For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

3
votes
2answers
348 views

What is the setting in xprivacy to access the microphone?

I use xprivacy to set all permissions on my phone, but I accidently forbid the tuner app to access my microphone. Which setting do I have to enable?
55
votes
6answers
27k views

My Gmail is signed in through the app on ex-boyfriend's phone

I had my email signed in on the Gmail app on my boyfriend's phone who is now on the other side of the country. I've asked him a couple times to disconnect it but recently checked out Google Play and ...
6
votes
1answer
135 views

Can I recall a command to reset a lost phone?

Last night I lost my Nexus 7 coming back from a friend's house. Since it has a lot of confidential work email on one account I logged into the Android Device Manager and - when it didn't show up - set ...
1
vote
1answer
116 views

How does Google find devices for Android Device Manager?

I've seen the news story a few weeks ago that Google has finally implemented a feature similar to Apple's Find My iPhone. The weird thing is that Google says that somehow magically all old devices ...
0
votes
2answers
95 views

Would it be possible to sandbox apps with SELinux?

Many apps require too much permissions that they do not need to function Most apps needs internet connection to talk to some API (let's say updates checking or notifications ..etc) and need to access ...
0
votes
0answers
38 views

Security of Android tethered hotspot

Basically each time I activate my phone's (Samsung S3 4.3 rooted) tethered Wi-Fi, to use the Internet on my iPad, someone can remotely connect and see what I'm doing. Even with WPA2 + strong ass ...
2
votes
1answer
370 views

What is the mobile provisioning website supposed to do?

When I go to Settings → More... → Mobile plan it gives me a message "{mobile operator} has no known provisioning website". Digging into Android source code for WirelessSettings.java I found how URL ...
1
vote
0answers
52 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
2answers
193 views

Why does every application run as a separate user under Android?

If it's for security reasons, so that one application cannot harm another, why is it not like that in the desktop Linux distros? If desktop operating systems do prefer interaction between ...
1
vote
1answer
1k views

Google Nexus 7: I can't manage my device administrators

Can someone please help me? I've installed the McAfee protection on my tablet and later changed it to Kaspersky. When trying to deactivate McAfee as device administrator it didn't work. Therefore now ...
11
votes
3answers
349 views

SwiftKey gets removed as input method after every update

Every time SwiftKey gets updated it is removed from the list of input methods. I don't remember having this problem before Android 4.4, but in the last few days SwiftKey had some updates and it just ...
0
votes
1answer
33 views

How i can protect my android from Master Key Vulneralability?

When i install apps ,that i take from my friends , it seems quite fishy , so how to check that the apps are trusted or not.
1
vote
2answers
27k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
2
votes
2answers
149 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
0
votes
1answer
138 views

Mobile Lost and some one else is using the mobile with a different sim

I need help to track the person who has my mobile. My account(email) is still linked with google play on that mobile. I can install apps from my browser from google play account. Is there any app ...
0
votes
0answers
49 views

What is custom URI handler in android?

I came across the term "Custom URI Handler" which is a bad practice in android security. Can anybody please tell what is custom URI handler? What are the security issues raised by custom URI handlers? ...
1
vote
1answer
68 views

What is master key vulnerability in android?

What is master key vulnerability in Android? From looking at a few different sites, I understand that it is bypassing the authentication provided by signing of apps. How can I detect an app is ...
-1
votes
1answer
119 views

wave hand & lock phone automatically

Is there any way to lock my Samsung Quattro (running Android 4.2) just by waving my hand upon it?
0
votes
1answer
212 views

How to remotely backup folders on stolen Android?

Most Android anti-theft apps can backup photos and text messages, but is there any app that can be installed through the web version of Google Play that can give me access to my folders and files to ...
17
votes
1answer
1k views

Why can't a keyboard on the Samsung Galaxy S3 collect passwords?

When I enable an input method (a keyboard app) on a Nexus device, I see the following confirmation message: This input method may be able to collect all the text that you type, including personal ...
3
votes
1answer
2k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
1
vote
5answers
8k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
1
vote
0answers
496 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
0
votes
2answers
503 views

.htaccess protected HTML5 videos not playing

I have videos in a directory which is protected through .htaccess. I want to deliver the videos by means of the <video> tag. Here is an example: protected video Use test/test to login. ...
0
votes
2answers
2k views

Lookout - Which application is trying to access the system with no authorization

Is there any log where I can check which unknown source app is trying to access the phone without authorization? Lookout keeps popping up this message but don't tell me which application is! It ...
1
vote
2answers
170 views

How can I control my phone remotely?

As a new Android user, this question has had me thinking quite a while. Is it possible to create an app or is there an app available that will do the following; Remote access to your device ...
0
votes
1answer
418 views

How does Redphone encryption work?

Redphone is known for providing encryption for end-to-end calls. I am eager to know how it protects our privacy from telecom companies. How does it secure our call and text and protect our privacy ...
0
votes
1answer
464 views

Locating a stolen phone with Android Device Manager

On the weekend I had a brand new phone stolen from me. It was out of battery at the time. I'm assuming whoever stole the phone has removed the SIM card and probably re-flashed it as it was locked. ...
5
votes
1answer
147 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
0
votes
1answer
344 views

Protecting my Google identity in case my Android device gets stolen?

My devices are all linked to my main Google account. This is encouraged, almost required, by Android, for example to make my Google Play apps available everywhere. However, it requires me to store my ...
0
votes
0answers
61 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
22
votes
2answers
14k views

How do I get rid of “Network may be monitored” in KitKat?

Ever since I've installed my own CA in the key store I'm getting warnings that the network may be monitored. Well, I guess that's a valid warning if I don't trust these certificates, but I really ...
0
votes
0answers
343 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
2
votes
1answer
705 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
63 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
2
votes
1answer
76 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
1
vote
0answers
244 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
22
votes
4answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...
3
votes
2answers
2k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
1
vote
0answers
614 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
0
votes
1answer
210 views

Does a malicious android WebView break the DoubleSubmittCookie countermeasure against CSRF? [closed]

Initial situation: A RESTful webservice defends against CSRF attacks by using the double submit cookie approach. This means that the authentication token gets submitted twice and verified at the ...
1
vote
3answers
4k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
2
votes
1answer
8k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
1answer
89 views

What are ways of contracting malware/viruses on your Android phone?

I'd like to know so I can prevent it from happening.
1
vote
1answer
1k views

How secured is password protected Memo?

I have Samsung Galaxy Star (GT-S5282) with 4.1.2. I wanted to store my bank and credit card information in password protected Memo. How secured is password protected Memo? Is there a way to crack the ...
1
vote
1answer
70 views

Malware App Installed, Then uninstalled immediately- Next action steps

I recently accidentally installed an app from Google Play onto my android phone (Version 2.3.6) which was clearly a fake... It had the same name and icon as the app I wanted, and I hit the install ...
-1
votes
1answer
186 views

Can a Factory Reset fix Malware Problem? And another question too!

After factory reset my pictures, videos, and other media remained. Is it an indication of infection? Prior to the factory reset. Can you explain why my media wasn't deleted? It was supposed to wipe ...
12
votes
5answers
4k views

How to know if a side-loaded app is safe?

How can we be assured that the APK of an app that we are downloading from a website is safe to install on our Android phone? Is there a way to know that the downloaded file is safe? Is there an app ...
1
vote
1answer
110 views

How to check emails (safely & securely)? [closed]

I trust Linux more than Android. Likewise, I trust Firefox (with certain settings and certain security-related addons) more than Chrome (or Chromium). I'm new to the smartphone world and couldn't wait ...
3
votes
1answer
2k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...