For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

9
votes
3answers
190 views

Pros and cons of rooting using apps (“Soft Root”) compared to other methods (“Hard Root”)

There are quite a few app based rooting methods. A recent review 9 free software apps to root Android devices, points to some of them and there may be more apps, paid or otherwise. From what I ...
0
votes
1answer
674 views

How to turn off Android Device Manager on the web

My phone got stolen yesterday. I have never downloaded Android Device Manager or enabled it on my phone but for some reason, when I go onto the ADM web page, it could track my phone (up until a day ...
1
vote
1answer
53 views

Is there any SSH OS support in Android?

I am reading the article Jolla and SSH push Sailfish Secure as “European alternative” mobile OS. I have used third-party applications for SSH in my phone but would like to have OS supported. How ...
0
votes
0answers
90 views

AccountManager: how can passwords be stored and retrieved without also storing the decrypt key?

Can the Android AccountManager be hacked and its account passwords retrieved? I mean, how is the decrypt key stored in a way that is safe from being retrieved by password-spoofing software? Is special ...
1
vote
0answers
155 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
-1
votes
1answer
47 views

How do I tell if a given Android phone is vulnerable to CVE-2012-4221, CVE-2013-2596, CVE-2013-2597, CVE-2013-6282?

I want to determine if a given Android Phone + OS is vulnerable to a set of CVEs. What process do I need to do to do to determine if a given Phone is vulnerable?
1
vote
1answer
1k views

App sending spam messages to my contacts

My phone sent the following message to all of my contacts: Install this voice messenger just to talk http://mrv.withmechat.us/Cun I know I didn't send this message and not to mention it sent it ...
0
votes
0answers
67 views

Turn off pin without pin

I've just got a new Android phone with fingerprint recognition. I set a fingerprint to unlock and a pin. For some reason I've forgotten the pin. I can unlock the phone fine with the finger print, ...
-1
votes
1answer
374 views

How to remove Taboola adware?

I have factory-reset my mobile, and had already scanned with antivirus for adware, which it found but it couldn't remove. What should I do?
1
vote
0answers
171 views

How can an organization control when or when not an update for an app is installed in their Android smartphones?

Imagine an organization that have a legitimate fear to automatic updates. That organization thinks that an automatic update may break a business use case. For example, when the VPN client is update ...
0
votes
0answers
38 views

Moving an app out of a myKNOX container

Is it possible to move an app back out of a myKNOX container? I have an app that I have written myself and loaded onto a samsung xcover3 via eclipse and a USB cable. I then installed myKNOX and ...
0
votes
1answer
45 views

To configure tethering as two step login?

I have given my password of wifi stations to group of people. However, I want to allow only specific people to login at specific time. Attempt I could not enable a basic MAC filtering for devices. ...
2
votes
1answer
839 views

What data flows through AirDroid's servers?

When using AirDroid do your text messages and/or data get transmitted through AirDroid's servers or is that data kept locally between your Android device and your computer? My understanding is that ...
-1
votes
1answer
39 views

Is it safe to use this app and will it cause problems in 6.0?

Classic Dialpad for KitKat and Lollipop Just wanted to check if there's any reason not to use this, here's what the permissions looks like. Click image to enlarge I'm assuming its just a ...
0
votes
0answers
173 views

Samsung KNOX equivalent for other device manufacturers

Are any other device manufacturers offering a samsung KNOX type solution? Maybe the other big players, i.e. Motorola, HTC or Sony have a similar technology available for securing their Android ...
0
votes
2answers
228 views

Does Android locally encrypt your fingerprint?

I got myself a Nexus 6P with a fancy fingerprint scanner. So far I'm a bit reluctant to use it because I can't find any info on how Android Marshmallow stores those fingerprints. Are they hashed (as ...
0
votes
0answers
40 views

Why sometimes my device doesn't try to recognize trusted face?

