For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
1answer
142 views

What is the setting in xprivacy to access the microphone?

I use xprivacy to set all permissions on my phone, but I accidently forbid the tuner app to access my microphone. Which setting do I have to enable?
53
votes
6answers
17k views

My Gmail is signed in through the app on ex-boyfriend's phone

I had my email signed in on the Gmail app on my boyfriend's phone who is now on the other side of the country. I've asked him a couple times to disconnect it but recently checked out Google Play and ...
6
votes
1answer
100 views

Can I recall a command to reset a lost phone?

Last night I lost my Nexus 7 coming back from a friend's house. Since it has a lot of confidential work email on one account I logged into the Android Device Manager and - when it didn't show up - set ...
1
vote
1answer
89 views

How does Google find devices for Android Device Manager?

I've seen the news story a few weeks ago that Google has finally implemented a feature similar to Apple's Find My iPhone. The weird thing is that Google says that somehow magically all old devices ...
0
votes
2answers
64 views

Would it be possible to sandbox apps with SELinux?

Many apps require too much permissions that they do not need to function Most apps needs internet connection to talk to some API (let's say updates checking or notifications ..etc) and need to access ...
0
votes
0answers
27 views

Security of Android tethered hotspot

Basically each time I activate my phone's (Samsung S3 4.3 rooted) tethered Wi-Fi, to use the Internet on my iPad, someone can remotely connect and see what I'm doing. Even with WPA2 + strong ass ...
2
votes
1answer
254 views

What is the mobile provisioning website supposed to do?

When I go to Settings → More... → Mobile plan it gives me a message "{mobile operator} has no known provisioning website". Digging into Android source code for WirelessSettings.java I found how URL ...
1
vote
0answers
50 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
2answers
157 views

Why does every application run as a separate user under Android?

If it's for security reasons, so that one application cannot harm another, why is it not like that in the desktop Linux distros? If desktop operating systems do prefer interaction between ...
0
votes
1answer
496 views

Google Nexus 7: I can't manage my device administrators

Can someone please help me? I've installed the McAfee protection on my tablet and later changed it to Kaspersky. When trying to deactivate McAfee as device administrator it didn't work. Therefore now ...
11
votes
3answers
244 views

SwiftKey gets removed as input method after every update

Every time SwiftKey gets updated it is removed from the list of input methods. I don't remember having this problem before Android 4.4, but in the last few days SwiftKey had some updates and it just ...
0
votes
1answer
30 views

How i can protect my android from Master Key Vulneralability?

When i install apps ,that i take from my friends , it seems quite fishy , so how to check that the apps are trusted or not.
1
vote
2answers
12k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
2
votes
2answers
124 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
0
votes
1answer
115 views

Mobile Lost and some one else is using the mobile with a different sim

I need help to track the person who has my mobile. My account(email) is still linked with google play on that mobile. I can install apps from my browser from google play account. Is there any app ...
0
votes
0answers
46 views

What is custom URI handler in android?

I came across the term "Custom URI Handler" which is a bad practice in android security. Can anybody please tell what is custom URI handler? What are the security issues raised by custom URI handlers? ...
1
vote
1answer
58 views

What is master key vulnerability in android?

What is master key vulnerability in Android? From looking at a few different sites, I understand that it is bypassing the authentication provided by signing of apps. How can I detect an app is ...
-1
votes
1answer
103 views

wave hand & lock phone automatically

Is there any way to lock my Samsung Quattro (running Android 4.2) just by waving my hand upon it?
0
votes
1answer
115 views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
16
votes
1answer
729 views

Why can't a keyboard on the Samsung Galaxy S3 collect passwords?

When I enable an input method (a keyboard app) on a Nexus device, I see the following confirmation message: This input method may be able to collect all the text that you type, including personal ...
3
votes
1answer
1k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
1
vote
4answers
4k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
0
votes
0answers
85 views

full-wipe and factory reset safety

Some days ago, I saw a TV show where some people bought used phones (in that case most of them was a Symbian phone). Using some software, they recovered most of data that was saved in, like facebook ...
1
vote
0answers
459 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
0
votes
2answers
322 views

.htaccess protected HTML5 videos not playing

I have videos in a directory which is protected through .htaccess. I want to deliver the videos by means of the <video> tag. Here is an example: protected video Use test/test to login. ...
0
votes
2answers
1k views

Lookout - Which application is trying to access the system with no authorization

Is there any log where I can check which unknown source app is trying to access the phone without authorization? Lookout keeps popping up this message but don't tell me which application is! It ...
1
vote
2answers
152 views

How can I control my phone remotely?

As a new Android user, this question has had me thinking quite a while. Is it possible to create an app or is there an app available that will do the following; Remote access to your device ...
0
votes
1answer
250 views

How does Redphone encryption work?

Redphone is known for providing encryption for end-to-end calls. I am eager to know how it protects our privacy from telecom companies. How does it secure our call and text and protect our privacy ...
0
votes
1answer
294 views

Locating a stolen phone with Android Device Manager

On the weekend I had a brand new phone stolen from me. It was out of battery at the time. I'm assuming whoever stole the phone has removed the SIM card and probably re-flashed it as it was locked. ...
5
votes
1answer
124 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
0
votes
1answer
251 views

Protecting my Google identity in case my Android device gets stolen?

My devices are all linked to my main Google account. This is encouraged, almost required, by Android, for example to make my Google Play apps available everywhere. However, it requires me to store my ...
0
votes
0answers
59 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
21
votes
2answers
9k views

How do I get rid of “Network may be monitored” in KitKat?

Ever since I've installed my own CA in the key store I'm getting warnings that the network may be monitored. Well, I guess that's a valid warning if I don't trust these certificates, but I really ...
0
votes
0answers
212 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
2
votes
1answer
527 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
56 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
2
votes
1answer
69 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
1
vote
0answers
139 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
22
votes
5answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...
3
votes
2answers
1k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
1
vote
0answers
316 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
0
votes
1answer
136 views

Does a malicious android WebView break the DoubleSubmittCookie countermeasure against CSRF? [closed]

Initial situation: A RESTful webservice defends against CSRF attacks by using the double submit cookie approach. This means that the authentication token gets submitted twice and verified at the ...
1
vote
3answers
3k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
2
votes
1answer
5k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
1answer
81 views

What are ways of contracting malware/viruses on your Android phone?

I'd like to know so I can prevent it from happening.
1
vote
1answer
737 views

How secured is password protected Memo?

I have Samsung Galaxy Star (GT-S5282) with 4.1.2. I wanted to store my bank and credit card information in password protected Memo. How secured is password protected Memo? Is there a way to crack the ...
1
vote
1answer
65 views

Malware App Installed, Then uninstalled immediately- Next action steps

I recently accidentally installed an app from Google Play onto my android phone (Version 2.3.6) which was clearly a fake... It had the same name and icon as the app I wanted, and I hit the install ...
-1
votes
1answer
174 views

Can a Factory Reset fix Malware Problem? And another question too!

After factory reset my pictures, videos, and other media remained. Is it an indication of infection? Prior to the factory reset. Can you explain why my media wasn't deleted? It was supposed to wipe ...
12
votes
5answers
2k views

How to know if a side-loaded app is safe?

How can we be assured that the APK of an app that we are downloading from a website is safe to install on our Android phone? Is there a way to know that the downloaded file is safe? Is there an app ...
1
vote
1answer
102 views

How to check emails (safely & securely)? [closed]

I trust Linux more than Android. Likewise, I trust Firefox (with certain settings and certain security-related addons) more than Chrome (or Chromium). I'm new to the smartphone world and couldn't wait ...