Tagged Questions

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

11
votes
3answers
333 views

SwiftKey gets removed as input method after every update

Every time SwiftKey gets updated it is removed from the list of input methods. I don't remember having this problem before Android 4.4, but in the last few days SwiftKey had some updates and it just ...
0
votes
1answer
31 views

How i can protect my android from Master Key Vulneralability?

When i install apps ,that i take from my friends , it seems quite fishy , so how to check that the apps are trusted or not.
1
vote
2answers
24k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
2
votes
2answers
141 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
0
votes
1answer
134 views

Mobile Lost and some one else is using the mobile with a different sim

I need help to track the person who has my mobile. My account(email) is still linked with google play on that mobile. I can install apps from my browser from google play account. Is there any app ...
0
votes
0answers
49 views

What is custom URI handler in android?

I came across the term "Custom URI Handler" which is a bad practice in android security. Can anybody please tell what is custom URI handler? What are the security issues raised by custom URI handlers? ...
1
vote
1answer
66 views

What is master key vulnerability in android?

What is master key vulnerability in Android? From looking at a few different sites, I understand that it is bypassing the authentication provided by signing of apps. How can I detect an app is ...
-1
votes
1answer
117 views

wave hand & lock phone automatically

Is there any way to lock my Samsung Quattro (running Android 4.2) just by waving my hand upon it?
0
votes
1answer
189 views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
17
votes
1answer
1k views

Why can't a keyboard on the Samsung Galaxy S3 collect passwords?

When I enable an input method (a keyboard app) on a Nexus device, I see the following confirmation message: This input method may be able to collect all the text that you type, including personal ...
3
votes
1answer
2k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
1
vote
5answers
7k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
0
votes
0answers
101 views

full-wipe and factory reset safety

Some days ago, I saw a TV show where some people bought used phones (in that case most of them was a Symbian phone). Using some software, they recovered most of data that was saved in, like facebook ...
1
vote
0answers
489 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
0
votes
2answers
463 views

.htaccess protected HTML5 videos not playing

I have videos in a directory which is protected through .htaccess. I want to deliver the videos by means of the <video> tag. Here is an example: protected video Use test/test to login. ...
0
votes
2answers
2k views

Lookout - Which application is trying to access the system with no authorization

Is there any log where I can check which unknown source app is trying to access the phone without authorization? Lookout keeps popping up this message but don't tell me which application is! It ...
1
vote
2answers
165 views

How can I control my phone remotely?

As a new Android user, this question has had me thinking quite a while. Is it possible to create an app or is there an app available that will do the following; Remote access to your device ...
0
votes
1answer
397 views

How does Redphone encryption work?

Redphone is known for providing encryption for end-to-end calls. I am eager to know how it protects our privacy from telecom companies. How does it secure our call and text and protect our privacy ...
0
votes
1answer
423 views

Locating a stolen phone with Android Device Manager

On the weekend I had a brand new phone stolen from me. It was out of battery at the time. I'm assuming whoever stole the phone has removed the SIM card and probably re-flashed it as it was locked. ...
5
votes
1answer
143 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
0
votes
1answer
315 views

Protecting my Google identity in case my Android device gets stolen?

My devices are all linked to my main Google account. This is encouraged, almost required, by Android, for example to make my Google Play apps available everywhere. However, it requires me to store my ...
0
votes
0answers
60 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
22
votes
2answers
13k views

How do I get rid of “Network may be monitored” in KitKat?

Ever since I've installed my own CA in the key store I'm getting warnings that the network may be monitored. Well, I guess that's a valid warning if I don't trust these certificates, but I really ...
0
votes
0answers
333 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
2
votes
1answer
675 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
60 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
2
votes
1answer
75 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
1
vote
0answers
226 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
22
votes
4answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...
3
votes
2answers
2k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
1
vote
0answers
566 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
0
votes
1answer
188 views

Does a malicious android WebView break the DoubleSubmittCookie countermeasure against CSRF? [closed]

Initial situation: A RESTful webservice defends against CSRF attacks by using the double submit cookie approach. This means that the authentication token gets submitted twice and verified at the ...
1
vote
3answers
4k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
2
votes
1answer
7k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
1answer
87 views

What are ways of contracting malware/viruses on your Android phone?

I'd like to know so I can prevent it from happening.
1
vote
1answer
1k views

How secured is password protected Memo?

I have Samsung Galaxy Star (GT-S5282) with 4.1.2. I wanted to store my bank and credit card information in password protected Memo. How secured is password protected Memo? Is there a way to crack the ...
1
vote
1answer
69 views

Malware App Installed, Then uninstalled immediately- Next action steps

I recently accidentally installed an app from Google Play onto my android phone (Version 2.3.6) which was clearly a fake... It had the same name and icon as the app I wanted, and I hit the install ...
-1
votes
1answer
184 views

Can a Factory Reset fix Malware Problem? And another question too!

After factory reset my pictures, videos, and other media remained. Is it an indication of infection? Prior to the factory reset. Can you explain why my media wasn't deleted? It was supposed to wipe ...
12
votes
5answers
4k views

How to know if a side-loaded app is safe?

How can we be assured that the APK of an app that we are downloading from a website is safe to install on our Android phone? Is there a way to know that the downloaded file is safe? Is there an app ...
1
vote
1answer
109 views

How to check emails (safely & securely)? [closed]

I trust Linux more than Android. Likewise, I trust Firefox (with certain settings and certain security-related addons) more than Chrome (or Chromium). I'm new to the smartphone world and couldn't wait ...
3
votes
1answer
2k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...
0
votes
1answer
19 views

Can a MM download, being sent to one phone, also go to a third party who is concurrently sending the mutual receiver a text message?

I got a MM download that was being sent to someone to whom I was in the process of sending a text message; is this actually possible? We both ended up with the MM download; the mutual receiver of ...
2
votes
0answers
209 views

How CF-Autoroot works?

How CF-autoroot Theoretically is able to root android devices ? I'm wondering on what technics it use to run su ? Do it use a custom/patched Linux kernel ? or it is based on local root exploit ? I ...
1
vote
1answer
138 views

How do I keep my email and passwords secure without full-device encryption?

I bought a cheap, no-name Android 4.1.1 tablet a while back, and was dismayed to find that the "Encrypt Data" option was simply not present in the "Settings" -> "Security" menu. I then upgraded to a ...
1
vote
0answers
25 views

Stolen Phone: How can I purge my data if my Google password was recently changed? [duplicate]

Suppose that the cellphone is stolen and that to avoid the thief to use the email I've changed the google account password. In that case, is there something I can yet do to delete personal stuff like ...
0
votes
1answer
240 views

How can I easily deny other apps from accessing my personal data?

If I use the standard Android contacts, sms and phone app all these data are endangered to be read by other apps. Is there a solution without rooting the phone that every simple user could easily ...
1
vote
1answer
663 views

Is imessageonandroid.com really an iMessages app for Android or is it Scam?

I saw on a website that they have an iMessages app that lets you text iPhone user for free just like it is for an iPhone user texting another iPhone user. Do you use our own number, or do you have ...
3
votes
1answer
4k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
0
votes
1answer
36 views

Checking virus/security status of specific app?

So I let my 8 year old cousins play a game on my tablet for a bit and next thing i knew they had downloaded and installed three new games, some of which acted suspiciously, displaying notifications ...
0
votes
0answers
1k views

Accessing phone data when locked out

I am using a BLU Quattro HD 5.7 phone, running ICS, and I have locked myself out due to my own stupidity. It doesn't have a wifi connection or a data connection at the moment because I do not have a ...