For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
1answer
36 views

Is there any SSH OS support in Android?

I am reading the article Jolla and SSH push Sailfish Secure as “European alternative” mobile OS. I have used third-party applications for SSH in my phone but would like to have OS supported. How ...
0
votes
0answers
32 views

AccountManager: how can passwords be stored and retrieved without also storing the decrypt key?

Can the Android AccountManager be hacked and its account passwords retrieved? I mean, how is the decrypt key stored in a way that is safe from being retrieved by password-spoofing software? Is special ...
22
votes
8answers
47k views

How do I avoid the server-specified security policies for my work e-mail?

When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?: I just received a Nexus 7 and signed ...
1
vote
0answers
37 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
-1
votes
1answer
34 views

How do I tell if a given Android phone is vulnerable to CVE-2012-4221, CVE-2013-2596, CVE-2013-2597, CVE-2013-6282?

I want to determine if a given Android Phone + OS is vulnerable to a set of CVEs. What process do I need to do to do to determine if a given Phone is vulnerable?
1
vote
1answer
517 views

Toast: MMS cannot be sent/received when mobile data is disabled — shows up at every boot in Moto G XT1033 running Lollipop 5.0.2

Details: Moto G XT1033 with Android Lollipop 5.0.2 Is there something wrong? Why would any app request this feature just exactly when I turn my cell phone on? (Click image to see its larger ...
0
votes
0answers
79 views

App sending spam messages to my contacts

My phone sent the following message to all of my contacts: Install this voice messenger just to talk http://mrv.withmechat.us/Cun I know I didn't send this message and not to mention it sent it ...
10
votes
3answers
19k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
-1
votes
1answer
154 views

How to remove Taboola adware?

I have factory-reset my mobile, and had already scanned with antivirus for adware, which it found but it couldn't remove. What should I do?
5
votes
3answers
4k views

What is this Google Settings app that installed itself on my phone?

Today, all of a sudden I saw this app in my Samsung Galaxy Y mobile phone: I am talking about the app named "Google Settings" I uninstalled it immediately only to find it installed again a few ...
0
votes
0answers
42 views

Turn off pin without pin

I've just got a new Android phone with fingerprint recognition. I set a fingerprint to unlock and a pin. For some reason I've forgotten the pin. I can unlock the phone fine with the finger print, ...
1
vote
0answers
135 views

How can an organization control when or when not an update for an app is installed in their Android smartphones?

Imagine an organization that have a legitimate fear to automatic updates. That organization thinks that an automatic update may break a business use case. For example, when the VPN client is update ...
0
votes
0answers
27 views

To configure tethering as two step login?

I have given my password of wifi stations to group of people. However, I want to allow only specific people to login at specific time. Attempt I could not enable a basic MAC filtering for devices. ...
0
votes
0answers
25 views

Moving an app out of a myKNOX container

Is it possible to move an app back out of a myKNOX container? I have an app that I have written myself and loaded onto a samsung xcover3 via eclipse and a USB cable. I then installed myKNOX and ...
1
vote
2answers
8k views

How to switch screen unlock from Pattern to Slide

On my Nexus 7 2013 Wi-Fi with Android 5.0.1 Lollipop I used the Slide setting for the lock screen. To experiment with a VPN, I switched to pattern lock. After deleting the VPN entry I had created, I ...
2
votes
1answer
370 views

Is it possible to use “unlock with fingerprint” feature, and be asked for (after boot) giving passphrase and fingerprint on encrypted Galaxy S6

I would like to purchase a Samsung Galaxy S6. One of the main reasons for the choice of device is the (apparently) good fingerprint sensor. I would like to / have to encrypt my phone (my employer ...
6
votes
3answers
7k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
1
vote
1answer
76 views

What data flows through AirDroid's servers?

When using AirDroid do your text messages and/or data get transmitted through AirDroid's servers or is that data kept locally between your Android device and your computer? My understanding is that ...
37
votes
1answer
22k views

How can I verify the authenticity of an APK file I downloaded?

The latest update of Google Maps is unavailable in my country, so I downloaded a version by googling for "Google Maps 5.4.0 apk". I did in fact find it, but now I wonder how I can tell if this is in ...
13
votes
3answers
34k views

How can I override the Device Administrator security policy so that I can disable the lock screen?

On Android 2.2 Froyo, I added my Corporate Exchange Email account to the phone, however, the security policy set by the "Device Administrator" requires that I enter a 4-digit PIN at the lock screen ...
0
votes
1answer
31 views

Is it safe to use this app and will it cause problems in 6.0?

Classic Dialpad for KitKat and Lollipop Just wanted to check if there's any reason not to use this, here's what the permissions looks like. Click image to enlarge I'm assuming its just a ...
1
vote
1answer
631 views

How unlock S6 Edge When The Finger Print Scanner is Not Working?

My S6 edge was locked by finger print. It was working fine, but today while I was on bath my child was playing with my mobile and by mistake they tried finger print scanner, now my device is locked ...
3
votes
4answers
8k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
3
votes
2answers
5k views

Can applications be downloaded without a Google Account and without disabling security features?

If I wish to install applications such as Skype, DropBox, etc however without registering for a Google account, is that possible? If so, how do I install them without a Google account?
0
votes
1answer
151 views

is there a keylogger in my phone

I have an Android phone accent a400 and I sent it to a repair store to change the broken screen. After receiving the phone, I noticed that they did a reset to the phone and the internal memory doesn't ...
0
votes
0answers
68 views

Samsung KNOX equivalent for other device manufacturers

Are any other device manufacturers offering a samsung KNOX type solution? Maybe the other big players, i.e. Motorola, HTC or Sony have a similar technology available for securing their Android ...
6
votes
1answer
27k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
6
votes
2answers
4k views

How to connect ADB over 3G/4G?

