For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

2
votes
1answer
1k views

Does Wunderlist store data in the server in encrypted form?

How secure and private is Wunderlist? For example does it only transfer data in encrypted form but stores it unencrypted? I would like to be able to store passwords relating to work on my phone but am ...
1
vote
1answer
51 views

Adware keeps installing itself

I have somehow got my phone infected with an adware by the name 'Android Communication Sync' ('com.foreign.provider'). It isn't visible in the apps browser (doesn't have any icon) and causes ads to ...
0
votes
0answers
9 views

How do i set xprivacy to restrict the camera access(or camera permission) by other apps?

I use Xprivacy to set permissions on my Samsung phone(Gt-i9060L, android 4.2.2). What permission associated with an app should be checked in xprivacy to restrict camera access by that app?
0
votes
0answers
15 views

Log what an application does and accesses

I'm a bit paranoid about the permissions that certain applications require to work on an Android phone. Specially the "Access to your storage" permission. What I'm scared of is if an application is ...
0
votes
1answer
13 views

Virus on an Android Phone from viewing Goolge Images

so earlier this evening I browsed through some playboy images on Google Images. I have to do a project on Women as a Sex Symbol. Now I just viewed the Images on Google Images without clicking any ...
0
votes
0answers
8 views

How banking Apps secure there data on android? [on hold]

I am newbee to (android + JAVA). But expert on C, C++ on Linux platform. My Question: 1. How secure is Java on android ?? 2. Which programming Languages do banking apps use on android ?? 3. I have ...
0
votes
0answers
10 views

NFC activated in the background without me knowing?

Instantly when I got my phone, I dissabled NFC because I don't need it and it eats power. But recently, I have seen that it is enabled without me knowing and I discover it randomly when I open the ...
3
votes
2answers
6k views

Are rooted Android phone more vulnerable to Malware Apps than non-rooted ones?

From my understanding, a rooted Android phone mean that the user will be accessing everything on the phone, just like a root user. So, installing a Apps mean that the Apps will also have root ...
10
votes
4answers
25k views

How can I remove trusted CAs on Android?

From the current fallout around DigiNotar (in short, a Root Certificate Authority that has been hacked, fake HTTPS certificates issued, MITM attacks very likely), there are some parts concerning ...
1
vote
3answers
21 views

Nexus 6P - Fingerprint unlock setup

I would like to setup fingerprint unlock on my Nexus 6P. I believe I have it setup correctly, but when I go to unlock the phone by putting my finger on the sensor, it vibrates once then makes me put ...
4
votes
7answers
28k views

Find what app is causing popups, NOT in notification bar

I am getting these popups regularly. They do not appear in the notification center so I can't find out what app is causing them. The only app I can think of that I have installed recently, I have ...
0
votes
1answer
47 views

Is a 'Send security reports' notification legitimate? Note 4, 6.0.1

Samsung Galaxy Note 4 (Verizon SM-N910V), Android 6.0.1 After a sudden reboot, my phone displayed a few system notifications in Chinese, and is now displaying a new notification (screenshot attached)....
2
votes
0answers
44 views

What is tested in the Google Play Pre-Launch Security Report?

The Google Play store includes a pre-launch security scan in Pre Launch Report -> Security. I am trying to find out what it is actually testing for. Are there any resources that get into detail on ...
4
votes
0answers
39 views

Do permissions apply across users?

If I create a secondary user and install an app while using the phone as that user, will the permissions for that app carry over for the primary user? For example, let's say I have a primary user, ...
0
votes
0answers
50 views

How to Forget All App Passwords

I haven't been able to find any sort of app or topic on here which allows a device to stop remembering passwords for apps, such as Facebook, Snapchat, Reddit, etc. I have strong passwords, and I ...
10
votes
1answer
11k views

On Android, how can I disable Google Chrome's incognito mode?

