For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
0answers
357 views

Possible security issues with having debug mode enabled?

Are there any significant security concerns with having a phone with debug mode enabled 24/7? As I understand it the debug mode only really becomes active once the phone is connected via USB cable to ...
0
votes
1answer
381 views

Unlocked bootloader, encryption

galaxy nexus unlocked bootloader no adb enabled rooted device encryption on with 10+ characters (Cryptfs Password - Google play) PIN screen lock with 6 characters Am I safe if someone wants to ...
1
vote
1answer
111 views

Delete Status bar Icon downloaded from web

I joined way2sms to send free SMS from my laptop. Now I find an app icon downloaded to my status bar in my Samsung Galaxy Y mobile. Also, I get debited for calls not made. I am losing money in this ...
1
vote
0answers
44 views

Does anyone know this icon? [duplicate]

Possible Duplicate: How can I deduce an app from a notification icon? I get strange messages (see link, chinese). It's not related to any mail account I synchronize, nor a SMS message. It ...
13
votes
2answers
3k views

What do the permissions that applications require mean?

When installing an application, the application lists permissions that it needs to perform its functions. I am creating this list of the the system defined permissions and a description of what ...
1
vote
2answers
973 views

In which version of Android was encryption of /data made available?

These docs suggest that it has been available (only) since Android 3.0 Honeycomb. By contrast, conversation on discussion boards suggests it was available in 2.3.4 Gingerbread. So, what is the answer ...
3
votes
1answer
137 views

Can Java be exploited through Android app ads?

It turns out that Java has a security flaw that is currently being exploited to put malware on people's computers. Is there any risk that advertisements in Android apps will have embedded, malicious ...
5
votes
1answer
1k views

How secure is a sim lock?

I have sim lock enabled on my sim, so basically, if I put my sim in another phone or if I restart my phone, I need to enter the sim lock pin. How easy is it to crack the sim lock if a theif got hold ...
3
votes
3answers
2k views

How do I disable GMail?

Yes, this has been asked before, but neither really addresses my concern, and I don't have reputation enough to add comments to existing questions. I've bought the cheapest Android 4 tablet with ...
0
votes
2answers
1k views

How to protect my Google account credentials on my Android phone?

Currently I use Gmail on my desktop with 2-step verification (by SMS) enabled and I consider it secure. Now I'm buying an Android phone and I'd like to check Gmail on it sometimes, but I don't want to ...
1
vote
1answer
400 views

Is the setting OFF/ON of the security flag different from enabling/disabling of fastboot?

I am following the book XDA Developers Android Hackers Toolkit 2012. In the beginning chapters , it says that : The second-stage bootloader checks to see if the security flag is on (S-ON) or off ...
14
votes
1answer
10k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
1
vote
0answers
287 views

security implications of unlocking, rooting, cutom recovery, etc [closed]

Just curious. There are lots of posts on the web that talk about the fact that unlocking your bootloader wipes apps and data - presumably to prevent unauthorized access to that info. But in order to ...
1
vote
2answers
75 views

My device is trying to open mSecure app whenever I launch an internet browser

Whenever I launch an internet browser on my droid phone it attempts to launch another app (in my case mSecure). This happens with dolphin and my stock browser so I don't think it's an mSecure ...
4
votes
1answer
59 views

Where do you find the password attempts setting or option in ICS?

I want to either stop this function or at the very least set the number of attempts to a higher number than 3.
6
votes
2answers
2k views

WiFi Hotspot Security?

Is there any way to add extra security to a WiFi hotspot created by an Android phone? I am using a Samsung GT-S5300 with Android 2.3.6, and I am using the WiFi hotspot feature at home since Telkom ...
7
votes
2answers
728 views

I lost my Android smartphone. Play Store tells me that someone has inserted a SIM card. How can I find out the phone number?

I lost my Samsung Galaxy S, which was signed into Google Play. Now, Play Store has identified that someone has inserted another SIM card with a different service provider. Is there anyway I can find ...
13
votes
2answers
782 views

Is it “safe” to provide users with the apk file?

I was wondering, if I have an app that is available on the Play Store, is it "safe" to provide a direct download of the apk file to someone (either signed with the proper keys, or just debug-version)? ...
6
votes
2answers
1k views

Can my Android phone be hacked without installing permissions?

After reading this article ( Kaspersky smartphone report ) this got me wondering. Obviously if I install a dodgy app through Play Store or directly from a website, that can be dangerous, however if I ...
6
votes
1answer
182 views

How to prepare myself & smartphone/tablet in the event it goes missing or is stolen?

I would like to know what measures or steps etc that should be performed, in order to protect & safeguard whatever "data" is on my Android Smartphone or Tablet, and indeed the device itself, in ...
1
vote
0answers
155 views

HTC Wildfire: “Settings” > “security” > “lock phone after” > and select, “immediately” not working

"Settings" > "Security" > "Lock phone after" > and select, "Immediately". The above has been my security lock setting for the past year. It was working fine but as of a week ago it hasn't ...
5
votes
2answers
91 views

Is there a way to wipe a device based on a certain password? A like a “Wipe-me” password?

