Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

1
vote
0answers
10 views

How to prevent external USB HID devices enable without confirmation

Android support USB HID devices like keyboard and mouse. If you have a USB-C keyboard, or connect via a USB hub. The USB keyboard will have control to the system, without on-screen confirmation. I ...
-1
votes
0answers
23 views

Security concern [closed]

The call goes to the numbers that are not saved in my phone and does not reflect in my call history , but there is a call that is made from my number , as I was suggested by one of the respondents to ...
1
vote
0answers
15 views

Are multiple-users protected from each other differently than apps?

I confess that I come from the happy world of unix computers, and am used to the concept of user accounts and hence group gids and userids uids. For the occasional usage of an untrusted app (i.e. ...
0
votes
1answer
24 views

Firefox wants to record video/audio

I have an Xperia Z5, running 7.1.1. When I browse the web using Firefox, I keep getting requests from Firefox to record audio and take photos/videos. Both requests always happen together, in that ...
0
votes
0answers
10 views

SD card not encrypted

I have an android device lg v30 and recently I purchased an sdcard for it. Naturally, I enabled encryption on the sd card (full encryption). Encryption completed successfully. I used the card for ...
0
votes
0answers
29 views

How do I check if my Android SD is encrypted?

I can't remember if I encrypted it already or not. How do I verify that? Under SETTINGS - SECURITY - ENCRYPTION, there is just "Encrypted phone", but nothing related to the SD card. The SD is NOT ...
2
votes
1answer
47 views

Is there anything malicious with play support libraries?

I was doing my daily stuff on my Android Nougat. And then something started downloading, play support libraries. I think OK right. But the moment downloading stopped, and installation started my ...
0
votes
0answers
44 views

How to Decrypt Huawei Safe File?

I am using Huawei Nova 3i and I have forgotten my password for File Safebox. But here I can see all my files encrypted. It would be great if I can decrypt them so that I can get back all my files. ...
0
votes
0answers
63 views

Hacked. How to factory reset no access factory reset

My phone and tablet has been hacked. Neither Samsung device is rooted. I think the rom has been changed and I am on a virtual network in a shell and unable to access factory reset. I don't know if the ...
0
votes
1answer
27 views

Files stealing from device or onedrive

I have word files on onedrive and i use word for android to edit theme. I want to know if the are secure. Can other applications acces themes ? Can appliaction that have storage permession steall my ...
0
votes
0answers
29 views

Apps still using Webview instead of Custom tabs?

What I have read from oauth spec is that the authorization server url should be visible to the user. From RFC6819 - OAuth 2.0 Security, it is stated that: A malicious application could attempt to ...
1
vote
1answer
30 views

Why reading permission to /proc/1/maps is denied and why doesn't the denial appear in logcat?

I'm developing a native app for Android, and I'm occasionally confronted with permission denied which doesn't trigger a log in the logcat logs. For example, trying to run: shell@kltevzw:/ $ cat /proc/...
0
votes
0answers
20 views

Are there apps which block apps from using features even when they're given permission?

Android's prefs lets me give or revoke individual permissions for individual apps. But sometimes an app will refuse to run without being given permissions that don't seem relevant for such an app. ...
0
votes
1answer
22 views

Setup Android for kids?

How to setup Android so that the phone app is completely usable without a pin, but all others apps need unlocking
0
votes
0answers
27 views

Service Tests - Security - what do the settings mean?

I have been shown how to use a code in the dialer to access the Testing menu on my Sony Xperia. I believe that checking the settings in Service Tests/Security can reveal whether the phone has been ...
5
votes
3answers
141 views

How to find out stolen phone of android by using IMEI number?

