For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

3
votes
2answers
4k views

Hardware backed Credentials Storage on Galaxy Nexus

First, I hope I choose the right stackexchange for that question. Android 4.3 introduces a "Hardware-backed" Credential Storage. If I go to Settings->Security under the "Credentials-Storage" Header ...
3
votes
1answer
157 views

Can Java be exploited through Android app ads?

It turns out that Java has a security flaw that is currently being exploited to put malware on people's computers. Is there any risk that advertisements in Android apps will have embedded, malicious ...
3
votes
2answers
575 views

Android applications privacy and security concerns

If a user wants to install some applications from play store, is it sole responsibility of the user to decide whether the apps may harm or not? Should the user be worries regarding permissions? For ...
3
votes
2answers
255 views

What steps should I take before giving my phone to be fixed in a lab?

This is similar to I have sold my phone on eBay. What should I do before I send it off?, but in my case I'm just handing my phone off to be fixed. I don't want to have to completely wipe or reset my ...
3
votes
4answers
4k views

How to disable secure credentials password?

On DesireZ running android 2.2 I've run into a rather annoying problem. The phone forces me to make a credentials password for WIFI, and then I have to enter it before the phone will connect to a ...
3
votes
1answer
263 views

Can an app run code if you don't open it?

Can an app run code if you don't open it? As part of this question, the topic of an app downloading data without ever being explicitly opened by the user was mentioned briefly. It got me thinking: ...
3
votes
2answers
396 views

Is Android susceptible to OpenSSL vulnerabilities? [duplicate]

There has been a big vulnerability discovered in OpenSSL today, are android applications affected, and what can we do to get a secure version? What about people with older devices (such as the HTC ...
3
votes
1answer
4k views

Where can I configure SELinux in Cyanogenmod 10.1.3?

Cyanogenmod released the stable version 10.1.3 yesterday and it apparently includes SELinux enhancements running in permissive mode per default. I thought that you could change the mode in the ...
3
votes
1answer
8k views

Locating stolen phone after factory reset

I assume any reasonable thief will wipe the phone as soon as possible, thus removing any tracking apps and user accounts. I there a method to track the phone any way? A possible method is to use a ...
3
votes
3answers
2k views

Why do some Android apps need access to my SD card and fine location?

I understand why apps like Maps need to know my specific location, but is it safe to allow any application to access these things? Are there any clues as to which apps are safe and which aren't? ...
3
votes
3answers
6k views

How do I disable GMail?

Yes, this has been asked before, but neither really addresses my concern, and I don't have reputation enough to add comments to existing questions. I've bought the cheapest Android 4 tablet with ...
3
votes
1answer
891 views

is it possible to use a CA-Cert for serverauthentification in WPA enterprise networks with android 2.2+?

I just wanted to know if it is possible with android 2.2+ to use a ca-cert for server auth in WPA-Enterprise networks? A fried told me it is not possible, but this would mean there would be a mayor ...
3
votes
1answer
58 views

How to override default Android's default screen lock security policy?

I want my Android device screen to open without requiring password. So I chose "none" option in Security settings. But, when I needed to add a VPN connection, it required me to provide a password, ...
3
votes
1answer
210 views

Protecting phone from the FREAK bug

How can I protect my phone from the FREAK bug? Phone is a Samsung GT-S5830 running Gingerbread.
3
votes
1answer
1k views

What is the attack vector of <= 4.3 web view vulnerability?

This is in reference to the vulnerability that Google is not patching, since the WebView in 4.3 and less is part of the OS and not a separate updateable component. Since some people will not have ...
3
votes
1answer
1k views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...
3
votes
1answer
224 views

How to securely/permanently delete sensitive information on a Galaxy S5?

My S5's screen died about a week ago and as a result the phone will be getting swapped. It has some pretty sensitive information on it (such as numbers, credit card info, photos, etc.) that I want to ...
3
votes
1answer
118 views

Are calls made by third-party apps logged?

For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener ...
3
votes
1answer
502 views

Disable password hiding globally

With a touch screen keyboard, having passwords I am entering displayed hidden is more trouble than it's worth to me. Few applications like KeePassDroid allow you to disable this feature. Is there any ...
3
votes
2answers
3k views

How can I undo the “Do Not Ask Again” for bluetooth contacts?

When I first connected my phone (Samsung Galaxy S II) to a bluetooth device, I was prompted that the device wanted to access my contacts. I mistakenly clicked Do Not Ask Again but I want to undo ...
3
votes
2answers
695 views

Strange/troubling behavior when putting phone in car dock

I have a Galaxy Nexus (rooted, running stock Jellybean). When I place it in the car dock, my screen gets flooded with notifications for "shell granted superuser access," and after a few minutes ...
3
votes
1answer
595 views

Application-specific passwords only work for a short period of time

I have two-step verification enabled on my Google Account, and I generated an application-specific password for my Android device (Infuse 4G with custom ROM in case that's relevant), and input it. ...
3
votes
1answer
819 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
3
votes
1answer
63 views

Are there any issues with having multiple phone finding applications?