Is there a way (an app perhaps) that will wipe a phone if a certain password is entered at the lock screen? For example "letmein" unlocks the phone, but if you enter "wipeme" it will start the factory ...
0
votes
1answer
126 views

Prevent unauthorized image flashing

I wonder whether there is a way to prevent someone to use fastboot to flash an Android device. Indeed, while one must be able to turn on USB debug in order to run adb, the bootloader does not offer ...
6
votes
2answers
126 views

How safe are my passwords at after-sales service?

My phone is currently inoperative. Samsung asked me to drop it at an approved repair center, which will handle shipment and reception to/from Samsung. Being unable to boot my phone, it was impossible ...
2
votes
0answers
408 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
6
votes
4answers
6k views

Forgot security lock pattern on Jelly Bean device with Wifi and 3G data turned off

I forgot my security lock pattern and my Wifi and 3G connections are switched off. I can hard reset the phone (Galaxy Nexus) from recovery mode, but that would wipe all my data. ADB is also turned off ...
4
votes
2answers
3k views

What causes the error “No certificate found in USB storage.” when trying to import a certificate?

I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
1
vote
1answer
3k views

Android 4.1 unable to connect to Google Play but other wifi functions work - how to fix?

I'm using a Rikomagic 802III running Android 4.1.1, connected to my TV. Until today, I was able to connect to Google Play, and my widgets were showing data. Now, when I open Google Play, I get an ...
3
votes
1answer
131 views

Google Authenticator used by native apps?

I recently turned on two-step verification for my Google account and installed the Google Authenticator app on my Android device. Based on what I have read everywhere (even Google's official info: ...
0
votes
1answer
91 views

Does Google Audit all apps that enter the market place? [duplicate]

Possible Duplicate: Are the apps safe? How can I make my Android more secure? There are several 'requires root' apps in the market and one of the most famous ones have more than 5 Million ...
3
votes
2answers
470 views

Android applications privacy and security concerns

If a user wants to install some applications from play store, is it sole responsibility of the user to decide whether the apps may harm or not? Should the user be worries regarding permissions? For ...
2
votes
3answers
559 views

Is Evernote a malicious app?

I have been using Evernote on my Laptop and Mobile phone for quite some time now. Recently, when downloading an update of Evernote app in my phone from Google Play app, I noticed that Evernote asks ...
4
votes
3answers
8k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
3
votes
0answers
329 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
3
votes
2answers
2k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
0
votes
1answer
543 views

Dangers of Apps running in “Hidden mode”?

I have downloaded an app to record all my calls. The app is working great but the trouble is that it doesn't shows up under the "Ongoing" in the notification bar nor does it shows up in "active ...
2
votes
2answers
51 views

Protecting or Limiting my account's power

I have linked a great deal of power to my phone. It is connected to my gmail to such an extent that I am starting to get concerned that if somebody where to steal my phone they could reek havok on my ...
16
votes
2answers
1k views

Security of Paid apps in Google Play?

What measures does Google takes to ensure that paid apps that are downloaded do not get spread for free? Currently I see a possibility that can leak out a large number of apps: Someone pays to ...
3
votes
1answer
92 views

Are calls made by third-party apps logged?

For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener ...
7
votes
1answer
3k views

I changed my sim card - how do I find which app is sending sms messages to my old number?

I recently traveled to another country and I'm using a local prepaid sim card on my Galaxy S2. My prepaid credit was depleted rather quickly, and when I checked the phone record I found out my phone ...
6
votes
1answer
167 views

Setup Tor server on my Android

How do I setup a Tor server on my Android tablet? I can install the Orbot client, but how do I contribute to the tor network? I have my tablet on a WiFi the most of the day so it would be nice to ...
6
votes
3answers
4k views

Android 4 USB charge only

When I connect my Android 4 phone (Galaxy Nexus) to a computer using USB, the storage of the phone is automatically mounted on the computer. How can I connect my phone using USB for charging only? In ...
2
votes
0answers
524 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
4
votes
2answers
1k views

Looking for Location-Specific Screen Locking Behaviour

I'd like to have a feature that allows my Android phone to change its lock mechanism automatically dependent on location. For example, most of the time I use pattern unlock when out and about but ...
5
votes
1answer
166 views

USSD attack official notification

I have an HTC that is vulnerable to USSD attack. I am trying to tell the HTC helpdesk about this issue, but they tell me that unless there is an official news from android team about this, they will ...
4
votes
2answers
367 views

Android 1.5 Dialer App - Exploit Block

I just read about the remote USSD attack. My hoary old Samsung i7500g phone is vulnerable (confirmed via this site). The solution is to install a (free) secondary dialer, like Dialer One. ...
0
votes
1answer
1k views

WiFi Tethering not working when using security

I have a rooted Galaxy SII (not branded, from Germany) running CyanogenMod 10. I can't connect to my tethering network when I'm using security (WPA / WPA2-PSK). With an open network, it works just ...
9
votes
3answers
3k views

deactivate PIN-request after airplane mode

When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
6
votes
1answer
307 views

Can Applications With Root Access Modify Their Own Permissions?

For rooted phones, there are several apps which require root privileges. Knowing this, the user does allow the app to get root. Now, the app would have been installed with a set of x permissions, say ...
20
votes
2answers
29k views

How is the Gmail password stored in Android - and where?

I have looked around and found no information on how Android manages to store passwords on the device. Especially Gmail passwords. I'm looking to learn how Android encrypts and stores passwords ? What ...