For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
0answers
474 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
0
votes
2answers
437 views

.htaccess protected HTML5 videos not playing

I have videos in a directory which is protected through .htaccess. I want to deliver the videos by means of the <video> tag. Here is an example: protected video Use test/test to login. ...
0
votes
2answers
2k views

Lookout - Which application is trying to access the system with no authorization

Is there any log where I can check which unknown source app is trying to access the phone without authorization? Lookout keeps popping up this message but don't tell me which application is! It ...
1
vote
2answers
159 views

How can I control my phone remotely?

As a new Android user, this question has had me thinking quite a while. Is it possible to create an app or is there an app available that will do the following; Remote access to your device ...
0
votes
1answer
354 views

How does Redphone encryption work?

Redphone is known for providing encryption for end-to-end calls. I am eager to know how it protects our privacy from telecom companies. How does it secure our call and text and protect our privacy ...
0
votes
1answer
372 views

Locating a stolen phone with Android Device Manager

On the weekend I had a brand new phone stolen from me. It was out of battery at the time. I'm assuming whoever stole the phone has removed the SIM card and probably re-flashed it as it was locked. ...
5
votes
1answer
135 views

Provably, temporary, disable wireless networking on Android tablet

I am taking an exam during which any materials or electronic devices are allowed, provided that I can demonstrate that they cannot be used for communicating with others. I want to take my Android ...
0
votes
1answer
293 views

Protecting my Google identity in case my Android device gets stolen?

My devices are all linked to my main Google account. This is encouraged, almost required, by Android, for example to make my Google Play apps available everywhere. However, it requires me to store my ...
0
votes
0answers
60 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
22
votes
2answers
12k views

How do I get rid of “Network may be monitored” in KitKat?

Ever since I've installed my own CA in the key store I'm getting warnings that the network may be monitored. Well, I guess that's a valid warning if I don't trust these certificates, but I really ...
0
votes
0answers
308 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
2
votes
1answer
613 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
1
vote
1answer
60 views

What does deleting a file really do? [closed]

When I run an app, select a file, and choose "delete" what happens then: the file is moved to trash (and later is removed by OS when some conditions are met) the file is removed from the filesystem ...
2
votes
1answer
73 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
1
vote
0answers
192 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
22
votes
5answers
1k views

Can there be malicious apps on Google Play?

Do I need to worry about malicious apps on Google Play, or can I trust everything I install, so long as I install it from Google Play? And if I need to worry, what red flags should I look for - ...
3
votes
2answers
1k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
1
vote
0answers
482 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
0
votes
1answer
174 views

Does a malicious android WebView break the DoubleSubmittCookie countermeasure against CSRF? [closed]

Initial situation: A RESTful webservice defends against CSRF attacks by using the double submit cookie approach. This means that the authentication token gets submitted twice and verified at the ...
1
vote
3answers
4k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
2
votes
1answer
6k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
1answer
86 views

What are ways of contracting malware/viruses on your Android phone?

I'd like to know so I can prevent it from happening.
1
vote
1answer
1k views

How secured is password protected Memo?

I have Samsung Galaxy Star (GT-S5282) with 4.1.2. I wanted to store my bank and credit card information in password protected Memo. How secured is password protected Memo? Is there a way to crack the ...
1
vote
1answer
69 views

Malware App Installed, Then uninstalled immediately- Next action steps

I recently accidentally installed an app from Google Play onto my android phone (Version 2.3.6) which was clearly a fake... It had the same name and icon as the app I wanted, and I hit the install ...
-1
votes
1answer
181 views

Can a Factory Reset fix Malware Problem? And another question too!

After factory reset my pictures, videos, and other media remained. Is it an indication of infection? Prior to the factory reset. Can you explain why my media wasn't deleted? It was supposed to wipe ...
12
votes
5answers
3k views

How to know if a side-loaded app is safe?

How can we be assured that the APK of an app that we are downloading from a website is safe to install on our Android phone? Is there a way to know that the downloaded file is safe? Is there an app ...
1
vote
1answer
107 views

How to check emails (safely & securely)? [closed]

I trust Linux more than Android. Likewise, I trust Firefox (with certain settings and certain security-related addons) more than Chrome (or Chromium). I'm new to the smartphone world and couldn't wait ...
3
votes
1answer
2k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...
0
votes
1answer
18 views

Can a MM download, being sent to one phone, also go to a third party who is concurrently sending the mutual receiver a text message?

I got a MM download that was being sent to someone to whom I was in the process of sending a text message; is this actually possible? We both ended up with the MM download; the mutual receiver of ...
2
votes
0answers
184 views

How CF-Autoroot works?

How CF-autoroot Theoretically is able to root android devices ? I'm wondering on what technics it use to run su ? Do it use a custom/patched Linux kernel ? or it is based on local root exploit ? I ...
1
vote
1answer
136 views

How do I keep my email and passwords secure without full-device encryption?

