For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site ...

learn more… | top users | synonyms

3
votes
0answers
60 views

Does Wunderlist store data in the server in encrypted form?

How secure and private is Wunderlist? For example does it only transfer data in encrypted form but stores it unencrypted? I would like to be able to store passwords relating to work on my phone but am ...
3
votes
0answers
124 views

Does Android's implementation of SELinux's M.A.C. inhibit apps with root privileges from accessing other app's data?

Starting with Android 4.4 SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
3
votes
0answers
445 views

Wipe everything after failed decryption attempts, but make it usable?

I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
2
votes
0answers
204 views

Security options greyed out

There was a great thread on the same subject. Security options grayed out I am in the same situation where I need to keep the certificates on the android phone. And the ActiveSync certificates ...
2
votes
0answers
270 views

How CF-Autoroot works?

How CF-autoroot Theoretically is able to root android devices ? I'm wondering on what technics it use to run su ? Do it use a custom/patched Linux kernel ? or it is based on local root exploit ? I ...
2
votes
0answers
226 views

How can I know that my Galaxy's camera and microphone is not being accessed without my knowledge?

A few months back I installed a few apps straight from the internet. One was an ability to run Ruby scripts on my phone, the other was Grooveshark. Both times, an Jellybean 4.2 flagged up a warning ...
2
votes
0answers
77 views

Modify 30 second incorrect PIN delay

How can I modify/disable the 30 second delay after trying the incorrect PIN 5 times? Device is a nexus 7 rooted running SmoothRom 4.4
2
votes
0answers
420 views

ICS: external microsd storage card: can i use it with camera and not encrypt?

So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
2
votes
0answers
609 views

How to disable “Forgot Password” on the lockscreen

I have entered a wrong password five times – now if I click on Forgot Password I can enter a Google account with password, then it will unlock the screen. How can I disable or hide that Forgot ...
2
votes
0answers
385 views

Exchange Active Sync email on Galaxy 10.1 disappears.

One of our reps has a Galaxy 10.1 and she has now for the 3rd time in two months complained about her corporate email disappearing, I’ve read a few of the posts here and on other sites and the one ...
2
votes
0answers
275 views

Android detects SIM change – gmail synchronized messages deleted?

After gmail detects SIM change – it asks to renew login to gmail account. This is a very good security action. But does it maybe also clear synchronized messages (that have been downloaded before SIM ...
2
votes
0answers
119 views

IEEE 802.1AE (MACSec) support

Does Android support IEEE802.1AE MACSec ? This protocol enables data confidentiality and integrity over WiFi connections.
2
votes
0answers
493 views

How to put a lock screen with security code on a Arnova 10 G 2?

I have a Arnova 10 G 2 with Android 2.3 which works very well, but it has no unlock screen and no security options. Does anyone know of a way to put some kind of security code on the device, either ...
1
vote
0answers
469 views

Can an antivirus really stop the broadAnywhere threat?

I had a look at the diff where the broadAnywhere threat is fixed, and it's basically just mPendingIntent = PendingIntent.getBroadcast(this, 0, new Intent(), 0); replaced with: Intent ...
1
vote
0answers
57 views

Fast switch between lock screens?

I know there is "No Lock Screen", which is a great musthave app that I have been using for months on all the devices I own. My friends/relatives love it too. My only problem with it it's that I ...
1
vote
0answers
156 views

How to root the HTC Desire 300 (also known as Zara Mini)

Okay please forgive me if this has already been answered, I've read a few questions on here but I still don't understand. Firstly, I'm not a "techie" or anything like that, so some of the really ...
1
vote
0answers
107 views

Automatically verify signature on all Android Exchange emails

I work in an office where everyone uses a digital signature on their emails. I just bought a new LG G3 with 4.4.2 KitKat and whenever someone sends me an email that is signed, it shows up with a body ...
1
vote
0answers
33 views

Where do you publish information about a vulnerability you have found within android?

I found a small vulnerability within the default web browser, here is the ticket. Submitted last year. Issue 42647: Android Web Browser, JavaScript Popup Bug. Tested on 11 Jan 2013. ...
1
vote
0answers
44 views

Is there software that will completely wipe your Android device when there are too many pin attempts?

