Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
3
votes
0answers
32 views

Should warnings about not charging your phone at airport/public usb ports be taken seriously?

There are many articles on the internet saying that charging at the usb ports available at the airport and public places can cause your phone to get hacked. Is there any any truth behind this? If ...
0
votes
0answers
16 views

Is it possible to disable the clipboard history on Android?

I find it very annoying that Android stores all old clipboard entries and requires me to manually delete it every time. This has caused me major flops and a lot of grief. How can I opt out of this "...
-1
votes
0answers
14 views

flashed several ROMs and I always get this same setup of hidden virtual acount I believe like a bootkit! [duplicate]

https://youtu.be/3AJs70rixgQ I donno if this video helps but I've reflashed twrp tried several different ROMs I always get the same virtual cloned setup ? Or am I wrong also /data/system/Dropbox ...
0
votes
0answers
19 views

Does a live OS or a software like deep freeze exist for android?

Is there any custom live OS that is read only and everytime you restart your phone, every change gets deleted? Or a software like deep freeze for windows? If any such solutions exists than can their ...
0
votes
1answer
59 views

“Certificate not secure” error on Samsung Email app on Note 8

I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email. Recently I went abroad and had to rely on ...
1
vote
1answer
56 views

Is there a way to root an Android phone without unlocking the bootloader?

I've tried almost any method to root my ASUS ZenFone Live, but no one seems to work. Also I only need root, no unlocked bootloader (don't want to wipe data) or custom recovery (not essential ATM).
0
votes
0answers
18 views

Is it possible to perform an offline malware scan of device image created using a root prompt?

I have created an image of my entire device and all of its partitions (mmcblk0.img). I would like to perform an "offline" scan of my device on my computer. Is there any known projects or ways of ...
4
votes
0answers
54 views

Exploiting Janus (CVE-2017-13156) - what do these error messages mean?

I am working on a school research project about the Janus vulnerability (CVE-2017-13156). Janus is a vulnerability of the signature scheme v1 while installing APKs. I know this does not correspond ...
1
vote
0answers
27 views

What's inside the Android A/B-Update payload.bin?

I am using Android 8 for an embedded device, with Android Verified Boot 2.0 secured via HW-keys, and A/B OTA update (no streaming). I want to make sure that the software on the device is tightly ...
0
votes
1answer
52 views

What private data can apps access without any specified permissions?

Let's say an app doesn't require any permissions at all. What could that app access that could be a potential privacy risk? Other app usage? List of installed apps? Check is my screen unlocked? Google ...
0
votes
0answers
24 views

Should I be worried about a website attempting to access my credential storage?

I was reading a website having clicked on a link in the official Twitter app. I was shown this dialog. I took this screenshot, clicked back, then closed the browser. Should I be worried? How come ...
-2
votes
2answers
125 views

Does the use of Android One remove the risk of OEM spying?

China is forcing tourists to install text-stealing malware at its border. Also, U.S. intelligence officials imply that Huawei, ZTE devices aren't safe for consumers (even in the West). Some ...
0
votes
0answers
28 views

Long PIN to boot, short PIN to unlock

How do I set up shorter PIN for screen unlocking while keeping long PIN for device boot and filesystem encryption? Short PIN should support limited number of attempts, long PIN may be tried for ...
0
votes
0answers
20 views

Choosing between Android security patches and SELinux enforcing

My phone is no longer receiving system updates from the manufacturer so I'm stuck with Android 8.1 December 2018 Android security patches. There are a few custom ROMs available for my phone, based on ...
0
votes
0answers
36 views

Help with compromised phone Android 7.0

I want to ask if there's any way I can get rid of whatever's allowing my phone to be unlocked easily without any resetting or Google account? My phone has been messed with and now it keeps getting ...
0
votes
0answers
30 views

Help with compromised phone, Android 7.0

I want to ask if there's any way I can get rid of whatever's allowing my phone to be unlocked easily without any resetting or Google account? My phone has been messed with and now it keeps getting ...
2
votes
1answer
41 views

Can a virus/spyware install itself on a system partition remotely?

