For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...
7
votes
1answer
1k views
What's the security implication of having an unlocked boot loader?
Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
1
vote
0answers
167 views
security implications of unlocking, rooting, cutom recovery, etc [closed]
Just curious. There are lots of posts on the web that talk about the fact that unlocking your bootloader wipes apps and data - presumably to prevent unauthorized access to that info. But in order to ...
1
vote
2answers
58 views
My device is trying to open mSecure app whenever I launch an internet browser
Whenever I launch an internet browser on my droid phone it attempts to launch another app (in my case mSecure).
This happens with dolphin and my stock browser so I don't think it's an mSecure ...
4
votes
1answer
46 views
Where do you find the password attempts setting or option in ICS?
I want to either stop this function or at the very least set the number of attempts to a higher number than 3.
6
votes
2answers
676 views
WiFi Hotspot Security?
Is there any way to add extra security to a WiFi hotspot created by an Android phone?
I am using a Samsung GT-S5300 with Android 2.3.6, and I am using the WiFi hotspot feature at home since Telkom ...
6
votes
2answers
347 views
I lost my Android smartphone. Play Store tells me that someone has inserted a SIM card. How can I find out the phone number?
I lost my Samsung Galaxy S, which was signed into Google Play.
Now, Play Store has identified that someone has inserted another SIM card with a different service provider.
Is there anyway I can find ...
13
votes
2answers
520 views
Is it “safe” to provide users with the apk file?
I was wondering, if I have an app that is available on the Play Store, is it "safe" to provide a direct download of the apk file to someone (either signed with the proper keys, or just debug-version)?
...
6
votes
2answers
704 views
Can my Android phone be hacked without installing permissions?
After reading this article ( Kaspersky smartphone report ) this got me wondering.
Obviously if I install a dodgy app through Play Store or directly from a website, that can be dangerous, however if I ...
5
votes
1answer
112 views
How to prepare myself & smartphone/tablet in the event it goes missing or is stolen?
I would like to know what measures or steps etc that should be performed, in order to protect & safeguard whatever "data" is on my Android Smartphone or Tablet, and indeed the device itself, in ...
1
vote
0answers
131 views
HTC Wildfire: “Settings” > “security” > “lock phone after” > and select, “immediately” not working
"Settings" > "Security" > "Lock phone after" > and select, "Immediately".
The above has been my security lock setting for the past year. It was working fine but as of a week ago it hasn't ...
5
votes
2answers
82 views
Is there a way to wipe a device based on a certain password? A like a “Wipe-me” password?
Is there a way (an app perhaps) that will wipe a phone if a certain password is entered at the lock screen? For example "letmein" unlocks the phone, but if you enter "wipeme" it will start the factory ...
0
votes
1answer
62 views
Prevent unauthorized image flashing
I wonder whether there is a way to prevent someone to use fastboot to flash an Android device.
Indeed, while one must be able to turn on USB debug in order to run adb, the bootloader does not offer ...
6
votes
2answers
110 views
How safe are my passwords at after-sales service?
My phone is currently inoperative. Samsung asked me to drop it at an approved repair center, which will handle shipment and reception to/from Samsung.
Being unable to boot my phone, it was impossible ...
2
votes
0answers
327 views
ICS: external microsd storage card: can i use it with camera and not encrypt?
So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
5
votes
4answers
2k views
Forgot security lock pattern on Jelly Bean device with Wifi and 3G data turned off
I forgot my security lock pattern and my Wifi and 3G connections are switched off. I can hard reset the phone (Galaxy Nexus) from recovery mode, but that would wipe all my data.
ADB is also turned off ...
1
vote
2answers
860 views
What causes the error “No certificate found in USB storage.” when trying to import a certificate?
I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
1
vote
1answer
1k views
Android 4.1 unable to connect to Google Play but other wifi functions work - how to fix?
I'm using a Rikomagic 802III running Android 4.1.1, connected to my TV. Until today, I was able to connect to Google Play, and my widgets were showing data. Now, when I open Google Play, I get an ...
3
votes
1answer
80 views
Google Authenticator used by native apps?
I recently turned on two-step verification for my Google account and installed the Google Authenticator app on my Android device. Based on what I have read everywhere (even Google's official info: ...
0
votes
1answer
51 views
Does Google Audit all apps that enter the market place? [duplicate]
Possible Duplicate:
Are the apps safe? How can I make my Android more secure?
There are several 'requires root' apps in the market and one of the most famous ones have more than 5 Million ...
2
votes
2answers
342 views
Android applications privacy and security concerns
If a user wants to install some applications from play store, is it sole responsibility of the user to decide whether the apps may harm or not? Should the user be worries regarding permissions? For ...
2
votes
3answers
352 views
Is Evernote a malicious app?
I have been using Evernote on my Laptop and Mobile phone for quite some time now. Recently, when downloading an update of Evernote app in my phone from Google Play app, I noticed that Evernote asks ...
2
votes
1answer
2k views
“Account unlock” when not connected to internet?
I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone:
My Question is: How would my account be ...
3
votes
0answers
219 views
Wipe everything after failed decryption attempts, but make it usable?
I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
3
votes
2answers
1k views
Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?
From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
0
votes
1answer
315 views
Dangers of Apps running in “Hidden mode”?
I have downloaded an app to record all my calls. The app is working great but the trouble is that it doesn't shows up under the "Ongoing" in the notification bar nor does it shows up in "active ...
