For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
0answers
48 views

Brute Forcing Android Lock; How Long Does It Take?

We've seen that iPhone calculation takes 80 milliseconds per trial to complete. And there's further increasing time penalty with each wrong trial. Android uses scrypt to generate its Encryption key, ...
2
votes
0answers
367 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
8
votes
1answer
9k views

How to make sure I have no sms virus?

I'm using a non-rooted, non-hacked Samsung GT-I5700 device which runs Android 2.1. Today I've received an MMS from an unknown phone with something which looked like a spam for Mastercard. I've ...
11
votes
0answers
271 views

Canonical explanation of Android Encryption and Vulnerabilities

Note: Well, the bounty expired and one possible reason could be effort required to address as I gather from comments. Seeing the number of upvotes, it appears to be of interest to others as well. I ...
0
votes
0answers
42 views

Preventing users removing managed accounts

I've been using Android For Work (Google Admin) for a while now and I'm fairly happy with its range of policies available. Some of the main policies I've been applying for enrolled devices are ...
0
votes
1answer
104 views

Prevent USB data transfer (when phone is in use) and being charged

I would like to know how to protect my data when I use public battery charger in public places. I know that if I do not unlock my screen when charging, my data is safe, but what if I would like to ...
3
votes
2answers
122 views

Does using various app stores in parallel cause any issues?

I am using a Android phone with Lollipop and found that apps can be installed from various app stores like Google Play, Amazon App Store or F-Droid. Are there any problems I can run into if apps are ...
5
votes
2answers
959 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
0
votes
0answers
22 views

Is 4,294,967,295 the conceptual limit of apps installable to a android device? [duplicate]

This is a somewhat conceptual question. I know that other limits (i.e. like memory limit the number apps installed much more). Question According to the security guide of android.com sandboxing (and ...
0
votes
0answers
77 views

How to Implement fix for Samsung's CVE-2015-7888 in CM13

I run the security checkup of DuoSecurity lab here. They say my phone has the vulnerability CVE-2015-7888 in Samsung Galaxy S4 GT-I9506 which is using CyanogenMod 13. CVE-2015-7888 Remote Code ...
3
votes
2answers
5k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
12
votes
2answers
604 views

Does full device encryption protect my data from Google and the government?

Apple recently made waves within the tech community by refusing to comply with law enforcement in regards to accessing encrypted user data. Their statement was that they do not have the technical ...
4
votes
1answer
93 views

Joining a public WiFi made the owner able to send me a Facebook friend request. How?

I walked by a bar with free, unsecured WiFi. My device auto-joined it, and a minute later I had a friend request on Facebook from that very bar. How did they get my Facebook identity just from ...
6
votes
1answer
464 views

How to get the latest security updates for CyanogenMod?

I have installed CyanogenMod in February 2016, and the device information showed Android version "5.1.1", and the security patch level was "November 2015". This hasn't changed until today ...
0
votes
0answers
69 views

How to show SSL fingerprint of a self-signed certificate in Firefox for Android

I set up a website with a self signed SSL-certificate. As this website is just used by me for now, I'm fine with checking the fingerprint when connecting to it. This works just fine with Firefox or ...
0
votes
0answers
19 views

Is it possible to require “initial unlock” for smart lock

Is it possible to enforce initial unlock while using smart lock? For example, I'm using smart unlock with "Trusted places" and I would prefer it didn't automatically unlock when I get in range of my ...
0
votes
1answer
41 views

To configure tethering as two step login?

I have given my password of wifi stations to group of people. However, I want to allow only specific people to login at specific time. Attempt I could not enable a basic MAC filtering for devices. ...
6
votes
3answers
61k views

How do I decrypt files on my SD card that I encrypted using the Settings?

I have files that I used to copy from my SD card to my PC using the USB Mass Storage option under the "USB connection" pop-up. I checked the flag under Settings->Location & Security->Data ...
0
votes
0answers
19 views

marshmallow and personal security/privacy [duplicate]

I've been reading the news in the US about a court order for Apple to help the FBI bypass the security check present on devices running iOS8+. Since iOS8, Apple has stopped storing encryption keys on ...
0
votes
1answer
51 views

Famoc & KNOX on Samsung XCover 3

I have a problem, I have a phone with Famoc & KNOX enterprise security applications. I was able to root the device with Odin, I've installed twrp-2.8.7.0 & SuperSu. I've removed this Famoc ...
-2
votes
2answers
2k views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
0
votes
1answer
51 views

What can be accessed if phone is lost?

If a phone has not had its bootloader unlocked, has not been rooted, has a finger print lock as well as a pin lock if the fingerprint lock doesn't work. How much can a thief access on the phone? Will ...
10
votes
1answer
417 views

Why is fingerprint lock considered less secure than pattern lock on Nexus 5X?

My Nexus 5X highly recommends to set up pattern lock in addition to fingerprint lock, and the pattern is asked upon every reboot. And my password manager (KP2A) recommends to use fingerprint unlock ...
0
votes
0answers
33 views

What does stop somebody from flashing a custom recovery and pulling all user data?

For example, I was able to install a Clockworkmod recovery on my Samsung Galaxy Ace 3 phone via Odin and back up all the data in a few clicks. But if I could do it, what would stop somebody else who ...
3
votes
1answer
50 views

Protect from theft at flash level

There are a lot of apps that could block your phone in case of theft, take picture of thief remotely and such, but in case of reset any of this security methods will be useless So I was wondering if ...
15
votes
3answers
12k views

How would you uninstall a rogue Home (Launcher) application?

