Questions tagged [security]
For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android
1,247
questions
-2
votes
0
answers
16
views
Conversion of Security Key Pendrive to normal pendrive
So my father worked in a company and he used to have confidential information on his laptop so he used a pendrive to unlock his laptop.
The pendrive lights up with a red colour on connection to my ...
0
votes
1
answer
36
views
Is the Pixel 5 really EOL in october?
Iam using the Pixel 5 with original OS and currently on Android 13.
Reading here: https://endoflife.date/pixel the phone will not receive any further security updates from october on.
But Android 13 ...
- 43
0
votes
0
answers
22
views
updating 2FA for a defunct phone number
I moved an account from phone x to phone y and secured the account so that phone x had no access anymore. Next I enabled 2FA through the phone number on the new phone, phone y and discarded phone x. ...
1
vote
1
answer
118
views
How can I disable permission monitoring on Android 13?
I recently upgraded from a Samsung Galaxy S9+ to the S23 Ultra and noticed that it almost daily pushes notifications like this:
Settings:
Android System Intelligence got your location in the
...
- 21
3
votes
0
answers
38
views
Protecting google account password reset from device pin/password compromise?
Today I realized that by just knowing the phone PIN it is possible to reset the Google account password... doesn't matter what 2FA/Backup codes you configured.
For example, you can go under the ...
- 159
2
votes
1
answer
106
views
Is Samsung Knox really that great and how can I achieve near-Knox level security on a rooted device?
When I first started learning about installing custom ROMs like LineageOS, it wasn't long before I was made aware of the security implications involved, particularly with unlocking the bootloader. The ...
1
vote
0
answers
25
views
The Android system can access the microphone when it is used?
The android blocks multiple aplications using the microphone at same time, for example, but the internal apps or the system can have access to it even on use?
I'm asking this question because I want ...
- 11
0
votes
1
answer
26
views
Google On-device encryption Google Passwords
I recently decided to enhance my online security by changing all my passwords and activating Two-Factor authentication for most of the services I use. I updated my passwords in Google Password Manager ...
- 1
0
votes
1
answer
64
views
How to completely remove Google from an Android device?
So tired of Google running in the background even when I block it. Installing unauthorized apps. Monitoring and snooping. It's involved in many places and not security minded.
I am for privacy and I ...
- 11
0
votes
0
answers
32
views
How to avoid/disable Android removing permissions and data from unused apps? [duplicate]
The most annoying thing I know is the feature where Android removing permissions and data from unused apps. OK, fine they deem it a security thing, but I want it off. So annoying to have spent ten ...
- 101
0
votes
0
answers
41
views
Mysterious device
I see a device in my recent security activity:
New sign-in on sdk_gphone64_x86_64
North Carolina, USA · sdk_gphone64_x86_64
I also see it in my list of Google prompts on my 2 factor authentication ...
- 141
4
votes
2
answers
818
views
Can APK cause any harm on open (without installing)?
We downloaded some APK files and attempted to open them only to encounter the "There was a problem parsing the package" error. So it didn't even make through to the Install screen. However, ...
- 183
1
vote
0
answers
31
views
android automatically download bad apps
as you can see in the following picture
there are apps such as "Solitaire", "Ball Sort", "Count Masters", "Galaxy Attack" and many others that keep ...
- 111
0
votes
0
answers
42
views
Is there an endpoint to get Google Root Certificates list for verifying hardware-backed key pairs?
I would like to verify a hardware-backed key pair in my Java backend service.
According to the Verifying hardware-backed key pairs with Key Attestation page, I need to verify the attestation object ...
- 109
2
votes
0
answers
62
views
Remove/Change Android password
A friend gave me an old Android tablet (Medion Junior Tab S7322) which dates back into the Android 4.4 days and asked if I can get access to his pictures on the internal storage because she forgot her ...
- 121
0
votes
0
answers
34
views
Do apps like iMyFone LockWiper actually work?
I recently had my phone stolen and would like to know if I should change all my debit cards and other sensitive info. I want to know if is it possible to actually bypass the default lock screen and ...
- 143
4
votes
0
answers
90
views
Is Amazon's Fire OS more or less secure than the latest Android OS?
I picked up a tablet from Amazon in a recent sale. I noticed the device (Fire HD 10 2021) is running Fire OS 7. (7.3.2.6 as of now) which is based on Android 9.0 (Pie). I have heard the tablets stay ...
