For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

4
votes
2answers
2k views

Encrypted phone no longer asks for pattern when turning on?

Nexus 6 running stock 5.0.1 not rooted. It used to ask me for my pattern every time I turned it on from a powered off state. Now it seems to boot fully without asking. Under Settings > Security it ...
1
vote
2answers
555 views

How do I use my Google account when I have a FIDO U2F Key attached?

I have recently attached a FIDO U2F Key to my Google Account to make it more secure. How can I now actually log into my Google Account on Android again? Whenever I try to log in, it says wrong ...
3
votes
1answer
213 views

Protecting phone from the FREAK bug

How can I protect my phone from the FREAK bug? Phone is a Samsung GT-S5830 running Gingerbread.
0
votes
1answer
98 views

android VNC and linux installing

I was thinking of using Linux Deploy to install Ubuntu in Nexus 9 (2014) Device. I Would be using the VNC viewer by "realvncunlimited" and Linux deploy by "meefik". My question is, how secure will the ...
0
votes
2answers
3k views

Photos/Media/Files and Full Network Access

Does anything stop an application with Photos/Media/Files and Other ("full network access" and "run at startup") permissions from simply uploading ALL of your photos and videos to some stupid server ...
1
vote
1answer
162 views

Is it possible to have a higher level of lock-screen security only on boot up?

Many of my apps are protected by an lock app ('Smart Applock' - asking for a pattern unlock before access to gMail, install/uninstall, etc). As most of my apps are thus locked individually, I would ...
0
votes
0answers
440 views

How do I log out from Google Apps without logging out from Android Device Manager?

Say my phone was stolen, and I need to log out from my Google Apps in that phone remotely. I can revoke the access in that phone through my web browser, however I would log out from Android Device ...
0
votes
2answers
123 views

Accidentally i have uninstalled my home launcher

there is no launcher in my phone.i also switched off and switched on . it showed only samsung nothing else.My device was already rooted and i thought by factory data reset it would work but now i can'...
0
votes
0answers
610 views

Why is my Nvidia tablet looking for chinese servers(baidu.com)?

I am not sure if this is the right area for the question, or if it is even a big deal, but here i go. When using by Nvidia tablet to develop an app I realized that it was attempting to reach a server ...
3
votes
1answer
1k views

Does Wunderlist store data in the server in encrypted form?

How secure and private is Wunderlist? For example does it only transfer data in encrypted form but stores it unencrypted? I would like to be able to store passwords relating to work on my phone but am ...
0
votes
0answers
338 views

“Locking” a Samsung Bootloader

In order to prevent cold-boot attacks against an encrypted Android filesystem, it has been recommended to keep your bootloader locked at all times with the original factory recovery installed. The ...
0
votes
1answer
593 views

I locked my phone from android device manager, now i'm not being able to remove the lock screen password [duplicate]

I locked my phone from android device manager, now i'm not being able to remove the lock screen password, it says that, lock screen is disabled by administrator or encryption policy or credential ...
0
votes
3answers
745 views

How to avoid silent app installations

I have gone through this post Silent app installation wherein it clearly mentions it's highly impossible to self install the application without going through the whole installer proceedure.But when i ...
2
votes
0answers
976 views

Can an antivirus really stop the broadAnywhere threat?

I had a look at the diff where the broadAnywhere threat is fixed, and it's basically just mPendingIntent = PendingIntent.getBroadcast(this, 0, new Intent(), 0); replaced with: Intent ...
3
votes
1answer
1k views

What is the attack vector of <= 4.3 web view vulnerability?

This is in reference to the vulnerability that Google is not patching, since the WebView in 4.3 and less is part of the OS and not a separate updateable component. Since some people will not have ...
0
votes
1answer
516 views

Can I get a virus on Android 4.4.2 by clicking “no thanks” on one of those virus browser pop-ups?