I have already tried by finding findDeviceWebsite Is there any way to find device by IMEI number?
3
votes
0answers
45 views

FBE - Why does each user get a separate DE key

I've been reading about how File-Based Encryption and Direct Boot work. There's one thing I don't understand. According to https://developer.android.com/training/articles/direct-boot Device ...
0
votes
0answers
32 views

Running an Android app in an encrypted container

Is there a way to encrypt apps (and appdata) on an Android device. I use an Android 7.1 device and don't want that there is any APP or especially Malware which can spy on appdata like my WhatsApp data....
0
votes
0answers
29 views

How do I verify my second-hand phone is 'clean'

I have just bought a second-hand Android phone (Samsung) and would like to check that there's nothing nasty on there before I start using it in earnest. It's my first smartphone! I have some ...
1
vote
2answers
80 views

Malicious software runs on the background of Android phone, but I cannot see it - how to find and remove it?

I know that a malicious malware/spyware has been installed on my Samsung Galaxy S3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have ...
5
votes
1answer
68 views

Should a certificate be installed when a browser offers to install it?

I was accessing my internet banking site, and I found my browser asking to install some certificates noted some extensions of certificate. Do I need to install certificate to access the site safely ...
4
votes
1answer
65 views

Prevent application to make silently install file(s) or making changes

'Request Install Packages' let's say if an app has this permission ex- facebook(Check it in playstore head to facebook then 'app permissions' and click 'see more'. I used to read articles related to ...
2
votes
3answers
93 views

control per app internet (non-rooted) while using actual VPN?

I am trying all sorts of (non-root) security software that allows me to block internet for apps. so far every one needs some kind of fake VPN to gain access to traffic, I guess so no root is needed. I ...
1
vote
0answers
46 views

gboard suggesting passphrase after deleting app data and learned dictionary

I have been using the gboard keyboard app for as long as I can remember. I also use password managers for nearly every situation, but they do not completely eliminate passwords. To my horror, gboard's ...
0
votes
1answer
203 views

What are the risks involved in unlocking the bootloader?

A locked bootloader is one that will only boot an OS and recovery that it "approves" of. Vendors digitally sign the recovery, kernel and kernel modules and unsigned binaries are refused to flash and ...
1
vote
0answers
85 views

Can not re-sign Android system app without app crashing (using LineageOS)

I have re-signed all system apps of LineageOS with my own key and have replaced them all before the first boot. LineageOS boots normally but then all re-signed system apps crash with an error like: ...
2
votes
0answers
128 views

Unlock with fingerprint instead of PIN after Device reboot or Device Locked by admin

Android has a security feature that requires the user to input PIN/Pattern/Password if the device was locked by an app using the Device Administrator permission or when the device is restarted. ...
0
votes
0answers
31 views

Is it possible to make Android remember the SIM PIN and automatically unlock the SIM upon reboot?

This way the phone could be unlocked and used with the visual pattern. (Or some other mechanism, e.g. fingerprint, face scan, etc.) The SIM card PIN wouldn't have to be repeatedly input after every ...
2
votes
2answers
116 views

How can my employer change my Andriod security settings?

I got the following email from my employer: Passwords required on all mobile devices In order to protect College data stored on portable devices, from Tuesday 20 November ICT will enable a ...
-1
votes
1answer
506 views

What are “minuhome.Black.[…]” apps?

I've downloaded an app locker on my Samsung Galaxy Note 8, and as I was trying to import apps to the locker, on category "M" of the app list comes out a lot of Android icons with the file name of ...
0
votes
0answers
33 views

Are non-Google emails stored only locally when using the Gmail app? [duplicate]

The Gmail app allows to add non-Google email provides (via POP and IMAP). Is it mentioned somewhere that the emails pulled from these providers stay on the device and are not stored/shared with ...
1
vote
0answers
34 views

Working with Security Metadata in APK file

According to this Blog post, Google has added a Security Metadata on top of an APK to verify that it was originally distributed by Google Play. More specifically it adds APK Signing Block to the APK ...
2
votes
0answers
36 views

Security related concern for my android phone

i purchased an android mobile and had my google account set up but the device later went faulty and would not turn on, so now I got the same brand phone exchanged. meanwhile I have also set up my ...
1
vote
0answers
318 views

Make Google Pay require unlocking for NFC payment?

I have installed Google Pay and NFC credit card payment is neat. However, I don't feel safe about it. What if someone snatches my phone, then pays with it before I notice, or after I notice but before ...
0
votes
0answers
52 views

In Android, got click-jacked into clicking “Allow” for a pop-up that flashed for 0.1 seconds. How do I find out what I allowed?

