For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

7
votes
0answers
62 views

Are there any Google devices that support capabilities in their default kernel?

If I systemless root (no modification done to /system partition) a nexus device, would I be able to able to set capabilites on executables without changing the original kernel binary ? I often want ...
4
votes
0answers
39 views

Do permissions apply across users?

If I create a secondary user and install an app while using the phone as that user, will the permissions for that app carry over for the primary user? For example, let's say I have a primary user, ...
4
votes
0answers
3k views

What is Google Partner Setup?

What does the Google Partner Setup app that is pre-installed on almost every Android device actually do? Why does it need each of those intrusive permissions, especially the Phone permission? Why ...
3
votes
0answers
24 views

Safely buy a used mobile

Is there any step I need to take after buying a used Android phone from a stranger? Is restoring the device to defaults enough? The hardware should be fine; I'm talking more about the OS itself and ...
3
votes
0answers
2k views

Smart Lock not working, is it due to Outlook?

I have a Nexus 6 with Android 5.1, kernel version 3.10.40-geec2459, build number LMY47D. When I first started using the Nexus 6, Smart Lock worked. After a while it stopped working. If I open the ...
3
votes
0answers
188 views

Does Android's implementation of SELinux's MAC inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4, SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
0answers
425 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
3
votes
0answers
783 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
2
votes
0answers
44 views

What is tested in the Google Play Pre-Launch Security Report?

The Google Play store includes a pre-launch security scan in Pre Launch Report -> Security. I am trying to find out what it is actually testing for. Are there any resources that get into detail on ...
2
votes
0answers
168 views

How to use network interface as non-root user?

I want to communicate between my Android device and my Linux box over IP through the USB network interface mode. The device I'm using is a OnePlus One running CM12.1 nightly builds. It's rooted and ...
2
votes
0answers
984 views

Can an antivirus really stop the broadAnywhere threat?

I had a look at the diff where the broadAnywhere threat is fixed, and it's basically just mPendingIntent = PendingIntent.getBroadcast(this, 0, new Intent(), 0); replaced with: Intent ...
2
votes
0answers
443 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
2
votes
0answers
412 views

Security options greyed out

There was a great thread on the same subject. Security options grayed out I am in the same situation where I need to keep the certificates on the android phone. And the ActiveSync certificates ...
2
votes
0answers
336 views

How can I know that my Galaxy's camera and microphone is not being accessed without my knowledge?

A few months back I installed a few apps straight from the internet. One was an ability to run Ruby scripts on my phone, the other was Grooveshark. Both times, an Jellybean 4.2 flagged up a warning ...
2
votes
0answers
711 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
2
votes
0answers
444 views

Exchange Active Sync email on Galaxy 10.1 disappears.

One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
2
votes
0answers
484 views

Android detects SIM change – gmail synchronized messages deleted?

After gmail detects SIM change – it asks to renew login to gmail account. This is a very good security action. But does it maybe also clear synchronized messages (that have been downloaded before SIM ...
2
votes
0answers
148 views

IEEE 802.1AE (MACSec) support

Does Android support IEEE802.1AE MACSec ? This protocol enables data confidentiality and integrity over WiFi connections.
2
votes
0answers
527 views

How to put a lock screen with security code on a Arnova 10 G 2?

I have a Arnova 10 G 2 with Android 2.3 which works very well, but it has no unlock screen and no security options. Does anyone know of a way to put some kind of security code on the device, either ...
1
vote
0answers
32 views

How can I tell if someone is getting into my device remotely

I think someone is spying on me. How can I tell if someone read my messages for pink my phone calls or downloading pictures to their equipment or from cuz I have Android IP address pop up on my Google ...
1
vote
0answers
42 views

Android root sandbox?

On Windows I would use a sandbox to easily see file-changes made by shady programs to see how it would affect my system. What are easy methods (except decompiling and looking at the actual program ...
1
vote
0answers
68 views

Checking activity of unknown user on my phone

Yesterday I took my new phone to a mobile service shop... I wanted them to put a protection layer on my display. I have a pattern lock on my phone so I just put the display to sleep and gave it to him....
1
vote
0answers
24 views

How to Have 2nd Step Verification for Making Calls in 6.0?

I would like to use 2nd Step Verification always for Making Calls. I can use a second device to get those codes; etc second Gmail account; or a similar encryption device as used by banks. I do not ...
1
vote
0answers
56 views

Android 2.2 security in 2016

I have an old Samsung Dart t499 that I would like to give to my son for simple texting and phone calls. Assuming that (1) we don't install any apps and just use the ones that came by default on the ...
1
vote
0answers
79 views

How to hide winrar or other apk files in general?

I have stored some important files in my android phone in rar format. I've hidden these files in .nomedea folder. I've also enabled password for these files via win rar. The problem is for opening ...
1
vote
0answers
46 views

How are internal components of Android tested before releasing?

How are the internal components of Android such as Zygote and Binder tested before being released? I tried looking around for answers to this but most resources (blog posts and research papers) I ...
1
vote
0answers
154 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
1
vote
0answers
171 views

How can an organization control when or when not an update for an app is installed in their Android smartphones?

