For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

3
votes
1answer
887 views

is it possible to use a CA-Cert for serverauthentification in WPA enterprise networks with android 2.2+?

I just wanted to know if it is possible with android 2.2+ to use a ca-cert for server auth in WPA-Enterprise networks? A fried told me it is not possible, but this would mean there would be a mayor ...
3
votes
2answers
43 views

If I can access bubble of Messenger like apps from home screen then does it not mean any other app can also access that app? Is Android safe then?

In Android phones, we can access Messenger and many more apps similar to it from home screen ( like bubble-heads, lyrics etc). With this we let one app in your phone access another app, (we can use ...
3
votes
1answer
199 views

Protecting phone from the FREAK bug

How can I protect my phone from the FREAK bug? Phone is a Samsung GT-S5830 running Gingerbread.
3
votes
1answer
966 views

What is the attack vector of <= 4.3 web view vulnerability?

This is in reference to the vulnerability that Google is not patching, since the WebView in 4.3 and less is part of the OS and not a separate updateable component. Since some people will not have ...
3
votes
1answer
693 views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...
3
votes
1answer
186 views

How to securely/permanently delete sensitive information on a Galaxy S5?

My S5's screen died about a week ago and as a result the phone will be getting swapped. It has some pretty sensitive information on it (such as numbers, credit card info, photos, etc.) that I want to ...
3
votes
1answer
494 views

What is the setting in xprivacy to access the microphone?

I use xprivacy to set all permissions on my phone, but I accidently forbid the tuner app to access my microphone. Which setting do I have to enable?
3
votes
3answers
5k views

How do I disable GMail?

Yes, this has been asked before, but neither really addresses my concern, and I don't have reputation enough to add comments to existing questions. I've bought the cheapest Android 4 tablet with ...
3
votes
1answer
108 views

Are calls made by third-party apps logged?

For the first time I installed app that can make calls automatically (sms/call screener). What worries me is this level of permissions -- however I have to no choice really because stock screener ...
3
votes
1answer
463 views

Disable password hiding globally

With a touch screen keyboard, having passwords I am entering displayed hidden is more trouble than it's worth to me. Few applications like KeePassDroid allow you to disable this feature. Is there any ...
3
votes
2answers
2k views

How can I undo the “Do Not Ask Again” for bluetooth contacts?

When I first connected my phone (Samsung Galaxy S II) to a bluetooth device, I was prompted that the device wanted to access my contacts. I mistakenly clicked Do Not Ask Again but I want to undo ...
3
votes
1answer
589 views

Application-specific passwords only work for a short period of time

I have two-step verification enabled on my Google Account, and I generated an application-specific password for my Android device (Infuse 4G with custom ROM in case that's relevant), and input it. ...
3
votes
1answer
808 views

DroidX data encryption - which algorithm and how strong?

I have a follow-up to the question posted here. I recently got a 2.3 DroidX phone, and noticed that it as well has data encryption option. I pulled an SD card from device, and noticed that folder ...
3
votes
1answer
62 views

Are there any issues with having multiple phone finding applications?

I like to use Prey and have no complaints about it so far. However, our carrier also offers Mobile Recovery, which does a lot of the same things (GPS locations, etc). Is there any harm in having ...
3
votes
2answers
158 views

How can I see in the App store whether I am working secure

I wanted to buy some small application from the app store, it asked for my credit card information, but I was unsure whether we were working in secure mode. How can you see, during payment, whether ...
3
votes
1answer
725 views

Is there anyway to connect to a WPA Enterprise Wi-Fi network with version 1.5 on a Motorola Backflip?

The only available security options when adding an new Wi-Fi network are: None WEP WPA Personal WPA2 Personal I was hoping to connect to WPA Enterprise either by getting it added to the list, or ...
3
votes
2answers
6k views

Preventing browser redirects on Android (and iOS)

There seems to be an issue occurring with mobile browser apps on Android and iPhone being redirected to advertising sites. This is interrupting the browsing experience. The problem: A user visits a ...
3
votes
1answer
193 views

Android application firewall - interactive prompt confirmation for connections

I'm thinking of developing application, or probably extending AFWall+ app What I'm missing on Android is possibility to confirm each connection from each application, simply blocking the application ...
3
votes
1answer
2k views

Is it possible to prevent the screen turning off when pressing the power button?

I run an app on my handset which really needs the screen to remain on for it to function properly. The app already seems to attempt to keep the screen on as the screen timeout seems to be disabled ...
3
votes
2answers
589 views

Double Security for Gmail

My phone has a pattern lock and I want friends to be able to unlock it with the pattern, however, I do not want them to have access to my gmail. Is there a way that I can force gmail to ask for the ...
3
votes
1answer
220 views

Google Authenticator used by native apps?

I recently turned on two-step verification for my Google account and installed the Google Authenticator app on my Android device. Based on what I have read everywhere (even Google's official info: ...
3
votes
2answers
692 views

Strange/troubling behavior when putting phone in car dock

I have a Galaxy Nexus (rooted, running stock Jellybean). When I place it in the car dock, my screen gets flooded with notifications for "shell granted superuser access," and after a few minutes ...
3
votes
1answer
462 views

Does Wunderlist store data in the server in encrypted form?

