For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

5
votes
2answers
435 views

Recent Apps shows app contents even though when its locked

I am trying to figure out how to hide an app from being seen when you hit the recent apps button. I use ZDBox's app lock to hide my apps and files when needed but noticed that when I hit the recent ...
5
votes
1answer
109 views

Is my device vulnerable to the SwiftKey update bug? (June 2015)

Quoth The Independent: There are usually protections in place that stop hackers from performing what is called a “man in the middle attack”, by encrypting communication with the server, as well as ...
4
votes
3answers
2k views

Why each android application runs on a different Dalvik VM process?

I have read that each android applications runs on a different Dalvik VM process (all forked from zygote). I also read that these VMs are really lightweight and use copy on write buffers and all ...
4
votes
2answers
330 views

Questions About Android Privacy

The permissions warning in the Android Market is very vague. As well, I can't see the app permissions in a collective area of all the apps I have previously installed. So, I have no clue whether an ...
4
votes
3answers
2k views

Are Tmobile using bogus DoD IP addresses (bogons)?

I recently started picking up some weird entries in my firewall log: kernel: arplookup 26.XXX.XXX.XXX failed: host is not on local network There are at least at dozen entries, all to different IP's ...
4
votes
1answer
341 views

If I download and install a non-market application and then proceed remove it, does it mitigate any security issues?

If I downloaded a non-market application and installed it and discovered it may be malicious, does removing it from the list of applications completely discard it and help mitigate any security ...
4
votes
6answers
3k views

How do I lock my HTC whenever I want?

I have a HTC Wildfire S and set up the screen lock pattern for it. This triggers after some time but sometimes I want to lock it myself, for example if I leave the office and let my phone on the desk. ...
4
votes
1answer
3k views

Can a screen-locked Android phone be rooted?

By locked I mean a phone that has been locked with a standard PIN code, password or pattern. I'm not meaning to break into somebody's phone, merely wondering to what extent applying any of the ...
4
votes
3answers
3k views

What is this Google Settings app that installed itself on my phone?

Today, all of a sudden I saw this app in my Samsung Galaxy Y mobile phone: I am talking about the app named "Google Settings" I uninstalled it immediately only to find it installed again a few ...
4
votes
2answers
420 views

Android 1.5 Dialer App - Exploit Block

I just read about the remote USSD attack. My hoary old Samsung i7500g phone is vulnerable (confirmed via this site). The solution is to install a (free) secondary dialer, like Dialer One. ...
4
votes
2answers
942 views

How can I detect Malware and/or viruses?

I'm buying a used Droid phone (Verizon) that has been rooted. Is there anyway to scan it for viruses (and more importantly) malware? Or maybe even a firewall? (I may be being overcautious). Some ...
4
votes
2answers
877 views

My HTC Desire HD has been stolen. What data can still be accessed by the thief?

I have contacted the network and had the phone barred, I had applied a screen lock. I am concerned however if the thief can still access all my numbers, texts, saved passwords and most importantly ...
4
votes
1answer
1k views

Find lost device without Gmail account configured and without SIM card

I recently misplaced a phone that did not have gmail account configured and did not have a SIM card in it either. Is there any way I can track it ? All of the tracking apps either require sending an ...
4
votes
1answer
6k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...
4
votes
1answer
2k views

I want to password lock my “Applications” settings, but no other settings

I have an AppLock program that locks certain apps with a PIN. In order for the app to have any effectiveness, I include Settings as an App to lock. Otherwise, I could go to Settings -> ...
4
votes
2answers
120 views

Why my phone does not need to update the password?

I changed my gmail password a day ago, but my phone does not require me to put in the new one. I can still access my gmail with the old password. Why? Phone is rooted, sim unlocked , running android ...
4
votes
1answer
160 views

What are potential problems/violations that malware apps can do?

There are some apps that I am considering to download which have many permission requirements and have few comments from other past users. The number of downloads are relatively low so I am ...
4
votes
1answer
150 views

different way of securing applications

In my phone instead of unlocking screen by providing "symbol", I'd like the phone to unlock to most of my applications without the "symbol". But for selected important applications (eg. gmail) I'd ...
4
votes
4answers
6k views

Remote factory reset and changing Google password

In case I ever lose my Nexus 4 phone, I've opened to the Google Settings app, then tapped "Android Device Manager" and from there, I've enabled both "Remotely locate this device" and "Allow remote ...
4
votes
1answer
687 views

Dev/Log's - login attempts and how to read the log?

My first post on here and hopefully a easy fun answer. I'm looking for the location for failed login attempts on the device - I've looked on the device and it seems the logs are located in ...
4
votes
2answers
4k views

What causes the error “No certificate found in USB storage.” when trying to import a certificate?