- 151
2
votes
0
answers
225
views
How to revoke all authorizations (to private data) given to Xiaomi in MIUI?
On Xiaomi Mi Note 10 there are three prompts asking for authorizations:
When opening Bereinigung (the stock cleaning app; I tried using that because I still can't delete caches with Xiaomi Mi Note 10)...
1
vote
0
answers
74
views
How do I know if files have been copied from my phone to a laptop via USB. Knowing I gave permission for file transfer
I connected my phone to someone's laptop so they could give me a certain file but I'm suspecting they used the opportunity to copy files from my phone to their device. Is there any chance a log is ...
- 11
4
votes
2
answers
567
views
Cannot log out of Gmail
On an Android phone I had to log in to my Gmail account to update an app via the "Play Store".
I noticed (to my extreme annoyance) all my emails appearing as notifications on the phone's ...
- 161
1
vote
1
answer
4k
views
McDonald's app showing "Your device did not pass our security check ..."
A client came to fix his phone because it is receiving this message when he opens the recently installed "McDonald's" app:
Your device did not pass our security check. Please check that you ...
- 228
1
vote
0
answers
219
views
Strange message after wiping data/factory resetting on Pixel 6 device
Last night, I flashed my Pixel 6 phone because I want to move to Pixel 7. After flashing, I turned on the phone for a while, and then I used the Recovery >Wipe data/factory reset option. ...
- 11
0
votes
0
answers
96
views
How can an app detect ADB being used (e.g. with HttpToolkits)?
I have an app that stops working (at the login screen) when I have my device connected via ADB using HttpToolkits to get traffic. It seems odd; how does the app know that the phone is being used with ...
- 1
0
votes
0
answers
32
views
What happens when Google decides an app is "bad"?
An Android 7 (Nougat) device that hadn't been used in a while (perhaps a few months) was recently turned on. That device has Nova Launcher Pro installed. It does not have external (microSD card) ...
2
votes
1
answer
318
views
Can any data be recovered without a password/PIN?
If someone doesn't know the password required on boot, is there a way to access the data on the device?
It should be encrypted, but I read about Samsung adding something called Maintenance Mode where ...
- 123
1
vote
0
answers
20
views
If an app has the permission "Draw over other apps", can the app see the content present on my screen? [duplicate]
So I recently installed an app called XSCamera which can basically record with the phone camera in the background. It requires the "Draw over other apps" permission to display a mini-preview ...
- 21
2
votes
2
answers
60
views
Most of the pages show "insecure connection" in Opera
I have changed some security settings in my Android yesterday (I don't remember which one). Today most of the pages show "insecure connection" in Opera. I cannot even go to youtubel.com
...
- 131
3
votes
0
answers
323
views
ADB/PM command to disable data and wifi access for Apps
Is there a way via adb shell to disable an apps access to WiFi and Data? I'd like to turn off internet for all apps and then selectively turn it on for required apps.
I know the manual way by going to ...
- 131
1
vote
0
answers
23
views
How to automatically block camera access after closing camera
Ever since Android added the camera and mic access shortcuts and the quick access menu, I've often found myself forgetting to click the 'block camera access' shortcut after I'm done taking a picture ...
- 131
1
vote
0
answers
59
views
hide profile picture for google voice messages
I have migrated my primary phone number to a google voice number. It caused some surprise to see my profile picture appear next to my message on someone else's phone. This number is used in a wide ...
- 41
2
votes
0
answers
33
views
Trojan downloaded
Not sure this is the best place to ask but I'll give it a shot...
My son clicked a link in a spam message on my phone which downloaded
Android/trojan.downloader.agent
Instantly kaspersky and ...
- 21
1
vote
0
answers
105
views
Hide main ui/launcher/profile on specific password
I'd like to have an option to hide my usual apps list, photos, etc on specific pass unlock.
So if I unlock with my usual pass - it is my usual device, if someone requires to unlock my device - I use ...
- 61
0
votes
0
answers
113
views
How does Android generate FBE Keys
I am trying to understand how FBE and metadata encryption works.
I read a lot of pages on FBE that it encrypts each file with different keys, and that those keys are encrypted and hashed with the Lock ...
- 69
0
votes
0
answers
54
views
Green Android camera notification
Since this morning, the green camera icon on the top right of the status bar appears. When I open this notification, it says "In use by Google". The problem is that I don't have any app ...