If you were to install a Home Screen application that does not give you access to the System Settings screen (to go to Manage Applications), and also does not let you launch Apps (such as the Market ...
2
votes
1answer
143 views

Can't remove stolen phone from account

So I had an Android phone stolen - nearly two years ago now. When it was taken, I immediately reset my Google account password (and most others). I have 2-factor auth on my Google account. I have ...
0
votes
0answers
23 views

Custom ROM - easiest way to default to functional adb

When building a custom ROM (or for that matter, modifying existing) - what's the best way to make sure that the OS starts up with adb-USB enabled, and with the host's key already accepted?
0
votes
1answer
38 views

Keeping forensic cops out

I was just arrested and bonded out immediately. my phone was confiscated. It was an Android and is there anything I can do to keep them from accessing the contents of my phone? Would deleting my ...
4
votes
3answers
12k views

Preventing browser redirects on Android (and iOS)

There seems to be an issue occurring with mobile browser apps on Android and iPhone being redirected to advertising sites. This is interrupting the browsing experience. The problem: A user visits a ...
1
vote
1answer
178 views

Phone number detected by a web page when browsing from chrome for android

I recently got subscribed to some alerts by the mobile provider automatically and some amount deducted from my phone balance. I called up the customer care centre and they agreed to refund the amount, ...
1
vote
0answers
57 views

How to hide winrar or other apk files in general?

I have stored some important files in my android phone in rar format. I've hidden these files in .nomedea folder. I've also enabled password for these files via win rar. The problem is for opening ...
2
votes
0answers
148 views

How to use network interface as non-root user?

I want to communicate between my Android device and my Linux box over IP through the USB network interface mode. The device I'm using is a OnePlus One running CM12.1 nightly builds. It's rooted and ...
1
vote
0answers
515 views

Android 5.1 update, Motorola X (1st Gen) and “Skip” NFC tabs (Really: disable “swipe” step before unlock)

I've just upgraded my gen 1 Moto X to 5.1. I've managed to get the NFC "Skip" tabs working again to unlock the phone, but the overall behavior is worse than with the prior release. Before 5.1, when ...
19
votes
3answers
20k views

List of open ports on Android

Is there a way, on a non-rooted Android device, to see a list of what apps are listening on what port? Or even a way to see if an app is listening on a specific port?
0
votes
0answers
39 views

Protection from flashing ROM

Hi so i was trying to theft protection my android phone. I unlock screen lock code, Cerberus with root privileges and also I'm about to encrypt my phone(not that it helps much to recover your phone ...
0
votes
0answers
339 views

Is it possible to bypass Samsung's Reactivation Lock?

I have set Reactivation Lock on my Galaxy S5 and I want to be sure if it will render phone useless for someone that steals/finds it or it's just easy to bypass by flashing fresh firmware with Odin. ...
-1
votes
2answers
101 views

Why aren't these UI “hacks” more often exploited?

I'm asking mostly about the global UI "hacks"1 in use by Facebook Messenger (specifically, chat heads) and the Facebook app itself (specifically, those really annoying "psuedo-Lollipop" notifications ...
3
votes
1answer
120 views

How to override default Android's default screen lock security policy?

I want my Android device screen to open without requiring password. So I chose "none" option in Security settings. But, when I needed to add a VPN connection, it required me to provide a password, ...
0
votes
0answers
38 views

Extract OS signing public key

I have got a OnePlus Two with OxygenOS (an Android ROM made by OnePlus). I modified my OS by installing Kali Nethunter, and I now want to flash back to stock OxygenOS. I found the .zip file on the ...
9
votes
2answers
2k views

Can I recall a command to reset a lost phone?

Last night I lost my Nexus 7 coming back from a friend's house. Since it has a lot of confidential work email on one account I logged into the Android Device Manager and - when it didn't show up - set ...
0
votes
1answer
78 views

Android rooting security considerations

I know this question has been asked many times, but I didn't see a clear answer to it from security experts, or it is from several years ago and things might have changed. My question is double: ...
2
votes
3answers
23k views

How to disable pin security from Samsing Tab 2

I have a Samsung tab2, and have added screen pin lock on my Tab few days back as I was going out. Now I don't want to use pin lock as security, but I am not able to disable it. I am going to setting ...
26
votes
5answers
2k views

Audit app permissions easily in one place?

Is there anyway to list all the applications installed on your phone and the permissions they require all on one page, or export the list so it can easily be audited?
-1
votes
1answer
64 views

Can a hacker simply copy shared prefs from one device to another to hijack a user session/state?

I'm an Android apps developer. I'm trying to address a security concern in one of my apps. I need to test a scenario in which someone will try to copy the shared prefs file (or files) from one ...
0
votes
2answers
23 views

How do I safely “copy” my gpg keys from kgpg on Linux to an Android app like openkeychain?

The title says most of it. I have a key pair setup on kgpg running under Kubuntu 12.04 Linux on my notebook. My smartphone (Galaxy S3) has no SD card slot. I want to be able to transfer files between ...
4
votes
6answers
24k views

Find what app is causing popups, NOT in notification bar

I am getting these popups regularly. They do not appear in the notification center so I can't find out what app is causing them. The only app I can think of that I have installed recently, I have ...
4
votes
0answers
2k views

What is Google Partner Setup?

What does the Google Partner Setup app that is pre-installed on almost every Android device actually do? Why does it need each of those intrusive permissions, especially the Phone permission? Why ...
0
votes
0answers
62 views

Disable android call dialer/function for public 3G tablet

I'm putting an Android tablet at a public display area and the tablet needs to be powered by a 3G sim card. I don't want anybody to dial out using this tablet. I read somewhere that I can disable ...
0
votes
0answers
55 views

Make a app Package For android

I have made a "Security" phone for my personal use. I have about 49 apps and about 7 wallpapers. Can I make a package that when flashed in a Custom Recovery It installs all of the apps and make the ...