For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

3
votes
1answer
4k views

Galaxy Note 2: Disable MTP/PTP

When I connect my HTC Sensation (firmware: CM 10) to some PC I need to enter a passcode (to unlock the phone) and explicitly allow mounting as usb drive. But when I connect SGN2 it enables MTP or PTP ...
3
votes
0answers
383 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
3
votes
0answers
165 views

A data forensic tools for android [closed]

I have recently taken interest in digital forensics. What is the best tool, or set of tools to obtain and analyze images of android phones?
3
votes
4answers
4k views

How can I restrict a user's ability to modify settings or install apps?

Our team is planning to buy around 10 Android phones for the team members. We don't want them to install any applications other than the ones provided. Is there a method or an application which would ...
2
votes
3answers
678 views

Is Evernote a malicious app?

I have been using Evernote on my Laptop and Mobile phone for quite some time now. Recently, when downloading an update of Evernote app in my phone from Google Play app, I noticed that Evernote asks ...
2
votes
3answers
1k views

Why does the Android device connect to a secured wireless router without providing a password?

During the weekend, I was able to connect to a secured wireless network via an Android device (Asus Transformer Tablet), but when I tried to connect to the wireless network via my laptop it was ...
2
votes
2answers
141 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
2
votes
1answer
92 views

How can I secure my pictures, videos and other files stored on my phone?

I am looking for a way to protect every sort of data that is saved in my Android phone from being stolen. I have done some research on Google Play, the only app I found with all the features is Folder ...
2
votes
2answers
23k views

How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?

There are a load of sites that do this now, and it's really annoying: I visit a content site on my Android device. 10-15 seconds after loading starts the site hangs for a few seconds. Google play ...
2
votes
3answers
700 views

Application for remote-wiping a lost phone without handing access to my data to a third-party?

Or having to pay a subscription? I have an idea for a hypothetical Android app. Tell me if such a thing already exists. You install a server in a machine you have total control of, and is ...
2
votes
3answers
2k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
2
votes
2answers
2k views

Stuck with draconian security restrictions after adding and removing corporate e-mail account

After adding a corporate e-mail account to my phone, my device asked to encrypt itself as well as the attached SD card, and change the lock to password. I immediately removed the account, but the ...
2
votes
2answers
52 views

Protecting or Limiting my account's power

I have linked a great deal of power to my phone. It is connected to my gmail to such an extent that I am starting to get concerned that if somebody where to steal my phone they could reek havok on my ...
2
votes
2answers
813 views

How to browse securely, anonymously and without blocks on Android?

So here's your Average Joe at a coffee store, using the open Wifi on his shiny new Android phone. Obviously there are the same issues with using a laptop or any other device on an open network, ...
2
votes
2answers
147 views

Can traffic be inspected through WiFi? [duplicate]

Possible Duplicate: If I use free WiFi in a hotspot, can data be easily sniffed? Let's say I am browsing an HTTP accessible web site (i.e. NOT HTTPS) , is the traffic encrypted through the ...
2
votes
1answer
665 views

Accessing the internal phone memory by swapping out the SIM card

Is it possible to access an Android phone's internal memory by switching out the SIM card? My Android phone, with no SD card, has been stolen but access to the phone is locked via the "graphical ...
2
votes
2answers
596 views

Suspicious Permissions And A Safe Repository?

I have found older version of Facebook For Android app here which was hosted on geekfiles.in When i wanted to install 1.8.1 and checked permissions, the following arose my suspicions: Services that ...
2
votes
1answer
517 views

How to prevent data extraction from rooted phone via adb?

I've a question regarding security in a rooted device. Being superuser means that you can access the /data/data directory, and that's a lot of personal data (I think it is almost all the data there ...
2
votes
1answer
2k views

Mounting and Unmounting of Memory Card just by touch?

I am using a Samsung Galaxy Y mobile phone. In my mobile's settings, I see an option to "Unmount the Memory Card for Safe Removal", so it is possible to unmount the memory card without actually ...
2
votes
4answers
1k views

Securing Memory Card?

What should I do so that the Memory card in my phone works only in my phone? Also, I should be able to connect my mobile to a PC through a USB cable and completely see/edit/organize the data on my ...
2
votes
3answers
2k views

Screen lock settings won't change on Ice Cream Sandwich with MS Exchange Email

I have a Samsung Galaxy Nexus running Android 4.0.2. I have a corporate email set up to Microsoft Exchange. My sys admin said we use the default mobile policies for Exchange, but he doesn't know the ...
2
votes
1answer
5k views

How to force Gmail/Android to request password every time for google account [duplicate]

Possible Duplicate: Logout from Gmail on my device I have a Samsung Galaxy Ace running Android 2.3.3. Is it possible to force Gmail or any google related apps to request my password ...
2
votes
1answer
58 views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...
2
votes
1answer
348 views

What is the mobile provisioning website supposed to do?

When I go to Settings → More... → Mobile plan it gives me a message "{mobile operator} has no known provisioning website". Digging into Android source code for WirelessSettings.java I found how URL ...
2
votes
3answers
180 views

How can I quickly remove all of my data from my device and then get it back again?

Soon, I'll have to give my phone (a non-rooted LG Nexus 4) to another person for some time. As the phone contains very sensitive information, I do not want this person to be able to access any of it. ...
2
votes
1answer
77 views

Can the PIN-input be modified to not display the last character?

