For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

2
votes
3answers
614 views

Is Evernote a malicious app?

I have been using Evernote on my Laptop and Mobile phone for quite some time now. Recently, when downloading an update of Evernote app in my phone from Google Play app, I noticed that Evernote asks ...
4
votes
3answers
9k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
3
votes
0answers
355 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
3
votes
2answers
2k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
0
votes
1answer
584 views

Dangers of Apps running in “Hidden mode”?

I have downloaded an app to record all my calls. The app is working great but the trouble is that it doesn't shows up under the "Ongoing" in the notification bar nor does it shows up in "active ...
2
votes
2answers
51 views

Protecting or Limiting my account's power

I have linked a great deal of power to my phone. It is connected to my gmail to such an extent that I am starting to get concerned that if somebody where to steal my phone they could reek havok on my ...
18
votes
2answers
1k views

Security of Paid apps in Google Play?

What measures does Google takes to ensure that paid apps that are downloaded do not get spread for free? Currently I see a possibility that can leak out a large number of apps: Someone pays to ...
3
votes
1answer
97 views

Are calls made by third-party apps logged?

For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener ...
7
votes
1answer
4k views

I changed my sim card - how do I find which app is sending sms messages to my old number?

I recently traveled to another country and I'm using a local prepaid sim card on my Galaxy S2. My prepaid credit was depleted rather quickly, and when I checked the phone record I found out my phone ...
6
votes
1answer
180 views

Setup Tor server on my Android

How do I setup a Tor server on my Android tablet? I can install the Orbot client, but how do I contribute to the tor network? I have my tablet on a WiFi the most of the day so it would be nice to ...
6
votes
3answers
4k views

Android 4 USB charge only

When I connect my Android 4 phone (Galaxy Nexus) to a computer using USB, the storage of the phone is automatically mounted on the computer. How can I connect my phone using USB for charging only? In ...
2
votes
0answers
557 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
5
votes
2answers
2k views

Looking for Location-Specific Screen Locking Behaviour

I'd like to have a feature that allows my Android phone to change its lock mechanism automatically dependent on location. For example, most of the time I use pattern unlock when out and about but ...
5
votes
1answer
171 views

USSD attack official notification

I have an HTC that is vulnerable to USSD attack. I am trying to tell the HTC helpdesk about this issue, but they tell me that unless there is an official news from android team about this, they will ...
4
votes
2answers
374 views

Android 1.5 Dialer App - Exploit Block

I just read about the remote USSD attack. My hoary old Samsung i7500g phone is vulnerable (confirmed via this site). The solution is to install a (free) secondary dialer, like Dialer One. ...
0
votes
1answer
1k views

WiFi Tethering not working when using security

I have a rooted Galaxy SII (not branded, from Germany) running CyanogenMod 10. I can't connect to my tethering network when I'm using security (WPA / WPA2-PSK). With an open network, it works just ...
9
votes
3answers
4k views

deactivate PIN-request after airplane mode

When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
6
votes
1answer
343 views

Can Applications With Root Access Modify Their Own Permissions?

For rooted phones, there are several apps which require root privileges. Knowing this, the user does allow the app to get root. Now, the app would have been installed with a set of x permissions, say ...
21
votes
2answers
32k views

How is the Gmail password stored in Android - and where?

I have looked around and found no information on how Android manages to store passwords on the device. Especially Gmail passwords. I'm looking to learn how Android encrypts and stores passwords ? What ...
3
votes
1answer
352 views

Disable password hiding globally

With a touch screen keyboard, having passwords I am entering displayed hidden is more trouble than it's worth to me. Few applications like KeePassDroid allow you to disable this feature. Is there any ...
2
votes
0answers
354 views

Exchange Active Sync email on Galaxy 10.1 disappears.

One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
11
votes
4answers
3k views

Can my Android device become - remotely and without my permission - a wiretap and get used as surveillance device?

I saw the following article: An article in the Financial Times last year said mobile providers can "remotely install a piece of software on to any handset, without the owner's knowledge, which ...
1
vote
2answers
2k views

Locking individual files on micro sd card

I have Galaxy S2 running on android 4.0.3. I have a number of photos, videos, pdf and word files stored on the micro sd card. I am just wondering if there is a way to password protect individual ...
14
votes
2answers
3k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
0
votes
1answer
304 views

Multiple Pattern Locks at the same point of time

Is it possible to have multiple pattern lock implemented in an android device to increase it's security. I know that it must be possible to design an app to do that, but my question is whether any app ...
2
votes
1answer
1k views

Mounting and Unmounting of Memory Card just by touch?

I am using a Samsung Galaxy Y mobile phone. In my mobile's settings, I see an option to "Unmount the Memory Card for Safe Removal", so it is possible to unmount the memory card without actually ...
12
votes
6answers
21k views

How do I avoid the server-specified security policies for my work e-mail?