I like to use Prey and have no complaints about it so far. However, our carrier also offers Mobile Recovery, which does a lot of the same things (GPS locations, etc). Is there any harm in having ...
3
votes
2answers
158 views

How can I see in the App store whether I am working secure

I wanted to buy some small application from the app store, it asked for my credit card information, but I was unsure whether we were working in secure mode. How can you see, during payment, whether ...
3
votes
1answer
729 views

Is there anyway to connect to a WPA Enterprise Wi-Fi network with version 1.5 on a Motorola Backflip?

The only available security options when adding an new Wi-Fi network are: None WEP WPA Personal WPA2 Personal I was hoping to connect to WPA Enterprise either by getting it added to the list, or ...
3
votes
1answer
242 views

Android application firewall - interactive prompt confirmation for connections

I'm thinking of developing application, or probably extending AFWall+ app What I'm missing on Android is possibility to confirm each connection from each application, simply blocking the application ...
3
votes
1answer
2k views

Is it possible to prevent the screen turning off when pressing the power button?

I run an app on my handset which really needs the screen to remain on for it to function properly. The app already seems to attempt to keep the screen on as the screen timeout seems to be disabled ...
3
votes
2answers
718 views

Double Security for Gmail

My phone has a pattern lock and I want friends to be able to unlock it with the pattern, however, I do not want them to have access to my gmail. Is there a way that I can force gmail to ask for the ...
3
votes
1answer
238 views

Google Authenticator used by native apps?

I recently turned on two-step verification for my Google account and installed the Google Authenticator app on my Android device. Based on what I have read everywhere (even Google's official info: ...
3
votes
0answers
23 views

Safely buy a used mobile

Is there any step I need to take after buying a used Android phone from a stranger? Is restoring the device to defaults enough? The hardware should be fine; I'm talking more about the OS itself and ...
3
votes
2answers
92 views

If I can access bubble of Messenger like apps from home screen then does it not mean any other app can also access that app? Is Android safe then?

In Android phones, we can access Messenger and many more apps similar to it from home screen ( like bubble-heads, lyrics etc). With this we let one app in your phone access another app, (we can use ...
3
votes
1answer
913 views

Does Wunderlist store data in the server in encrypted form?

How secure and private is Wunderlist? For example does it only transfer data in encrypted form but stores it unencrypted? I would like to be able to store passwords relating to work on my phone but am ...
3
votes
0answers
175 views

Does Android's implementation of SELinux's MAC inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4, SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
0answers
425 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
3
votes
0answers
616 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
3
votes
0answers
183 views

A data forensic tools for android [closed]

I have recently taken interest in digital forensics. What is the best tool, or set of tools to obtain and analyze images of android phones?
3
votes
4answers
6k views

How can I restrict a user's ability to modify settings or install apps?

Our team is planning to buy around 10 Android phones for the team members. We don't want them to install any applications other than the ones provided. Is there a method or an application which would ...
2
votes
3answers
915 views

Is Evernote a malicious app?

I have been using Evernote on my Laptop and Mobile phone for quite some time now. Recently, when downloading an update of Evernote app in my phone from Google Play app, I noticed that Evernote asks ...
2
votes
3answers
1k views

Why does the Android device connect to a secured wireless router without providing a password?

During the weekend, I was able to connect to a secured wireless network via an Android device (Asus Transformer Tablet), but when I tried to connect to the wireless network via my laptop it was ...
2
votes
2answers
214 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
2
votes
1answer
249 views

How can I secure my pictures, videos and other files stored on my phone?

I am looking for a way to protect every sort of data that is saved in my Android phone from being stolen. I have done some research on Google Play, the only app I found with all the features is Folder ...
2
votes
3answers
843 views

Application for remote-wiping a lost phone without handing access to my data to a third-party?

Or having to pay a subscription? I have an idea for a hypothetical Android app. Tell me if such a thing already exists. You install a server in a machine you have total control of, and is ...
2
votes
1answer
299 views

When you lock down a Lollipop device to disable Chrome's incognito mode, this creates an XML “restrictions file”. What actual XML is inside the file?

Note: If this post is too long to read, please see the summary in the last paragraph. I own an aging Samsung Galaxy S Relay cellphone. It's running Android 4.1.2 and has a built-in physical keyboard. ...
2
votes
3answers
118 views

How long can I reasonably expect security updates to be supported? [closed]

In light of the recent "stagefright" MMS vulnerability, I understand that while Google may release fixes to security vulnerabilities, it requires co-operation from the handset manufacturer to deliver ...
2
votes
1answer
5k views

Alarm is working even when the phone is powered off

I just discovered that if I set the alarm clock and then power off the phone (by holding the power button and then selecting "Power Off") the alarm will still go off when the time comes. Is this ...
2
votes
2answers
53k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
2
votes
2answers
3k views

Stuck with draconian security restrictions after adding and removing corporate e-mail account

After adding a corporate e-mail account to my phone, my device asked to encrypt itself as well as the attached SD card, and change the lock to password. I immediately removed the account, but the ...
2
votes
1answer
1k views

Is there a common GPS cache on Android?

From what I understood about Android securty all applications are separated by different user-accounts and different filesystem locations. BUT: After GPS-test has fixed my location for the first time ...
2
votes
2answers
54 views

Protecting or Limiting my account's power

I have linked a great deal of power to my phone. It is connected to my gmail to such an extent that I am starting to get concerned that if somebody where to steal my phone they could reek havok on my ...