Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

Mysterious device

I see a device in my recent security activity: New sign-in on sdk_gphone64_x86_64 North Carolina, USA · sdk_gphone64_x86_64 I also see it in my list of Google prompts on my 2 factor authentication ...
  • 141
4 votes
2 answers
786 views

Can APK cause any harm on open (without installing)?

We downloaded some APK files and attempted to open them only to encounter the "There was a problem parsing the package" error. So it didn't even make through to the Install screen. However, ...
  • 183
1 vote
0 answers
30 views

android automatically download bad apps

as you can see in the following picture there are apps such as "Solitaire", "Ball Sort", "Count Masters", "Galaxy Attack" and many others that keep ...
0 votes
0 answers
33 views

Is there an endpoint to get Google Root Certificates list for verifying hardware-backed key pairs?

I would like to verify a hardware-backed key pair in my Java backend service. According to the Verifying hardware-backed key pairs with Key Attestation page, I need to verify the attestation object ...
2 votes
0 answers
55 views

Remove/Change Android password

A friend gave me an old Android tablet (Medion Junior Tab S7322) which dates back into the Android 4.4 days and asked if I can get access to his pictures on the internal storage because she forgot her ...
  • 121
0 votes
0 answers
30 views

Do apps like iMyFone LockWiper actually work?

I recently had my phone stolen and would like to know if I should change all my debit cards and other sensitive info. I want to know if is it possible to actually bypass the default lock screen and ...
  • 143
4 votes
0 answers
73 views

Is Amazon's Fire OS more or less secure than the latest Android OS?

I picked up a tablet from Amazon in a recent sale. I noticed the device (Fire HD 10 2021) is running Fire OS 7. (7.3.2.6 as of now) which is based on Android 9.0 (Pie). I have heard the tablets stay ...
  • 151
2 votes
0 answers
107 views

How to revoke all authorizations (to private data) given to Xiaomi in MIUI?

On Xiaomi Mi Note 10 there are three prompts asking for authorizations: When opening Bereinigung (the stock cleaning app; I tried using that because I still can't delete caches with Xiaomi Mi Note 10)...
1 vote
0 answers
31 views

How do I know if files have been copied from my phone to a laptop via USB. Knowing I gave permission for file transfer

I connected my phone to someone's laptop so they could give me a certain file but I'm suspecting they used the opportunity to copy files from my phone to their device. Is there any chance a log is ...
4 votes
2 answers
563 views

Cannot log out of Gmail

On an Android phone I had to log in to my Gmail account to update an app via the "Play Store". I noticed (to my extreme annoyance) all my emails appearing as notifications on the phone's ...
  • 161
1 vote
1 answer
2k views

McDonald's app showing "Your device did not pass our security check ..."

A client came to fix his phone because it is receiving this message when he opens the recently installed "McDonald's" app: Your device did not pass our security check. Please check that you ...
1 vote
0 answers
129 views

Strange message after wiping data/factory resetting on Pixel 6 device

Last night, I flashed my Pixel 6 phone because I want to move to Pixel 7. After flashing, I turned on the phone for a while, and then I used the Recovery >Wipe data/factory reset option. ...
0 votes
0 answers
73 views

How can an app detect ADB being used (e.g. with HttpToolkits)?

I have an app that stops working (at the login screen) when I have my device connected via ADB using HttpToolkits to get traffic. It seems odd; how does the app know that the phone is being used with ...
0 votes
0 answers
29 views

What happens when Google decides an app is "bad"?

An Android 7 (Nougat) device that hadn't been used in a while (perhaps a few months) was recently turned on. That device has Nova Launcher Pro installed. It does not have external (microSD card) ...
2 votes
1 answer
306 views

Can any data be recovered without a password/PIN?

