Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

Why should I go to SHA512withRSA signature for my Android apps? [closed]

I have an Android 11 device and many of my apps and system apps use MD5withRSA or SHA1withRSA as signature algorithm by default. Why should I take my apps SHA256withRSA or SHA512withRSA? Are there any ...
2
votes
1answer
71 views

Can an app installed from the Google Playstore install another app with different permissions?

I installed an app for custom notifications from the Playstore. The app requires sensitive permissions (camera, contacts, and storage), but has no network access. When I selected a setting the app ...
1
vote
1answer
37 views

Is it possible for a phone to still be compromised/infected by malware or spyware even after a factory reset?

If yes then how can one ensure that its %100 wiped clean? Android 7 | rooted EDIT: Same question but how about when rom is flashed ?
1
vote
0answers
23 views

How to whitelist websites?

How would I whitelist so that I can only use certain websites in my browser?
1
vote
1answer
20 views

Google showing places I haven't been

I am shown on google that I have visited Liverpool and Cornwall both of which are 100's of miles away from where I live. Any ideas why? My Facebook was hacked could this be the same thing?
0
votes
1answer
34 views

Problem with a sdcard under Android 7.1.2 three partitions can not be mounted / used

Happy New Year! there is a problem with my sdcard under Android 7.1.2 (Custom Rom) (root=true, adb=possible). The vFat Partition can be used, but the rest is not mounted and can not be used. mmcblk1p1 ...
1
vote
1answer
30 views

What level of permeability is there between Android and installed apps?

I just installed Protonmail on my Android device, and I was wondering how much data can Android (Google, really) can get from my use of that app, or from any app in general for that matter. I write ...
2
votes
1answer
23 views

Utilizing an old Android as a security camera and saving footage to HDD [closed]

I would like to create a small security camera network utilizing devices I already have, namely Android phones. All phones can have a constant sources of charge, as well as be attached to my wifi ...
2
votes
0answers
18 views

Does ShareIt use the content we share?

In the TOS it seems they say that we give right to use our content.
6
votes
1answer
351 views

Updating Pixel after many months. Will I get all the missing monthly security patches?

Not a duplicate of this Are security patches only applied to the latest Android version? I have a Pixel 4a, Android 11, running November security update. For various reasons, I do not wish to apply ...
0
votes
0answers
53 views

How secure is your data in Android when an app is given access to storage, camera, contacts

I am just trying to understand that, these days most of the apps require access to things like camera, storage, contacts. Is there any data privacy link to read through for an app consumer to know ...
1
vote
1answer
33 views

Chrome, autofill, and biometric security

One of the recently added Android features is biometric-protected autofill. It should enable something similar to iOS, where credit card numbers and passwords are protected by a fingerprint or Face ID....
0
votes
0answers
22 views

Is the Android Emulator from Android Studio vulnerable to Dirty COW?

I want to try out the DirtyCOW Exploit in a Virtual Machine or an Emulator. I have made DirtyCOW run on some versions of Android-x86, with Android-x86 running in VirtualBox. I want to know if DirtyCOW ...
0
votes
1answer
34 views

Password-protected APK installation?

I am seeking ways to disable installing apps with APK, i.e. make the setting "Allow apps from unknown sources" password-protected or disable completely for user. Is there a way? Maybe it's ...
1
vote
0answers
35 views

Make my screen unlock pin longer than 31 digits

My question is pretty self-explaining. Currently I have a PIN number of maximum possible digits (31) that my Android 10 supports (phone is Huawei P20 Pro). Is there a way to make it longer than that? ...
2
votes
1answer
164 views

Is there a way for a website or app to view the contents of my internal storage without my permission?

I see there are a lot of articles about the restrictions imposed on JavaScript in Windows Chrome. It can't access the filesystem of a user without the user himself uploading it to the server of the ...
1
vote
0answers
36 views

What is the support timeline for Google Play System Updates (GPSU) from Project Mainline?

