For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

6
votes
0answers
262 views

Unsafe certificate protection in Android?

Maybe I'm wrong. If so, please let me know. Here is my question. I've followed the instructions here and installed my personal certificate stored in a pfx file (PKCS#12) in my Google Nexus (ICS ...
3
votes
0answers
69 views

Does Android's implementation of SELinux's M.A.C. inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4 SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
0answers
383 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
2
votes
0answers
152 views

Security options greyed out

There was a great thread on the same subject. Security options grayed out I am in the same situation where I need to keep the certificates on the android phone. And the ActiveSync certificates ...
2
votes
0answers
103 views

Android application firewall - interactive prompt confirmation for connections

I'm thinking of developing application, or probably extending AFWall+ app What I'm missing on Android is possibility to confirm each connection from each application, simply blocking the application ...
2
votes
0answers
222 views

How CF-Autoroot works?

How CF-autoroot Theoretically is able to root android devices ? I'm wondering on what technics it use to run su ? Do it use a custom/patched Linux kernel ? or it is based on local root exploit ? I ...
2
votes
0answers
203 views

How can I know that my Galaxy's camera and microphone is not being accessed without my knowledge?

A few months back I installed a few apps straight from the internet. One was an ability to run Ruby scripts on my phone, the other was Grooveshark. Both times, an Jellybean 4.2 flagged up a warning ...
2
votes
0answers
67 views

Modify 30 second incorrect PIN delay

How can I modify/disable the 30 second delay after trying the incorrect PIN 5 times? Device is a nexus 7 rooted running SmoothRom 4.4
2
votes
0answers
419 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
2
votes
0answers
583 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
2
votes
0answers
368 views

Exchange Active Sync email on Galaxy 10.1 disappears.

One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
2
votes
0answers
224 views

Android detects SIM change – gmail synchronized messages deleted?

After gmail detects SIM change – it asks to renew login to gmail account. This is a very good security action. But does it maybe also clear synchronized messages (that have been downloaded before SIM ...
2
votes
0answers
111 views

IEEE 802.1AE (MACSec) support

Does Android support IEEE802.1AE MACSec ? This protocol enables data confidentiality and integrity over WiFi connections.
2
votes
0answers
476 views

How to put a lock screen with security code on a Arnova 10 G 2?

I have a Arnova 10 G 2 with Android 2.3 which works very well, but it has no unlock screen and no security options. Does anyone know of a way to put some kind of security code on the device, either ...
1
vote
0answers
20 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
1
vote
0answers
29 views

Where do you publish information about a vulnerability you have found within android?

I found a small vulnerability within the default web browser, here is the ticket. Submitted last year. Issue 42647: Android Web Browser, JavaScript Popup Bug. Tested on 11 Jan 2013. ...
1
vote
0answers
29 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
1
vote
0answers
125 views

Asus nexus 7 security settings has clearing credentials greyed out and can't handle device adminstrators

When looking at settings...security, I neither can clear credentials nor change device administrators. Clear credentials is greyed out and there is no option to change the device administration, who ...
1
vote
0answers
82 views

Lock screen security - reboot after X invalid PINs

I used following methodology to create a strong boot password on the phone, at the same time keeping a weaker PIN for screen unlock. Now I want to make sure that if someone tries to pick up a PIN, ...
1
vote
0answers
182 views

How to enable certificate revocation check?

I'm using Chrome both on my desktop and my Android. Following this thread (https://www.cloudflarechallenge.com/heartbleed, there is a link inside), I checked my desktop browser and it appears that its ...
1
vote
0answers
264 views

samsung grand duos 9082 doesn't see that my SD card is encrypted on it and there is no option to decrypt

I encrypted my samsung grand duos 9082 and then my SD card, using the settings for encryption. But then, to unlock screen, I decrypted my handset and I unlocked it by my samsung account. Then, the ...
1
vote
0answers
63 views

K9 mail — susceptible to MITM attacks?

I am using K9 on Android and have set the SSL option to 'SSL (strict)'. My understanding is that with this option K9 definitely requires a valid SSL certificate which is issued by a trusted CA, i.e. ...
1
vote
0answers
180 views

Secure Galaxy Star GT-S5282 using simcard change alert

How can I secure my Samsung Galaxy Star GT-S5282 using the simcard change alert option. In other words, when a simcard is inserted in my phone a notification SMS is sent to other phones.
1
vote
0answers
52 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
0answers
491 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
1
vote
0answers
232 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
1
vote
0answers
581 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
1
vote
0answers
443 views

No encryption option on Huawei g510 and Android 4.1.1

I recently bought a Huawei g510 with Android 4.1.1 and I was going to encrypt it, but I just can't find the encryption option in the settings panel or any other place. I looked around on the net but ...
1
vote
0answers
231 views

What are these numbers in the Data Usage and Battery Usage screen in Jellybean?

I went to my phone manufacturer the other day to get my phone upgraded to Jellybean 4.1.2 from ICS 4.0.4. Here's the thing, I know that upgrading doesn't take long but they said it will take an hour ...
1
vote
0answers
192 views

How to set a security question?