I love the option that your iPhone will wipe itself if someone preforms way to many pin attempts but I do not see that option on Android devices. Is there software that will completely wipe your ...
1
vote
0answers
93 views

Lock screen security - reboot after X invalid PINs

I used following methodology to create a strong boot password on the phone, at the same time keeping a weaker PIN for screen unlock. Now I want to make sure that if someone tries to pick up a PIN, ...
1
vote
0answers
220 views

How to enable certificate revocation check?

I'm using Chrome both on my desktop and my Android. Following this thread (https://www.cloudflarechallenge.com/heartbleed, there is a link inside), I checked my desktop browser and it appears that its ...
1
vote
0answers
303 views

samsung grand duos 9082 doesn't see that my SD card is encrypted on it and there is no option to decrypt

I encrypted my samsung grand duos 9082 and then my SD card, using the settings for encryption. But then, to unlock screen, I decrypted my handset and I unlocked it by my samsung account. Then, the ...
1
vote
0answers
68 views

K9 mail — susceptible to MITM attacks?

I am using K9 on Android and have set the SSL option to 'SSL (strict)'. My understanding is that with this option K9 definitely requires a valid SSL certificate which is issued by a trusted CA, i.e. ...
1
vote
0answers
227 views

Secure Galaxy Star GT-S5282 using simcard change alert

How can I secure my Samsung Galaxy Star GT-S5282 using the simcard change alert option. In other words, when a simcard is inserted in my phone a notification SMS is sent to other phones.
1
vote
0answers
55 views

Google Play store issue security breach

My daughter got an Samsung Galaxy 3 7" tablet for Xmas. She also got some Google Play gift cards. My husband put in a credit card to buy a game for her. The next day there were 4 games downloaded that ...
1
vote
0answers
568 views

Note 3 “Security information” notification

I've just set up a new Galaxy Note 3 and I keep getting the following notification: Security information An application attempted to access system on your device without authorisation. This ...
1
vote
0answers
288 views

Device encryption and broken screen

Assuming you have a device that is encrypted by the factory encryption option in the security settings of the device, and having said device suffer a fall and end up with a broken screen, what are the ...
1
vote
0answers
733 views

Rooted Device + MS Exchange Mail = Security Issues?

I am using a rooted Epic 4G Touch (Sprint GSII) @ JB 4.1.2. I am accessing corporate email via MS Exchange ActiveSync. I have recently been told that a rooted device is not permitted to access MS ...
1
vote
0answers
523 views

No encryption option on Huawei g510 and Android 4.1.1

I recently bought a Huawei g510 with Android 4.1.1 and I was going to encrypt it, but I just can't find the encryption option in the settings panel or any other place. I looked around on the net but ...
1
vote
0answers
259 views

What are these numbers in the Data Usage and Battery Usage screen in Jellybean?

I went to my phone manufacturer the other day to get my phone upgraded to Jellybean 4.1.2 from ICS 4.0.4. Here's the thing, I know that upgrading doesn't take long but they said it will take an hour ...
1
vote
0answers
244 views

How to set a security question?

Reading this answer, I found that we can set a security question to unlock the device after 5 unsuccessful unlock attempts (clicking Next). So to set a security question, I we to Settings -> Security ...
1
vote
0answers
646 views

Browser webview.db doesn't store hotmail password, but I can still auto log-in hotmail. Why?

On my rooted Galaxy Nexus 4.1.1, stock browser doesn't store any password for hotmail, but whenever I open hotmail, it log-in automatically. I checked data/data/com.android.browser/webview.db, the ...
1
vote
0answers
395 views

Possible security issues with having debug mode enabled?