I set up trusted face in the smart lock security section of my Nexus 6. When I press power button in attempt to unlock my device usually I see a face/person symbol on the bottom of the screen, as a ...
-1
votes
1answer
190 views

Unknown sources, root, and the Android security conundrum [closed]

This question has 2 aspects, both are related and equally important from a security standpoint: 1) The "Allow installations from unknown sources" option under Security settings. Most other mobile ...
0
votes
1answer
81 views

Do devices with a fingerprint scanner prevent access to the bootloader/recovery

Pretty simple question but as I have never owned a device with a fingerprint scanner... basically I was wondering: If you secure your device with your fingerprint - is it possible to access the ...
0
votes
0answers
81 views

How to add private key to keychain in Android?

I do not want to type my passwords all the time, but instead, just the password to my private keys. I am using Samsung Galaxy 4 and Android 5.0.1. How can you add private key to your Android ...
0
votes
0answers
12 views

Two factor authenticator app which works when we lost our phone but able to use back same phone number

Currently, I'm using Google Authenticator in my phone. If I lost my phone, but able to get a new phone device, and use back my previous old phone number, will Google Authenticator continue to work? ...
0
votes
1answer
139 views

Calculator WiFi usage on Marshmallow, Nexus 5? What?

I have not used the calculator app. I also don't know why it would be using the wifi or any kind of external data. Yet behold, below: I flashed 6.0 recently and restored some apps from an old ...
0
votes
1answer
53 views

Firefox for Android mysterious connections after turning everything off in settings

I created a user.js that incorporates support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections and other tweaks, yet Firefox for Android still attempts to connect to several ...
0
votes
1answer
748 views

is there a keylogger in my phone

I have an Android phone accent a400 and I sent it to a repair store to change the broken screen. After receiving the phone, I noticed that they did a reset to the phone and the internal memory doesn't ...
1
vote
1answer
143 views

Is Snowden snowing us with his “Smurfs Suite” interview?

I hope this is not too off-topic. This morning when I read news it was full of articles quoting Snowden in his most recent interviews. Apparently the UK's GCHQ and the USA's NSA can (1) turn your ...
0
votes
0answers
117 views

How to log all user interaction on my device?

I would like to know whether on an Android device it is possible to: Log the date and time of every time a password is entered on my Android phone (this security measure would mean that if someone ...
0
votes
0answers
16 views

How can I audit access to Android Accounts?

I want to audit the calls made to the Authentication Providers by connected applications. The reason is that I am investigating a rogue application that seems to collect more data and permissions ...
0
votes
0answers
25 views

Full encryption of a singe purpose device (e.g barcode scanner )

How could we run a single purpose device with high sensitive date on Android 4.4 or later, with full disk encryption and have it unencrypted and unlocked only after entering the device password only ...
0
votes
0answers
269 views

Why does AVG consider android keychain harmful?

I just got this Lenovo tab 2 A8. When I ran my first AVG scan, it pinpointed Keychain as a threat. What is Keychain? Is it necessary? If not, how do I get rid of it?
0
votes
0answers
56 views

Use and interpretation of AIMSICD

I just downloaded AIMSICD and I understand pretty much what it does but what am I looking for when reading its statistics, results and maps?
1
vote
0answers
55 views

Is there a way to use a phone as a virtual keychain for NFC tags?

So let's say I have a bunch of things that can be unlocked via NFC. Each thing would correspond with one tag and one tag only. The problem would then be that I'd have to carry a bunch of tags around. ...
0
votes
0answers
49 views

How to enable password entry for encrypted lollipop but disable built in screen locker at the same time?

I want this because I want to use a strong password to protect my device at boot time, but protect the screen with one time passwords when it is already turned on.
4
votes
3answers
209 views

How do I see if my Android Nexus received the latest security updates?

I'd like to check the patch level of my Nexus. I'm using Lollipop 5.1.1 build LMY48I. Under 'System updates' in 'About phone', it says 'Your system is up to date'. Should I assume that includes ...
6
votes
3answers
197 views

security implications of participating in app beta testing? [closed]

I am an IT professional (but not in app development). Two days ago someone contacted me about a blog post I made and invited me to participate in beta testing for a messaging app which was related to ...
2
votes
1answer
122 views

Pop up about security problems

I had a lot of these pop ups and I don't know if it's for real or not.
1
vote
1answer
2k views

How unlock S6 Edge When The Finger Print Scanner is Not Working?