How secure and private is Wunderlist? For example does it only transfer data in encrypted form but stores it unencrypted? I would like to be able to store passwords relating to work on my phone but am ...
3
votes
0answers
158 views

Does Android's implementation of SELinux's MAC inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4, SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
1answer
5k views

Galaxy Note 2: Disable MTP/PTP

When I connect my HTC Sensation (firmware: CM 10) to some PC I need to enter a passcode (to unlock the phone) and explicitly allow mounting as usb drive. But when I connect SGN2 it enables MTP or PTP ...
3
votes
0answers
425 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
3
votes
0answers
534 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
3
votes
0answers
175 views

A data forensic tools for android [closed]

I have recently taken interest in digital forensics. What is the best tool, or set of tools to obtain and analyze images of android phones?
3
votes
4answers
5k views

How can I restrict a user's ability to modify settings or install apps?

Our team is planning to buy around 10 Android phones for the team members. We don't want them to install any applications other than the ones provided. Is there a method or an application which would ...
2
votes
3answers
839 views

Is Evernote a malicious app?

I have been using Evernote on my Laptop and Mobile phone for quite some time now. Recently, when downloading an update of Evernote app in my phone from Google Play app, I noticed that Evernote asks ...
2
votes
8answers
12k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
2
votes
3answers
1k views

Why does the Android device connect to a secured wireless router without providing a password?

During the weekend, I was able to connect to a secured wireless network via an Android device (Asus Transformer Tablet), but when I tried to connect to the wireless network via my laptop it was ...
2
votes
2answers
197 views

Can an Android app circumvent its stated permissions?

I downloaded an APK from a 3rd party source (not Google Play). My question is that can this android app, although stated that it can only access my USB storage, could it also do other things (such as ...
2
votes
1answer
174 views

How can I secure my pictures, videos and other files stored on my phone?

I am looking for a way to protect every sort of data that is saved in my Android phone from being stolen. I have done some research on Google Play, the only app I found with all the features is Folder ...
2
votes
3answers
774 views

Application for remote-wiping a lost phone without handing access to my data to a third-party?

Or having to pay a subscription? I have an idea for a hypothetical Android app. Tell me if such a thing already exists. You install a server in a machine you have total control of, and is ...
2
votes
1answer
127 views

When you lock down a Lollipop device to disable Chrome's incognito mode, this creates an XML “restrictions file”. What actual XML is inside the file?

Note: If this post is too long to read, please see the summary in the last paragraph. I own an aging Samsung Galaxy S Relay cellphone. It's running Android 4.1.2 and has a built-in physical keyboard. ...
2
votes
2answers
47k views

How can I reset the Play Store content filter pin?

I have forgotten my Google Play Content filter pin and would like to reset it so I can download some apps that are being blocked. Does anyone know how I can reset the pin?
2
votes
2answers
3k views

Stuck with draconian security restrictions after adding and removing corporate e-mail account

After adding a corporate e-mail account to my phone, my device asked to encrypt itself as well as the attached SD card, and change the lock to password. I immediately removed the account, but the ...
2
votes
1answer
1k views

Is there a common GPS cache on Android?

From what I understood about Android securty all applications are separated by different user-accounts and different filesystem locations. BUT: After GPS-test has fixed my location for the first time ...
2
votes
2answers
53 views

Protecting or Limiting my account's power

I have linked a great deal of power to my phone. It is connected to my gmail to such an extent that I am starting to get concerned that if somebody where to steal my phone they could reek havok on my ...
2
votes
2answers
870 views

How to browse securely, anonymously and without blocks on Android?

So here's your Average Joe at a coffee store, using the open Wifi on his shiny new Android phone. Obviously there are the same issues with using a laptop or any other device on an open network, ...
2
votes
2answers
154 views

Can traffic be inspected through WiFi? [duplicate]

Possible Duplicate: If I use free WiFi in a hotspot, can data be easily sniffed? Let's say I am browsing an HTTP accessible web site (i.e. NOT HTTPS) , is the traffic encrypted through the ...
2
votes
1answer
880 views

Accessing the internal phone memory by swapping out the SIM card

Is it possible to access an Android phone's internal memory by switching out the SIM card? My Android phone, with no SD card, has been stolen but access to the phone is locked via the "graphical ...
2
votes
2answers
634 views

Suspicious Permissions And A Safe Repository?

I have found older version of Facebook For Android app here which was hosted on geekfiles.in When i wanted to install 1.8.1 and checked permissions, the following arose my suspicions: Services that ...
2
votes
1answer
602 views

How to prevent data extraction from rooted phone via adb?

I've a question regarding security in a rooted device. Being superuser means that you can access the /data/data directory, and that's a lot of personal data (I think it is almost all the data there ...
2
votes
1answer
232 views

Undesired download of Baidu Browser

new Android user with the world's most low end tablet, Azpen A727. I'm enjoying learning about Android and have killed off most of the bloatware...but twice now "Baidu Browser" has been downloaded ...
2
votes
1answer
89 views

Does enabling sideloading allow applications to be installed or run on the device without consent?

I'm concerned that enabling sideloading of applications may allow malware to be installed. However, I'm aware that Android gives a "Do you want to install this application?" dialog while installing ...
2
votes
1answer
325 views

How can I protect my photos from Apps?

Camera saves them on SD, so everything can just upload them wherever it wants. I heard of apps that claim to protect photos within them but the only thing they did is making them hidden from the user ...
2
votes
1answer
2k views

Mounting and Unmounting of Memory Card just by touch?

I am using a Samsung Galaxy Y mobile phone. In my mobile's settings, I see an option to "Unmount the Memory Card for Safe Removal", so it is possible to unmount the memory card without actually ...
2
votes
4answers
2k views

Securing Memory Card?

What should I do so that the Memory card in my phone works only in my phone? Also, I should be able to connect my mobile to a PC through a USB cable and completely see/edit/organize the data on my ...