Imagine an organization that have a legitimate fear to automatic updates. That organization thinks that an automatic update may break a business use case. For example, when the VPN client is update ...
1
vote
0answers
55 views

Is there a way to use a phone as a virtual keychain for NFC tags?

So let's say I have a bunch of things that can be unlocked via NFC. Each thing would correspond with one tag and one tag only. The problem would then be that I'd have to carry a bunch of tags around. ...
1
vote
0answers
65 views

Combining Ghostery and HTTPS-Everywhere on Android?

On my PC (Windows 8.1) I am happily using Firefox with the Addons Ghostery and HTTPS-Everywhere. I really like this combination so I winder how I can achieve the same things on my Android phone. I ...
1
vote
0answers
76 views

New Android Hack/Compromise?

In the past three weeks, I've received calls from numbers I don't recognize and haven't answered them, but these calls leave voicemails over a few minutes. I've listened to a few of the voicemails ...
1
vote
0answers
134 views

Where does the “privacy protection password” come from?

I wanted to insert a second sim card in my Umi phone. From then onwards, it always asks me for this 'privacy protection password'. I can only insert numbers, not letters... so I'm very puzzled about ...
1
vote
0answers
31 views

Can Samsung patch security faults on their devices by an update?

There was an exploit that turns Samsung Galaxy phones into remote bugging devices (reference: ArsTechnica) As many as 600 million Samsung phones may be vulnerable to attacks that allow hackers to ...
1
vote
0answers
281 views

Nexus 5 WiFi problems

I believe it's somewhat well-known that the Nexus 5 has had more than a few hiccups with certain wifi networks. However, I'm not sure that the main reasons for wifi connectivity issues is as well ...
1
vote
0answers
50 views

Samsung keyboard security bug - was patch released?

Last month, a security flaw affecting the bundled (and unremovable) keyboard app used in many Samsung devices (S4, S5, S6) was announced: New exploit turns Samsung Galaxy phones into remote bugging ...
1
vote
0answers
534 views

Android 5.1 update, Motorola X (1st Gen) and “Skip” NFC tabs (Really: disable “swipe” step before unlock)

I've just upgraded my gen 1 Moto X to 5.1. I've managed to get the NFC "Skip" tabs working again to unlock the phone, but the overall behavior is worse than with the prior release. Before 5.1, when I'...
1
vote
0answers
88 views

How does the smart lock feature on Android define a trusted device?

The smart lock feature on Android allows someone to set a Bluetooth device as "trusted" which makes it easy to unlock. See for example: https://support.google.com/nexus/answer/6093922 I tried to add ...
1
vote
0answers
215 views

Granting device admin previlage to email account

I am connecting my gmail app(or any e mail application) to my office e mail using exchange. It asks me to add the mail app as a Device administrator for my phone. So that it can Erase all data,Set ...
1
vote
0answers
219 views

How to tell what app or process periodically sends SMS messages?

About a week ago I purchased a T-Mobile SIM card and activated it on a $3/mo prepaid program. This program requires you to load your account with $3 per month to keep it alive, and these include 30 ...
1
vote
0answers
114 views

Fast switch between lock screens?

I know there is "No Lock Screen", which is a great musthave app that I have been using for months on all the devices I own. My friends/relatives love it too. My only problem with it it's that I ...
1
vote
0answers
426 views

How to root the HTC Desire 300 (also known as Zara Mini)

Okay please forgive me if this has already been answered, I've read a few questions on here but I still don't understand. Firstly, I'm not a "techie" or anything like that, so some of the really ...
1
vote
0answers
41 views

Where do you publish information about a vulnerability you have found within android?

I found a small vulnerability within the default web browser, here is the ticket. Submitted last year. Issue 42647: Android Web Browser, JavaScript Popup Bug. Tested on 11 Jan 2013. ...
1
vote
0answers
261 views

How to use the S5 fingerprint scanner with full device encyption?

I am using the S5 and have decide to fully encrypt the device and the sd card. My biggest problem is that now the fingerprint is no a possible choice as a lockscreen security. Only password. I ...
1
vote
0answers
69 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
1
vote
0answers
119 views

Lock screen security - reboot after X invalid PINs

I used following methodology to create a strong boot password on the phone, at the same time keeping a weaker PIN for screen unlock. Now I want to make sure that if someone tries to pick up a PIN, ...
1
vote
0answers
449 views

samsung grand duos 9082 doesn't see that my SD card is encrypted on it and there is no option to decrypt

I encrypted my samsung grand duos 9082 and then my SD card, using the settings for encryption. But then, to unlock screen, I decrypted my handset and I unlocked it by my samsung account. Then, the ...
1
vote
0answers
91 views

K9 mail — susceptible to MITM attacks?

I am using K9 on Android and have set the SSL option to 'SSL (strict)'. My understanding is that with this option K9 definitely requires a valid SSL certificate which is issued by a trusted CA, i.e. ...
1
vote
0answers
476 views

Secure Galaxy Star GT-S5282 using simcard change alert

How can I secure my Samsung Galaxy Star GT-S5282 using the simcard change alert option. In other words, when a simcard is inserted in my phone a notification SMS is sent to other phones.
1
vote
0answers
80 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
0answers
704 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...