If someone doesn't know the password required on boot, is there a way to access the data on the device? It should be encrypted, but I read about Samsung adding something called Maintenance Mode where ...
  • 123
1 vote
0 answers
18 views

If an app has the permission "Draw over other apps", can the app see the content present on my screen? [duplicate]

So I recently installed an app called XSCamera which can basically record with the phone camera in the background. It requires the "Draw over other apps" permission to display a mini-preview ...
2 votes
2 answers
55 views

Most of the pages show "insecure connection" in Opera

I have changed some security settings in my Android yesterday (I don't remember which one). Today most of the pages show "insecure connection" in Opera. I cannot even go to youtubel.com ...
3 votes
0 answers
220 views

ADB/PM command to disable data and wifi access for Apps

Is there a way via adb shell to disable an apps access to WiFi and Data? I'd like to turn off internet for all apps and then selectively turn it on for required apps. I know the manual way by going to ...
  • 131
1 vote
0 answers
22 views

How to automatically block camera access after closing camera

Ever since Android added the camera and mic access shortcuts and the quick access menu, I've often found myself forgetting to click the 'block camera access' shortcut after I'm done taking a picture ...
1 vote
0 answers
29 views

hide profile picture for google voice messages

I have migrated my primary phone number to a google voice number. It caused some surprise to see my profile picture appear next to my message on someone else's phone. This number is used in a wide ...
2 votes
0 answers
32 views

Trojan downloaded

Not sure this is the best place to ask but I'll give it a shot... My son clicked a link in a spam message on my phone which downloaded Android/trojan.downloader.agent Instantly kaspersky and ...
  • 21
1 vote
0 answers
98 views

Hide main ui/launcher/profile on specific password

I'd like to have an option to hide my usual apps list, photos, etc on specific pass unlock. So if I unlock with my usual pass - it is my usual device, if someone requires to unlock my device - I use ...
0 votes
0 answers
79 views

How does Android generate FBE Keys

I am trying to understand how FBE and metadata encryption works. I read a lot of pages on FBE that it encrypts each file with different keys, and that those keys are encrypted and hashed with the Lock ...
0 votes
0 answers
41 views

Green Android camera notification

Since this morning, the green camera icon on the top right of the status bar appears. When I open this notification, it says "In use by Google". The problem is that I don't have any app ...
  • 101
1 vote
0 answers
11 views

Auto lock if Smart Stay can't see my eyes open

Sometimes, while in bed, I will watch a movie or YouTube on my Samsung Galaxy S20 ultra. Sometimes I fall asleep and the movie will continue to play as I sleep. I don't want my son wandering in the ...
2 votes
0 answers
47 views

Can an Android app with device management and microphone permissions spy in background secretly?

As far as I know, since Android 12 an app needs to have a Foreground Service Worker (with an active permanent notification) to run in all the time without being stopped when no activity is in ...
0 votes
2 answers
178 views

Can a school wifi certificate track me at home?

At my school, when logging into wifi for the first time, we enter our ID & password into a normal wifi login page, then we download a certificate. I cannot confirm if the certificate changes ...
  • 103
0 votes
0 answers
25 views

Should the layout of Android's "secure keyboard" be localized?

Some application use the "secure keyboard" of my ColorOS 12.1 (Android 12 customized by Oppo). While my device is configured to use German language, the keyboard displayed in such apps uses ...
  • 147
0 votes
0 answers
63 views

Auto factory reset - is this a general function of Android?

I want to install a software provided by my company but the IT admins only accept devices that support the "Auto factory reset" functionality (automatically perform a factory after if the ...
  • 101
3 votes
1 answer
921 views

Is it safe to give accessibility permission to an app?

So I use the app from Cleanbrowsing and gave the accessibility permission to it and saw that it can view my screen, action and inputs, perform actions and control the display. Is this app even safe to ...
  • 67
0 votes
0 answers
62 views

TPM (Trusted Platform Module) vs. TEE (Trusted Execution Environment) - can credentials be *stored* on both?

TPM is physically isolated from the rest of the system (i.e. it is a standalone chip on the mainboard), while TEE is a secure area of the main CPU. The key function of both TPM and TEE is to do ...
1 vote
0 answers
19 views

FindMyDevice without having access to the device

This is a bizarre question to have to ask but: how am I supposed to use FindMyDevice if it requires my device to confirm it's me who's trying to find my device? I recently lost my phone (I luckily got ...
  • 111
2 votes
0 answers
275 views

I keep seeing a popup in Android: "Install now to control when your device updates" - is my phone compromised?

