For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

0
votes
0answers
14 views

Guys help needed [on hold]

i got tab 2 p3110 form our institute. but the thing is they have given us a limited access to it.. Kind of theme i guess which only allows us to use limited feautes like pdfs and ppts... what should i ...
0
votes
0answers
11 views

App with root privileges and monitoring of applications [on hold]

Well, I'm doing a research related with privacy in Android. I need build an application that can monitoring when another application send sms in background for example. So I'm trying analyse the ...
0
votes
0answers
10 views

Control Mobile via pc using USB (No URL Control)

I want to control the mobile via pc using usb cable, I found out lot many solution like Droid@Screen & AndroidScreenMonitor etc., but this is an one way communication am not able to control from ...
0
votes
0answers
26 views

How to obtain crypto header and footer from Nexus 5 Android 4.4

I'm interested in how to find the crypto_header and crypto_footer for disk encryption on a Nexus 5. A lot of articles have them for specific devices and I was wondering if there was any information on ...
0
votes
2answers
435 views

.htaccess protected HTML5 videos not playing

I have videos in a directory which is protected through .htaccess. I want to deliver the videos by means of the <video> tag. Here is an example: protected video Use test/test to login. ...
1
vote
2answers
22 views

Do old versions of Android still get security patches?

For example if a critical vulnerability is found in Jelly Bean would it get a patch, or is the expectation that users should upgrade to KitKat to be more secure? Does Android even have the concept of ...
0
votes
0answers
33 views

How to use the S5 fingerprint scanner with full device encyption?

I am using the S5 and have decide to fully encrypt the device and the sd card. My biggest problem is that now the fingerprint is no a possible choice as a lockscreen security. Only password. I ...
1
vote
0answers
20 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
1
vote
1answer
52 views

Which Android version/phone can control per-app access permission?

The only reason I am still using an iPhone is due to the fact that most Android phones did not allow control of per-app access permission. The App Ops feature was once there but pulled. I know some ...
1
vote
1answer
75 views

How to disable “security policy restricts use of html email”

I use AirWatch Agent and created an ActiveSync account to connect to my company's exchange server. Now, when I read emails they show up as plain text with the message "security policy restricts use of ...
2
votes
1answer
6k views

How can I change SELinux from Enforcing to Permissive on Samsung Galaxy Note 3?

My device is Samsung Galaxy Note 3 SM-N9005. This phone comes with SELinux set to Enforcing by default. I have been trying to change this to permissive but to no avail. I built the kernel from ...
1
vote
1answer
602 views

ActiveSync/Exchange security policy

On my HTC DNA I recently changed from the integrated ActiveSync client to Touchdown. My corporate IT policy required a PIN to access the device when using the Android client. Now that I switched to ...
0
votes
1answer
779 views

Securely wiping a phone with a broken screen

I have a Samsung Galaxy S3 with a broken screen. The screen does not respond to any touch and does not display anything at all, it is black at all times. CyanogenMod 11 is installed on the device. I ...
0
votes
1answer
30 views

Secure ADB connection over network

I am using Geniatech ATV Android Set Top Boxes running android 4.2.2 for a current project. I might put some of those devices in public places like shopping centers. These boxes are connected to the ...
2
votes
0answers
59 views

Customer claims our app trashed her phone [on hold]

I'm in receipt of a complaint that the android mobile app my company provides has trashed a customer's android phone to the extent that it is now only capable of making phone calls. No sms. No ...
0
votes
0answers
22 views

Which versions of Android is Google developing security fixes for?

I'm trying to develop a BYOD support policy for the company I work for. We intend to only allow devices and software that are actively being supported by the manufacturer. I know that the relationship ...
0
votes
0answers
16 views

Ask for the pin only twice a day

I would like to configure my android phone to ask for my PIN only two times every day (if not rebooted). Screen lock with PIN after 12 hours (no PIN needed in between) would be great. The screen-lock ...
15
votes
3answers
4k views

Where to find a PIN lock screen that scrambles the keypad on every use?

