For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
0answers
21 views

Ask for the pin only twice a day

I would like to configure my android phone to ask for my PIN only two times every day (if not rebooted). Screen lock with PIN after 12 hours (no PIN needed in between) would be great. The screen-lock ...
-1
votes
1answer
26 views

Any work around to sophos

Sophos is an app that let's you put passwords on apps (among other things). Is there a work around to access the apps? Thanks!
1
vote
1answer
24 views

Security, keylogging and accounts

An in-app purchase requests password verification before the transaction. Thus, all the following input into the onscreen keyboard is the user's password. Is handling keyboard events prevented at ...
9
votes
3answers
14k views

Why does Android prompt me with “Enter the credential storage password” when I attempt to connect to a secured WiFi network?

When I connect my iPhone to a secured WiFi network (at work), I'm prompted for my Username and Password. (And then I'm prompted to accept what I presume is an SSL certificate.) But when I select the ...
5
votes
2answers
5k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
1
vote
5answers
2k views

Find what app is causing popups, NOT in notification bar

I am getting these popups regularly. They do not appear in the notification center so I can't find out what app is causing them. The only app I can think of that I have installed recently, I have ...
1
vote
5answers
7k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
1
vote
1answer
549 views

how to root your Android or at least understand how it works

I do not know exactly how rooting works or if it can even by done on my Android (Samsung GT-N8013) device. No rootkit appears to exist yet for Android 4.1.2, so I am left with figuring out how to ...
31
votes
3answers
2k views

Encrypt the phone's internal storage

Is there a way to encrypt my phone's internal memory, in the same way you would encrypt a computer's partition? Ideally, the phone would always ask for the password when booting, and even if someone ...
1
vote
3answers
4k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
0
votes
0answers
45 views

Web proxy for Android 4.2.2

I need to cut off access to Flash and HTML5 videos on several devices for a project. Is there any app like a proxy to perform this? If I could deny a list of webpages it will be perfect.
1
vote
1answer
40 views

Can I “Wipe data/Factory reset” a phone that doesn't even boot via USB?

I have a Razr HD (XT925 GSM) which suddenly shut down and can't be turned back on (pressing or long pressing the power button does nothing, nor does connecting it to the wall). I have a lot of ...
21
votes
1answer
14k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
2
votes
2answers
76 views

Allow login with multiple passwords

Is it possible to setup multiple accepted passwords for the login to Android? Or perhaps an alternative secure login. (Note: facial recognition and fingerprint does not count as secure, but an RSA/NFC ...
0
votes
3answers
110 views

How to know if an keyboard/input related app is safe to use

I am Vietnamese and I cannot type my language on my Android phone i.e. Samsung Galaxy S4 So I look for apps that help me to input Vietnamese. My issue is that I'm affraid the apps will bug me and ...
0
votes
2answers
63 views

can an android device be in danger on a malicious site?

I accidentally went onto a site via Google images and went off after half a second, (the page had been quarter/half loaded. I accidentally hit the undo button and it opened again, and I closed it ...
0
votes
0answers
72 views

Block all root connections except to certain IP destinations using Iptables

I am using rooted Android 4.4.4 system. I want to block all the network connections associated by processes that run by root except to certain Ip targets. Something like this Block all network ...
0
votes
1answer
65 views

How do I remove Selfmite worm?

In June this year I experienced what I've found to be called the "Selfmite" worm on my Nexus 5 smartphone. On 24.06 and 29.06 it sent the message "Dear [contact name], Look The Self-time, ...
6
votes
2answers
19k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
0
votes
0answers
15 views

Installed Comodo SSL certificate not showing in User in Trusted credentials [duplicate]

I am trying to install the SSL certificate for our exchange server. However although it says it is installed it is not showing under the User tab in settings --> personal --> security --> credential ...
1
vote
1answer
210 views

Encrypting Nexus 7 vs. screen lock

I read in this article that a non-encrypted tablet with only screen-lock on can have data read through USB. Is this really true for example for a Nexus 7 tablet? I mean - if I lock the screen you ...
0
votes
1answer
62 views

GSM vulnerabilities

I heard that there are inherent flaws in the GSM protocol that make it possible for someone to impersonate a network operator and do all sorts of nasty things remotely, even if your phone is off. Is ...
-1
votes
1answer
62 views

How can I remotely wipe a stolen phone? [duplicate]

My phone have been stolen and I have many pictures on it, and secret things! How can I trash every thing on it through a Whatsapp message? I have not tired anything yet.
5
votes
2answers
566 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
4
votes
3answers
12k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
5
votes
1answer
154 views

How to prevent tracking or hacking of a used phone

The used phone's IMEI is clean, so it's not stolen. Looks like its seller did a factory-reset before selling it. But how do I make sure that it doesn't have any malware or backdoors, and that its ...
1
vote
0answers
125 views

