Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
-2 votes
0 answers
16 views

Conversion of Security Key Pendrive to normal pendrive

So my father worked in a company and he used to have confidential information on his laptop so he used a pendrive to unlock his laptop. The pendrive lights up with a red colour on connection to my ...
0 votes
1 answer
36 views

Is the Pixel 5 really EOL in october?

Iam using the Pixel 5 with original OS and currently on Android 13. Reading here: https://endoflife.date/pixel the phone will not receive any further security updates from october on. But Android 13 ...
  • 43
0 votes
0 answers
22 views

updating 2FA for a defunct phone number

I moved an account from phone x to phone y and secured the account so that phone x had no access anymore. Next I enabled 2FA through the phone number on the new phone, phone y and discarded phone x. ...
1 vote
1 answer
118 views

How can I disable permission monitoring on Android 13?

I recently upgraded from a Samsung Galaxy S9+ to the S23 Ultra and noticed that it almost daily pushes notifications like this: Settings: Android System Intelligence got your location in the ...
  • 21
3 votes
0 answers
38 views

Protecting google account password reset from device pin/password compromise?

Today I realized that by just knowing the phone PIN it is possible to reset the Google account password... doesn't matter what 2FA/Backup codes you configured. For example, you can go under the ...
  • 159
2 votes
1 answer
106 views

Is Samsung Knox really that great and how can I achieve near-Knox level security on a rooted device?

When I first started learning about installing custom ROMs like LineageOS, it wasn't long before I was made aware of the security implications involved, particularly with unlocking the bootloader. The ...
1 vote
0 answers
25 views

The Android system can access the microphone when it is used?

The android blocks multiple aplications using the microphone at same time, for example, but the internal apps or the system can have access to it even on use? I'm asking this question because I want ...
  • 11
0 votes
1 answer
26 views

Google On-device encryption Google Passwords

I recently decided to enhance my online security by changing all my passwords and activating Two-Factor authentication for most of the services I use. I updated my passwords in Google Password Manager ...
0 votes
1 answer
64 views

How to completely remove Google from an Android device?

So tired of Google running in the background even when I block it. Installing unauthorized apps. Monitoring and snooping. It's involved in many places and not security minded. I am for privacy and I ...
0 votes
0 answers
32 views

How to avoid/disable Android removing permissions and data from unused apps? [duplicate]

The most annoying thing I know is the feature where Android removing permissions and data from unused apps. OK, fine they deem it a security thing, but I want it off. So annoying to have spent ten ...
  • 101
0 votes
0 answers
41 views

Mysterious device

I see a device in my recent security activity: New sign-in on sdk_gphone64_x86_64 North Carolina, USA · sdk_gphone64_x86_64 I also see it in my list of Google prompts on my 2 factor authentication ...
  • 141
4 votes
2 answers
818 views

Can APK cause any harm on open (without installing)?

We downloaded some APK files and attempted to open them only to encounter the "There was a problem parsing the package" error. So it didn't even make through to the Install screen. However, ...
  • 183
1 vote
0 answers
31 views

android automatically download bad apps

as you can see in the following picture there are apps such as "Solitaire", "Ball Sort", "Count Masters", "Galaxy Attack" and many others that keep ...
0 votes
0 answers
42 views

Is there an endpoint to get Google Root Certificates list for verifying hardware-backed key pairs?

I would like to verify a hardware-backed key pair in my Java backend service. According to the Verifying hardware-backed key pairs with Key Attestation page, I need to verify the attestation object ...
2 votes
0 answers
62 views

Remove/Change Android password

A friend gave me an old Android tablet (Medion Junior Tab S7322) which dates back into the Android 4.4 days and asked if I can get access to his pictures on the internal storage because she forgot her ...
  • 121
0 votes
0 answers
34 views

Do apps like iMyFone LockWiper actually work?

I recently had my phone stolen and would like to know if I should change all my debit cards and other sensitive info. I want to know if is it possible to actually bypass the default lock screen and ...
  • 143
4 votes
0 answers
90 views

Is Amazon's Fire OS more or less secure than the latest Android OS?

I picked up a tablet from Amazon in a recent sale. I noticed the device (Fire HD 10 2021) is running Fire OS 7. (7.3.2.6 as of now) which is based on Android 9.0 (Pie). I have heard the tablets stay ...
  • 151
2 votes
0 answers
225 views

How to revoke all authorizations (to private data) given to Xiaomi in MIUI?

On Xiaomi Mi Note 10 there are three prompts asking for authorizations: When opening Bereinigung (the stock cleaning app; I tried using that because I still can't delete caches with Xiaomi Mi Note 10)...
1 vote
0 answers
74 views

How do I know if files have been copied from my phone to a laptop via USB. Knowing I gave permission for file transfer

I connected my phone to someone's laptop so they could give me a certain file but I'm suspecting they used the opportunity to copy files from my phone to their device. Is there any chance a log is ...
4 votes
2 answers
567 views

Cannot log out of Gmail

On an Android phone I had to log in to my Gmail account to update an app via the "Play Store". I noticed (to my extreme annoyance) all my emails appearing as notifications on the phone's ...
  • 161
1 vote
1 answer
4k views

McDonald's app showing "Your device did not pass our security check ..."

