Questions tagged [security]
For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android
224
questions
18
votes
1
answer
9k
views
"One-click" root apps don't work anymore. Why not?
Years ago, it was easy to root any device. You installed KingRoot, KingoRoot, or a similar app. You hit the large "Root" button, and let the app do the rest. After 5 minutes or so, a green &...
- 1,205
29
votes
2
answers
26k
views
What do Android application permissions mean?
When installing an application, the application lists permissions that it needs to perform its functions.
I am creating this list of the the system defined permissions and a description of what they ...
- 22.6k
27
votes
5
answers
16k
views
My phone was just stolen an hour or so ago. Are there any options for tracking?
I realize this is a long shot, but my phone was lost or stolen a few hours ago.
At the time it was stolen, I didn't have any specific applications installed to track it or wipe the data. So... my bad....
- 3,709
5
votes
1
answer
4k
views
Are multiple-users protected from each other differently than apps?
I confess that I come from the happy world of unix computers, and am used to the concept of user accounts and hence group gids and userids uids. For the occasional usage of an untrusted app (i.e. ...
- 719
86
votes
6
answers
90k
views
How can I verify the authenticity of an APK file I downloaded?
The latest update of Google Maps is unavailable in my country, so I downloaded a version by googling for "Google Maps 5.4.0 apk". I did in fact find it, but now I wonder how I can tell if this is in ...
- 5,454
8
votes
1
answer
9k
views
Is there a way to root an Android phone without unlocking the bootloader?
I've tried almost any method to root my ASUS ZenFone Live, but no one seems to work. Also I only need root, no unlocked bootloader (don't want to wipe data) or custom recovery (not essential ATM).
- 81
5
votes
1
answer
22k
views
Android Verified Boot and generation of vbmeta image
I'm in the process of unofficial device bring up, and I'm stuck unable to progress due to Android Verified Boot.
As per specification, Android Verified Boot can be disabled with the --disable-verity ...
- 55
58
votes
5
answers
5k
views
Is an antivirus really needed for Android?
I use Linux for half a decade now, so I am not used to dealing with viruses anymore. To my surprise, I saw some discussion about antiviruses in Android. I haven't installed any yet, but this bugs me: ...
- 683
40
votes
4
answers
226k
views
How safe is it to use Aptoide?
As with the latest update to Google Play one no longer sees the full list of permissions requested by an app on install/update1, I feel my privacy is invaded. Even worse, an app could sneak in ...
Izzy♦
- 90.8k
46
votes
10
answers
23k
views
Is there a way to block access to or wipe my Google data for a lost/stolen phone
If my phone was ever lost or stolen, my only real concern is data and apps associated with my Google account, such as my Gmail, the ability to purchase apps from the Market, and maybe Picasa albums.
...
- 1,952
83
votes
8
answers
445k
views
Disable Screenshot Security
Some apps don't allow screenshots so how can I still take a screenshot?
It is my phone and I should be able to do whatever I want with it so why is there even a feature to disallow screenshots?
...
- 941
19
votes
4
answers
5k
views
Is there any way to erase personal information from my phone that has already been stolen?
My phone has been stolen. I do not want the thief to have access to any of my personal information such as calls, texts, and information saved in the phones contents. Is there any possible way I can ...
- 191
59
votes
8
answers
33k
views
Are there any tools to sandbox a malware application even more than the granted permissions on Android? [closed]
Suppose I want to run some program which requests too many permissions. For example, record from the microphone or read IMEI of my phone. However, there are no practical explanation why recording from ...
- 1,516
21
votes
6
answers
4k
views
How can I find a lost phone or help people return it?
I'm looking for an app like Where's My Droid to help locate a lost device.
Ideally I'm hoping there is one that might have two specific features:
The ability to display a message to the screen to ...
11
votes
2
answers
47k
views
How to unlock device when I forgot my password?
I've read Recovering from forgotten lock pattern which states that there is an option to disable the lock using my Google account information. However I did not noticed such an option when I entered ...
- 725
8
votes
3
answers
57k
views
Logout from Gmail on my device
It bothers me that my Android Phone is permanently logged into my Gmail account.
I want to logout from the device and somehow make the phone ask for username/password when connecting to my account.
...
- 89
6
votes
1
answer
7k
views
Decrypting microSD card on another Android device or desktop computer
I'm looking for a solution that would allow to encrypt external microSD card with the following conditions:
external microSD card is not merged with the internal storage;
encrypted external microSD ...
