For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...
8
votes
1answer
5k views
My android phone was stolen. How worried should I be with all my google data inside the phone?
Ok, so my samsung galaxy 5 was stolen. I had gmail, calendar, twitter(tweetdeck), facebook, ... all my personal data in it.
I didn't have any app installed that could wipe this information from a ...
8
votes
1answer
2k views
How can I remove trusted CAs on Android?
From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
8
votes
3answers
1k views
IMEI number publicly displayed whenever connected to Wifi
I connected to Wifi (using a HTC Desire using Android 2.3) and a friend used an app (I think it was on an iPhone) to display information about devices connected to the Wifi hotspot. I can accept the ...
7
votes
5answers
6k views
How do I avoid the server-specified security policies for my work e-mail?
When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?:
I just received a Nexus 7 and signed ...
7
votes
5answers
2k views
App/shortcut to quickly change screen lock type?
Two scenarios:
I'm at a "trusted" place, and don't
want to enter unlock
password/pattern all the time
I'm at an "untrusted" place and want
my phone to be password/pattern
screen locked
is there ...
7
votes
2answers
169 views
Android and antiviruses
This is actually three questions:
Are anti-viruses needed for smartphones running Android OS?
Is the Android Market absolutely safe (because all precatuions are taken by Google to prevent any ...
7
votes
1answer
412 views
Deny the installation of apps or add new accounts (kiosk mode)
I have a tablet that I want to give to people to go on the internet, but I don't want them to mess with it (install/unistall apps, add new accounts, change relevant options, etc).
Is there a way to ...
7
votes
2answers
2k views
deactivate PIN-request after airplane mode
When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
7
votes
2answers
5k views
Connecting to VPN forces having secure screen lock [duplicate]
Possible Duplicate:
Transformer Prime, VPN and password protection
I noticed that creating a VPN connection in ICS forces me to use a secure screen lock. I want to have Slide method for my ...
7
votes
3answers
254 views
Is it possible to track what information on your phone an app is uploading?
If you are concerned about what information an app is sending about you (your privacy concerns) is there any way of tracking this? Can you see if an app is sending photos on your phone? Can you see if ...
7
votes
2answers
195 views
Where should I submit bug reports for the pattern lock?
I believe i found a bug with the pattern lock.
Where should I submit bug reports for the pattern lock?
Note: this might just be a Sense thing:
Create a pattern lock.
Lock phone.
Wake phone draw ...
7
votes
3answers
248 views
Protection from Malicious Intent
Is there an app, or will Google produce a system, where I can protect my Android device?
Imagine a soundboard app that's free, but it asks for your contact information. The average user might be ...
7
votes
2answers
1k views
Open source / trusted rooting app for Android / Motorola Defy?
I found a lot of compiled rooting exploits for Android, but not a lot of source code.
So, how can I trust an exploit able to take SU rights on my mobile device? How can I be sure there is no ...
7
votes
3answers
283 views
How can I prevent android apps from reformatting my SD card?
I have a 32GB micro SD card, and some of the apps I use state that they have permsisions to modify sd card memory. I have a lot of personal files on my card, and the other day, some app, I don't know ...
7
votes
1answer
1k views
What's the security implication of having an unlocked boot loader?
Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
7
votes
1answer
7k views
Turning on encryption for an Android 4.0 device
I need to encrypt my full file system on Android device. From this link, I understand that Android provides support to enable full file system encryption based on a password but that need to be ...
7
votes
2answers
702 views
Security risks of “Open Wi-Fi Networks”
How paranoid do I need to be about allowing my phone to connect to open/unencrypted WiFi hotspots?
I don't really care if other people see my data (email being received or sent, stock quotes, ...
7
votes
2answers
550 views
Security / Privacy concerns regarding custom android ROM
What are the security and privacy concerns surrounding using a custom android ROM like that of cyanogen?
7
votes
3answers
1k views
Any hack to get rid of the “Too many password attempts” lock?
My kids often play with my phone which has a pattern lock screen, and it gets locked due to many attempts, then the phone is locked out and requires a password.
I use 2-step verification, so in ...
7
votes
1answer
370 views
What's the difference between the various lost phone apps?
I want to get a security app for my phone. I mostly need something in case my phone gets lost or stolen.
Researching this I have found several apps:
iTag
WaveSecure
LookOut
I am sure there are ...
7
votes
2answers
341 views
What is the best pre-stealing practice? [duplicate]
Possible Duplicate:
Is there a way to block access to or wipe my Google data for a lost/stolen phone
I would like to know what is the best/recommended practice to prepare myself to the day ...
7
votes
1answer
124 views
Locking down an Android device?
I'm interested in locking down an Android, so the user can only access a particular app (bonus points: only allow them to access the browser app, and only allow one website from within that).
How ...
6
votes
3answers
507 views
How do permissions work in the Android Market?
I've been told that the permissions for an app are there to inform me the types of things the app has permission to do. If this is right, can a developer 'forget' a permission and get away with using ...
6
votes
2answers
699 views
Can my Android phone be hacked without installing permissions?
After reading this article ( Kaspersky smartphone report ) this got me wondering.
Obviously if I install a dodgy app through Play Store or directly from a website, that can be dangerous, however if I ...
6
votes
3answers
3k views
How to delete a specific file in Android so that it can't be recovered?
From my experience a file deleted from a computer filesystem can often be recovered unless it is overwritten with a special program (that's usually called "shredding").
Is an Android-based HTC ...