Are there any significant security concerns with having a phone with debug mode enabled 24/7? As I understand it the debug mode only really becomes active once the phone is connected via USB cable to ...
1
vote
0answers
165 views

HTC Wildfire: “Settings” > “security” > “lock phone after” > and select, “immediately” not working

"Settings" > "Security" > "Lock phone after" > and select, "Immediately". The above has been my security lock setting for the past year. It was working fine but as of a week ago it hasn't ...
1
vote
0answers
164 views

How can you enable “Use secure credentials” from the shell

On the ICS ROM I'm using, the option to enable the secure credentials is missing from the menu, but the sub system seems to be there since Keystore Locker can communicate with it. So does anybody ...
0
votes
0answers
8 views

android VNC and linux installing

I was thinking on using linux deploy to instal Ubuntu on a nexus 9 (2014). I Would be using the VNC viewer by "realvncunlimited" and linux deploy by "meefik"... My question is, how secure will the ...
0
votes
0answers
29 views

How do I log out from Google Apps without logging out from Android Device Manager?

Say my phone was stolen, and I need to log out from my Google Apps in that phone remotely. I can revoke the access in that phone through my web browser, however I would log out from Android Device ...
0
votes
0answers
33 views

How to encrypt external sd card under KitKat?

I am going tp buy a device with external SD card and I am wondering if any custom roms support ecnrypting external sd cards. I will root and use a custom rom. Basically I want to be able to encrypt ...
0
votes
0answers
17 views

Accidentally i have uninstalled my home launcher

there is no launcher in my phone.i also switched off and switched on . it showed only samsung nothing else.My device was already rooted and i thought by factory data reset it would work but now i ...
0
votes
0answers
35 views

Why is my Nvidia tablet looking for chinese servers(baidu.com)?

I am not sure if this is the right area for the question, or if it is even a big deal, but here i go. When using by Nvidia tablet to develop an app I realized that it was attempting to reach a server ...
0
votes
0answers
182 views

locked out of samsung 4s after failed pattern and do not know google pin

I called cell phone carrier. she said we can go into google android device manager. although there, it says no active devices. when I go to the dashboard, an old cell phone is listed but not my new ...
0
votes
0answers
29 views

Possible to disable or shutdown phone (or just security camera app) from another android over internet? ((or perhaps Tasker))

I have some contractors doing some work on my house over the next few weeks. I've been looking into turning my old S3 into a motion detection cam. This way I could see if anyone enters my office, ...
0
votes
0answers
48 views

“Locking” a Samsung Bootloader

In order to prevent cold-boot attacks against an encrypted Android filesystem, it has been recommended to keep your bootloader locked at all times with the original factory recovery installed. The ...
0
votes
0answers
154 views

Adding more than 3 fingerprints in Galaxy S5 by swiping different fingers when adding a new fingerprint

On the Samsung Galaxy S5 one can bypass the 3 fingerprint limit by swiping different fingers when adding a new fingerprint. Can this cause any security issue?
0
votes
0answers
153 views

Disabling/Changing PIN on Android device: where are the disabled flag and new PINs stored (SIM or internal storage)?

On my Samsung Galaxy SIII, one can go to Settings -> More -> Security -> SIM card lock -> Set up SIM card lock -> Lock SIM card` which displays a check box which can be used to configure the phone to ...
0
votes
0answers
122 views

Recovering lost or stolen phone (security and feasability considerations)?

I am trying to understand a little bit about security in case my phone goes stolen. I have read that even if a phone is stolen and the SIM card is removed, it can still be possible to find your phone ...
0
votes
0answers
25 views

Where is Face Unlock?

I installed Titanium Backup and found Face Unlock (Settings) in the file list but I can't find it anywhere on the phone.I checked the settings menu and Security but I still can't find the interface to ...
0
votes
0answers
60 views

Security of Android cryptography in versions < 5.0 against government agencies

Recently, both Google and Apple announced their new OSes encrypt the device by default. This caused a lot of complaints from government agencies. Let me quote an article ...
0
votes
0answers
44 views

Nmap my device and find many open port, is these secure?

I use nmap to scan the open port of my android open port. To my surprise, the list is long ( attached below ). Is this normal? Are all these secure? I am using Android 4.4. The rom is cm11. PORT ...
0
votes
0answers
123 views

Control Mobile via pc using USB (No URL Control)

I want to control the mobile via pc using usb cable, I found out lot many solution like Droid@Screen & AndroidScreenMonitor etc., but this is an one way communication am not able to control from ...