- 163
2
votes
1
answer
2k
views
Why root cannot access ".android_secure" directory on external SD card?
I have an Android 9 tablet, rooted by way of Magisk. It has an external SD card mounted as sdfat on /mnt/media_rw/1234-5678 which is mounted on four other mount points, all as type sdcardfs, with some ...
- 21
31
votes
3
answers
9k
views
What are the security disadvantages of rooting an Android phone?
I know there was a discussion previously BUT they didn't talk about security. E.g.: if I root my phone will all my apps run with root permission?
Related: Are there any risks to rooting a device?
- 1,361
22
votes
6
answers
2k
views
I have sold my phone on eBay. What should I do before I send it off?
I have an Android phone which I just sold on eBay. What measures should I take before posting it off to its new home? Please answer thoroughly!
- 803
18
votes
7
answers
6k
views
Are the apps safe? How can I make my Android more secure?
Are the apps on the Android Market checked or audited?
If I search Google for "hardening Android", the best hit I can find is Google Android Hardening Checklist.
What's your opinion regarding this? ...
- 1,361
15
votes
3
answers
4k
views
Pros and cons of rooting using apps ("Soft Root") compared to other methods ("Hard Root")
There are quite a few app based rooting methods. A recent review 9 free software apps to root Android devices, points to some of them and there may be more apps, paid or otherwise.
From what I ...
- 40.3k
11
votes
4
answers
49k
views
Is there a way for a user to tell if their Android device is encrypted or not?
There is a semi-relevant thread on SO https://stackoverflow.com/questions/12640708/check-if-android-filesystem-is-encrypted
that explains how a developer would determine if full-disk encryption is ...
- 970
11
votes
1
answer
7k
views
Conditions for triggering "pin required for additional security“
As in title, what are the conditions? (fingerprint isn't enough to unlock the device, one needs to enter PIN. I am not talking about the requirement after a re-boot)
I can't seem to discern a pattern, ...
- 40.3k
39
votes
2
answers
135k
views
How is the Gmail password stored in Android - and where?
I have looked around and found no information on how Android manages to store passwords on the device. Especially Gmail passwords. I'm looking to learn how Android encrypts and stores passwords ? What ...
- 703
36
votes
7
answers
8k
views
Stagefright security issue: what can a regular user do to mitigate the issue without a patch?
There appears to be a giant security vulnerability with Android that seems to basically affect all phones. PC World wrote:
The vast majority of Android phones can be hacked by sending them a ...
- 4,231
25
votes
6
answers
50k
views
Certificate Install without mandatory PIN lockscreen
Google Support says:
The type of lock that's acceptable may be predetermined by your system
administrator.
Where I can define what's acceptable? I can regenerate the certificate if needed.
So I ...
- 353
13
votes
6
answers
39k
views
On Android, how to disable Google Chrome's incognito mode
If you thought that disabling incognito mode was enough to protect your children, you're probably mistaken. Let me explain.
Dear readers: Disabling incognito mode may be completely insufficient.
...
10
votes
2
answers
15k
views
Apps install on their own
Every night for the past few days my phone installs a new app that I never saw/wanted/heard of before. It all started with AppCaster (Which I never installed on my phone, it just showed up one morning)...
- 438
9
votes
1
answer
3k
views
Attempting to brute force Android security pattern through TWRP via adb
Yesterday I somehow forgot the Android security pattern on my phone. Due to muscle memory I sort of know what it was, but can't figure out the true pattern. Therefore I'm attempting to brute force it ...
- 261
5
votes
7
answers
31k
views
how to add a custom lock for the recovery and/or bootloader?
Unlocking the bootloader and/or the recovery is very popular discussion across many devices. But doing so exposes a very obvious and inevitable issue with security!
An unlocked recovery means that no ...
- 450
24
votes
2
answers
4k
views
What Android sync'd data is encrypted?
With the release of the firesheep plug-in for firefox it has become trivial for website browsing on open Wi-Fi networks to be hijacked by 3rd party listeners.
Android offers the convenient auto-sync ...
- 1,014
20
votes
1
answer
8k
views
How does an app reads an OTP SMS without SMS permission?
I have recently installed an Android app from the Play Store.
While registering in it, I realized that it was able to read my message of OTP without even asking for my permission to read the message.
...
- 303
20
votes
3
answers
2k
views
When selling your phone, what steps should be taken to make sure that all personal data has been removed?