I opened a link using the built-in facebook browser yesterday, and pop-ups on the website kept asking me if I wanted to install some anti-virus and they had two options: No thanks and OK. Normally I ...
0
votes
0answers
958 views

Adding more than 3 fingerprints in Galaxy S5 by swiping different fingers when adding a new fingerprint

On the Samsung Galaxy S5 one can bypass the 3 fingerprint limit by swiping different fingers when adding a new fingerprint. Can this cause any security issue?
1
vote
0answers
110 views

Fast switch between lock screens?

I know there is "No Lock Screen", which is a great musthave app that I have been using for months on all the devices I own. My friends/relatives love it too. My only problem with it it's that I ...
1
vote
1answer
259 views

how to disconnect asus usb connection from eclipse

im a beginner in android apps mobile. i already launch it in my phone asus T00Q, but i have problem to disconnect the usb from eclipse. some said we should put the mode on charging mode and not Media ...
4
votes
3answers
14k views

Preventing browser redirects on Android (and iOS)

There seems to be an issue occurring with mobile browser apps on Android and iPhone being redirected to advertising sites. This is interrupting the browsing experience. The problem: A user visits a ...
0
votes
0answers
556 views

Disabling/Changing PIN on Android device: where are the disabled flag and new PINs stored (SIM or internal storage)?

On my Samsung Galaxy SIII, one can go to Settings -> More -> Security -> SIM card lock -> Set up SIM card lock -> Lock SIM card` which displays a check box which can be used to configure the phone to ...
0
votes
1answer
742 views

Possible to change SIM card PUK on Android device?

On my Samsung Galaxy SIII, one can go to Settings -> More -> Security -> SIM card lock -> Set up SIM card lock -> Change SIM PIN to change the default PIN that came with the SIM card. ...
2
votes
1answer
351 views

Undesired download of Baidu Browser

new Android user with the world's most low end tablet, Azpen A727. I'm enjoying learning about Android and have killed off most of the bloatware...but twice now "Baidu Browser" has been downloaded ...
0
votes
0answers
193 views

Recovering lost or stolen phone (security and feasability considerations)?

I am trying to understand a little bit about security in case my phone goes stolen. I have read that even if a phone is stolen and the SIM card is removed, it can still be possible to find your phone ...
0
votes
1answer
612 views

execve permission denied under /data [closed]

I have met a weird problem on a Samsung Galaxy Note 2, running Android 4.3, with an origin-forgetton rooted rom. getenforce returns "Permissive", so selinux is Permissive. cat /proc/self/status ...
1
vote
3answers
2k views

How is my friend bypassing Applock application

I'm using moto x 2nd gen, I recently installed applock to keep some apps private but one of my friend knows a way to bypass the password and even change it, he did the same even with pattern lock. He ...
1
vote
2answers
12k views

How to switch screen unlock from Pattern to Slide

On my Nexus 7 2013 Wi-Fi with Android 5.0.1 Lollipop I used the Slide setting for the lock screen. To experiment with a VPN, I switched to pattern lock. After deleting the VPN entry I had created, I ...
0
votes
1answer
158 views

Does rooting a phone expose the phone to security risks? [duplicate]

I have a very simple question. If I root my phone, will it be easier for malware to run on my device and cause more damage (due to the nature of the extended set of operations that applications with ...
1
vote
0answers
417 views

How to root the HTC Desire 300 (also known as Zara Mini)

Okay please forgive me if this has already been answered, I've read a few questions on here but I still don't understand. Firstly, I'm not a "techie" or anything like that, so some of the really ...
1
vote
1answer
11k views

Lollipop: override security policies (specifically lock screen/Exchange/Office 365)

When I used Android 4.4 (KitKat) on my Nexus 5 I could ignore certain security policies such as a requirement to have a PIN code to unlock the lock screen. After upgrading to Lollipop and the move of ...
2
votes
0answers
434 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
22
votes
3answers
158k views

How can I disable the screen lock password in lollipop?