2
votes
2answers
46 views
Protecting or Limiting my account's power
I have linked a great deal of power to my phone. It is connected to my gmail to such an extent that I am starting to get concerned that if somebody where to steal my phone they could reek havok on my ...
16
votes
2answers
737 views
Security of Paid apps in Google Play?
What measures does Google takes to ensure that paid apps that are downloaded do not get spread for free? Currently I see a possibility that can leak out a large number of apps:
Someone pays to ...
3
votes
1answer
75 views
Are calls made by third-party apps logged?
For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener ...
5
votes
1answer
2k views
I changed my sim card - how do I find which app is sending sms messages to my old number?
I recently traveled to another country and I'm using a local prepaid sim card on my Galaxy S2.
My prepaid credit was depleted rather quickly, and when I checked the phone record I found out my phone ...
3
votes
0answers
97 views
Setup Tor server on my Android
How do I setup a Tor server on my Android tablet?
I can install the Orbot client, but how do I contribute to the tor network?
I have my tablet on a WiFi the most of the day so it would be nice to ...
4
votes
1answer
1k views
Android 4 USB charge only
When I connect my Android 4 phone (Galaxy Nexus) to a computer using USB, the storage of the phone is automatically mounted on the computer. How can I connect my phone using USB for charging only? In ...
2
votes
0answers
389 views
How to disable “Forgot Password” on the lockscreen
I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen.
How can I disable or hide that Forgot ...
4
votes
1answer
802 views
Looking for Location-Specific Screen Locking Behaviour
I'd like to have a feature that allows my Android phone to change its lock mechanism automatically dependent on location. For example, most of the time I use pattern unlock when out and about but ...
-1
votes
1answer
187 views
galaxy s2 is locked [closed]
While jogging, I listen to music from my phone and I put a lock to prevent it from doing interesting things. However, I think it tried many wrong passwords and it is locked. Now, phone is overheating, ...
0
votes
0answers
91 views
Syncing OWA leads to security issue for composing text
I downloaded the OWA through Exchange Server on my Android Samsung Galaxy Ace. and now its not letting me send text messages and it states "security policy disallows composing new text"
I need both, ...
5
votes
1answer
149 views
USSD attack official notification
I have an HTC that is vulnerable to USSD attack. I am trying to tell the HTC helpdesk about this issue, but they tell me that unless there is an official news from android team about this, they will ...
4
votes
2answers
306 views
Android 1.5 Dialer App - Exploit Block
I just read about the remote USSD attack. My hoary old Samsung i7500g phone is vulnerable (confirmed via this site).
The solution is to install a (free) secondary dialer, like Dialer One. ...
0
votes
1answer
1k views
WiFi Tethering not working when using security
I have a rooted Galaxy SII (not branded, from Germany) running CyanogenMod 10.
I can't connect to my tethering network when I'm using security (WPA / WPA2-PSK). With an open network, it works just ...
7
votes
2answers
2k views
deactivate PIN-request after airplane mode
When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
6
votes
1answer
226 views
Can Applications With Root Access Modify Their Own Permissions?
For rooted phones, there are several apps which require root privileges. Knowing this, the user does allow the app to get root. Now, the app would have been installed with a set of x permissions, say ...
16
votes
2answers
15k views
How is the Gmail password stored in Android - and where?
I have looked around and found no information on how Android manages to store passwords on the device. Especially Gmail passwords. I'm looking to learn how Android encrypts and stores passwords ? What ...
3
votes
1answer
156 views
Disable password hiding globally
With a touch screen keyboard, having passwords I am entering displayed hidden is more trouble than it's worth to me. Few applications like KeePassDroid allow you to disable this feature. Is there any ...
2
votes
0answers
300 views
Exchange Active Sync email on Galaxy 10.1 disappears.
One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
0
votes
0answers
399 views
Email client that does not store passwords?
I'm looking for an e-mail client (POP3 or IMAP) that won't store my password. I would like to be asked for the password each time I start the e-mail client. I don't need background updates, I just ...
9
votes
4answers
1k views
Can my Android device become - remotely and without my permission - a wiretap and get used as surveillance device?
I saw the following article:
An article in the Financial Times last year said mobile providers can
"remotely install a piece of software on to any handset, without the
owner's knowledge, which ...
1
vote
2answers
471 views
Locking individual files on micro sd card
I have Galaxy S2 running on android 4.0.3. I have a number of photos, videos, pdf and word files stored on the micro sd card.
I am just wondering if there is a way to password protect individual ...
13
votes
2answers
1k views
Where to find a PIN lock screen that scrambles the keypad on every use?
Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
0
votes
0answers
104 views
How do Android user processes get privilege level-3 on creation? [closed]
I have two questions:
1) How does a user process get privilege level-3 (ring 3) when it is created?
2) Where should I make a change so that all user processes get privilege level-0 meaning they run ...
0
votes
1answer
197 views
Multiple Pattern Locks at the same point of time
Is it possible to have multiple pattern lock implemented in an android device to increase it's security. I know that it must be possible to design an app to do that, but my question is whether any app ...
2
votes
1answer
908 views
Mounting and Unmounting of Memory Card just by touch?
I am using a Samsung Galaxy Y mobile phone. In my mobile's settings, I see an option to "Unmount the Memory Card for Safe Removal", so it is possible to unmount the memory card without actually ...