Google Chrome for Android includes a feature called incognito mode. This feature, when I activate it, is designed to help prevent Chrome from automatically remembering and storing information about ...
3
votes
1answer
2k views

Pin unlock without showing numbers

When you type your pin into the Android lock screen, it does the usual mobile password field thing where it actually shows the last character you've entered. Is there any way to disable this on ...
-1
votes
0answers
18 views

Anti-theft application [duplicate]

So yesterday my cellphone was stolen so from now on i would like to be protected. Are there any tracking apps that won't get unistalled when the thief hard resets the phone?
30
votes
3answers
27k views

How do I get rid of “Network may be monitored” in KitKat?

Ever since I've installed my own CA in the key store I'm getting warnings that the network may be monitored. Well, I guess that's a valid warning if I don't trust these certificates, but I really ...
1
vote
1answer
1k views

App sending spam messages to my contacts

My phone sent the following message to all of my contacts: Install this voice messenger just to talk http://mrv.withmechat.us/Cun I know I didn't send this message and not to mention it sent it ...
0
votes
1answer
13 views

Do Android apps store data in clear?

As in the title, is there any chance someone with Android phone (5+) could access private app's data via USB storage? In other words, **do apps encrypt data by default? **(e. g. Google Apps but ...
13
votes
1answer
413 views

Canonical explanation of Android Encryption and Vulnerabilities

Note: Well, the bounty expired and one possible reason could be effort required to address as I gather from comments. Seeing the number of upvotes, it appears to be of interest to others as well. I ...
2
votes
1answer
2k views

Android 4.x doesn't require lock screen at home

In Android 4.x, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting proximity to my ...
1
vote
0answers
32 views

How can I tell if someone is getting into my device remotely

I think someone is spying on me. How can I tell if someone read my messages for pink my phone calls or downloading pictures to their equipment or from cuz I have Android IP address pop up on my Google ...
1
vote
2answers
102 views

android VNC and linux installing

I was thinking of using Linux Deploy to install Ubuntu in Nexus 9 (2014) Device. I Would be using the VNC viewer by "realvncunlimited" and Linux deploy by "meefik". My question is, how secure will the ...
8
votes
1answer
6k views

How to export SSL certificate from Android, Chrome

I have a Nexus 5 with the latest Android 4.4.2. I'm registered on using Chrome . They use client certificates to authenticate the user. I installed the certificate and could successfully use the site ...
21
votes
5answers
10k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
4
votes
3answers
14k views

Preventing browser redirects on Android (and iOS)

There seems to be an issue occurring with mobile browser apps on Android and iPhone being redirected to advertising sites. This is interrupting the browsing experience. The problem: A user visits a ...
2
votes
2answers
29k views

What is YGPS and why does it have every permission that's in the book?

I have a FairPhone One. From time to time I look in the system settings and the battery usage to see what is draining the battery. I've disabled anything I don't use, including a number of builtins ...
8
votes
3answers
21k views

How to remotely log out all web-based Gmail sessions from my Android phone

Can I remotely sign out all web sessions of Gmail from my Android phone? This question explains how to do this from the Gmail website with a standard web browser. This doesn’t work from my phone ...
1
vote
1answer
1k views

ActiveSync/Exchange security policy

On my HTC DNA I recently changed from the integrated ActiveSync client to Touchdown. My corporate IT policy required a PIN to access the device when using the Android client. Now that I switched to ...
1
vote
0answers
42 views

Android root sandbox?

On Windows I would use a sandbox to easily see file-changes made by shady programs to see how it would affect my system. What are easy methods (except decompiling and looking at the actual program ...
11
votes
3answers
140k views

How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?