Is there some way to get a lock screen whose PIN pad changes number layouts every time it's used? It seems like a very basic way to thwart smudge attacks and yet my (broken?) google-fu can't find any ...
-1
votes
1answer
17 views

Any work around to sophos

Sophos is an app that let's you put passwords on apps (among other things). Is there a work around to access the apps? Thanks!
2
votes
2answers
2k views

how to add a custom lock for the recovery and/or bootloader?

Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security! An unlocked recovery means that no ...
1
vote
1answer
18 views

Security, keylogging and accounts

An in-app purchase requests password verification before the transaction. Thus, all the following input into the onscreen keyboard is the user's password. Is handling keyboard events prevented at ...
2
votes
1answer
1k views

Android 4.1.2 Full Device Encryption

I have a FDE enabled on my Android. However on JellyBean when device restarts I never get a boot password prompt,just regular unlock screen. I remember on 4.0 ICS, after reboot Android would ask me ...
1
vote
1answer
1k views

Android 4 don't require unlock at home

In the Android OS version 4, what would I have to do to require a pass code to unlock the phone when I'm away from home, but when I'm at my home, I don't need pass-code restrictions. Detecting ...
9
votes
3answers
14k views

Why does Android prompt me with “Enter the credential storage password” when I attempt to connect to a secured WiFi network?

When I connect my iPhone to a secured WiFi network (at work), I'm prompted for my Username and Password. (And then I'm prompted to accept what I presume is an SSL certificate.) But when I select the ...
1
vote
1answer
297 views

How to remove an account from Google Hangouts?

I logged in to Google Hangouts using an account (which is NOT the account I use in play store). But now I cannot remove it. I can sign out, but to sign back in, it does not for the password and ...
5
votes
2answers
5k views

Preventing installed apps from making calls or sending SMS

It seems like a growing number of (seemingly legitimate) apps casually claim the "Services that cost you money" permissions (making calls and sending SMS) for non-essential secondary features that ...
1
vote
5answers
1k views

Find what app is causing popups, NOT in notification bar

I am getting these popups regularly. They do not appear in the notification center so I can't find out what app is causing them. The only app I can think of that I have installed recently, I have ...
1
vote
5answers
6k views

Does encrypting an Android device add any real security benefit over a key-lock?

Would encrypting my Android device make my data any safer in case of theft? It seems to me that since the encryption key necessarily is identical to the PIN code or password used for the key-lock, ...
1
vote
1answer
541 views

how to root your Android or at least understand how it works

I do not know exactly how rooting works or if it can even by done on my Android (Samsung GT-N8013) device. No rootkit appears to exist yet for Android 4.1.2, so I am left with figuring out how to ...
31
votes
3answers
2k views

Encrypt the phone's internal storage

Is there a way to encrypt my phone's internal memory, in the same way you would encrypt a computer's partition? Ideally, the phone would always ask for the password when booting, and even if someone ...
1
vote
3answers
4k views

Suspicious directory “.MySecurityData” in internal storage

I have a Galaxy Note (N7000) device running stock Android 4.1.2. I was browsing the internal storage and noticed a directory named ".MySecurityData", which contains one single directory "dont_remove", ...
0
votes
0answers
33 views

Web proxy for Android 4.2.2

I need to cut off access to Flash and HTML5 videos on several devices for a project. Is there any app like a proxy to perform this? If I could deny a list of webpages it will be perfect.
1
vote
1answer
30 views

Can I “Wipe data/Factory reset” a phone that doesn't even boot via USB?

I have a Razr HD (XT925 GSM) which suddenly shut down and can't be turned back on (pressing or long pressing the power button does nothing, nor does connecting it to the wall). I have a lot of ...
21
votes
4answers
9k views

My phone was just stolen an hour or so ago. Are there any options for tracking?

