For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

7
votes
3answers
360 views

Protection from Malicious Intent

Is there an app, or will Google produce a system, where I can protect my Android device? Imagine a soundboard app that's free, but it asks for your contact information. The average user might be ...
7
votes
3answers
290 views

Is it possible to track what information on your phone an app is uploading?

If you are concerned about what information an app is sending about you (your privacy concerns) is there any way of tracking this? Can you see if an app is sending photos on your phone? Can you see if ...
7
votes
2answers
223 views

Where should I submit bug reports for the pattern lock?

I believe i found a bug with the pattern lock. Where should I submit bug reports for the pattern lock? Note: this might just be a Sense thing: Create a pattern lock. Lock phone. Wake phone draw ...
7
votes
2answers
9k views

Apps install on their own

Every night for the past few days my phone installs a new app that I never saw/wanted/heard of before. It all started with AppCaster (Which I never installed on my phone, it just showed up one ...
7
votes
3answers
323 views

How can I prevent android apps from reformatting my SD card?

I have a 32GB micro SD card, and some of the apps I use state that they have permsisions to modify sd card memory. I have a lot of personal files on my card, and the other day, some app, I don't know ...
7
votes
3answers
577 views

Call Encryption

Is it possible to encrypt calls on Android OS? How do I do that?
7
votes
2answers
1k views

Security / Privacy concerns regarding custom android ROM

What are the security and privacy concerns surrounding using a custom android ROM like that of cyanogen?
7
votes
3answers
2k views

Any hack to get rid of the “Too many password attempts” lock?

My kids often play with my phone which has a pattern lock screen, and it gets locked due to many attempts, then the phone is locked out and requires a password. I use 2-step verification, so in ...
7
votes
1answer
308 views

How to prepare myself & smartphone/tablet in the event it goes missing or is stolen?

I would like to know what measures or steps etc that should be performed, in order to protect & safeguard whatever "data" is on my Android Smartphone or Tablet, and indeed the device itself, in ...
7
votes
1answer
440 views

Setup Tor server on my Android

How do I setup a Tor server on my Android tablet? I can install the Orbot client, but how do I contribute to the tor network? I have my tablet on a WiFi the most of the day so it would be nice to ...
7
votes
3answers
1k views

How can I securely store my private key I use for logging into my home PC

I've been told that the SD card is a terrible place to store secure data because any app can read it. How else can my phone store my private key I use to log into my home PC ssh server?
7
votes
1answer
214 views

Does the Secure Random bug affect apps besides Bitcoin?

The Bitcoin Project recently announced a bug in the SecureRandom implementation on Android, which caused Bitcoin wallet apps to generate weak private keys that leave bitcoins vulnerable to theft. The ...
7
votes
3answers
3k views

Is there an Android calendar with limited security permissions?

I've just bought an entry-level Samsung Europa, running version 2.2. I'm technically-minded but new to this OS. I'd like to find a calendar that runs in limited security permissions, so that my ...
7
votes
2answers
992 views

I lost my Android smartphone. Play Store tells me that someone has inserted a SIM card. How can I find out the phone number?

I lost my Samsung Galaxy S, which was signed into Google Play. Now, Play Store has identified that someone has inserted another SIM card with a different service provider. Is there anyway I can find ...
7
votes
1answer
414 views

What's the difference between the various lost phone apps?

I want to get a security app for my phone. I mostly need something in case my phone gets lost or stolen. Researching this I have found several apps: iTag WaveSecure LookOut I am sure there are ...
7
votes
1answer
525 views

Unsafe certificate protection in Android?

Maybe I'm wrong. If so, please let me know. Here is my question. I've followed the instructions here and installed my personal certificate stored in a pfx file (PKCS#12) in my Google Nexus (ICS ...
6
votes
3answers
54k views

Logout from Gmail on my device

It bothers me that my Android Phone is permanently logged into my Gmail account. I want to logout from the device and somehow make the phone ask for username/password when connecting to my account. ...
6
votes
3answers
3k views

Why each android application runs on a different Dalvik VM process?

I have read that each android applications runs on a different Dalvik VM process (all forked from zygote). I also read that these VMs are really lightweight and use copy on write buffers and all ...
6
votes
3answers
63k views

How do I decrypt files on my SD card that I encrypted using the Settings?

I have files that I used to copy from my SD card to my PC using the USB Mass Storage option under the "USB connection" pop-up. I checked the flag under Settings->Location & Security->Data ...
6
votes
2answers
4k views

How to connect ADB over 3G/4G?

I keep seeing warning signs about enabling ADB over Network when you aren't connected to a WiFi network, but what if I want to connect ADB over 3G/4G ? Whenever I try to do it with any of the ...
6
votes
2answers
3k views

Restricting Web Access to a single domain on Android tablets?

Our sales team came to me earlier with a question about Android OS. I've never used Android, but I do know it is a Linux-based OS. Frankly, I don't have the time to research for myself the ...
6
votes
1answer
297 views

Buying apps and entering credit card number via 3G/GPRS. Is it secure enough?

As title. Of course using Android market and the Google Checkout payment. By the way, how about other market-like apps?
6
votes
2answers
3k views

WiFi Hotspot Security?

Is there any way to add extra security to a WiFi hotspot created by an Android phone? I am using a Samsung GT-S5300 with Android 2.3.6, and I am using the WiFi hotspot feature at home since Telkom ...
6
votes
4answers
9k views

Forgot security lock pattern on Jelly Bean device with Wifi and 3G data turned off

I forgot my security lock pattern and my Wifi and 3G connections are switched off. I can hard reset the phone (Galaxy Nexus) from recovery mode, but that would wipe all my data. ADB is also turned off ...
6
votes
2answers
3k views

Google two-step authentication and Android lock screen

After many failed screen unlock attempts, the user is required to enter the Google account password. That's a good idea. But what if I enabled Google's two-factor authentication, and then entered the ...
6
votes
3answers
3k views

Can a thief unlock or otherwise access the data on my stolen Android device?