There are a load of sites that do this now, and it's really annoying: I visit a content site on my Android device. 10-15 seconds after loading starts the site hangs for a few seconds. Google play ...
1
vote
0answers
68 views

Checking activity of unknown user on my phone

Yesterday I took my new phone to a mobile service shop... I wanted them to put a protection layer on my display. I have a pattern lock on my phone so I just put the display to sleep and gave it to him....
0
votes
2answers
1k views

Disable Screenshot Security

Some apps don't allow screenshots so how can I still take a screenshot? It is my phone and I should be able to do whatever I want with it so why is there even a feature to disallow screenshots? ...
0
votes
0answers
49 views

Implications of an unlocked bootloader

I've been using android for about 5+ years now. Each of my phones usually rooted and rolling a custom Rom. But in the last one year or so, Especially the way in which android N is headed, it feels as ...
0
votes
0answers
36 views

How do I decode gzipped packets?

I am trying to do some analysis on a mobile app to see what data is being sent to the owner's API. I thought this would be a simple case of installing "Packet Capture" and viewing the data, however it ...
2
votes
3answers
6k views

Blocking 'Android System,Battery Warning,com.media tek,Common Data Service…' from connecting to the Internet

I am using NoRoot Firewall to block Internet access to some apps. It recently notified me that this/these app(s) are attempting to access the Internet: "Android System,BatteryWarning,com.media tek,...
1
vote
1answer
36 views

How can I limit the number of fingerprint attempts before fallback to other login type?

I've got a Nexus 6P and would like to reduce the number of allowed failures before it blocks fingerprint as an allowed login mechanism - according to https://support.google.com/nexus/answer/6285273 ...
3
votes
2answers
126 views

How to prevent two-factor code being exposed on lock screen in messages notification?

On Lollipop, the text message notification on the lock screen includes some of the content of the text message. For two-factor code text messages, this will display the two factor code to anyone ...
0
votes
1answer
55 views

How can I securely install an older version of Chrome on a device that won't support newer versions?

I have an Android device that runs Android 4.0.2 and can't be updated any further. When I tried to install Chrome from the Play Store, I was told: Your device isn't compatible with this version. ...
0
votes
0answers
18 views

SELinux policy loading and enforcement on Android

In the most recent versions of Android, SELinux enforcement is enabled in the kernel and is static, but how can this work before a policy has been loaded? Is the policy embedded in the kernel? If not, ...
1
vote
2answers
56 views

aptoide How to report potential abuse without becoming a member?

The aptoide store is an alternative platform where you can get android apps. I found an app on aptoide store via google that has a size of 3.3 MB. The same app with the same app-version in fdroid ...
0
votes
0answers
61 views

How do I remotely log-out my Android device without reporting it as stolen?

Today I sent my phone in for servicing but I forgot to log-out/disassociate my account beforehand. Is there a way I can do this remotely other than: Changing my Google password---but it's been less ...
0
votes
0answers
47 views

Can info still be accessed when device is locked?

If my device is lost/stolen and I lock it remotely, can someone still access my info by connecting it via usb cable to laptop and opening my files?? Or does lock completely freeze ALL data on phone?...
0
votes
1answer
5k views

Used device manager once, now I can't set security to 'none'

Phone is an LG Nexus. I was messing around with security settings and decided to try using a pattern to unlock my phone. No more than 5 minutes later, I completely forget the pattern I set. Did some ...
4
votes
5answers
8k views

Remote factory reset and changing Google password

In case I ever lose my Nexus 4 phone, I've opened to the Google Settings app, then tapped "Android Device Manager" and from there, I've enabled both "Remotely locate this device" and "Allow remote ...
0
votes
0answers
27 views

Internet Safety on Phone. I really don't understand

I'll make this brief, and I apologize in advance for my ignorance. If you click a link and it redirects you to somewhere that is not the intended target, is this a major concern? This recently ...
24
votes
8answers
56k views

How do I avoid the server-specified security policies for my work e-mail?

When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?: I just received a Nexus 7 and signed ...
0
votes
3answers
43 views

Entering very long Google password during setup

If I have a new phone how can I enter my Google password in a secure manner during setup without having to type it (it is VERY long at over 30 random alphanumeric characters and a pain to type). ...