Reading this answer, I found that we can set a security question to unlock the device after 5 unsuccessful unlock attempts (clicking Next). So to set a security question, I we to Settings -> Security ...
1
vote
0answers
590 views

Browser webview.db doesn't store hotmail password, but I can still auto log-in hotmail. Why?

On my rooted Galaxy Nexus 4.1.1, stock browser doesn't store any password for hotmail, but whenever I open hotmail, it log-in automatically. I checked data/data/com.android.browser/webview.db, the ...
1
vote
0answers
384 views

Possible security issues with having debug mode enabled?

Are there any significant security concerns with having a phone with debug mode enabled 24/7? As I understand it the debug mode only really becomes active once the phone is connected via USB cable to ...
1
vote
0answers
161 views

HTC Wildfire: “Settings” > “security” > “lock phone after” > and select, “immediately” not working

"Settings" > "Security" > "Lock phone after" > and select, "Immediately". The above has been my security lock setting for the past year. It was working fine but as of a week ago it hasn't ...
1
vote
0answers
164 views

How can you enable “Use secure credentials” from the shell

On the ICS ROM I'm using, the option to enable the secure credentials is missing from the menu, but the sub system seems to be there since Keystore Locker can communicate with it. So does anybody ...
0
votes
0answers
13 views

Where is Face Unlock?

I installed Titanium Backup and found Face Unlock (Settings) in the file list but I can't find it anywhere on the phone.I checked the settings menu and Security but I still can't find the interface to ...
0
votes
0answers
39 views

Security of Android cryptography in versions < 5.0 against government agencies

Recently, both Google and Apple announced their new OSes encrypt the device by default. This caused a lot of complaints from government agencies. Let me quote an article ...
0
votes
0answers
14 views

Nmap my device and find many open port, is these secure?

I use nmap to scan the open port of my android open port. To my surprise, the list is long ( attached below ). Is this normal? Are all these secure? I am using Android 4.4. The rom is cm11. PORT ...
0
votes
0answers
47 views

Control Mobile via pc using USB (No URL Control)

I want to control the mobile via pc using usb cable, I found out lot many solution like Droid@Screen & AndroidScreenMonitor etc., but this is an one way communication am not able to control from ...
0
votes
0answers
146 views

How to use the S5 fingerprint scanner with full device encyption?

I am using the S5 and have decide to fully encrypt the device and the sd card. My biggest problem is that now the fingerprint is no a possible choice as a lockscreen security. Only password. I ...
0
votes
0answers
37 views

How to obtain crypto header and footer from Nexus 5 Android 4.4

I'm interested in how to find the crypto_header and crypto_footer for disk encryption on a Nexus 5. A lot of articles have them for specific devices and I was wondering if there was any information on ...
0
votes
0answers
26 views

Which versions of Android is Google developing security fixes for?

I'm trying to develop a BYOD support policy for the company I work for. We intend to only allow devices and software that are actively being supported by the manufacturer. I know that the relationship ...
0
votes
0answers
21 views

Ask for the pin only twice a day

I would like to configure my android phone to ask for my PIN only two times every day (if not rebooted). Screen lock with PIN after 12 hours (no PIN needed in between) would be great. The screen-lock ...
0
votes
0answers
45 views

Web proxy for Android 4.2.2

I need to cut off access to Flash and HTML5 videos on several devices for a project. Is there any app like a proxy to perform this? If I could deny a list of webpages it will be perfect.
0
votes
0answers
72 views

Block all root connections except to certain IP destinations using Iptables

I am using rooted Android 4.4.4 system. I want to block all the network connections associated by processes that run by root except to certain Ip targets. Something like this Block all network ...
0
votes
0answers
68 views

Possibly a trojan named “SuperUser [UID]”?

SuperUser is prompting for access for something named "SuperUser [UID]" Why would the app SuperUser prompt for access for itself? Could it be a trojan with almost the same name as SuperUser?
0
votes
0answers
43 views

Cannot set any screen Security

I installed MIUIV5 on my Gionee P3 phone and I cannot set any screen security: no PIN, no password nor pattern. When it asks to enter a PIN and I tap continue nothing happens. I also checked the ...
0
votes
0answers
31 views

Samsung-installed apps updating daily

After installing the wonderful DCentral 1 application, I see that AllSharCastDongle and FWUpgrade try to update themselves daily. How might I prevent these two Samsung-installed apps from ever running ...
0
votes
0answers
40 views

Data over mobile network switching on behind my back - what could be doing it and how to stop?

Alcatel OneTouch 983, Android 2.3.7 I normally have "Enable data access over mobile network" switched off so as not to drain my phone credit, only switching it on when I want to do something quick on ...
0
votes
0answers
25 views

samsung galaxy s3

My Samsung sign-on screen keeps appearing at various times. It started after updating the phone. I updated it because of a problem with intermittent flashing (mentioned elsewhere on Android ...
0
votes
0answers
213 views

Attempts to bring up Settings results in a Crash

My device is a Galaxy Tab 7". I previously rooted it, and installed Avast Mobile Security and Anti Theft on it. I gave it to a friend to use for a while and now, whenever I try to open Settings, it ...