I am seeing this occasionally over more than one app (In this image, it is appearing over my calendar app). It appears without any prompting action on my part, which makes me suspicious. Furthermore, ...
1 vote
0 answers
396 views

Increase number of fingerprint attempts

Is there any way to increase the number of allowed fingerprint attempts before PIN etc is demanded? I'm comfortable using adb shell if necessary.
  • 111
1 vote
0 answers
791 views

Accessing An Android Device With Broken Screen Via ADB and Unauthorized Machine in 2022

I've done a lot of experimentation on this, but can't seem to get anywhere. I'm looking for guidance on recovering data from my broken Android phone(s). It seems like this is going to require some ...
  • 51
0 votes
0 answers
199 views

Google activity showing things I didn't do

I have a Galaxy S10 Lite and I need some help because I really don't know what to do about this. I have looked up for a solution and can't find one anywhere. Since I got my phone last year I have had ...
1 vote
0 answers
108 views

FBE securely wipe all data

According to android documentation the FBE system has two different levels. Credential Encrypted (CE) storage and Device Encrypted (DE) storage. Does a factory reset of an FBE phone reset the keys of ...
  • 11
0 votes
1 answer
117 views

Pixel 6a does not show available Android security updates

On a Pixel 6a device, Android seems to have trouble finding the latest security updates. On the one hand, it warns me under Settings->Security like this: (!) Update this device This device hasn't ...
1 vote
0 answers
30 views

If I turned off the wireless display while my phone was still connected to my neighbor's TV, would it automatically disconnect from it?

I accidentally connected my phone to my neighbor's TV. I instantly turned off the wireless display, did my phone disconnect from his TV? If I turned on the wireless display again, will his TV ...
  • 11
1 vote
0 answers
335 views

HttpCanary target app uses a non system certificate

I'm looking for a way to bypass a target app using a non-system certificate. The HttpCanary app itself does give a 'solution' however it's incredibly unclear: Goto Settings->HttpCanary root CA ...
  • 11
0 votes
0 answers
53 views

Access request to account by com.eg.android.AlipayGphone.perf

The message below keeps popping up. Access request The following one or more apps request permission to access your account, now and in the future. Alipay com.eg.android.AlipayGphone.perf Do you ...
  • 500
0 votes
0 answers
203 views

How do you display a boarding pass without unlocking phone?

I found that on Apple you can definitely display a boardings pass without unlocking. For Android I found similar directions: load into Google Pay your boarding pass. But then when I click from locked ...
1 vote
1 answer
49 views

How to make a phone locks automatically when seeing someone's face?

I just want to ask if is it possible to make my phone lock when it sees person A's face. It's reverse to unlocking my phone. It should work on all screens, whatever I'm doing, does that mean the ...
  • 11
0 votes
0 answers
64 views

is there a way to lock down an android phone to a specific IP range (i.e spotify IP addresses only)?

Is there a way to lock down an android phone to a specific IP range (i.e spotify IP addresses only)? We want our daughter to listen to spotify, but not access the internet in any other way. Right now, ...
0 votes
1 answer
25 views

Is Galaxy S3 always disclosing an WiFi SSID? [duplicate]

I read tons of articles about how is it bad do hide SSID because client devices can disclose the network parameters by constantly "pinging" it when not in range. Ok, here is the client the ...
  • 143
38 votes
1 answer
8k views

What is Google up to? Google Play Store updating apps even though auto-update is disabled

Recently, I've noticed Google Play Store automatically "updating" apps, even when auto-updates are explicitly disabled. I put "updating" in quotes, because all the apps in question ...
1 vote
0 answers
49 views

What to do if malware not gone after complete factory reset?

I have a virus in my Samsung galaxy s21a, and even after a complete factory reset phone doesn't recover. What would be other solutions to fix it?
  • 11
2 votes
0 answers
72 views

Does Android Lolipop 5.1 get encrypted by itself upon first boot?

My doubts are, Would an android device shipped with Lollipop 5.0 get encrypted itself upon first boot? I saw a lot of blogs saying Lolipop does not come with default encryption but in the official ...
0 votes
0 answers
64 views

How to fix hijacked audio?

I probably got a virus in my Samsung Galaxy A21s and iPhone 7 because I receive modified audio when I try to listen to audio or video via social media such as YouTube or Facebook. It's some sort of ...
  • 11
1 vote
0 answers
83 views

Do Google & OEMs always have backdoors in Android devices?

In a helpful comment on this Android Stackexchange question, prominent contributor alecxs states: google and OEMs will always have own backdoors in propritary [sic] blobs for baseband/modem etc - you ...

1
2 3 4 5
25