I am getting rid of my Samsung Galaxy S4 and want to know what steps I should take to make sure that private information has been deleted from the phone. I have removed the SD card and cleared all of ...
- 313
17
votes
7
answers
48k
views
Security options grayed out
I have my mobile phone (Samsung Galaxy S2) running on ICS. Recently I activated Microsoft Exchnage ActiveSync to connect to my corporate email. It disabled all the security options like 'Pattern ...
- 173
13
votes
2
answers
961
views
Does full device encryption protect my data from Google and the government?
Apple recently made waves within the tech community by refusing to comply with law enforcement in regards to accessing encrypted user data. Their statement was that they do not have the technical ...
- 233
13
votes
3
answers
10k
views
How can I make my phone/tablet ring remotely without a SIM card?
I appear to have lost my Streak somewhere in my apartment, and I can't call it since I don't have a SIM card in it. I've remotely installed Plan B just because, but unfortunately the GPS coordinates ...
- 50.5k
12
votes
2
answers
8k
views
Child-proofing an Android phone?
Is there a way (an app, or a special launcher, a set of apps with instructions) that allows turning an Android phone into a child-proof "only call parents" one?
Here are my main requirements (and ...
- 2,049
10
votes
3
answers
10k
views
deactivate PIN-request after airplane mode
When switching on the phone, one is by default asked to enter the SIM-PIN -- which is a good security measure, to prevent "strangers" from causing you costs. Now the same applies when returning from ...
Izzy♦
- 90.8k
8
votes
2
answers
14k
views
Connecting to VPN forces having secure screen lock [duplicate]
Possible Duplicate:
Transformer Prime, VPN and password protection
I noticed that creating a VPN connection in ICS forces me to use a secure screen lock. I want to have Slide method for my screen ...
- 215
2
votes
0
answers
477
views
Is there alternative to the Shred utility for Android?
There is such utility for Linux systems called shred. It writes files with random values several times and then also can write it with zeroes (to hide overwriting) and delete them so that files couldn'...
- 173
53
votes
4
answers
17k
views
Just how secure is a pattern lock?
I recently had a phone stolen. It's been replaced, I've changed my passwords, the phone company has shut down connectivity for the stolen one... I think I'm pretty much as safe as I can be.
However, ...
- 3,709
43
votes
12
answers
107k
views
How do I avoid the server-specified security policies for my work e-mail?
When I signed into my e-mail for work (we're on Microsoft Exchange) there were a number of server-specified security policies (See below) How do I avoid these?:
I just received a Nexus 7 and signed ...
- 791
27
votes
3
answers
265k
views
How can I stop being redirected to the App Store/Google Store by dodgy ad-scripts?
There are a load of sites that do this now, and it's really annoying:
I visit a content site on my Android device.
10-15 seconds after loading starts the site hangs for a few seconds.
Google play ...
- 381
21
votes
3
answers
5k
views
How do I secure/encrypt SD card data transparent to apps?
Are there any off-the-shelf options for securing the contents of an SD card so that files written by apps writing to SD are encrypted? If so, what is the best option?
I'm looking for something for ...
- 3,291
16
votes
3
answers
17k
views
How would you uninstall a rogue Home (Launcher) application?
If you were to install a Home Screen application that does not give you access to the System Settings screen (to go to Manage Applications), and also does not let you launch Apps (such as the Market ...
- 487
15
votes
0
answers
1k
views
Security risks of rooting your android smartphone [duplicate]
Possible Duplicate:
Are there any risks to rooting a device?
What are the security risks specific to rooting your android smartphone? Are there any security exploits available because you have a ...
- 251
15
votes
1
answer
7k
views
How do I protect my phone from malicious apps once it is rooted?
I rooted my phone.
Now if I use a Terminal Emulator such as Android Terminal Emulator, I noticed that I can can easily obtain root access without a password:
$ id
uid=10059(app_59) gid=10059(app_59) ...
- 988
15
votes
3
answers
50k
views
How can I override the Device Administrator security policy so that I can disable the lock screen?
On Android 2.2 Froyo, I added my Corporate Exchange Email account to the phone, however, the security policy set by the "Device Administrator" requires that I enter a 4-digit PIN at the lock screen ...
- 273
10
votes
4
answers
38k
views
How can I disable or password protect my device's 'factory reset' function?
Is there any way to prevent a factory reset, like password protection? I would basically like to protect my phone from resetting if it gets stolen.
- 101