I have enabled password protection on the lock screen on my Nexus 5 Lollipop device: After enabling password, I can't seem to be able to cancel it. Any idea how to go back to None or Swipe?
0
votes
1answer
4k views

Used device manager once, now I can't set security to 'none'

Phone is an LG Nexus. I was messing around with security settings and decided to try using a pattern to unlock my phone. No more than 5 minutes later, I completely forget the pattern I set. Did some ...
31
votes
3answers
61k views

Bypass “Swipe up to unlock” on Android Lollipop lock screen

I recently flashed my Nexus 4 to Android Lollipop using the factory image. I have set a pattern lock for unlocking the device. But whenever I turn on the phone, I have to click on the little lock ...
0
votes
1answer
153 views

Can a locked phone's data be accessed when being repaired?

I had an HTC One S device which suddenly turned off and refused to start. On giving to the service centre, it turns out the device needs replacement of an item 'PCBA-MAIN BOARD WITH SKU ID MS' which ...
0
votes
0answers
81 views

Security of Android cryptography in versions < 5.0 against government agencies

Recently, both Google and Apple announced their new OSes encrypt the device by default. This caused a lot of complaints from government agencies. Let me quote an article http://trendblog.net/fbi-...
1
vote
1answer
2k views

Does rooting phone affect online banking security? [duplicate]

I'm thinking of rooting my android phone (HTC Desire 300) and was wondering if doing so would affect the internet security with stuff like online banking. Is it still secure to do my banking on a ...
1
vote
0answers
39 views

Where do you publish information about a vulnerability you have found within android?

I found a small vulnerability within the default web browser, here is the ticket. Submitted last year. Issue 42647: Android Web Browser, JavaScript Popup Bug. Tested on 11 Jan 2013. ...
2
votes
2answers
6k views

Alarm is working even when the phone is powered off

I just discovered that if I set the alarm clock and then power off the phone (by holding the power button and then selecting "Power Off") the alarm will still go off when the time comes. Is this ...
3
votes
1answer
2k views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...
0
votes
2answers
870 views

How do I re-enable swipe to unlock?

I recently encrypted my Android 4.4.2 device (S4 Active) and have now unencrypted it. However the only options I still have to unlock my phone are PIN and Password. When I attempt to change it it now ...
2
votes
1answer
244 views

Rooted phone, but can't pass “Install” dialog

I am running Android 4.4.4 with the LiquidSmooth ROM and SuperSU. All these components work flawlessly, as far as I can tell. I am also able to use TitanicBackup (to demonstrate Root is working). ...
2
votes
1answer
438 views

How can access on an android device be restricted to applications or widgets on the home screen only?

This is a rooted Nexus 7 with 4.4.4 (factory image from Google). I'd like to restrict access to anything that's not on one of the home screens. Apps and widgets on one the home screens should be ...
1
vote
2answers
117 views

Do old versions of Android still get security patches?

For example if a critical vulnerability is found in Jelly Bean would it get a patch, or is the expectation that users should upgrade to KitKat to be more secure? Does Android even have the concept of ...
1
vote
0answers
260 views

How to use the S5 fingerprint scanner with full device encyption?

I am using the S5 and have decide to fully encrypt the device and the sd card. My biggest problem is that now the fingerprint is no a possible choice as a lockscreen security. Only password. I ...
1
vote
0answers
68 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
0
votes
0answers
148 views

How to obtain crypto header and footer from Nexus 5 Android 4.4

I'm interested in how to find the crypto_header and crypto_footer for disk encryption on a Nexus 5. A lot of articles have them for specific devices and I was wondering if there was any information on ...
3
votes
1answer
776 views

Which Android version/phone can control per-app access permission?

The only reason I am still using an iPhone is due to the fact that most Android phones did not allow control of per-app access permission. The App Ops feature was once there but pulled. I know some ...
1
vote
1answer
1k views

How to disable “security policy restricts use of html email”

I use AirWatch Agent and created an ActiveSync account to connect to my company's exchange server. Now, when I read emails they show up as plain text with the message "security policy restricts use of ...
2
votes
0answers
114 views

Customer claims our app trashed her phone [closed]

I'm in receipt of a complaint that the android mobile app my company provides has trashed a customer's android phone to the extent that it is now only capable of making phone calls. No sms. No ...