For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

5
votes
0answers
238 views

Unsafe certificate protection in Android?

Maybe I'm wrong. If so, please let me know. Here is my question. I've followed the instructions here and installed my personal certificate stored in a pfx file (PKCS#12) in my Google Nexus (ICS ...
3
votes
0answers
32 views

Does Android's implementation of SELinux's M.A.C. inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4 SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
0answers
358 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
2
votes
0answers
68 views

Security options greyed out

There was a great thread on the same subject. Security options grayed out I am in the same situation where I need to keep the certificates on the android phone. And the ActiveSync certificates ...
2
votes
0answers
63 views

Android application firewall - interactive prompt confirmation for connections

I'm thinking of developing application, or probably extending AFWall+ app What I'm missing on Android is possibility to confirm each connection from each application, simply blocking the application ...
2
votes
0answers
177 views

How CF-Autoroot works?

How CF-autoroot Theoretically is able to root android devices ? I'm wondering on what technics it use to run su ? Do it use a custom/patched Linux kernel ? or it is based on local root exploit ? I ...
2
votes
0answers
179 views

How can I know that my Galaxy's camera and microphone is not being accessed without my knowledge?

A few months back I installed a few apps straight from the internet. One was an ability to run Ruby scripts on my phone, the other was Grooveshark. Both times, an Jellybean 4.2 flagged up a warning ...
2
votes
0answers
62 views

Modify 30 second incorrect PIN delay

How can I modify/disable the 30 second delay after trying the incorrect PIN 5 times? Device is a nexus 7 rooted running SmoothRom 4.4
2
votes
0answers
414 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
2
votes
0answers
561 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
2
votes
0answers
360 views

Exchange Active Sync email on Galaxy 10.1 disappears.

One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
2
votes
0answers
187 views

Android detects SIM change – gmail synchronized messages deleted?

After gmail detects SIM change – it asks to renew login to gmail account. This is a very good security action. But does it maybe also clear synchronized messages (that have been downloaded before SIM ...
2
votes
0answers
105 views

IEEE 802.1AE (MACSec) support

Does Android support IEEE802.1AE MACSec ? This protocol enables data confidentiality and integrity over WiFi connections.
2
votes
0answers
464 views

How to put a lock screen with security code on a Arnova 10 G 2?

I have a Arnova 10 G 2 with Android 2.3 which works very well, but it has no unlock screen and no security options. Does anyone know of a way to put some kind of security code on the device, either ...
1
vote
0answers
16 views

Asus nexus 7 security settings has clearing credentials greyed out and can't handle device adminstrators

When looking at settings...security, I neither can clear credentials nor change device administrators. Clear credentials is greyed out and there is no option to change the device administration, who ...
1
vote
0answers
66 views

Lock screen security - reboot after X invalid PINs

I used following methodology to create a strong boot password on the phone, at the same time keeping a weaker PIN for screen unlock. Now I want to make sure that if someone tries to pick up a PIN, ...
1
vote
0answers
117 views

How to enable certificate revocation check?

I'm using Chrome both on my desktop and my Android. Following this thread (https://www.cloudflarechallenge.com/heartbleed, there is a link inside), I checked my desktop browser and it appears that its ...
1
vote
0answers
138 views

samsung grand duos 9082 doesn't see that my SD card is encrypted on it and there is no option to decrypt

I encrypted my samsung grand duos 9082 and then my SD card, using the settings for encryption. But then, to unlock screen, I decrypted my handset and I unlocked it by my samsung account. Then, the ...
1
vote
0answers
53 views

K9 mail — susceptible to MITM attacks?

I am using K9 on Android and have set the SSL option to 'SSL (strict)'. My understanding is that with this option K9 definitely requires a valid SSL certificate which is issued by a trusted CA, i.e. ...
1
vote
0answers
98 views

Secure Galaxy Star GT-S5282 using simcard change alert

How can I secure my Samsung Galaxy Star GT-S5282 using the simcard change alert option. In other words, when a simcard is inserted in my phone a notification SMS is sent to other phones.
1
vote
0answers
50 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
0answers
462 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
1
vote
0answers
150 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
1
vote
0answers
355 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
1
vote
0answers
325 views

No encryption option on Huawei g510 and Android 4.1.1

I recently bought a Huawei g510 with Android 4.1.1 and I was going to encrypt it, but I just can't find the encryption option in the settings panel or any other place. I looked around on the net but ...
1
vote
0answers
206 views

What are these numbers in the Data Usage and Battery Usage screen in Jellybean?

I went to my phone manufacturer the other day to get my phone upgraded to Jellybean 4.1.2 from ICS 4.0.4. Here's the thing, I know that upgrading doesn't take long but they said it will take an hour ...
1
vote
0answers
140 views

How to set a security question?

Reading this answer, I found that we can set a security question to unlock the device after 5 unsuccessful unlock attempts (clicking Next). So to set a security question, I we to Settings -> Security ...
1
vote
0answers
486 views

Browser webview.db doesn't store hotmail password, but I can still auto log-in hotmail. Why?

On my rooted Galaxy Nexus 4.1.1, stock browser doesn't store any password for hotmail, but whenever I open hotmail, it log-in automatically. I checked data/data/com.android.browser/webview.db, the ...
1
vote
0answers
368 views

Possible security issues with having debug mode enabled?