My S6 edge was locked by finger print. It was working fine, but today while I was on bath my child was playing with my mobile and by mistake they tried finger print scanner, now my device is locked ...
1
vote
1answer
421 views

I've installed a custom recovery image, but not yet rooted my phone. How can I install SuperSU and subscribe to automatic updates?

I own a Samsung smartphone. I'm running Android 4.1.2 "Jelly Bean". I've also installed ClockworkMod Recovery 6.0.4.5. Each time I exit ClockworkMod Recovery, it offers to root my phone. I haven't ...
4
votes
0answers
3k views

What is Google Partner Setup?

What does the Google Partner Setup app that is pre-installed on almost every Android device actually do? Why does it need each of those intrusive permissions, especially the Phone permission? Why ...
0
votes
0answers
54 views

How can I check in my Android has been compromised?

I noticed this morning that there was an email in my drafts folder. Inside, was some semi-gibberish text (a couple partial words crammed together). It was definitely not something I typed. I ...
0
votes
2answers
51 views

Where can I report vulnerabilities to Google?

Where can I report glitches/bugs/vulnerabilities to google? I would look it up, but I don't know how to word it. Besides, I am working on more devices I can count (don't ask) and I have found some... ...
3
votes
2answers
115 views

If I can access bubble of Messenger like apps from home screen then does it not mean any other app can also access that app? Is Android safe then?

In Android phones, we can access Messenger and many more apps similar to it from home screen ( like bubble-heads, lyrics etc). With this we let one app in your phone access another app, (we can use ...
0
votes
2answers
52 views

How safe are downloadable lock apps?

I've noticed quite a few lock screen apps and some of them do seem to be rather interesting. But, are they really that secure? I've seen some where I can bypass them by using the Recently Opened Apps ...
0
votes
0answers
59 views

Is there any way to backup or transfer AppOps settings?

For those of us who use AppOps, we have hundreds, if not thousands, of settings stored in that app. When transferring to a new device, is there a way to transfer those AppOps settings from one device ...
1
vote
0answers
65 views

Combining Ghostery and HTTPS-Everywhere on Android?

On my PC (Windows 8.1) I am happily using Firefox with the Addons Ghostery and HTTPS-Everywhere. I really like this combination so I winder how I can achieve the same things on my Android phone. I ...
0
votes
1answer
67 views

What are the security implications of enabling NFC on my Andriod device?

My first NFC-capable Android device (running Lollipop) is on its way. I've been doing some research, and got some info on how NFC events are handled internally, but I'd like some more practical ...
1
vote
0answers
76 views

New Android Hack/Compromise?

In the past three weeks, I've received calls from numbers I don't recognize and haven't answered them, but these calls leave voicemails over a few minutes. I've listened to a few of the voicemails ...
2
votes
0answers
168 views

How to use network interface as non-root user?

I want to communicate between my Android device and my Linux box over IP through the USB network interface mode. The device I'm using is a OnePlus One running CM12.1 nightly builds. It's rooted and ...
0
votes
0answers
130 views

How to block some URL`s in Android Louncher App without root?

There is a list of sites, but the user should not be able to go in the running, installed application (Launcher). How to implement this feature on phones without root rights ? For example, I ...
4
votes
2answers
181 views

Protect ADB access via network?

I have several Android devices in a local network. (Android Set Top Boxes from Geniatech, running 4.2 Jelly-Bean) If these boxes have problems or need debugging, I simply connect to them via adb ...
0
votes
0answers
528 views

A message said someone from Ukraine accessed my phone. What to do? How to see this message again?

While I was using my Samsung Galaxy S3 (Android 4.3), a message suddenly popped up saying that someone accessed (or tried to access; I don't exactly remember) your phone from Kiev, Ukraine (I'm in the ...