For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
0answers
54 views

Android 4.3 Privacy Protection settings get reset from time to time

I use JB 4.3.1 (Avatarrom). In system settings > security > Privacy protection I can set which apps have access to my contacts. I've set this many times, and I notice that after one or two days ...
0
votes
0answers
58 views

Radius Server On Android

It is possible to compile the FreeRADIUS server for Android? I mean if I can compile it for the ARM architecture to run on Android as a system binary or in a chroot environment? If so can someone ...
1
vote
0answers
105 views

Secure Galaxy Star GT-S5282 using simcard change alert

How can I secure my Samsung Galaxy Star GT-S5282 using the simcard change alert option. In other words, when a simcard is inserted in my phone a notification SMS is sent to other phones.
1
vote
4answers
840 views

Find what app is causing popups, NOT in notification bar

I am getting these popups regularly. They do not appear in the notification center so I can't find out what app is causing them. The only app I can think of that I have installed recently, I have ...
0
votes
1answer
53 views

Is this android mobile device credit card payment system secure and safe?

Mobile device credit card payments and credit card readers are appearing everywhere, but then we all know any payment app's security is nought if the android device is rooted. Before I give my credit ...
1
vote
2answers
346 views

How to disable screen lock during Android development?

I am developing Android app with my daily phone, I want to turn off screen lock only during development. I can done this manually, but that is too troublesome and sometimes I forgot to enable it ...
2
votes
2answers
9k views

How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?

There are a load of sites that do this now, and it's really annoying: I visit a content site on my Android device. 10-15 seconds after loading starts the site hangs for a few seconds. Google play ...
1
vote
1answer
958 views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
1
vote
1answer
198 views

What is the setting in xprivacy to access the microphone?

I use xprivacy to set all permissions on my phone, but I accidently forbid the tuner app to access my microphone. Which setting do I have to enable?
53
votes
6answers
19k views

My Gmail is signed in through the app on ex-boyfriend's phone

I had my email signed in on the Gmail app on my boyfriend's phone who is now on the other side of the country. I've asked him a couple times to disconnect it but recently checked out Google Play and ...
6
votes
1answer
105 views

Can I recall a command to reset a lost phone?

Last night I lost my Nexus 7 coming back from a friend's house. Since it has a lot of confidential work email on one account I logged into the Android Device Manager and - when it didn't show up - set ...
1
vote
1answer
96 views

How does Google find devices for Android Device Manager?

I've seen the news story a few weeks ago that Google has finally implemented a feature similar to Apple's Find My iPhone. The weird thing is that Google says that somehow magically all old devices ...
0
votes
2answers
71 views

Would it be possible to sandbox apps with SELinux?

Many apps require too much permissions that they do not need to function Most apps needs internet connection to talk to some API (let's say updates checking or notifications ..etc) and need to access ...
0
votes
0answers
29 views

Security of Android tethered hotspot

Basically each time I activate my phone's (Samsung S3 4.3 rooted) tethered Wi-Fi, to use the Internet on my iPad, someone can remotely connect and see what I'm doing. Even with WPA2 + strong ass ...
2
votes
1answer
289 views

What is the mobile provisioning website supposed to do?

When I go to Settings → More... → Mobile plan it gives me a message "{mobile operator} has no known provisioning website". Digging into Android source code for WirelessSettings.java I found how URL ...
1
vote
0answers
50 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
2answers
168 views

Why does every application run as a separate user under Android?

If it's for security reasons, so that one application cannot harm another, why is it not like that in the desktop Linux distros? If desktop operating systems do prefer interaction between ...
1
vote
1answer
626 views

Google Nexus 7: I can't manage my device administrators

Can someone please help me? I've installed the McAfee protection on my tablet and later changed it to Kaspersky. When trying to deactivate McAfee as device administrator it didn't work. Therefore now ...
11
votes
3answers
280 views

SwiftKey gets removed as input method after every update

Every time SwiftKey gets updated it is removed from the list of input methods. I don't remember having this problem before Android 4.4, but in the last few days SwiftKey had some updates and it just ...
0
votes
1answer
31 views

How i can protect my android from Master Key Vulneralability?

