For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

4
votes
0answers
73 views

Joining a public WiFi made the owner able to send me a Facebook friend request. How?

I walked by a bar with free, unsecured WiFi. My device auto-joined it, and a minute later I had a friend request on Facebook from that very bar. How did they get my Facebook identity just from ...
4
votes
0answers
2k views

What is Google Partner Setup?

What does the Google Partner Setup app that is pre-installed on almost every Android device actually do? Why does it need each of those intrusive permissions, especially the Phone permission? Why ...
3
votes
0answers
23 views

Safely buy a used mobile

Is there any step I need to take after buying a used Android phone from a stranger? Is restoring the device to defaults enough? The hardware should be fine; I'm talking more about the OS itself and ...
3
votes
0answers
175 views

Does Android's implementation of SELinux's MAC inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4, SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
0answers
425 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
3
votes
0answers
616 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
2
votes
0answers
107 views

How to use network interface as non-root user?

I want to communicate between my Android device and my Linux box over IP through the USB network interface mode. The device I'm using is a OnePlus One running CM12.1 nightly builds. It's rooted and ...
2
votes
0answers
354 views

Security options greyed out

There was a great thread on the same subject. Security options grayed out I am in the same situation where I need to keep the certificates on the android phone. And the ActiveSync certificates ...
2
votes
0answers
316 views

How can I know that my Galaxy's camera and microphone is not being accessed without my knowledge?

A few months back I installed a few apps straight from the internet. One was an ability to run Ruby scripts on my phone, the other was Grooveshark. Both times, an Jellybean 4.2 flagged up a warning ...
2
votes
0answers
682 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
2
votes
0answers
433 views

Exchange Active Sync email on Galaxy 10.1 disappears.

One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
2
votes
0answers
409 views

Android detects SIM change – gmail synchronized messages deleted?

After gmail detects SIM change – it asks to renew login to gmail account. This is a very good security action. But does it maybe also clear synchronized messages (that have been downloaded before SIM ...
2
votes
0answers
141 views

IEEE 802.1AE (MACSec) support

Does Android support IEEE802.1AE MACSec ? This protocol enables data confidentiality and integrity over WiFi connections.
2
votes
0answers
524 views

How to put a lock screen with security code on a Arnova 10 G 2?

I have a Arnova 10 G 2 with Android 2.3 which works very well, but it has no unlock screen and no security options. Does anyone know of a way to put some kind of security code on the device, either ...
1
vote
0answers
29 views

How to hide winrar or other apk files in general?

I have stored some important files in my android phone in rar format. I've hidden these files in .nomedea folder. I've also enabled password for these files via win rar. The problem is for opening ...
1
vote
0answers
34 views

How are internal components of Android tested before releasing?

How are the internal components of Android such as Zygote and Binder tested before being released? I tried looking around for answers to this but most resources (blog posts and research papers) I ...
1
vote
0answers
38 views

How are certs validated against default trust store?

Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
1
vote
0answers
136 views

How can an organization control when or when not an update for an app is installed in their Android smartphones?

Imagine an organization that have a legitimate fear to automatic updates. That organization thinks that an automatic update may break a business use case. For example, when the VPN client is update ...
1
vote
0answers
47 views

Combining Ghostery and HTTPS-Everywhere on Android?

On my PC (Windows 8.1) I am happily using Firefox with the Addons Ghostery and HTTPS-Everywhere. I really like this combination so I winder how I can achieve the same things on my Android phone. I ...
1
vote
0answers
66 views

New Android Hack/Compromise?

In the past three weeks, I've received calls from numbers I don't recognize and haven't answered them, but these calls leave voicemails over a few minutes. I've listened to a few of the voicemails ...
1
vote
0answers
102 views

Where does the “privacy protection password” come from?

I wanted to insert a second sim card in my Umi phone. From then onwards, it always asks me for this 'privacy protection password'. I can only insert numbers, not letters... so I'm very puzzled about ...
1
vote
0answers
229 views

Nexus 5 WiFi problems

I believe it's somewhat well-known that the Nexus 5 has had more than a few hiccups with certain wifi networks. However, I'm not sure that the main reasons for wifi connectivity issues is as well ...
1
vote
0answers
46 views

Samsung keyboard security bug - was patch released?

Last month, a security flaw affecting the bundled (and unremovable) keyboard app used in many Samsung devices (S4, S5, S6) was announced: New exploit turns Samsung Galaxy phones into remote bugging ...
1
vote
0answers
477 views

Android 5.1 update, Motorola X (1st Gen) and “Skip” NFC tabs (Really: disable “swipe” step before unlock)

I've just upgraded my gen 1 Moto X to 5.1. I've managed to get the NFC "Skip" tabs working again to unlock the phone, but the overall behavior is worse than with the prior release. Before 5.1, when ...
1
vote
0answers
77 views

How does the smart lock feature on Android define a trusted device?

The smart lock feature on Android allows someone to set a Bluetooth device as "trusted" which makes it easy to unlock. See for example: https://support.google.com/nexus/answer/6093922 I tried to add ...
1
vote
0answers
1k views

Smart Lock not working, is it due to Outlook?