I keep seeing warning signs about enabling ADB over Network when you aren't connected to a WiFi network, but what if I want to connect ADB over 3G/4G ? Whenever I try to do it with any of the ...
0
votes
1answer
100 views

Unknown sources, root, and the Android security conundrum [closed]

This question has 2 aspects, both are related and equally important from a security standpoint: 1) The "Allow installations from unknown sources" option under Security settings. Most other mobile ...
23
votes
3answers
10k views

Does official Gmail app use a secure connection?

As simple as that, when I'm using the official Gmail app to access my email account, does it use a secure connection?
43
votes
14answers
11k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
0
votes
2answers
95 views

Does Android locally encrypt your fingerprint?

I got myself a Nexus 6P with a fancy fingerprint scanner. So far I'm a bit reluctant to use it because I can't find any info on how Android Marshmallow stores those fingerprints. Are they hashed (as ...
10
votes
3answers
14k views

My android phone was stolen. How worried should I be with all my google data inside the phone?

Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it. I didn't have any app installed that could wipe this information from a ...
18
votes
5answers
8k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
0
votes
1answer
44 views

Firefox for Android mysterious connections after turning everything off in settings

I created a user.js that incorporates support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections and other tweaks, yet Firefox for Android still attempts to connect to several ...
0
votes
0answers
32 views

Why sometimes my device doesn't try to recognize trusted face?

I set up trusted face in the smart lock security section of my Nexus 6. When I press power button in attempt to unlock my device usually I see a face/person symbol on the bottom of the screen, as a ...
2
votes
1answer
299 views

When you lock down a Lollipop device to disable Chrome's incognito mode, this creates an XML “restrictions file”. What actual XML is inside the file?

Note: If this post is too long to read, please see the summary in the last paragraph. I own an aging Samsung Galaxy S Relay cellphone. It's running Android 4.1.2 and has a built-in physical keyboard. ...
0
votes
1answer
48 views

Do devices with a fingerprint scanner prevent access to the bootloader/recovery

Pretty simple question but as I have never owned a device with a fingerprint scanner... basically I was wondering: If you secure your device with your fingerprint - is it possible to access the ...
0
votes
0answers
42 views

How to add private key to keychain in Android?

I do not want to type my passwords all the time, but instead, just the password to my private keys. I am using Samsung Galaxy 4 and Android 5.0.1. How can you add private key to your Android ...
0
votes
0answers
11 views

Two factor authenticator app which works when we lost our phone but able to use back same phone number

Currently, I'm using Google Authenticator in my phone. If I lost my phone, but able to get a new phone device, and use back my previous old phone number, will Google Authenticator continue to work? ...
0
votes
1answer
116 views

Calculator WiFi usage on Marshmallow, Nexus 5? What?

I have not used the calculator app. I also don't know why it would be using the wifi or any kind of external data. Yet behold, below: I flashed 6.0 recently and restored some apps from an old ...
17
votes
7answers
11k views

How to know if a side-loaded app is safe?

How can we be assured that the APK of an app that we are downloading from a website is safe to install on our Android phone? Is there a way to know that the downloaded file is safe? Is there an app ...
1
vote
1answer
196 views

I've installed a custom recovery image, but not yet rooted my phone. How can I install SuperSU and subscribe to automatic updates?

I own a Samsung smartphone. I'm running Android 4.1.2 "Jelly Bean". I've also installed ClockworkMod Recovery 6.0.4.5. Each time I exit ClockworkMod Recovery, it offers to root my phone. I haven't ...
0
votes
0answers
23 views

Full encryption of a singe purpose device (e.g barcode scanner )

How could we run a single purpose device with high sensitive date on Android 4.4 or later, with full disk encryption and have it unencrypted and unlocked only after entering the device password only ...
1
vote
1answer
131 views

Is Snowden snowing us with his “Smurfs Suite” interview?

I hope this is not too off-topic. This morning when I read news it was full of articles quoting Snowden in his most recent interviews. Apparently the UK's GCHQ and the USA's NSA can (1) turn your ...
30
votes
3answers
53k views

Bypass “Swipe up to unlock” on Android Lollipop lock screen

I recently flashed my Nexus 4 to Android Lollipop using the factory image. I have set a pattern lock for unlocking the device. But whenever I turn on the phone, I have to click on the little lock ...
2
votes
1answer
22k views

What is YGPS and why does it have every permission that's in the book?

I have a FairPhone One. From time to time I look in the system settings and the battery usage to see what is draining the battery. I've disabled anything I don't use, including a number of builtins ...
0
votes
0answers
67 views

How to log all user interaction on my device?

I would like to know whether on an Android device it is possible to: Log the date and time of every time a password is entered on my Android phone (this security measure would mean that if someone ...
0
votes
0answers
14 views

How can I audit access to Android Accounts?

I want to audit the calls made to the Authentication Providers by connected applications. The reason is that I am investigating a rogue application that seems to collect more data and permissions ...
4
votes
3answers
144 views

How do I see if my Android Nexus received the latest security updates?

I'd like to check the patch level of my Nexus. I'm using Lollipop 5.1.1 build LMY48I. Under 'System updates' in 'About phone', it says 'Your system is up to date'. Should I assume that includes ...