Are there any significant security concerns with having a phone with debug mode enabled 24/7? As I understand it the debug mode only really becomes active once the phone is connected via USB cable to ...
1
vote
0answers
159 views

HTC Wildfire: “Settings” > “security” > “lock phone after” > and select, “immediately” not working

"Settings" > "Security" > "Lock phone after" > and select, "Immediately". The above has been my security lock setting for the past year. It was working fine but as of a week ago it hasn't ...
1
vote
0answers
163 views

How can you enable “Use secure credentials” from the shell

On the ICS ROM I'm using, the option to enable the secure credentials is missing from the menu, but the sub system seems to be there since Keystore Locker can communicate with it. So does anybody ...
0
votes
0answers
59 views

Trust Agents in Android L Preview

When browsing to Settings - Security - Trust Agents, it says: No available trust agents. Is this function not implemented yet, or do I have to install an external application? I'm talking about ...
0
votes
0answers
20 views

Possibly a trojan named “SuperUser [UID]”?

SuperUser is prompting for access for something named "SuperUser [UID]" Why would the app SuperUser prompt for access for itself? Could it be a trojan with almost the same name as SuperUser?
0
votes
0answers
37 views

Cannot set any screen Security

I installed MIUIV5 on my Gionee P3 phone and I cannot set any screen security: no PIN, no password nor pattern. When it asks to enter a PIN and I tap continue nothing happens. I also checked the ...
0
votes
0answers
26 views

Samsung-installed apps updating daily

After installing the wonderful DCentral 1 application, I see that AllSharCastDongle and FWUpgrade try to update themselves daily. How might I prevent these two Samsung-installed apps from ever running ...
0
votes
0answers
26 views

Data over mobile network switching on behind my back - what could be doing it and how to stop?

Alcatel OneTouch 983, Android 2.3.7 I normally have "Enable data access over mobile network" switched off so as not to drain my phone credit, only switching it on when I want to do something quick on ...
0
votes
0answers
21 views

samsung galaxy s3

My Samsung sign-on screen keeps appearing at various times. It started after updating the phone. I updated it because of a problem with intermittent flashing (mentioned elsewhere on Android ...
0
votes
0answers
155 views

Attempts to bring up Settings results in a Crash

My device is a Galaxy Tab 7". I previously rooted it, and installed Avast Mobile Security and Anti Theft on it. I gave it to a friend to use for a while and now, whenever I try to open Settings, it ...
0
votes
0answers
53 views

Android 4.3 Privacy Protection settings get reset from time to time

I use JB 4.3.1 (Avatarrom). In system settings > security > Privacy protection I can set which apps have access to my contacts. I've set this many times, and I notice that after one or two days ...
0
votes
0answers
55 views

Radius Server On Android

It is possible to compile the FreeRADIUS server for Android? I mean if I can compile it for the ARM architecture to run on Android as a system binary or in a chroot environment? If so can someone ...
0
votes
0answers
28 views

Security of Android tethered hotspot

Basically each time I activate my phone's (Samsung S3 4.3 rooted) tethered Wi-Fi, to use the Internet on my iPad, someone can remotely connect and see what I'm doing. Even with WPA2 + strong ass ...
0
votes
0answers
46 views

What is custom URI handler in android?

I came across the term "Custom URI Handler" which is a bad practice in android security. Can anybody please tell what is custom URI handler? What are the security issues raised by custom URI handlers? ...
0
votes
0answers
88 views

full-wipe and factory reset safety

Some days ago, I saw a TV show where some people bought used phones (in that case most of them was a Symbian phone). Using some software, they recovered most of data that was saved in, like facebook ...
0
votes
0answers
59 views

How do I prevent a thief from reading my SD card?

If my device is lost or stolen, how can I prevent others from reading the contents of the data on the SD card?
0
votes
0answers
253 views

Is it possible to get an answer to a silent sms from a turned off phone?

Silent SMS Silent messages, also known as “silent tms”, “stealth sms” or “stealth ping”, are employed nowadays to locate a person and thus to create a complete movement profile. They do ...
0
votes
0answers
83 views

Security Policy Internet sharing disabled error

On my Android Motorola HD Razr I keep getting a Security policy Internet sharing disabled error that pops up everytime I come in contact with my Wifi at work and home. How do I fix this so I don't ...
0
votes
0answers
944 views

Accessing phone data when locked out

I am using a BLU Quattro HD 5.7 phone, running ICS, and I have locked myself out due to my own stupidity. It doesn't have a wifi connection or a data connection at the moment because I do not have a ...
0
votes
0answers
91 views

I think that I may have been a victim of a malicious mms

I have a Sidekick 4g running Android 2.2.1. I just received a multimedia message from an acquaintance who I happened to have in my contact list. I clicked on the notification which sent me to ...
0
votes
0answers
807 views

How to auto unlock SIM/UICC on trusted devices?

I don't like manually entering PIN1 of SIM/UICC everytime I reboot my Android smartphone or switch SIM/UICC between multiple trusted devices. How to auto unlock SIM/UICC on my trusted devices? The ...
0
votes
0answers
185 views

auto logoff from all apps on android

i want a functionality where i can log off from all the apps on android ie: auto logoff from skype , facebook , yahoo. Is a some app already available for this or some easy way to implement this. I ...