Asus nexus 7 security settings has clearing credentials greyed out and can't handle device adminstrators

When looking at settings...security, I neither can clear credentials nor change device administrators. Clear credentials is greyed out and there is no option to change the device administration, who ...
0
votes
2answers
75 views

Network security in Android

My question is quite simple. I've been digging around in the subject for quite a while now, but I can't really get a hang of how it works. Scenario: I use Facebook on my phone to chat with some ...
1
vote
2answers
25k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
1
vote
1answer
1k views

Google Nexus 7: I can't manage my device administrators

Can someone please help me? I've installed the McAfee protection on my tablet and later changed it to Kaspersky. When trying to deactivate McAfee as device administrator it didn't work. Therefore now ...
1
vote
1answer
5k views

What is YGPS and why does it have every permission that's in the book?

I have a FairPhone One. From time to time I look in the system settings and the battery usage to see what is draining the battery. I've disabled anything I don't use, including a number of builtins ...
0
votes
2answers
1k views

How to encrypt android device without screen lock? [duplicate]

I want to encrypt my phone to protect sensitive information. But I do not want to enter a password every time I pick up my phone. That seriously hampers the usability. Particularly because the ...
29
votes
14answers
6k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
0
votes
1answer
36 views

Seeking alternative to Andoid File Transfer utility

Need usb alternative to Android File Transfer for Mac. Problems: 1. no search capability 2. Cannot report size of files. 3. No route to send problem reports to developer. Reasons for not using ...
0
votes
0answers
68 views

Possibly a trojan named “SuperUser [UID]”?

SuperUser is prompting for access for something named "SuperUser [UID]" Why would the app SuperUser prompt for access for itself? Could it be a trojan with almost the same name as SuperUser?
0
votes
0answers
22 views

Tracking down which app makes HTTP requests [duplicate]

After configuring my Galaxy S4 (Android 4.4.2) phone to use a proxy server for debugging an app, I noticed that other apps on my device were making some suspicious HTTP calls. I would like to track ...
5
votes
2answers
238 views

Recent Apps shows app contents even though when its locked

I am trying to figure out how to hide an app from being seen when you hit the recent apps button. I use ZDBox's app lock to hide my apps and files when needed but noticed that when I hit the recent ...
16
votes
6answers
4k views

How do I secure/encrypt SD card data transparent to apps?

Are there any off-the-shelf options for securing the contents of an SD card so that files written by apps writing to SD are encrypted? If so, what is the best option? I'm looking for something for ...
1
vote
1answer
201 views

Does the Play Store app verify the APKs?

Many people (including me) are downloading/installing/updating applications in public networks where we cant be sure of a secure connection without MiTM attacks, does Google's Play Store transmit the ...
-1
votes
1answer
381 views

My nfc-enabled android-phone won't read a rfid key I own, why and what can I do about it?

Does it require some kind of activation-code? If so, can I read it while I scan it on the original scanner?
3
votes
0answers
69 views

Does Android's implementation of SELinux's M.A.C. inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4 SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
4answers
741 views

How can I save and protect sexy pictures sent by my girlfriend?

I'm traveling and my GF wants to send me some racy pictures. Of course I will accept that offer, but I need to save them on my phone in a safe way. My phone uses Activesync, so it's possible for my ...
4
votes
1answer
5k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...
4
votes
3answers
2k views

Are Tmobile using bogus DoD IP addresses (bogons)?

I recently started picking up some weird entries in my firewall log: kernel: arplookup 26.XXX.XXX.XXX failed: host is not on local network There are at least at dozen entries, all to different IP's ...
1
vote
0answers
82 views

Lock screen security - reboot after X invalid PINs

I used following methodology to create a strong boot password on the phone, at the same time keeping a weaker PIN for screen unlock. Now I want to make sure that if someone tries to pick up a PIN, ...
1
vote
2answers
122 views

Heartbleed check for Android App

How I can check whether a particular android app is vulnerable to heartbleed or not? I don't want to use any third party app. I have seen ...
0
votes
1answer
647 views

How can I set the correct SELinux / SEAndroid policy for an App?

I am using the free SSHelper SSH server on my phone to get SSH access. However, the application is not behaving correctly under SELinux when set to Enforcing mode, but seem to be OK when using ...
8
votes
3answers
4k views

IMEI number publicly displayed whenever connected to Wifi

I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...
29
votes
2answers
3k views

How does the Heartbleed security vulnerability affect my Android device?

The "Heartbleed" vulnerability in particular versions of OpenSSL is a serious security issue which allows malicious servers or clients to undetectably obtain unauthorized data from the other end of an ...
2
votes
2answers
814 views

How to browse securely, anonymously and without blocks on Android?

So here's your Average Joe at a coffee store, using the open Wifi on his shiny new Android phone. Obviously there are the same issues with using a laptop or any other device on an open network, ...