Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

0
votes
0answers
18 views

In Android 7.0 Nougat, which permission gives an app your phone number?

In Android 7.0 Nougat, which permission gives an app your phone number? When I say "which permission", I mean when installing apps, the Google Play store will inform the user of certain permissions. ...
2
votes
0answers
26 views

Decrypting microSD card on another Android device or desktop computer

I'm looking for a solution that would allow to encrypt external microSD card with the following conditions: external microSD card is not merged with the internal storage; encrypted external microSD ...
0
votes
0answers
19 views

time/date on usage stats

my usage stats on my android stamped everything Dec31, 1969. why? what the hell?
0
votes
0answers
18 views

Error when using MobSF

When I run MobSF, I get a lot of DEBUGs, as shown in the screenshot below. I tried to run both with the indication of the port (8000), and without specifying. I will be grateful for the help.
1
vote
0answers
28 views

Can I secure my android phone from being hacked while hosting a website?

I have been able to host a website of my own using "apache http server" app from my android adjoining with "termux" app using serveo as ssh tunneling. Can I make my phone more secure, so that it can ...
1
vote
1answer
43 views

How to set password request for booting the smartphone?

How can I set the phone so it requests to unlock the screen before starting up? Earlier I had to unlock the phone so it starts up but now it boots without unlocking (and I didn't change anything in ...
1
vote
2answers
134 views

WhatsApp Messenger zero-day exploit: How to upgrade?

It turns out that WhatsApp Messenger is affected by an exploitable buffer overflow vulnerability, which can be used to take over the phone with "zero clicks", by placing a call using specially crafted ...
0
votes
1answer
25 views

End-to-End Encryption IMAP client

I recently discovered that Outlook for Android uses an intermediate server for IMAP connections, meaning that: mail is accessed in plain-text by a third-party credentials are known in plain-text by a ...
0
votes
1answer
35 views

How to apply the latest security patches on Nokia 3.1?

I've a Nokia 3.1 with build number 00WW_2_680_SP02. When I run Check for updates, I have the message: Your system is up to date Android version: 8.1.0 Security patch level 1: 1 February ...
0
votes
1answer
21 views

How do I set up erase and secure?

My phone was stolen so I tried to erase from Samsung Device Manager but it just sends an erase instruction which I don't know whether the person who turns my phone on will be able to just stop from ...
6
votes
1answer
77 views

Attempting to brute force Android security pattern through TWRP via adb

Yesterday I somehow forgot the Android security pattern on my phone. Due to muscle memory I sort of know what it was, but can't figure out the true pattern. Therefore I'm attempting to brute force it ...
0
votes
0answers
43 views

how to create android sepolicy based on the denial execute_no_trans

I am trying to execute my init.inmod.sh from /vendor/bin and using below method: init.inmod.sh -> /vendor/bin/test_disp hdcp disable in vendor specific .rc file i will do start inmod_sh service ...
0
votes
1answer
43 views

Sensitive information in the About screen [closed]

Which of the following information from the About screen (Settings -> System -> About) is considered sensitive and shouldn't be shared publicly? IMEI IP address Wi-Fi MAC address Bluetooth address ...
0
votes
0answers
28 views

Gaining higher privileges

When an application requests access to some features of the phone, for example to read SMS storage, it always asks the user for permission for the second time. Is there a way to bypass/disable this ...
0
votes
0answers
36 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
0
votes
0answers
31 views

How to disable android on localhost folder

When I connect my android phone to wifi, using a desktop PC connected to the same wifi I can see a list of folder that belongs to my android phone called android on localhost (as shown in the ...
0
votes
0answers
63 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
1
vote
1answer
48 views

“Device Admin” apps are asking for permission to erase my data after failed login attempts! How can I confirm?

I was about to install the Outlook app on my phone, when it asked me to activate it as a device admin. (See image below): I'm sure few people read the whole warning. One part greatly concerned me: ...
0
votes
1answer
75 views

Chrome - unprompted auto-download of files after opening the browser - bug or something else?

Upon opening google chrome on android, it suddenly downloaded (unprompted by me) a jpeg, as well as a "seed" file. After scanning both files with the mobile version of kaspersky, i opened the jpeg ...
0
votes
2answers
41 views

Security question incoming calls

I've got an Nokia 6 with Pie! How do I stop others from answering my calls, or more correct, how do I stop incoming calls from opening my phone?? Everytime there's an incoming call, all security ...
0
votes
1answer
44 views

Revoking Bluetooth permission from all apps?

I noticed that my phone silently enables bluetooth when screen turns off. When phones remains inactive for few minutes and I click unlock button I can see bluetooth indicator showing up for around 1-2 ...
-1
votes
2answers
37 views

How do I safely flash a new rom on an infected android phone? [duplicate]

Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
0
votes
0answers
23 views

Link between device state & user settable root of trust

I am (still) trying to understand exactly how verified boot works and I am wondering what happens when a user-settable root of trust is used by the device. As said here: If the device is LOCKED, ...
0
votes
0answers
15 views

Openkeychain create public key problems

1 How can i find my public key in openkeychain? I can only find my private key 2 i need to create gpg how to do that? I now have downloaded k9mail. I cant inport the key from openkeychaine ...
1
vote
1answer
37 views

How to delete my personal files retained by an app?

I'm using Android Excel and Word apps on a non-rooted Galaxy Note 8. Over the past months I've opened a couple of files from external sources (email and SD card), but was shocked to find these files ...
2
votes
2answers
76 views

Can my father's smartphone be compromised?