Since today I have a new Nexus 4, with android 4.2.2. But when I type in my PIN, it always displays the last typed character in the input field. I think that is quite the security risk. On my old ...
2
votes
1answer
2k views

Samsung GS3 (SPH-i710) exchange server repeated security update notification

I just connected my Samsung Galaxy S 3 (SPH-i710) to my exchange email server at work. It synced up and my email and calendars show on my device, however every few minutes I get a notification that ...
2
votes
1answer
60 views

Are there any issues with having multiple phone finding applications?

I like to use Prey and have no complaints about it so far. However, our carrier also offers Mobile Recovery, which does a lot of the same things (GPS locations, etc). Is there any harm in having ...
2
votes
2answers
74 views

Allow login with multiple passwords

Is it possible to setup multiple accepted passwords for the login to Android? Or perhaps an alternative secure login. (Note: facial recognition and fingerprint does not count as secure, but an RSA/NFC ...
2
votes
1answer
75 views

Security Audit - how can I tell my Android Distribution is safe

I've just bought a Jiayu G4 and it came with android installed (rooted). My question is - how can I tell that nothing nasty has been installed on the phone? Or best practices to ensure that it's ...
2
votes
1answer
7k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
2
votes
2answers
749 views

Is there a Ghostery equivalent for Firefox on Android?

I use Firefox on a smartphone with limited RAM, where Ghostery would be most useful (removing useless content). Plus I don't like being tracked anyways. So is there an equivalent to Ghostery that ...
2
votes
1answer
3k views

How can I erase whole phone securely? [duplicate]

How can I erase my phone completely and securely before selling it for someone else? I have read that secure deletion procedures used on regular hard disks are ineffective on flash drives connected ...
2
votes
1answer
241 views

Is it possible to use Prey on a non-phone device?

This answer to a question asked earlier today reminded me that I had been wanting to check out Prey because I had heard some good things about it. I ended up installing it and creating an account, but ...
2
votes
1answer
851 views

Are IPv6 Privacy Extensions supported and how can they be enabled/disabled?

I just read about a potential privacy issue with IPv6 addresses on phones. While the article mainly talks about Apple devices, Android is mentioned so I wonder: Does Android support IPv6 privacy ...
2
votes
1answer
69 views

How can access on an android device be restricted to applications or widgets on the home screen only?

This is a rooted Nexus 7 with 4.4.4 (factory image from Google). I'd like to restrict access to anything that's not on one of the home screens. Apps and widgets on one the home screens should be ...
2
votes
0answers
68 views

Customer claims our app trashed her phone [closed]

I'm in receipt of a complaint that the android mobile app my company provides has trashed a customer's android phone to the extent that it is now only capable of making phone calls. No sms. No ...
2
votes
0answers
150 views

Security options greyed out

There was a great thread on the same subject. Security options grayed out I am in the same situation where I need to keep the certificates on the android phone. And the ActiveSync certificates ...
2
votes
0answers
102 views

Android application firewall - interactive prompt confirmation for connections

I'm thinking of developing application, or probably extending AFWall+ app What I'm missing on Android is possibility to confirm each connection from each application, simply blocking the application ...
2
votes
1answer
682 views

How do I import a user CA for the Email app properly?

For my own setup I use a personal CA: "Gert van Dijk CA". I'm using this for HTTPS and VPN successfully by importing the CA certificate into the Android keystore. I'm having trouble getting the Email ...
2
votes
0answers
210 views

How CF-Autoroot works?

How CF-autoroot Theoretically is able to root android devices ? I'm wondering on what technics it use to run su ? Do it use a custom/patched Linux kernel ? or it is based on local root exploit ? I ...
2
votes
1answer
5k views

Do not auto-mount Samsung Galaxy S4 Mini when USB is connected

I had an HTC desire phone, before upgrading to a Galaxy S4 Mini. I have run into an annoying problem. On my phone (not on the SD Card), I have private data, including an RSA key, which I use to SSH ...
2
votes
1answer
2k views

Android 4.1.2 Full Device Encryption

I have a FDE enabled on my Android. However on JellyBean when device restarts I never get a boot password prompt,just regular unlock screen. I remember on 4.0 ICS, after reboot Android would ask me ...
2
votes
0answers
203 views

How can I know that my Galaxy's camera and microphone is not being accessed without my knowledge?

A few months back I installed a few apps straight from the internet. One was an ability to run Ruby scripts on my phone, the other was Grooveshark. Both times, an Jellybean 4.2 flagged up a warning ...
2
votes
0answers
67 views

Modify 30 second incorrect PIN delay

How can I modify/disable the 30 second delay after trying the incorrect PIN 5 times? Device is a nexus 7 rooted running SmoothRom 4.4
2
votes
0answers
419 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
2
votes
0answers
580 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
2
votes
0answers
368 views

Exchange Active Sync email on Galaxy 10.1 disappears.

One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
2
votes
0answers
222 views

Android detects SIM change – gmail synchronized messages deleted?

After gmail detects SIM change – it asks to renew login to gmail account. This is a very good security action. But does it maybe also clear synchronized messages (that have been downloaded before SIM ...
2
votes
0answers
111 views

IEEE 802.1AE (MACSec) support

Does Android support IEEE802.1AE MACSec ? This protocol enables data confidentiality and integrity over WiFi connections.