I realize this is a long shot, but my phone was lost or stolen a few hours ago. At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my ...
18
votes
1answer
13k views

What's the security implication of having an unlocked boot loader?

Nexus devices can be unlocked using the fastboot command fastboot oem unlock to install a custom firmware. For security reasons, the phone is wiped when this command is executed. However after this is ...
2
votes
2answers
57 views

Allow login with multiple passwords

Is it possible to setup multiple accepted passwords for the login to Android? Or perhaps an alternative secure login. (Note: facial recognition and fingerprint does not count as secure, but an RSA/NFC ...
0
votes
3answers
65 views

How to know if an keyboard/input related app is safe to use

I am Vietnamese and I cannot type my language on my Android phone i.e. Samsung Galaxy S4 So I look for apps that help me to input Vietnamese. My issue is that I'm affraid the apps will bug me and ...
0
votes
1answer
84 views

Does encryption, factory reset, encryption make a safer used phone?

I recently purchased a used Moto X. I know the person I bought it from so I'm not terribly worried but here is my idea to shore up the security on a used device. Don't put in your SIM card or log ...
0
votes
2answers
20 views

can an android device be in danger on a malicious site?

I accidentally went onto a site via Google images and went off after half a second, (the page had been quarter/half loaded. I accidentally hit the undo button and it opened again, and I closed it ...
0
votes
0answers
42 views

Block all root connections except to certain IP destinations using Iptables

I am using rooted Android 4.4.4 system. I want to block all the network connections associated by processes that run by root except to certain Ip targets. Something like this Block all network ...
0
votes
1answer
41 views

How do I remove Selfmite worm?

In June this year I experienced what I've found to be called the "Selfmite" worm on my Nexus 5 smartphone. On 24.06 and 29.06 it sent the message "Dear [contact name], Look The Self-time, ...
6
votes
2answers
17k views

What Trusted Root CAs are included in Android by default?

There doesn't seem to be a central Android resource that lists the Trusted Root CAs included in the OS or default browser (related question on SO), so how can I find out which are included on my phone ...
0
votes
0answers
14 views

Installed Comodo SSL certificate not showing in User in Trusted credentials [duplicate]

I am trying to install the SSL certificate for our exchange server. However although it says it is installed it is not showing under the User tab in settings --> personal --> security --> credential ...
1
vote
1answer
110 views

Encrypting Nexus 7 vs. screen lock

I read in this article that a non-encrypted tablet with only screen-lock on can have data read through USB. Is this really true for example for a Nexus 7 tablet? I mean - if I lock the screen you ...
0
votes
1answer
52 views

GSM vulnerabilities

I heard that there are inherent flaws in the GSM protocol that make it possible for someone to impersonate a network operator and do all sorts of nasty things remotely, even if your phone is off. Is ...
-1
votes
1answer
42 views

How can I remotely wipe a stolen phone? [duplicate]

My phone have been stolen and I have many pictures on it, and secret things! How can I trash every thing on it through a Whatsapp message? I have not tired anything yet.
5
votes
2answers
512 views

How to make packages from f-droid to be treated as from a “known source” (if I have root)?

I usually get packages from http://f-droid.org/ repository through their package browser (because then I have a guarantee that I use free (= libre) software); and they are signed with their key. I ...
4
votes
3answers
11k views

“Account unlock” when not connected to internet?

I have a Samsung Galaxy Y mobile phone. I see this screen when I press "Forgot Password" in the pattern lock screen that comes by default with the phone: My Question is: How would my account be ...
5
votes
1answer
124 views

How to prevent tracking or hacking of a used phone

The used phone's IMEI is clean, so it's not stolen. Looks like its seller did a factory-reset before selling it. But how do I make sure that it doesn't have any malware or backdoors, and that its ...
1
vote
0answers
80 views

Asus nexus 7 security settings has clearing credentials greyed out and can't handle device adminstrators

When looking at settings...security, I neither can clear credentials nor change device administrators. Clear credentials is greyed out and there is no option to change the device administration, who ...