Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
0
votes
1answer
22 views

Always require PIN to unlock device

Is there any way to always require the user to enter the PIN (instead of fingerprint) to unlock the device? It seems that as soon as you add a fingerprint to the phone, now it no longer requires the ...
0
votes
0answers
13 views

I found apps that I have not installed. How can I investigate this?

There are 6 apps on my phone that I haven't explicitly or implicitly installed. Most likely they were installed today, as they happened to get on the first screen/page, so I immediately noticed them. ...
1
vote
1answer
35 views

Is There A Mobile Hotspot App With A Firewall to Block Incoming Connections?

I've been using the Android mobile hotspot to get an Internet connection while traveling. The stock hotspot is fine for my laptop which is firewalled, but there are a few devices (smart TV, game ...
0
votes
1answer
42 views

How do I get a hacker outta my phone?

So the other day my phone number was added to my Google account, Data was turned on and off. Different things have been happening. I have a LG V35 and it has an LG VPN section and when I check the log....
0
votes
1answer
45 views

How do I prevent my phone from restarting after a System Update?

Phone: Mobicel TRENDY_LITE Android: 8.1.0 For about two days now, I have been receiving many Security and System Updates. Every time an update is ready, my phone restarts without permission. After ...
0
votes
0answers
14 views

how to disable pattern lock to open apps

i am having to draw a pattern to open my apps. And it's not just Google apps either. I didn't set this (to my knowledge) and want to disable it.
0
votes
0answers
31 views

PIN to unlock phone, fingerprint only for specific apps

Android 8.0, Moto G6 I set up a fingerprint yesterday to use to unlock specific apps in lieu of a PIN. I still want to use a PIN to unlock my phone and only use the print for specific apps (to unlock ...
0
votes
1answer
59 views

Remove the lock for the app

I installed one particular app two months ago. When I opened it the first time, a popup opened with a suggestion to enable the screen lock pin. And I enabled the screen lock. From that time whenever I ...
0
votes
2answers
19 views

Logging off viber account on my stolen phone

I lost my phone last Friday, May 31. I was able to get already a replacement SIM card for me to use the same no. again for my new phone now. My Facebook was already hacked yesterday since my FB app in ...
0
votes
0answers
28 views

Preventing Google Account logout

On an iPhone, I can effectively prevent somebody from signing out of my iCloud account using the parental controls (disable Account Changes, and then require a pin to re-enable). Is there an ...
1
vote
0answers
23 views

Can not select secure screen lock option on Samsung Galaxy s8+

I am trying to set my screen lock to pattern/pin/password but it reverts back to a non-secure option (swipe/none). I have tried: Clearing cache Clearing credentials Removing Nova-launcher I'm all ...
0
votes
1answer
20 views

Cannot add “Amazfit Bip” watch as a “trusted device”

I've got a ZTE Axon 7 phone, and it generally works fine. I also have an Amazfit "Bip" watch, and I've successfully paired it with the phone via Bluetooth. However, when I try to add the watch as a "...
0
votes
0answers
13 views

Missing authentication options on a secondary user account

I created a secondary user on a Huawei P10 running Android 9. I notice that this secondary user misses some authentication features in the Security/Confidentiality settings. Although fingerprints ...
1
vote
0answers
55 views

Are Android PIN and Password being stored in the same file?

I'm curious about where the PIN is being stored in Android OS as I could only find out that the password is stored in a file named password.key in /data/systemdirectory. However, I could not find the ...
0
votes
0answers
244 views

App Installation “blocked by your IT admin”? (Galaxy Note 8)

I use YMusic to listen to music/audio books, which is an outsider app from xda-developers. When I tried to install an update, I got the message below, as if YouTube is preventing me from installing ...
0
votes
0answers
10 views

How do you stop Android/Chrome from saving usernames?

I did see an article about telling Chrome not to save passwords, but this question is specifically about usernames that get saved in auto-complete.
0
votes
0answers
56 views

In Android 7.0 Nougat, which permission gives an app your phone number?

In Android 7.0 Nougat, which permission gives an app your phone number? When I say "which permission", I mean when installing apps, the Google Play store will inform the user of certain permissions. ...
3
votes
0answers
60 views

Decrypting microSD card on another Android device or desktop computer

I'm looking for a solution that would allow to encrypt external microSD card with the following conditions: external microSD card is not merged with the internal storage; encrypted external microSD ...
0
votes
0answers
29 views

time/date on usage stats

my usage stats on my android stamped everything Dec31, 1969. why? what the hell?
0
votes
0answers
41 views

Error when using MobSF

When I run MobSF, I get a lot of DEBUGs, as shown in the screenshot below. I tried to run both with the indication of the port (8000), and without specifying. I will be grateful for the help.
1
vote
0answers
65 views

Can I secure my android phone from being hacked while hosting a website?

I have been able to host a website of my own using "apache http server" app from my android adjoining with "termux" app using serveo as ssh tunneling. Can I make my phone more secure, so that it can ...
1
vote
1answer
97 views

How to set password request for booting the smartphone?

How can I set the phone so it requests to unlock the screen before starting up? Earlier I had to unlock the phone so it starts up but now it boots without unlocking (and I didn't change anything in ...
1
vote
2answers
253 views

WhatsApp Messenger zero-day exploit: How to upgrade?

It turns out that WhatsApp Messenger is affected by an exploitable buffer overflow vulnerability, which can be used to take over the phone with "zero clicks", by placing a call using specially crafted ...
0
votes
1answer
54 views

End-to-End Encryption IMAP client

I recently discovered that Outlook for Android uses an intermediate server for IMAP connections, meaning that: mail is accessed in plain-text by a third-party credentials are known in plain-text by a ...
0
votes
1answer
79 views

How to apply the latest security patches on Nokia 3.1?