If I install malicious app accidentally can it copy itself onto the system partition? Or if a hacker gains access to my phone remotely can he install spyware onto the system partition? I have read ...
9
votes
4answers
6k views

How to protect my Wi-Fi password from being displayed by Android phones when sharing it with QR code?

I would like to know if there is any workaround to protect or hide my TP-LINK Wi-Fi router password from being displayed on phones using Xiaomi (Redmi) phones. If we go to Wi-Fi in a Redmi phone and ...
1
vote
1answer
120 views

How do I connect to 802.1x EAP Wi-Fi network from an Android 10 device?

My Wi-Fi uses 802.1x EAP with TLS. It works well with the old Android devices, but an Android 10 device pretends that it's trying to connect, and a few seconds later marks the connection as disabled. ...
2
votes
1answer
47 views

How to secure phone for repair shop?

I've been an android user for many years and so far I've been lucky enough not to need to have a phone repaired by a shop, so I'd never considered this problem until recently. I had to give my Galaxy ...
0
votes
0answers
90 views

Can we do something in Factory reset protection so the phone will be locked for ever?

I am reading this link about android Factory Reset Protection (FRP). Somewhere it says: Waiting a full day (or three) really sucks, but it's better than not having any access to your account and ...
1
vote
1answer
125 views

What is a “synthetic password” and how is it used by Android?

On a first-generation Pixel that is running Pie, in locksettings.db there is a field named sp-handle that contains a 64-bit value. sp is an abbreviation for "synthetic password". Under /data/system_de/...
0
votes
0answers
44 views

Seeting up secure (Android) phone 2019

I am trying to build a security phone from my old Samsung A7. Although I do observe relevant threads, I want to get the latest update in 2019. These requirements are in my thoughts but I am welcomed ...
1
vote
1answer
273 views

SELinux always set to permissive, how to set enforcing permanently?

I flash a custom ROM to my HTC B2UL. The ROM, by default, has the SELinux policy set to Permissive instead of Enforcing. I can use adb shell setenforce 1 to make SElinux enforcing. But after reboot, ...
0
votes
0answers
50 views

CamScanner Malware: Do I need to uninstall older version?

Recently a malware was found in the popular android app CamScanner. The app is now removed from Google Play store. The company has also acknowledged the existence of the malware in an official ...
0
votes
0answers
98 views

AFWall+ not blocking consistently

I'm running a rooted pixel 3 (Magisk) with the "liboemcrypt disabler" module for running Netflix, Magisk Hide and the dg.db edit to disable attestation for running Google Pay. The firewall will work ...
0
votes
0answers
26 views

How does an app (e.g. Whatsapp) automatically detect when the phone receives a 2FA SMS verification code without being granted SMS read permissions? [duplicate]

When installing some apps (for example Whatsapp) the user is required to receive a verification code on the phone via SMS. I have noticed that some apps automatically verify this code as soon as the ...
0
votes
1answer
52 views

My android phone is often getting affected with virus

My problem : Hello friends. I use Asus zenfone go T500 android phone. My problem is, my phone often gets affected by some kind of virus which sometimes installs some chinese apps without my knowledge ...
1
vote
0answers
78 views

Android : how to remove the downloaded android update

I have a securities concern. I installed a VPN software on my android and just after (the next day) android asks me do install an update (that is already downloaded via the VPN). I don't fully trust ...
1
vote
0answers
63 views

Set off alarm in Walgreens and CVS

When I walked into two different drug stores, I set off a store alarm. The cashier at Walgreens said that it could be my phone setting off the store alarm when I walk in the door. Is that possible ...
0
votes
1answer
39 views

Why can't I change my password in system settings? Nexus 6p Resurrection Remix Pie

After entering the wrong password too many times in VPN settings, I can't enter my password in settings. Whenever I do, I get sent back to the previous page. I can't even change my password!
0
votes
0answers
81 views

How can i use orbot(tor) with adblocker same time without root?

I want to get more internet privacy on my android phone. Im using tor to protect my traffic from MITM attacks by ISP,Goverment... But Orbot have no adblocking feature. Advertisers are tracking our ...
0
votes
1answer
42 views

Always require PIN to unlock device

Is there any way to always require the user to enter the PIN (instead of fingerprint) to unlock the device? It seems that as soon as you add a fingerprint to the phone, now it no longer requires the ...
0
votes
0answers
26 views

I found apps that I have not installed. How can I investigate this?

