For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

1
vote
0answers
35 views

Where do you publish information about a vulnerability you have found within android?

I found a small vulnerability within the default web browser, here is the ticket. Submitted last year. Issue 42647: Android Web Browser, JavaScript Popup Bug. Tested on 11 Jan 2013. ...
1
vote
1answer
150 views

Rooted phone, but can't pass “Install” dialog

I am running Android 4.4.4 with the LiquidSmooth ROM and SuperSU. All these components work flawlessly, as far as I can tell. I am also able to use TitanicBackup (to demonstrate Root is working). ...
16
votes
3answers
3k views

Is there any way to erase personal information from my phone that has already been stolen?

My phone has been stolen. I do not want the thief to have access to any of my personal information such as calls, texts, and information saved in the phones contents. Is there any possible way I can ...
2
votes
1answer
336 views

How can access on an android device be restricted to applications or widgets on the home screen only?

This is a rooted Nexus 7 with 4.4.4 (factory image from Google). I'd like to restrict access to anything that's not on one of the home screens. Apps and widgets on one the home screens should be ...
0
votes
2answers
950 views

Does encryption, factory reset, encryption make a safer used phone?

I recently purchased a used Moto X. I know the person I bought it from so I'm not terribly worried but here is my idea to shore up the security on a used device. Don't put in your SIM card or log ...
0
votes
0answers
163 views

Control Mobile via pc using USB (No URL Control)

I want to control the mobile via pc using usb cable, I found out lot many solution like Droid@Screen & AndroidScreenMonitor etc., but this is an one way communication am not able to control from ...
0
votes
0answers
83 views

How to obtain crypto header and footer from Nexus 5 Android 4.4

I'm interested in how to find the crypto_header and crypto_footer for disk encryption on a Nexus 5. A lot of articles have them for specific devices and I was wondering if there was any information on ...
1
vote
2answers
91 views

Do old versions of Android still get security patches?

For example if a critical vulnerability is found in Jelly Bean would it get a patch, or is the expectation that users should upgrade to KitKat to be more secure? Does Android even have the concept of ...
0
votes
0answers
236 views

How to use the S5 fingerprint scanner with full device encyption?

I am using the S5 and have decide to fully encrypt the device and the sd card. My biggest problem is that now the fingerprint is no a possible choice as a lockscreen security. Only password. I ...
1
vote
0answers
58 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
1
vote
1answer
642 views

Which Android version/phone can control per-app access permission?

The only reason I am still using an iPhone is due to the fact that most Android phones did not allow control of per-app access permission. The App Ops feature was once there but pulled. I know some ...
4
votes
1answer
21k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
0
votes
1answer
256 views

Secure ADB connection over network

I am using Geniatech ATV Android Set Top Boxes running android 4.2.2 for a current project. I might put some of those devices in public places like shopping centers. These boxes are connected to the ...
2
votes
0answers
100 views

Customer claims our app trashed her phone [closed]

I'm in receipt of a complaint that the android mobile app my company provides has trashed a customer's android phone to the extent that it is now only capable of making phone calls. No sms. No ...
0
votes
0answers
35 views

Which versions of Android is Google developing security fixes for?

I'm trying to develop a BYOD support policy for the company I work for. We intend to only allow devices and software that are actively being supported by the manufacturer. I know that the relationship ...
0
votes
0answers
41 views

Ask for the pin only twice a day

I would like to configure my android phone to ask for my PIN only two times every day (if not rebooted). Screen lock with PIN after 12 hours (no PIN needed in between) would be great. The screen-lock ...
-1
votes
1answer
56 views

Any work around to sophos

Sophos is an app that let's you put passwords on apps (among other things). Is there a work around to access the apps? Thanks!
1
vote
1answer
29 views

Security, keylogging and accounts

An in-app purchase requests password verification before the transaction. Thus, all the following input into the onscreen keyboard is the user's password. Is handling keyboard events prevented at ...
9
votes
3answers
14k views

Why does Android prompt me with “Enter the credential storage password” when I attempt to connect to a secured WiFi network?

When I connect my iPhone to a secured WiFi network (at work), I'm prompted for my Username and Password. (And then I'm prompted to accept what I presume is an SSL certificate.) But when I select the ...
5
votes
2answers
6k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
1
vote
1answer
618 views

how to root your Android or at least understand how it works

I do not know exactly how rooting works or if it can even by done on my Android (Samsung GT-N8013) device. No rootkit appears to exist yet for Android 4.1.2, so I am left with figuring out how to ...
34
votes
3answers
3k views

Encrypt the phone's internal storage

Is there a way to encrypt my phone's internal memory, in the same way you would encrypt a computer's partition? Ideally, the phone would always ask for the password when booting, and even if someone ...
1
vote
3answers
6k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
0
votes
0answers
148 views

Web proxy for Android 4.2.2

I need to cut off access to Flash and HTML5 videos on several devices for a project. Is there any app like a proxy to perform this? If I could deny a list of webpages it will be perfect.
1
vote
1answer
207 views

Can I “Wipe data/Factory reset” a phone that doesn't even boot via USB?