If my Android device is stolen, will the person who ends up with it be able to get my data by plugging it into a PC and using some trick? Is there anything I can do to prevent this or make it harder?
6
votes
1answer
278 views

Can my Google Docs app be secured?

I have sensitive information in my Google Docs. I enabled two-step verification with my Google account; but just noticed that Google DOCS on my phone doesn't require any type of PIN number or ...
6
votes
1answer
71 views

What are the security implications of using an app built “for debug”?

I've just come upon several .apk files hosted with Github projects which are "compiled for debug" (i.e. having application-debuggable set, which one can e.g. check using aapt dump badging /path/to/apk ...
6
votes
1answer
621 views

How does CF-Autoroot work?

What's the theory behind how CF-autoroot is able to root android devices? I'm wondering on what techniques it used to run su? Does it use a custom/patched Linux kernel? Or it is based on local root ...
6
votes
1answer
564 views

Can Applications With Root Access Modify Their Own Permissions?

For rooted phones, there are several apps which require root privileges. Knowing this, the user does allow the app to get root. Now, the app would have been installed with a set of x permissions, say ...
6
votes
3answers
183 views

security implications of participating in app beta testing? [closed]

I am an IT professional (but not in app development). Two days ago someone contacted me about a blog post I made and invited me to participate in beta testing for a messaging app which was related to ...
6
votes
1answer
31k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
6
votes
2answers
153 views

How safe are my passwords at after-sales service?

My phone is currently inoperative. Samsung asked me to drop it at an approved repair center, which will handle shipment and reception to/from Samsung. Being unable to boot my phone, it was impossible ...
6
votes
3answers
8k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
6
votes
1answer
131 views

Secure keyboard application from android market

Is it safe to install a keyboard application from android market that asks full internet access permission? Will it not lead to certain security risks? There are several free and paid keyboards that ...
6
votes
1answer
1k views

Can I get a notification of failed WiFi connection for secured network?

I have an HTC Hero running Android 2.1. My work has a secured wifi network that we're allowed to connect our phones too. We also have to change our account passwords every so often. When this happens, ...
6
votes
1answer
2k views

Why do App Locker apps need so many permissions? Am i safe?

I've been trying to password protect an app, and it seems that the permissions vary from app to app for App Lockers. Why do so many of them require full phone access? Is there any danger if i use a ...
6
votes
2answers
905 views

How secure are the “app password protection” apps?

I know there are a number of apps available that can password protect specified apps. I want to know how secure they really are. As far as I know, there aren't any exposed OS hooks in android to ...
6
votes
1answer
126 views

Login to Android 6.0 with NFC card and Password

I am evaluating MI5 and its NFC functionality. I am considering to compliment my Samsung Galaxy S4 GT-i9506 with MI5 because of various significant improvements in the hardware, software and ...
6
votes
1answer
654 views

How to get the latest security updates for CyanogenMod?

I have installed CyanogenMod in February 2016, and the device information showed Android version "5.1.1", and the security patch level was "November 2015". This hasn't changed until today ...
6
votes
3answers
8k views

Android 4 USB charge only

When I connect my Android 4 phone (Galaxy Nexus) to a computer using USB, the storage of the phone is automatically mounted on the computer. How can I connect my phone using USB for charging only? In ...
6
votes
3answers
2k views

Android Password Recovery + 2 Step Auth. What happens?

I recently enabled two-step auth for my Google account, and I'm happy to say it works fine. However: Application specific passwords, like for Android are temporary, and the guide makes it obvious ...
6
votes
2answers
4k views

OpenVPN with Android 2.3.x - security concerns

I need to use my Android 2.3.x phone to access an OpenVPN server. I have CM 7 with built in support for OpenVPN and tun. My main concern is that I don't know where to put the keys in. If my phone gets ...
6
votes
1answer
2k views

Is there an official dialer code resource?

There are a ton of XDA forums and a decent number of answers here that refer to specific dialer codes. For instance *#*#4636#*#* will cause unicorns to spring forth from your phone or tell you what OS ...
6
votes
0answers
53 views

Are there any Google devices that support capabilities in their default kernel?

If I systemless root (no modification done to /system partition) a nexus device, would I be able to able to set capabilites on executables without changing the original kernel binary ? I often want ...
6
votes
1answer
186 views

How do Android devices receive security updates?

I'm new to Android and I'm thinking about buying an entry-level Android device. Yesterday I read that Android passwords are stored in plain text. That got me to thinking... how do Android devices get ...
5
votes
3answers
4k views

What is this Google Settings app that installed itself on my phone?

Today, all of a sudden I saw this app in my Samsung Galaxy Y mobile phone: I am talking about the app named "Google Settings" I uninstalled it immediately only to find it installed again a few ...
5
votes
3answers
2k views

Are Tmobile using bogus DoD IP addresses (bogons)?

I recently started picking up some weird entries in my firewall log: kernel: arplookup 26.XXX.XXX.XXX failed: host is not on local network There are at least at dozen entries, all to different IP's ...
5
votes
2answers
345 views

Questions About Android Privacy

The permissions warning in the Android Market is very vague. As well, I can't see the app permissions in a collective area of all the apps I have previously installed. So, I have no clue whether an ...
5
votes
3answers
849 views

Are there any good firewalls available? [closed]

Does the android platform have any firewall application?