I have a Nexus 6 with Android 5.1, kernel version 3.10.40-geec2459, build number LMY47D. When I first started using the Nexus 6, Smart Lock worked. After a while it stopped working. If I open the ...
1
vote
0answers
322 views

Crash when using TowelRoot exploit - how can I make it work?

I am using TowelRoot (can be downloaded from towelroot.com) to try to root my Android device using the 1-click method that TowelRoot can do to root the device. Here is the source code of the binary ...
1
vote
0answers
170 views

Granting device admin previlage to email account

I am connecting my gmail app(or any e mail application) to my office e mail using exchange. It asks me to add the mail app as a Device administrator for my phone. So that it can Erase all data,Set ...
1
vote
0answers
155 views

How to tell what app or process periodically sends SMS messages?

About a week ago I purchased a T-Mobile SIM card and activated it on a $3/mo prepaid program. This program requires you to load your account with $3 per month to keep it alive, and these include 30 ...
1
vote
0answers
916 views

Can an antivirus really stop the broadAnywhere threat?

I had a look at the diff where the broadAnywhere threat is fixed, and it's basically just mPendingIntent = PendingIntent.getBroadcast(this, 0, new Intent(), 0); replaced with: Intent ...
1
vote
0answers
105 views

Fast switch between lock screens?

I know there is "No Lock Screen", which is a great musthave app that I have been using for months on all the devices I own. My friends/relatives love it too. My only problem with it it's that I ...
1
vote
0answers
380 views

How to root the HTC Desire 300 (also known as Zara Mini)

Okay please forgive me if this has already been answered, I've read a few questions on here but I still don't understand. Firstly, I'm not a "techie" or anything like that, so some of the really ...
1
vote
0answers
280 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
1
vote
0answers
36 views

Where do you publish information about a vulnerability you have found within android?

I found a small vulnerability within the default web browser, here is the ticket. Submitted last year. Issue 42647: Android Web Browser, JavaScript Popup Bug. Tested on 11 Jan 2013. ...
1
vote
0answers
251 views

How to use the S5 fingerprint scanner with full device encyption?

I am using the S5 and have decide to fully encrypt the device and the sd card. My biggest problem is that now the fingerprint is no a possible choice as a lockscreen security. Only password. I ...
1
vote
0answers
66 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
1
vote
0answers
113 views

Lock screen security - reboot after X invalid PINs

I used following methodology to create a strong boot password on the phone, at the same time keeping a weaker PIN for screen unlock. Now I want to make sure that if someone tries to pick up a PIN, ...
1
vote
0answers
425 views

samsung grand duos 9082 doesn't see that my SD card is encrypted on it and there is no option to decrypt

I encrypted my samsung grand duos 9082 and then my SD card, using the settings for encryption. But then, to unlock screen, I decrypted my handset and I unlocked it by my samsung account. Then, the ...
1
vote
0answers
86 views

K9 mail — susceptible to MITM attacks?

I am using K9 on Android and have set the SSL option to 'SSL (strict)'. My understanding is that with this option K9 definitely requires a valid SSL certificate which is issued by a trusted CA, i.e. ...
1
vote
0answers
399 views

Secure Galaxy Star GT-S5282 using simcard change alert

How can I secure my Samsung Galaxy Star GT-S5282 using the simcard change alert option. In other words, when a simcard is inserted in my phone a notification SMS is sent to other phones.
1
vote
0answers
74 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
0answers
680 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
1
vote
0answers
602 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
1
vote
0answers
1k views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
1
vote
0answers
764 views

No encryption option on Huawei g510 and Android 4.1.1

I recently bought a Huawei g510 with Android 4.1.1 and I was going to encrypt it, but I just can't find the encryption option in the settings panel or any other place. I looked around on the net but ...
1
vote
0answers
376 views

What are these numbers in the Data Usage and Battery Usage screen in Jellybean?

I went to my phone manufacturer the other day to get my phone upgraded to Jellybean 4.1.2 from ICS 4.0.4. Here's the thing, I know that upgrading doesn't take long but they said it will take an hour ...
1
vote
0answers
387 views

How to set a security question?

Reading this answer, I found that we can set a security question to unlock the device after 5 unsuccessful unlock attempts (clicking Next). So to set a security question, I we to Settings -> Security ...
1
vote
0answers
837 views

Browser's webview.db doesn't store Hotmail password, but it can still auto login. Why?

On my rooted Galaxy Nexus 4.1.1, stock browser doesn't store any password for Hotmail, but whenever I open Hotmail, it logins automatically. I checked data/data/com.android.browser/webview.db, the ...
1
vote
0answers
450 views

Possible security issues with having debug mode enabled?

Are there any significant security concerns with having a phone with debug mode enabled 24/7? As I understand it the debug mode only really becomes active once the phone is connected via USB cable to ...
1
vote
0answers
166 views

How can you enable “Use secure credentials” from the shell

On the ICS ROM I'm using, the option to enable the secure credentials is missing from the menu, but the sub system seems to be there since Keystore Locker can communicate with it. So does anybody ...