I bought a cheap, no-name Android 4.1.1 tablet a while back, and was dismayed to find that the "Encrypt Data" option was simply not present in the "Settings" -> "Security" menu. I then upgraded to a ...
1
vote
0answers
25 views

Stolen Phone: How can I purge my data if my Google password was recently changed? [duplicate]

Suppose that the cellphone is stolen and that to avoid the thief to use the email I've changed the google account password. In that case, is there something I can yet do to delete personal stuff like ...
0
votes
1answer
222 views

How can I easily deny other apps from accessing my personal data?

If I use the standard Android contacts, sms and phone app all these data are endangered to be read by other apps. Is there a solution without rooting the phone that every simple user could easily ...
1
vote
1answer
617 views

Is imessageonandroid.com really an iMessages app for Android or is it Scam?

I saw on a website that they have an iMessages app that lets you text iPhone user for free just like it is for an iPhone user texting another iPhone user. Do you use our own number, or do you have ...
3
votes
1answer
4k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
0
votes
1answer
33 views

Checking virus/security status of specific app?

So I let my 8 year old cousins play a game on my tablet for a bit and next thing i knew they had downloaded and installed three new games, some of which acted suspiciously, displaying notifications ...
0
votes
0answers
1k views

Accessing phone data when locked out

I am using a BLU Quattro HD 5.7 phone, running ICS, and I have locked myself out due to my own stupidity. It doesn't have a wifi connection or a data connection at the moment because I do not have a ...
3
votes
5answers
4k views

Remote factory reset and changing Google password

In case I ever lose my Nexus 4 phone, I've opened to the Google Settings app, then tapped "Android Device Manager" and from there, I've enabled both "Remotely locate this device" and "Allow remote ...
7
votes
1answer
173 views

Does the Secure Random bug affect apps besides Bitcoin?

The Bitcoin Project recently announced a bug in the SecureRandom implementation on Android, which caused Bitcoin wallet apps to generate weak private keys that leave bitcoins vulnerable to theft. The ...
0
votes
1answer
318 views

does it really work? rekey.app claims to protect agains Master Key vulnerabilities

The android app rekey claims that it can protect android device against "Master Key" vulnerabilities on their website they have a test/proofOfConcept To verify that your device has been patched, you ...
0
votes
1answer
102 views

How can I determine what URL an app is accessing?

I have an app that downloads mp3 files. The app does not tell you where it is getting these files from. Is there an Android tool/app I can use to figure out what URL an app is accessing from my ...
1
vote
1answer
1k views

Android 4 don't require unlock at home

In the Android OS version 4, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting ...
2
votes
1answer
5k views

Do not auto-mount Samsung Galaxy S4 Mini when USB is connected

I had an HTC desire phone, before upgrading to a Galaxy S4 Mini. I have run into an annoying problem. On my phone (not on the SD Card), I have private data, including an RSA key, which I use to SSH ...
1
vote
0answers
400 views

No encryption option on Huawei g510 and Android 4.1.1

I recently bought a Huawei g510 with Android 4.1.1 and I was going to encrypt it, but I just can't find the encryption option in the settings panel or any other place. I looked around on the net but ...
0
votes
0answers
94 views

I think that I may have been a victim of a malicious mms

I have a Sidekick 4g running Android 2.2.1. I just received a multimedia message from an acquaintance who I happened to have in my contact list. I clicked on the notification which sent me to ...
2
votes
2answers
697 views

Is there a Ghostery equivalent for Firefox on Android?

I use Firefox on a smartphone with limited RAM, where Ghostery would be most useful (removing useless content). Plus I don't like being tracked anyways. So is there an equivalent to Ghostery that ...
3
votes
1answer
1k views

Is it possible to prevent the screen turning off when pressing the power button?

I run an app on my handset which really needs the screen to remain on for it to function properly. The app already seems to attempt to keep the screen on as the screen timeout seems to be disabled ...
2
votes
1answer
1k views

Android 4.1.2 Full Device Encryption

I have a FDE enabled on my Android. However on JellyBean when device restarts I never get a boot password prompt,just regular unlock screen. I remember on 4.0 ICS, after reboot Android would ask me ...
0
votes
2answers
6k views

Is it important to have an anti-virus application running on your phone or does the carrier protect it? [duplicate]

I use my phone like I do the computer. Shopping online with a credit card etc. Surfing unknown sites... Does my phone require an anti-virus application to protect the internal drive of my phone? Can ...
2
votes
0answers
192 views

How can I know that my Galaxy's camera and microphone is not being accessed without my knowledge?

A few months back I installed a few apps straight from the internet. One was an ability to run Ruby scripts on my phone, the other was Grooveshark. Both times, an Jellybean 4.2 flagged up a warning ...