I have a Samsung S3 with Android 4.04 and to get on my WiFi at work I need to install a certificate .p12 file. So, I navigate to "Security and lock screen"-->"Install from device storage." BUT ...
4
votes
3answers
16k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
4
votes
5answers
950 views

Erasing SD Card contents and personal data

I have an SD card in my Droid Global or Droid X, not exactly sure which model. I go to the files and click on the SD card instead of shred files and delete all of its contents. I then go to Privacy ...
4
votes
1answer
266 views

Can an Android device be locked down by an administrator?

I would like to know if it is possible to use android devices in a work environment with restrictions on the phones usage. These phones would be given to members in the field to log data, and only ...
4
votes
1answer
18k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
4
votes
2answers
612 views

How to mod android rom so none can ever install an app in it?

I already know how to modify an android ROM by modifying files, remove and add it into ROM. But I don't have knowledge to building/compiling a ROM. I want to lock the OS so none can ever install new ...
4
votes
3answers
480 views

Can I use a pin/password/pattern lock and safely have basic phone functionality while in car?

I would like to lock my phone with a pin for additional security. Also, I try to minimize my phone usage in the car, but in the event that I do need to call someone, I would like to be able to do so ...
4
votes
1answer
168 views

Is there a way to control app execution environment?

Is there some way of controlling how an installed application communicates over the network and writes data to disk? Let's say I have an application that will handle sensitive data, but it comes from ...
4
votes
1answer
65 views

Where do you find the password attempts setting or option in ICS?

I want to either stop this function or at the very least set the number of attempts to a higher number than 3.
4
votes
1answer
147 views

Does Android 2.2 log digits dialed during a call, and if so, how can I clear this log?

Some voice jails that I call require me to enter a password. Are the digits I type while a call is active logged (as call dialing is), and if so, how can I remove them from the log? As you might ...
4
votes
0answers
346 views

Best lost / stolen device tracking app [duplicate]

Possible Duplicate: Helping a lost phone get found What is the best tracking app for a stolen or lost device? I've tried iTag but I'm thinking about switching to Prey ...
3
votes
2answers
4k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
3
votes
3answers
5k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
3
votes
4answers
887 views

How can I save and protect sexy pictures sent by my girlfriend?

I'm traveling and my GF wants to send me some racy pictures. Of course I will accept that offer, but I need to save them on my phone in a safe way. My phone uses Activesync, so it's possible for my ...
3
votes
2answers
4k views

Can applications be downloaded without a Google Account and without disabling security features?

If I wish to install applications such as Skype, DropBox, etc however without registering for a Google account, is that possible? If so, how do I install them without a Google account?
3
votes
2answers
3k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
3
votes
2answers
7k views

Is there a way to block permissions for other applications on Jelly Bean?

I use LBE Privacy Guard with great pleasure to grant and withdraw permissions to access my contacts, the internet, etc. for each individual application installed in Ice-Cream Sandwich on my Galaxy ...
3
votes
2answers
546 views

Android applications privacy and security concerns

If a user wants to install some applications from play store, is it sole responsibility of the user to decide whether the apps may harm or not? Should the user be worries regarding permissions? For ...
3
votes
2answers
187 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
3
votes
4answers
4k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
3
votes
1answer
83 views

Can an app run code if you don't open it?

Can an app run code if you don't open it? As part of this question, the topic of an app downloading data without ever being explicitly opened by the user was mentioned briefly. It got me thinking: ...
3
votes
2answers
363 views

Is Android susceptible to OpenSSL vulnerabilities? [duplicate]

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC ...
3
votes
1answer
3k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...
3
votes
1answer
6k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
3
votes
1answer
149 views

Can Java be exploited through Android app ads?

It turns out that Java has a security flaw that is currently being exploited to put malware on people's computers. Is there any risk that advertisements in Android apps will have embedded, malicious ...
3
votes
3answers
2k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? ...
3
votes
1answer
884 views

is it possible to use a CA-Cert for serverauthentification in WPA enterprise networks with android 2.2+?

I just wanted to know if it is possible with android 2.2+ to use a ca-cert for server auth in WPA-Enterprise networks? A fried told me it is not possible, but this would mean there would be a mayor ...
3
votes
1answer
186 views

Protecting phone from the FREAK bug

How can I protect my phone from the FREAK bug? Phone is a Samsung GT-S5830 running Gingerbread.
3
votes
1answer
815 views

What is the attack vector of <= 4.3 web view vulnerability?

This is in reference to the vulnerability that Google is not patching, since the WebView in 4.3 and less is part of the OS and not a separate updateable component. Since some people will not have ...
3
votes
1answer
541 views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...