- 101
1
vote
0
answers
11
views
Auto lock if Smart Stay can't see my eyes open
Sometimes, while in bed, I will watch a movie or YouTube on my Samsung Galaxy S20 ultra. Sometimes I fall asleep and the movie will continue to play as I sleep. I don't want my son wandering in the ...
2
votes
0
answers
49
views
Can an Android app with device management and microphone permissions spy in background secretly?
As far as I know, since Android 12 an app needs to have a Foreground Service Worker (with an active permanent notification) to run in all the time without being stopped when no activity is in ...
- 331
0
votes
2
answers
237
views
Can a school wifi certificate track me at home?
At my school, when logging into wifi for the first time, we enter our ID & password into a normal wifi login page, then we download a certificate. I cannot confirm if the certificate changes ...
- 103
0
votes
0
answers
34
views
Should the layout of Android's "secure keyboard" be localized?
Some application use the "secure keyboard" of my ColorOS 12.1 (Android 12 customized by Oppo).
While my device is configured to use German language, the keyboard displayed in such apps uses ...
- 147
0
votes
0
answers
65
views
Auto factory reset - is this a general function of Android?
I want to install a software provided by my company but the IT admins only accept devices that support the "Auto factory reset" functionality (automatically perform a factory after if the ...
- 101
3
votes
1
answer
1k
views
Is it safe to give accessibility permission to an app?
So I use the app from Cleanbrowsing and gave the accessibility permission to it and saw that it can view my screen, action and inputs, perform actions and control the display.
Is this app even safe to ...
- 67
0
votes
0
answers
74
views
TPM (Trusted Platform Module) vs. TEE (Trusted Execution Environment) - can credentials be *stored* on both?
TPM is physically isolated from the rest of the system (i.e. it is a standalone chip on the mainboard), while TEE is a secure area of the main CPU.
The key function of both TPM and TEE is to do ...
1
vote
0
answers
20
views
FindMyDevice without having access to the device
This is a bizarre question to have to ask but: how am I supposed to use FindMyDevice if it requires my device to confirm it's me who's trying to find my device?
I recently lost my phone (I luckily got ...
- 111
2
votes
0
answers
300
views
I keep seeing a popup in Android: "Install now to control when your device updates" - is my phone compromised?
I am seeing this occasionally over more than one app (In this image, it is appearing over my calendar app). It appears without any prompting action on my part, which makes me suspicious. Furthermore, ...
- 121
1
vote
0
answers
505
views
Increase number of fingerprint attempts
Is there any way to increase the number of allowed fingerprint attempts before PIN etc is demanded? I'm comfortable using adb shell if necessary.
- 111
1
vote
0
answers
1k
views
Accessing An Android Device With Broken Screen Via ADB and Unauthorized Machine in 2022
I've done a lot of experimentation on this, but can't seem to get anywhere. I'm looking for guidance on recovering data from my broken Android phone(s). It seems like this is going to require some ...
- 51
0
votes
0
answers
280
views
Google activity showing things I didn't do
I have a Galaxy S10 Lite and I need some help because I really don't know what to do about this. I have looked up for a solution and can't find one anywhere. Since I got my phone last year I have had ...
- 1
1
vote
0
answers
131
views
FBE securely wipe all data
According to android documentation the FBE system has two different levels. Credential Encrypted (CE) storage and Device Encrypted (DE) storage.
Does a factory reset of an FBE phone reset the keys of ...
- 11
0
votes
1
answer
158
views
Pixel 6a does not show available Android security updates
On a Pixel 6a device, Android seems to have trouble finding the latest security updates.
On the one hand, it warns me under Settings->Security like this:
(!) Update this device
This device hasn't ...
- 484
1
vote
0
answers
30
views
If I turned off the wireless display while my phone was still connected to my neighbor's TV, would it automatically disconnect from it?
I accidentally connected my phone to my neighbor's TV.
I instantly turned off the wireless display, did my phone disconnect from his TV?
If I turned on the wireless display again, will his TV ...
- 11
1
vote
0
answers
399
views
HttpCanary target app uses a non system certificate
I'm looking for a way to bypass a target app using a non-system certificate. The HttpCanary app itself does give a 'solution' however it's incredibly unclear:
Goto Settings->HttpCanary root CA ...
- 11