I've a Nokia 3.1 with build number 00WW_2_680_SP02. When I run Check for updates, I have the message: Your system is up to date Android version: 8.1.0 Security patch level 1: 1 February ...
0
votes
1answer
56 views

How do I set up erase and secure?

My phone was stolen so I tried to erase from Samsung Device Manager but it just sends an erase instruction which I don't know whether the person who turns my phone on will be able to just stop from ...
7
votes
1answer
180 views

Attempting to brute force Android security pattern through TWRP via adb

Yesterday I somehow forgot the Android security pattern on my phone. Due to muscle memory I sort of know what it was, but can't figure out the true pattern. Therefore I'm attempting to brute force it ...
0
votes
0answers
117 views

How to create Android sepolicy based on the denial “execute_no_trans”?

I am trying to execute my script /vendor/bin/init.inmod.sh using below method: Script init.inmod.sh: #!/shebang??? /vendor/bin/test_disp hdcp disable In vendor specific .rc file: on ??? start ...
0
votes
1answer
71 views

Sensitive information in the About screen [closed]

Which of the following information from the About screen (Settings -> System -> About) is considered sensitive and shouldn't be shared publicly? IMEI IP address Wi-Fi MAC address Bluetooth address ...
0
votes
0answers
59 views

Gaining higher privileges

When an application requests access to some features of the phone, for example to read SMS storage, it always asks the user for permission for the second time. Is there a way to bypass/disable this ...
0
votes
0answers
67 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
0
votes
0answers
57 views

How to disable android on localhost folder

When I connect my android phone to wifi, using a desktop PC connected to the same wifi I can see a list of folder that belongs to my android phone called android on localhost (as shown in the ...
0
votes
0answers
128 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
1
vote
1answer
95 views

“Device Admin” apps are asking for permission to erase my data after failed login attempts! How can I confirm?

I was about to install the Outlook app on my phone, when it asked me to activate it as a device admin. (See image below): I'm sure few people read the whole warning. One part greatly concerned me: ...
0
votes
1answer
98 views

Chrome - unprompted auto-download of files after opening the browser - bug or something else?

Upon opening google chrome on android, it suddenly downloaded (unprompted by me) a jpeg, as well as a "seed" file. After scanning both files with the mobile version of kaspersky, i opened the jpeg ...
0
votes
2answers
42 views

Security question incoming calls

I've got an Nokia 6 with Pie! How do I stop others from answering my calls, or more correct, how do I stop incoming calls from opening my phone?? Everytime there's an incoming call, all security ...
0
votes
1answer
96 views

Revoking Bluetooth permission from all apps?

I noticed that my phone silently enables bluetooth when screen turns off. When phones remains inactive for few minutes and I click unlock button I can see bluetooth indicator showing up for around 1-2 ...
-1
votes
2answers
51 views

How do I safely flash a new rom on an infected android phone? [duplicate]

Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
0
votes
0answers
30 views

Link between device state & user settable root of trust

I am (still) trying to understand exactly how verified boot works and I am wondering what happens when a user-settable root of trust is used by the device. As said here: If the device is LOCKED, ...
0
votes
0answers
24 views

Openkeychain create public key problems

1 How can i find my public key in openkeychain? I can only find my private key 2 i need to create gpg how to do that? I now have downloaded k9mail. I cant inport the key from openkeychaine ...
1
vote
1answer
41 views

How to delete my personal files retained by an app?

I'm using Android Excel and Word apps on a non-rooted Galaxy Note 8. Over the past months I've opened a couple of files from external sources (email and SD card), but was shocked to find these files ...
2
votes
2answers
77 views

Can my father's smartphone be compromised?

My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing). In ...
1
vote
1answer
41 views

Mobile Hotspot Security On Older Phones

I want to use my Samsung Galaxy Trend Plus as a mobile hotspot, for my laptop. I have installed a custom rom on the phone -- Official Lineage OS 14.1. There are no security updates for this OS. Does ...
0
votes
0answers
32 views

Erase data on UFS device securely

I want to erase some files on UFS device securely, which can't be recovered with any known methods. The operating system is Android and it boots from the same UFS device. Is that possible to do that ...
2
votes
1answer
63 views

Why is there “/proc/net/snmp” file on my device? Could it be due to a malware?

After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly. My question is simple, do the bootkits ...
1
vote
2answers
351 views

List of system apps, remove unwanted app [WELCOME P20 Pro]

I bought a low-budget china no-brand phone brand: 'WELCOME' model: 'P20 Pro' , and some things seem a little odd. Before using the phone, I did a factory reset. When I first turned it on before the ...
1
vote
0answers
78 views

Android verified boot and custom ROMs

I'm trying to figure out how exactly works the Android Verified Boot process and its usage with custom ROMs. The documentation I found on it is unclear (or outdated) as there seems to be several ways ...
0
votes
0answers
24 views

Can I use DNS-over-TLS below Android Pie?

Unfortunately DoT isn't part of Android below version 9. Is there a workaround app or should I better install LineageOS 16 on my old smartphone device?
0
votes
1answer
51 views

Is Android Pie vulnerable to ADB server attack?

According to The Hacker News, many Android devices are running insecure remote ADB service: Thousands of Android Devices Running Insecure Remote ADB Service Despite warnings about the threat ...
1
vote
0answers
63 views

Android Pie background apps

Android Pie does not allow background apps to have access to microphone or Camera. Is this valid in case of screenshot also? Does the app needs to be foreground and visible for any of the above ...