In Android, I was using Google Chrome. I clicked on a sketchy website which popped up a new chrome tab. I pressed the tabs button which caused me to view the various tabs. Right as I was clicking on ...
1
vote
0answers
40 views

Create a private folder in Android: set the SELinux attribute of a folder in external storage

There are quite a few apps that require read and write access to the external storage, which gives them access to the whole /sdcard directory. But since that is also the only storage the user ...
0
votes
0answers
27 views

Popping certificate notification of arubanetworks.com

Whenever I use certain public wifi-network on my Android Nougat I get this pop-up about certificate security. Even deleting the account from email client didn't help, it seems it relates to system ...
0
votes
0answers
34 views

KitKat exploit for reading fils in /data

My Motoroa Droid MAXX is running a version of Android that has no rooting method. All I want to do is read Chrome's backed up file of tge list of open tabs. Does Android 4.4.4 have any known ...
1
vote
0answers
649 views

When I click “enable secure and erase” in Find My device it says “request sent”, but nothing happens

I'm trying to enable remote locking and wiping for a phone. When I go to https://www.google.com/android/find and click on “enable secure and erase” then it says "request sent", but I see nothing on ...
0
votes
1answer
39 views

How to disable sending all sensible information to the cloud?

Recently I found, that my Samsung Galaxy S7 was sending all my photos to Samsung without my explicit permission. I would like to ban any such activity from any application. Is it possible to do this ...
0
votes
1answer
48 views

Does syncing gallery means sending all photos to internet?

I found with fear, that my Gallery on Samsung Galaxy S7 was set up to sync with cloud by default. Does this mean, that all my photos, including secret ones, were silently sended to Samsung??????
1
vote
1answer
3k views

How to Disable FLAG_SECURE without root?

I just realised the only way to bypass screenshot security on certain apps is to disable this FLAG_SECURE, which as I see can be done using Xposed module. But I don't want to root my phone. Is there ...
2
votes
1answer
487 views

WhatsApp: How to isolate contacts and photos - Privacy concerns

Whatsapp is ubiquitous and is commonly used despite the long scary list of permissions it seeks ( see Help understanding Whatsapp's permissions ) Privacy and security conscious people would like ...
0
votes
0answers
51 views

Security - Samsung official service forces ROM reflashing after battery replacement - how can I make sure that the ROM is 100% clean/stock?

I have a Samsung Galaxy S7 whose battery got a little bit worn. I want to replace it under warranty, but I'm a bit reticent because the official Samsung service will also reflash my ROM/firmware/etc, ...
0
votes
2answers
268 views

Are device administrator permissions a security risk?

I would like to use t-igra's SwipeLock+ app, but it requires device administrator permissions. Google Play Store lists the following permissions: receive data from Internet view network connections ...
5
votes
1answer
808 views

How does an app reads an OTP SMS without SMS permission?

I have recently installed an Android app from the Play Store. While registering in it, I realized that it was able to read my message of OTP without even asking for my permission to read the message. ...
0
votes
2answers
345 views

How do I remove Trojan horse virus from my android smartphone?

There is a virus in my android phone named com.wgjvp.idck and I tried every possible solution to remove it but couldn't find any solution. What I did: I hard-reset(factory-reset) my phone twice but ...
1
vote
0answers
70 views

Does Google has a page where they show when an Android version isn't supported anymore?

We are in doubt of supporting a device running an older version of Android. I looked everywhere on the internet, but there seems to be zero information from Google how long they will make security ...
0
votes
1answer
115 views

Prevent google backup of contacts?

I have Google backup turned off permanently, however my contacts are still backed-up somewhere to Google cloud. I discovered that yesterday from another device that offered me to recover my contacts ...
-1
votes
1answer
46 views

A way of doing secure data exchange in Android?

To my knowledge, all current Android apps with internet permission enabled are prone to apps stealing data. For example, if you have a messaging app, all your messages are readable by the company ...