Since Android 9 more and more core components can be updated by Google by the Google Play System Updates (GPSU) that come from Project Mainline (https://www.xda-developers.com/android-project-mainline-...
0
votes
0answers
15 views

Add clock to secure folder

I have a Samsung J6 2018 and I want to add Clock to Secure folder to prevent someone from dismissing my morning alarm. However, when I go to the secure folder, I can't find the Clock app, but I can ...
0
votes
0answers
67 views

Is there alternative to the Shred unitlity for Android?

There is such utility for Linux systems called shred. It writes file with random values several times and then also can write it with zeroes (to hide overwriting) and delete it. So that files couldn't ...
1
vote
1answer
41 views

On Whatsapp can I know if I am in someone's contact list based on the “security code” messages?

Can I know if someone has me in their contacts based on the security code messages that are sent when there is a change or is that based on whether I have them in my contacts? I want to know if ...
0
votes
0answers
22 views

Lock computer USB connection with anther password

I'm looking for a way to lock computer USB connection with second password, not with the regular lock screen password but with a different password. Thus, people who already know the password of my ...
2
votes
0answers
123 views

Encryption: can't decrypt data after rom downgrade

I downgraded an Android 10 custom rom while I had encryption enabled (rom). Basically I dirty flashed a previous minor version of the rom via TWRP (with just a simple "wipe cache/dalvik"). ...
0
votes
0answers
22 views

WhatsApp cannot receive any broadcast

I am using the latest version of WhatsApp . for some reason I still can't understand people cannot send me broadcast even though they are in my contact list ( & I am also in their ) . however ...
4
votes
1answer
492 views

APK signature verified but warns file “not protected by signature”?

I'm using apksigner to verify the authenticity of a Google Podcast apk that I downloaded from an apk mirror. This apk (and older versions) verifies successfully (v1/v2/v3) and returns exit code 0 but ...
0
votes
0answers
31 views

Checking Android Certificates

I recently purchased a Galaxy A51. I noticed certificates that were located in the Credntial Storage in User Certificates. 10164_KNOX_Enhacened_Attestation Enhacened_Attestation_SSL FindMyMobile Are ...
0
votes
0answers
26 views

How to Enable Bluetooth on my Device or Browser

I am trying to log into Gmail by making my Phone a Security Key Below are the specifics Samsung Galaxy J3 Prime (SM-J327T1) Android Version 7 I get following error whether I use Brave or Chrome ...
1
vote
1answer
53 views

How can I make my rooted Android 7 phone as secure as possible for financial transactions?

The latest security update patches for my phone was in 2017. My phone is rooted. What steps can I take to make it as secure as possible to be able to safely use financial apps where I'd be transacting ...
0
votes
0answers
21 views

Why does SElinux deny `setcon` only after the ART is running?

I'm writing a JNI application that changes user & process-context to debug other apps. The user is changed with seteuid and the context is changed with setcon or selinux_android_setcon. Originally ...
4
votes
3answers
2k views

Is it possible to somehow understand from the logs what happened to the phone a month ago? Are there such logs?

I didn’t have access to my phone for a month, I’m afraid that I could have installed any software or hardware spyware. Is it possible to check it somehow by logs? Does the Android system keep logs for ...
0
votes
1answer
23 views

In AFWall+, how do you block everything by default?

I want the default to be blocked unless I specifically allow that app. I understand you can tick all what you want blocked or not. But, what I want is for any app that gets installed to be ...
1
vote
1answer
61 views

Is a rooted phone safe for phone banking?

My phone (Android 7) has been rooted for years. That means it hasn't updated in years. I'm wondering if it's safe to do financial transactions on it...like download my banks app and a bitcoin e-wallet....
0
votes
0answers
24 views

If your phone was compromised by a government body, how would you return it to it's original state?

Say your phone was confiscated and consequently compromised, how would you ensure that it is no longer bugged?
4
votes
2answers
598 views

Are security patches only applied to the latest Android version?

