No rootkit appears to exist yet for Android 4.1.2, so I am left with figuring out how to ...
1
vote
1answer
1k views

Android 4 don't require unlock at home

In the Android OS version 4, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting ...
0
votes
0answers
13 views

Installed Comodo SSL certificate not showing in User in Trusted credentials [duplicate]

I am trying to install the SSL certificate for our exchange server. However although it says it is installed it is not showing under the User tab in settings --> personal --> security --> credential ...
1
vote
1answer
60 views

Encrypting Nexus 7 vs. screen lock

I read in this article that a non-encrypted tablet with only screen-lock on can have data read through USB. Is this really true for example for a Nexus 7 tablet? I mean - if I lock the screen you ...
0
votes
1answer
43 views

GSM vulnerabilities

I heard that there are inherent flaws in the GSM protocol that make it possible for someone to impersonate a network operator and do all sorts of nasty things remotely, even if your phone is off. Is ...
5
votes
1answer
4k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
-1
votes
1answer
32 views

How can I remotely wipe a stolen phone? [duplicate]

My phone have been stolen and I have many pictures on it, and secret things! How can I trash every thing on it through a Whatsapp message? I have not tired anything yet.
5
votes
2answers
466 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
4
votes
3answers
10k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
5
votes
1answer
110 views

How to prevent tracking or hacking of a used phone

The used phone's IMEI is clean, so it's not stolen. Looks like its seller did a factory-reset before selling it. But how do I make sure that it doesn't have any malware or backdoors, and that its ...
2
votes
1answer
1k views

Android 4.1.2 Full Device Encryption

I have a FDE enabled on my Android. However on JellyBean when device restarts I never get a boot password prompt,just regular unlock screen. I remember on 4.0 ICS, after reboot Android would ask me ...
1
vote
0answers
35 views

Asus nexus 7 security settings has clearing credentials greyed out and can't handle device adminstrators

When looking at settings...security, I neither can clear credentials nor change device administrators. Clear credentials is greyed out and there is no option to change the device administration, who ...
0
votes
2answers
69 views

Network security in Android

My question is quite simple. I've been digging around in the subject for quite a while now, but I can't really get a hang of how it works. Scenario: I use Facebook on my phone to chat with some ...
1
vote
2answers
18k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
0
votes
0answers
120 views

Trust Agents in Android L Preview

When browsing to Settings - Security - Trust Agents, it says: No available trust agents. Is this function not implemented yet, or do I have to install an external application? I'm talking about ...
1
vote
1answer
673 views

Google Nexus 7: I can't manage my device administrators

Can someone please help me? I've installed the McAfee protection on my tablet and later changed it to Kaspersky. When trying to deactivate McAfee as device administrator it didn't work. Therefore now ...
1
vote
1answer
3k views

What is YGPS and why does it have every permission that's in the book?

I have a FairPhone One. From time to time I look in the system settings and the battery usage to see what is draining the battery. I've disabled anything I don't use, including a number of builtins ...
0
votes
2answers
99 views

How to encrypt android device without screen lock? [duplicate]

I want to encrypt my phone to protect sensitive information. But I do not want to enter a password every time I pick up my phone. That seriously hampers the usability. Particularly because the ...
28
votes
14answers
5k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
0
votes
1answer
27 views

Seeking alternative to Andoid File Transfer utility

Need usb alternative to Android File Transfer for Mac. Problems: 1. no search capability 2. Cannot report size of files. 3. No route to send problem reports to developer. Reasons for not using ...
0
votes
0answers
30 views

Possibly a trojan named “SuperUser [UID]”?

SuperUser is prompting for access for something named "SuperUser [UID]" Why would the app SuperUser prompt for access for itself? Could it be a trojan with almost the same name as SuperUser?
0
votes
0answers
20 views

Tracking down which app makes HTTP requests [duplicate]

After configuring my Galaxy S4 (Android 4.4.2) phone to use a proxy server for debugging an app, I noticed that other apps on my device were making some suspicious HTTP calls. I would like to track ...
5
votes
2answers
214 views

Recent Apps shows app contents even though when its locked

I am trying to figure out how to hide an app from being seen when you hit the recent apps button. I use ZDBox's app lock to hide my apps and files when needed but noticed that when I hit the recent ...
16
votes
6answers
4k views

How do I secure/encrypt SD card data transparent to apps?

Are there any off-the-shelf options for securing the contents of an SD card so that files written by apps writing to SD are encrypted? If so, what is the best option? I'm looking for something for ...
1
vote
1answer
163 views

Does the Play Store app verify the APKs?

Many people (including me) are downloading/installing/updating applications in public networks where we cant be sure of a secure connection without MiTM attacks, does Google's Play Store transmit the ...
1
vote
1answer
484 views

forgot my google account password

someone used my phone GT-S5300 and had wrongly tried the unlock pattern many times and now it is asking me for google account but i have forgotten my password. pliz suggest me how can i get my ...
-1
votes
1answer
369 views

My nfc-enabled android-phone won't read a rfid key I own, why and what can I do about it?

Does it require some kind of activation-code? If so, can I read it while I scan it on the original scanner?
3
votes
0answers
36 views

Does Android's implementation of SELinux's M.A.C. inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4 SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
4answers
651 views

How can I save and protect sexy pictures sent by my girlfriend?

I'm traveling and my GF wants to send me some racy pictures. Of course I will accept that offer, but I need to save them on my phone in a safe way. My phone uses Activesync, so it's possible for my ...
4
votes
1answer
5k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...
4
votes
3answers
1k views

Are Tmobile using bogus DoD IP addresses (bogons)?

I recently started picking up some weird entries in my firewall log: kernel: arplookup 26.XXX.XXX.XXX failed: host is not on local network There are at least at dozen entries, all to different IP's ...
1
vote
0answers
71 views

Lock screen security - reboot after X invalid PINs

I used following methodology to create a strong boot password on the phone, at the same time keeping a weaker PIN for screen unlock. Now I want to make sure that if someone tries to pick up a PIN, ...
1
vote
2answers
108 views

Heartbleed check for Android App

How I can check whether a particular android app is vulnerable to heartbleed or not? I don't want to use any third party app. I have seen ...
0
votes
1answer
253 views

How can I set the correct SELinux / SEAndroid policy for an App?

I am using the free SSHelper SSH server on my phone to get SSH access. However, the application is not behaving correctly under SELinux when set to Enforcing mode, but seem to be OK when using ...
8
votes
3answers
4k views

IMEI number publicly displayed whenever connected to Wifi

I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...