My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing). In ...
1
vote
1answer
34 views

Mobile Hotspot Security On Older Phones

I want to use my Samsung Galaxy Trend Plus as a mobile hotspot, for my laptop. I have installed a custom rom on the phone -- Official Lineage OS 14.1. There are no security updates for this OS. Does ...
0
votes
0answers
30 views

Erase data on UFS device securely

I want to erase some files on UFS device securely, which can't be recovered with any known methods. The operating system is Android and it boots from the same UFS device. Is that possible to do that ...
2
votes
1answer
56 views

Why is there “/proc/net/snmp” file on my device? Could it be due to a malware?

After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly. My question is simple, do the bootkits ...
1
vote
2answers
236 views

List of system apps, remove unwanted app [WELCOME P20 Pro]

I bought a low-budget china no-brand phone brand: 'WELCOME' model: 'P20 Pro' , and some things seem a little odd. Before using the phone, I did a factory reset. When I first turned it on before the ...
1
vote
0answers
60 views

Android verified boot and custom ROMs

I'm trying to figure out how exactly works the Android Verified Boot process and its usage with custom ROMs. The documentation I found on it is unclear (or outdated) as there seems to be several ways ...
0
votes
0answers
19 views

Can I use DNS-over-TLS below Android Pie?

Unfortunately DoT isn't part of Android below version 9. Is there a workaround app or should I better install LineageOS 16 on my old smartphone device?
0
votes
1answer
38 views

Is Android Pie vulnerable to ADB server attack?

According to The Hacker News, many Android devices are running insecure remote ADB service: Thousands of Android Devices Running Insecure Remote ADB Service Despite warnings about the threat ...
1
vote
0answers
55 views

Android Pie background apps

Android Pie does not allow background apps to have access to microphone or Camera. Is this valid in case of screenshot also? Does the app needs to be foreground and visible for any of the above ...
2
votes
0answers
138 views

Samsung Galaxy s10e requires password every few days, is it possible to disable safely?

Galaxy s10e, protected by a very long password and fingerprints. I specifically went for a very long password intending to only type it in after restarting the phone. In fact, the phone requires ...
0
votes
0answers
212 views

Allow android chrome to load unsafe scripts

When any site has mixed content (HTTPS + HTTP), and when you try to open HTTP content, on Desktop chrome, it shows a "shield" icon like screen below, This allow user to load unsafe script. However, ...
0
votes
1answer
30 views

Is it possible to access Face ID sensors raw data?

My Honor 10 has facial recognition capability in the dark, I suppose it works like Apple's Face ID which would rely on and IR camera and an Infrared pattern/dot projector. So, since the Settings app ...
0
votes
0answers
39 views

Can Google see what you're doing on a different device if you're using an Android phone's hotspot to connect a different device to the internet?

I know that Verizon or ATT or whatever data service you're using can see your browsing history since they're providing the service, but would Google be able to see it too since it's the software the ...
0
votes
1answer
23 views

How to know whether TrustyOS is running in Android mobile or not

I'm referring TEE(Trusted Execution Environment) for Android Here. Can anybody help me to check whether any device is runnning Android along with Trusty OS?
4
votes
1answer
120 views

For basic users - Any reason to install mobile security App?

For users that play it straight, never going to doubted sites, never enabling APK from non-play sources... (e.g typical seniors) Any reason to install a mobile security app? Because Such users ...
5
votes
1answer
70 views

If an apk requires no permission, can I be completely sure that it is safe to install?

I have an apk that requires no permissions whatsoever. Given that the apk requires no permissions, can I be completely sure that it is safe to install? Or are there still ways in which this apk might ...
0
votes
1answer
33 views

How to permanently erase the deleted files from Nexus 6p?

I had deleted several files like from my Nexus 6P, I want to permanently erase all deleted files, how to do it? where are the deleted files stored?
0
votes
0answers
5 views

Frp google bhpass for asus zen pad z8 [duplicate]

How can I get past Google verification on my Zen Aqpad z8. I don't know last synced account ?
0
votes
1answer
151 views

Apps whitelisted in AFWall+ without my knowledge

I've installed a firewall (AFWall+) on my phone, and I've manually whitelisted every app I wanted to allow accessing the Internet, including system apps. So everything is blocked by default, and I add ...
1
vote
0answers
30 views

How to prevent external USB HID devices enable without confirmation

Android support USB HID devices like keyboard and mouse. If you have a USB-C keyboard, or connect via a USB hub. The USB keyboard will have control to the system, without on-screen confirmation. I ...
1
vote
0answers
23 views

Are multiple-users protected from each other differently than apps?

I confess that I come from the happy world of unix computers, and am used to the concept of user accounts and hence group gids and userids uids. For the occasional usage of an untrusted app (i.e. ...
0
votes
1answer
35 views

Firefox wants to record video/audio

I have an Xperia Z5, running 7.1.1. When I browse the web using Firefox, I keep getting requests from Firefox to record audio and take photos/videos. Both requests always happen together, in that ...
0
votes
0answers
18 views

SD card not encrypted

I have an android device lg v30 and recently I purchased an sdcard for it. Naturally, I enabled encryption on the sd card (full encryption). Encryption completed successfully. I used the card for ...
0
votes
0answers
59 views

How do I check if my Android SD is encrypted?

I can't remember if I encrypted it already or not. How do I verify that? Under SETTINGS - SECURITY - ENCRYPTION, there is just "Encrypted phone", but nothing related to the SD card. The SD is NOT ...
2
votes
2answers
4k views

Is there anything malicious with play support libraries?

I was doing my daily stuff on my Android Nougat. And then something started downloading, play support libraries. I think OK right. But the moment downloading stopped, and installation started my ...