When i install apps ,that i take from my friends , it seems quite fishy , so how to check that the apps are trusted or not.
1
vote
2answers
16k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
2
votes
2answers
127 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
0
votes
1answer
127 views

Mobile Lost and some one else is using the mobile with a different sim

I need help to track the person who has my mobile. My account(email) is still linked with google play on that mobile. I can install apps from my browser from google play account. Is there any app ...
0
votes
0answers
46 views

What is custom URI handler in android?

I came across the term "Custom URI Handler" which is a bad practice in android security. Can anybody please tell what is custom URI handler? What are the security issues raised by custom URI handlers? ...
1
vote
1answer
60 views

What is master key vulnerability in android?

What is master key vulnerability in Android? From looking at a few different sites, I understand that it is bypassing the authentication provided by signing of apps. How can I detect an app is ...
-1
votes
1answer
105 views

wave hand & lock phone automatically

Is there any way to lock my Samsung Quattro (running Android 4.2) just by waving my hand upon it?
0
votes
1answer
128 views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
16
votes
1answer
836 views

Why can't a keyboard on the Samsung Galaxy S3 collect passwords?

When I enable an input method (a keyboard app) on a Nexus device, I see the following confirmation message: This input method may be able to collect all the text that you type, including personal ...
3
votes
1answer
1k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
1
vote
4answers
4k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
0
votes
0answers
88 views

full-wipe and factory reset safety

Some days ago, I saw a TV show where some people bought used phones (in that case most of them was a Symbian phone). Using some software, they recovered most of data that was saved in, like facebook ...
1
vote
0answers
463 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
0
votes
2answers
369 views

.htaccess protected HTML5 videos not playing

I have videos in a directory which is protected through .htaccess. I want to deliver the videos by means of the <video> tag. Here is an example: protected video Use test/test to login. ...
0
votes
2answers
2k views

Lookout - Which application is trying to access the system with no authorization

Is there any log where I can check which unknown source app is trying to access the phone without authorization? Lookout keeps popping up this message but don't tell me which application is! It ...
1
vote
2answers
155 views

How can I control my phone remotely?

As a new Android user, this question has had me thinking quite a while. Is it possible to create an app or is there an app available that will do the following; Remote access to your device ...
0
votes
1answer
294 views

How does Redphone encryption work?

Redphone is known for providing encryption for end-to-end calls. I am eager to know how it protects our privacy from telecom companies. How does it secure our call and text and protect our privacy ...
0
votes
1answer
317 views

Locating a stolen phone with Android Device Manager

On the weekend I had a brand new phone stolen from me. It was out of battery at the time. I'm assuming whoever stole the phone has removed the SIM card and probably re-flashed it as it was locked. ...
5
votes
1answer
128 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
0
votes
1answer
267 views

Protecting my Google identity in case my Android device gets stolen?

My devices are all linked to my main Google account. This is encouraged, almost required, by Android, for example to make my Google Play apps available everywhere. However, it requires me to store my ...
0
votes
0answers
60 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
22
votes
2answers
11k views

How do I get rid of “Network may be monitored” in KitKat?

Ever since I've installed my own CA in the key store I'm getting warnings that the network may be monitored. Well, I guess that's a valid warning if I don't trust these certificates, but I really ...
0
votes
0answers
267 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
2
votes
1answer
565 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
59 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
2
votes
1answer
69 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
1
vote
0answers
155 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
22
votes
5answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...
3
votes
2answers
1k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
1
vote
0answers
371 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
0
votes
1answer
149 views

Does a malicious android WebView break the DoubleSubmittCookie countermeasure against CSRF? [closed]

Initial situation: A RESTful webservice defends against CSRF attacks by using the double submit cookie approach. This means that the authentication token gets submitted twice and verified at the ...