I have a Razr HD (XT925 GSM) which suddenly shut down and can't be turned back on (pressing or long pressing the power button does nothing, nor does connecting it to the wall). I have a lot of ...
24
votes
1answer
19k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
2
votes
2answers
213 views

Allow login with multiple passwords

Is it possible to setup multiple accepted passwords for the login to Android? Or perhaps an alternative secure login. (Note: facial recognition and fingerprint does not count as secure, but an RSA/NFC ...
0
votes
3answers
2k views

How to know if an keyboard/input related app is safe to use

I am Vietnamese and I cannot type my language on my Android phone i.e. Samsung Galaxy S4 So I look for apps that help me to input Vietnamese. My issue is that I'm affraid the apps will bug me and ...
0
votes
2answers
700 views

can an android device be in danger on a malicious site?

I accidentally went onto a site via Google images and went off after half a second, (the page had been quarter/half loaded. I accidentally hit the undo button and it opened again, and I closed it ...
0
votes
0answers
123 views

Block all root connections except to certain IP destinations using Iptables

I am using rooted Android 4.4.4 system. I want to block all the network connections associated by processes that run by root except to certain Ip targets. Something like this Block all network ...
0
votes
1answer
132 views

How do I remove Selfmite worm?

In June this year I experienced what I've found to be called the "Selfmite" worm on my Nexus 5 smartphone. On 24.06 and 29.06 it sent the message "Dear [contact name], Look The Self-time, ...
9
votes
2answers
30k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
0
votes
0answers
16 views

Installed Comodo SSL certificate not showing in User in Trusted credentials [duplicate]

I am trying to install the SSL certificate for our exchange server. However although it says it is installed it is not showing under the User tab in settings --> personal --> security --> credential ...
1
vote
1answer
498 views

Encrypting Nexus 7 vs. screen lock

I read in this article that a non-encrypted tablet with only screen-lock on can have data read through USB. Is this really true for example for a Nexus 7 tablet? I mean - if I lock the screen you ...
0
votes
1answer
232 views

GSM vulnerabilities

I heard that there are inherent flaws in the GSM protocol that make it possible for someone to impersonate a network operator and do all sorts of nasty things remotely, even if your phone is off. Is ...
-1
votes
1answer
132 views

How can I remotely wipe a stolen phone? [duplicate]

My phone have been stolen and I have many pictures on it, and secret things! How can I trash every thing on it through a Whatsapp message? I have not tired anything yet.
5
votes
2answers
807 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
0
votes
2answers
87 views

Network security in Android

My question is quite simple. I've been digging around in the subject for quite a while now, but I can't really get a hang of how it works. Scenario: I use Facebook on my phone to chat with some ...
2
votes
2answers
47k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
1
vote
1answer
2k views

Google Nexus 7: I can't manage my device administrators

Can someone please help me? I've installed the McAfee protection on my tablet and later changed it to Kaspersky. When trying to deactivate McAfee as device administrator it didn't work. Therefore now ...
0
votes
2answers
4k views

How to encrypt android device without screen lock? [duplicate]

I want to encrypt my phone to protect sensitive information. But I do not want to enter a password every time I pick up my phone. That seriously hampers the usability. Particularly because the ...
38
votes
13answers
9k views

Are there any tools to sandbox a malware application even more than the granted permissions on Android?

Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
0
votes
1answer
64 views

Seeking alternative to Andoid File Transfer utility

Need usb alternative to Android File Transfer for Mac. Problems: 1. no search capability 2. Cannot report size of files. 3. No route to send problem reports to developer. Reasons for not using ...
0
votes
0answers
23 views

Tracking down which app makes HTTP requests [duplicate]

After configuring my Galaxy S4 (Android 4.4.2) phone to use a proxy server for debugging an app, I noticed that other apps on my device were making some suspicious HTTP calls. I would like to track ...
5
votes
2answers
519 views

Recent Apps shows app contents even though when its locked

I am trying to figure out how to hide an app from being seen when you hit the recent apps button. I use ZDBox's app lock to hide my apps and files when needed but noticed that when I hit the recent ...
17
votes
6answers
4k views

How do I secure/encrypt SD card data transparent to apps?

Are there any off-the-shelf options for securing the contents of an SD card so that files written by apps writing to SD are encrypted? If so, what is the best option? I'm looking for something for ...
1
vote
1answer
522 views

Does the Play Store app verify the APKs?

Many people (including me) are downloading/installing/updating applications in public networks where we cant be sure of a secure connection without MiTM attacks, does Google's Play Store transmit the ...
-1
votes
1answer
459 views

My nfc-enabled android-phone won't read a rfid key I own, why and what can I do about it?

Does it require some kind of activation-code? If so, can I read it while I scan it on the original scanner?
3
votes
4answers
942 views

How can I save and protect sexy pictures sent by my girlfriend?

I'm traveling and my GF wants to send me some racy pictures. Of course I will accept that offer, but I need to save them on my phone in a safe way. My phone uses Activesync, so it's possible for my ...
4
votes
1answer
6k views

How can I disable root on a modded device?

Is it possible to disable root access to applications on an Android device again after installing modded firmware? I would like to try Cyanogen or one of the other custom ROMs, but I'm wondering ...