There are 6 apps on my phone that I haven't explicitly or implicitly installed. Most likely they were installed today, as they happened to get on the first screen/page, so I immediately noticed them. ...
1
vote
1answer
140 views

Is There A Mobile Hotspot App With A Firewall to Block Incoming Connections?

I've been using the Android mobile hotspot to get an Internet connection while traveling. The stock hotspot is fine for my laptop which is firewalled, but there are a few devices (smart TV, game ...
0
votes
1answer
84 views

How do I get a hacker out of my phone?

The other day my phone number was added to my Google account, data was turned on and off. Different things have been happening. I have a LG V35 and it has an LG VPN section and when I check the log. ...
0
votes
1answer
85 views

How do I prevent my phone from restarting after a System Update?

Phone: Mobicel TRENDY_LITE Android: 8.1.0 For about two days now, I have been receiving many Security and System Updates. Every time an update is ready, my phone restarts without permission. After ...
0
votes
0answers
16 views

how to disable pattern lock to open apps

i am having to draw a pattern to open my apps. And it's not just Google apps either. I didn't set this (to my knowledge) and want to disable it.
0
votes
0answers
47 views

PIN to unlock phone, fingerprint only for specific apps

Android 8.0, Moto G6 I set up a fingerprint yesterday to use to unlock specific apps in lieu of a PIN. I still want to use a PIN to unlock my phone and only use the print for specific apps (to unlock ...
0
votes
1answer
86 views

Remove the lock for the app

I installed one particular app two months ago. When I opened it the first time, a popup opened with a suggestion to enable the screen lock pin. And I enabled the screen lock. From that time whenever I ...
0
votes
2answers
108 views

Logging off viber account on my stolen phone

I lost my phone last Friday, May 31. I was able to get already a replacement SIM card for me to use the same no. again for my new phone now. My Facebook was already hacked yesterday since my FB app in ...
0
votes
0answers
40 views

Preventing Google Account logout

On an iPhone, I can effectively prevent somebody from signing out of my iCloud account using the parental controls (disable Account Changes, and then require a pin to re-enable). Is there an ...
1
vote
0answers
37 views

Can not select secure screen lock option on Samsung Galaxy s8+

I am trying to set my screen lock to pattern/pin/password but it reverts back to a non-secure option (swipe/none). I have tried: Clearing cache Clearing credentials Removing Nova-launcher I'm all ...
0
votes
1answer
88 views

Cannot add “Amazfit Bip” watch as a “trusted device”

I've got a ZTE Axon 7 phone, and it generally works fine. I also have an Amazfit "Bip" watch, and I've successfully paired it with the phone via Bluetooth. However, when I try to add the watch as a "...
0
votes
0answers
17 views

Missing authentication options on a secondary user account

I created a secondary user on a Huawei P10 running Android 9. I notice that this secondary user misses some authentication features in the Security/Confidentiality settings. Although fingerprints ...
1
vote
0answers
81 views

Are Android PIN and Password being stored in the same file?

I'm curious about where the PIN is being stored in Android OS as I could only find out that the password is stored in a file named password.key in /data/systemdirectory. However, I could not find the ...
0
votes
0answers
565 views

App Installation “blocked by your IT admin”? (Galaxy Note 8)

I use YMusic to listen to music/audio books, which is an outsider app from xda-developers. When I tried to install an update, I got the message below, as if YouTube is preventing me from installing ...
0
votes
0answers
11 views

How do you stop Android/Chrome from saving usernames?

I did see an article about telling Chrome not to save passwords, but this question is specifically about usernames that get saved in auto-complete.
0
votes
0answers
60 views

In Android 7.0 Nougat, which permission gives an app your phone number?

In Android 7.0 Nougat, which permission gives an app your phone number? When I say "which permission", I mean when installing apps, the Google Play store will inform the user of certain permissions. ...
4
votes
1answer
203 views

Decrypting microSD card on another Android device or desktop computer

I'm looking for a solution that would allow to encrypt external microSD card with the following conditions: external microSD card is not merged with the internal storage; encrypted external microSD ...