I've got a Pixel phone from Google, but it really doesn't matter, I guess the question would apply to any AOSP-based device. They state that they provide 3 years of version updates and security ...
0
votes
0answers
28 views

MI Security App Scanner

I had to reset my redmi note 9 pro phone recently due to an issue but now my apps aren't being scanned before installing from google playstore. I have checked the options is on in security settings in ...
0
votes
0answers
61 views

How to sniff android app connected URLs

I want to intercept a traffic and found out some streaming URLs from an android app. When I tried to use Packet Capture, the app says "please turn off VPN connection" once started. So I can'...
0
votes
0answers
22 views

How safe is my Nexus 6 with Android 7.1.1 and the possible latest update (Oct 5th 2017)?

I found my old Nexus 6. No SIM in it, just connects to the Internet via my home wifi. I've tried to catch the latest updates, upgrades, and security patches, then I realized, unless I doing something &...
0
votes
0answers
48 views

Chromium-based browsers can download without storage permission

I just installed Brave browser, and it looks like the browser can download files into the Downloads folder without being granted the Storage permission. I have not previously granted it, and it does ...
2
votes
1answer
5k views

Screen Lock Service as a Device Administrator

Background: I was looking at the device administrators of my phone in the settings and saw a device administrator called "screen lock service". It's description is "Activating this ...
1
vote
1answer
154 views

How do I verify that the USB debugging key fingerprint is correct? [duplicate]

When I try to enable USB debugging on my Android device, I am prompted with this message: The computer's RSA key fingerprint is: FE:35:23:34:... I see the public key in ~/.android/adbkey.pub How can ...
0
votes
0answers
32 views

Android SmartLock - Proximity to home wifi

I have seen other topics similar to this that are locked to further comments but the conversation goes way sideways. The issue is whether I can have my phone unlocked when I'm within range of my home ...
1
vote
1answer
57 views

How to force a smartphone to do update?

How come two Nokia 9 phones have the same model, phone service provider and location, but one of them insists there were no updates (neither security nor Android itself which should be 10, not 9, by ...
1
vote
0answers
13 views

why DAC isn't sufficient for Android that it needs MAC(selinux)

I learned that each app is assigned a separate UID so that a rogue app cannot access other apps data and system sensetive data and files. What's problem with this that they have to use MAC(selinux)
2
votes
0answers
60 views

Is there a way to receive security updates after vendor stops them, without compromising SafetyNet attestation?

Imagine the following situation: The vendor of my phone has stopped providing security patches for the stock OS. The HW is perfectly fine and powerful enough for years to come, so I'm definitely not ...
1
vote
0answers
28 views

What are some good security practices to take on a newly rooted Android phone and improvise further

I've managed to root my Mediatek Android smartphone using Magisck. I've managed to set up Afwall+ for now and was wondering how to further harden this device. If you have a smartphone with root ...
3
votes
0answers
139 views

Is it possible to have a custom ROM with a locked bootloader?

I just mention in-advance to please correct me if I'm mistaken on anything, I've a limited tech proficiency. I've a Samsung S9 (Android 10) and I wish to install an AOSP ROM (also on Android 10), but ...
0
votes
1answer
70 views

“Your Phone Companion” only works on unlocked phone

I do not know if this is a bug or a feature, but it does not make much sense. I have a Samsung S9, and I managed to connect it to my Windows 10 laptop. I can only start apps when my phone is unlocked, ...
3
votes
0answers
859 views

What is this device administrator called screen lock service? [duplicate]

I was looking at the device administrators of my phone in the settings and saw a device administrator called "screen lock service". It's description is "Activating this administrator ...
0
votes
1answer
87 views

What type of hardware support is required for getting the widevine L1 level?

It s said that widevine L1 level requires hardware support so that it s impossible even for manufacturer to provide it through a system update. But what exactly has to be done by the hardware?
0
votes
1answer
55 views

How can I configure Android so that all Internet traffic goes through a VPN and is blocked if the VPN isn't activated, without rooting Android?

How can I configure Android so that all Internet traffic goes through a VPN and is blocked if the VPN isn't activated, without rooting Android?
1
vote
1answer
27 views

Safe to share boot partition?

On XDA, at times I see users requesting for boot partitions of a particular version of stock ROM and some people helping out by uploading and linking them. I am not sure if it is a good practice, ...

1
2 3 4 5
22