6
votes
2answers
3k views
Can Android phones be set to automatically wipe all data after a certain amount of failed logins without an app?
A new policy at my work is being drafted regarding email access on phones. A requirement will be that the phone must automatically have all data erased after a certain amount of failed login attempts. ...
6
votes
1answer
240 views
Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?
As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
6
votes
3answers
482 views
6
votes
2answers
661 views
WiFi Hotspot Security?
Is there any way to add extra security to a WiFi hotspot created by an Android phone?
I am using a Samsung GT-S5300 with Android 2.3.6, and I am using the WiFi hotspot feature at home since Telkom ...
6
votes
3answers
2k views
Can a thief unlock or otherwise access the data on my stolen Android device?
If my Android device is stolen, will the person who ends up with it be able to get my data by plugging it into a PC and using some trick? Is there anything I can do to prevent this or make it harder?
6
votes
1answer
172 views
Can my Google Docs app be secured?
I have sensitive information in my Google Docs.
I enabled two-step verification with my Google account; but just noticed that Google DOCS on my phone doesn't require any type of PIN number or ...
6
votes
3answers
169 views
Is there a service that rates app security/permissions?
Is there a service/company/app that vets Android apps and reports on their "trustworthiness"?
I recently moved from Blackberry to a Galaxy S2 which does not have an LED indicator light. I searched ...
6
votes
2answers
110 views
How safe are my passwords at after-sales service?
My phone is currently inoperative. Samsung asked me to drop it at an approved repair center, which will handle shipment and reception to/from Samsung.
Being unable to boot my phone, it was impossible ...
6
votes
1answer
225 views
Can Applications With Root Access Modify Their Own Permissions?
For rooted phones, there are several apps which require root privileges. Knowing this, the user does allow the app to get root. Now, the app would have been installed with a set of x permissions, say ...
6
votes
1answer
77 views
Secure keyboard application from android market
Is it safe to install a keyboard application from android market that asks full internet access permission? Will it not lead to certain security risks?
There are several free and paid keyboards that ...
6
votes
2answers
592 views
How can I securely store my private key I use for logging into my home PC
I've been told that the SD card is a terrible place to store secure data because any app can read it. How else can my phone store my private key I use to log into my home PC ssh server?
6
votes
1answer
644 views
Why do App Locker apps need so many permissions? Am i safe?
I've been trying to password protect an app, and it seems that the permissions vary from app to app for App Lockers.
Why do so many of them require full phone access?
Is there any danger if i use a ...
6
votes
2answers
564 views
How secure are the “app password protection” apps?
I know there are a number of apps available that can password protect specified apps. I want to know how secure they really are.
As far as I know, there aren't any exposed OS hooks in android to ...
6
votes
2answers
343 views
I lost my Android smartphone. Play Store tells me that someone has inserted a SIM card. How can I find out the phone number?
I lost my Samsung Galaxy S, which was signed into Google Play.
Now, Play Store has identified that someone has inserted another SIM card with a different service provider.
Is there anyway I can find ...
6
votes
2answers
748 views
OpenVPN with Android 2.3.x - security concerns
I need to use my Android 2.3.x phone to access an OpenVPN server. I have CM 7 with built in support for OpenVPN and tun. My main concern is that I don't know where to put the keys in. If my phone gets ...
6
votes
1answer
902 views
Full encryption with Android?
I have an LG GT540 Optimus with Android.
How can I encrypt all my filesystems to ensure that if it gets stolen, no one will get my passwords, contacts, etc.. :\ ?
Thank you!
6
votes
1answer
807 views
Is there an official dialer code resource?
There are a ton of XDA forums and a decent number of answers here that refer to specific dialer codes. For instance *#*#4636#*#* will cause unicorns to spring forth from your phone or tell you what OS ...
5
votes
2answers
140 views
Are firmware updates secure?
Now that mobiles are being used for payment systems, I'm more concerned about the security on my Android device.
I would rather not be the first to be vulnerable to some malicious code that happened ...
5
votes
2answers
1k views
Restricting Web Access to a single domain on Android tablets?
Our sales team came to me earlier with a question about Android OS. I've never used Android, but I do know it is a Linux-based OS.
Frankly, I don't have the time to research for myself the ...
5
votes
2answers
586 views
5
votes
4answers
2k views
Forgot security lock pattern on Jelly Bean device with Wifi and 3G data turned off
I forgot my security lock pattern and my Wifi and 3G connections are switched off. I can hard reset the phone (Galaxy Nexus) from recovery mode, but that would wipe all my data.
ADB is also turned off ...
5
votes
2answers
144 views
Is there a standard place for the Owner Information on an Android phone?
I found an lost Android phone - is there a standard place on Android phones for owner information so I can contact the person who lost it?
5
votes
1answer
537 views
How secure is a sim lock?
I have sim lock enabled on my sim, so basically, if I put my sim in another phone or if I restart my phone, I need to enter the sim lock pin.
How easy is it to crack the sim lock if a theif got hold ...
5
votes
2answers
896 views
Google two-step authentication and Android lock screen
After many failed screen unlock attempts, the user is required to enter the Google account password. That's a good idea.
But what if I enabled Google's two-factor authentication, and then entered the ...
5
votes
3answers
413 views
Is a PIN lock screen inherently more or less secure than an app lock program?
The two ways I see to secure an Android phone is through a PIN lock screen or through an app lock program (Password is too inconvenient and pattern is insecure for various reasons). The lock screen ...