When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?: I just received a Nexus 7 and signed ...
2
votes
1answer
1k views

Samsung GS3 (SPH-i710) exchange server repeated security update notification

I just connected my Samsung Galaxy S 3 (SPH-i710) to my exchange email server at work. It synced up and my email and calendars show on my device, however every few minutes I get a notification that ...
0
votes
2answers
184 views

USB synchronization security issues

I've got an Android phone. I have just reset it to its factory default settings and set a password for unlocking the phone. However, even when it is locked and the screen displays a text box with a ...
3
votes
2answers
976 views

How can I undo the “Do Not Ask Again” for bluetooth contacts?

When I first connected my phone (Samsung Galaxy S II) to a bluetooth device, I was prompted that the device wanted to access my contacts. I mistakenly clicked Do Not Ask Again but I want to undo ...
3
votes
2answers
678 views

Strange/troubling behavior when putting phone in car dock

I have a Galaxy Nexus (rooted, running stock Jellybean). When I place it in the car dock, my screen gets flooded with notifications for "shell granted superuser access," and after a few minutes ...
6
votes
2answers
15k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
0
votes
1answer
778 views

Strange icons and notifications, is there a malware in my phone? [duplicate]

Possible Duplicate: Is this red star icon malware? How to get rid of it? Red Star And Green Cross Icons? I have a Samsung galaxy nexus with official Android 4.1 running. I sometimes get ...
4
votes
1answer
931 views

Find lost device without Gmail account configured and without SIM card

I recently misplaced a phone that did not have gmail account configured and did not have a SIM card in it either. Is there any way I can track it ? All of the tracking apps either require sending an ...
1
vote
1answer
1k views

How to see the device list of a given Google account

I have many test Android devices and added my Google account to those device to reuse my application collection. Recently I often recieve payment notification via gmail for application which I really ...
3
votes
2answers
6k views

Is there a way to block permissions for other applications on Jelly Bean?

I use LBE Privacy Guard with great pleasure to grant and withdraw permissions to access my contacts, the internet, etc. for each individual application installed in Ice-Cream Sandwich on my Galaxy ...
1
vote
3answers
948 views

Securing Memory Card?

What should I do so that the Memory card in my phone works only in my phone? Also, I should be able to connect my mobile to a PC through a USB cable and completely see/edit/organize the data on my ...
4
votes
2answers
2k views

How to connect ADB over 3G/4G? Or how can an ADB listener over network vulnerability be leveraged over GSM?

I keep seeing warning signs about enabling ADB over Network when you aren't connected to a WiFi network, but what if I want to connect ADB over 3G/4G ? Whenever I try to do it with any of the ...
5
votes
1answer
8k views

LogMeIn Hamachi VPN

How do I connect my Android phone or tablet to a LogMeIn Hamachi VPN? Is it even possible? LogMeIn has command line clients for Linux, and of course Android has built-in VPN settings. Is there some ...
9
votes
4answers
10k views

Certificate Install without mandatory PIN lockscreen

Google Support says: The type of lock that's acceptable may be predetermined by your system administrator. Where I can define what's acceptable? I can regenerate the certificate if needed. So ...
-1
votes
1answer
351 views

My nfc-enabled android-phone won't read a rfid key I own, why and what can I do about it?

Does it require some kind of activation-code? If so, can I read it while I scan it on the original scanner?
9
votes
1answer
3k views

Child-proofing an Android phone?

Is there a way (an app, or a special launcher, a set of apps with instructions) that allows turning an Android phone into a child-proof "only call parents" one? Here are my main requirements (and ...
1
vote
0answers
44 views

Is TransLoc Running? Should I be concerned? [closed]

Over the last few days, I have gotten a system popup saying TransLoc has stopped. Normally I wouldn't care cause I know it crashed. However yesterday, I restarted my phone mid-day, and never ...
9
votes
1answer
1k views

Deny the installation of apps or add new accounts (kiosk mode)

I have a tablet that I want to give to people to go on the internet, but I don't want them to mess with it (install/unistall apps, add new accounts, change relevant options, etc). Is there a way to ...
11
votes
7answers
12k views

Security options grayed out

I have my mobile phone (Samsung Galaxy S2) running on ICS. Recently I activated Microsoft Exchnage ActiveSync to connect to my corporate email. It disabled all the security options like 'Pattern ...
12
votes
1answer
6k views

List of open ports on Android

Is there a way, on a non-rooted Android device, to see a list of what apps are listening on what port? Or even a way to see if an app is listening on a specific port?
6
votes
3answers
2k views

Is there an Android calendar with limited security permissions?

I've just bought an entry-level Samsung Europa, running version 2.2. I'm technically-minded but new to this OS. I'd like to find a calendar that runs in limited security permissions, so that my ...
5
votes
1answer
4k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
6
votes
2answers
1k views

Google two-step authentication and Android lock screen

After many failed screen unlock attempts, the user is required to enter the Google account password. That's a good idea. But what if I enabled Google's two-factor authentication, and then entered the ...
4
votes
1answer
139 views

Does Android 2.2 log digits dialed during a call, and if so, how can I clear this log?

Some voice jails that I call require me to enter a password. Are the digits I type while a call is active logged (as call dialing is), and if so, how can I remove them from the log? As you might ...