A client came to fix his phone because it is receiving this message when he opens the recently installed "McDonald's" app: Your device did not pass our security check. Please check that you ...
1 vote
0 answers
219 views

Strange message after wiping data/factory resetting on Pixel 6 device

Last night, I flashed my Pixel 6 phone because I want to move to Pixel 7. After flashing, I turned on the phone for a while, and then I used the Recovery >Wipe data/factory reset option. ...
0 votes
0 answers
96 views

How can an app detect ADB being used (e.g. with HttpToolkits)?

I have an app that stops working (at the login screen) when I have my device connected via ADB using HttpToolkits to get traffic. It seems odd; how does the app know that the phone is being used with ...
0 votes
0 answers
32 views

What happens when Google decides an app is "bad"?

An Android 7 (Nougat) device that hadn't been used in a while (perhaps a few months) was recently turned on. That device has Nova Launcher Pro installed. It does not have external (microSD card) ...
2 votes
1 answer
318 views

Can any data be recovered without a password/PIN?

If someone doesn't know the password required on boot, is there a way to access the data on the device? It should be encrypted, but I read about Samsung adding something called Maintenance Mode where ...
  • 123
1 vote
0 answers
20 views

If an app has the permission "Draw over other apps", can the app see the content present on my screen? [duplicate]

So I recently installed an app called XSCamera which can basically record with the phone camera in the background. It requires the "Draw over other apps" permission to display a mini-preview ...
2 votes
2 answers
60 views

Most of the pages show "insecure connection" in Opera

I have changed some security settings in my Android yesterday (I don't remember which one). Today most of the pages show "insecure connection" in Opera. I cannot even go to youtubel.com ...
3 votes
0 answers
323 views

ADB/PM command to disable data and wifi access for Apps

Is there a way via adb shell to disable an apps access to WiFi and Data? I'd like to turn off internet for all apps and then selectively turn it on for required apps. I know the manual way by going to ...
  • 131
1 vote
0 answers
23 views

How to automatically block camera access after closing camera

Ever since Android added the camera and mic access shortcuts and the quick access menu, I've often found myself forgetting to click the 'block camera access' shortcut after I'm done taking a picture ...
1 vote
0 answers
59 views

hide profile picture for google voice messages

I have migrated my primary phone number to a google voice number. It caused some surprise to see my profile picture appear next to my message on someone else's phone. This number is used in a wide ...
2 votes
0 answers
33 views

Trojan downloaded

Not sure this is the best place to ask but I'll give it a shot... My son clicked a link in a spam message on my phone which downloaded Android/trojan.downloader.agent Instantly kaspersky and ...
  • 21
1 vote
0 answers
105 views

Hide main ui/launcher/profile on specific password

I'd like to have an option to hide my usual apps list, photos, etc on specific pass unlock. So if I unlock with my usual pass - it is my usual device, if someone requires to unlock my device - I use ...
0 votes
0 answers
113 views

How does Android generate FBE Keys

I am trying to understand how FBE and metadata encryption works. I read a lot of pages on FBE that it encrypts each file with different keys, and that those keys are encrypted and hashed with the Lock ...
0 votes
0 answers
54 views

Green Android camera notification

Since this morning, the green camera icon on the top right of the status bar appears. When I open this notification, it says "In use by Google". The problem is that I don't have any app ...
  • 101
1 vote
0 answers
11 views

Auto lock if Smart Stay can't see my eyes open

Sometimes, while in bed, I will watch a movie or YouTube on my Samsung Galaxy S20 ultra. Sometimes I fall asleep and the movie will continue to play as I sleep. I don't want my son wandering in the ...
2 votes
0 answers
49 views

Can an Android app with device management and microphone permissions spy in background secretly?

As far as I know, since Android 12 an app needs to have a Foreground Service Worker (with an active permanent notification) to run in all the time without being stopped when no activity is in ...
0 votes
2 answers
237 views

Can a school wifi certificate track me at home?

At my school, when logging into wifi for the first time, we enter our ID & password into a normal wifi login page, then we download a certificate. I cannot confirm if the certificate changes ...
  • 103
0 votes
0 answers
34 views

Should the layout of Android's "secure keyboard" be localized?

Some application use the "secure keyboard" of my ColorOS 12.1 (Android 12 customized by Oppo). While my device is configured to use German language, the keyboard displayed in such apps uses ...
  • 147
0 votes
0 answers
65 views

Auto factory reset - is this a general function of Android?

I want to install a software provided by my company but the IT admins only accept devices that support the "Auto factory reset" functionality (automatically perform a factory after if the ...
  • 101
3 votes
1 answer
1k views

Is it safe to give accessibility permission to an app?

So I use the app from Cleanbrowsing and gave the accessibility permission to it and saw that it can view my screen, action and inputs, perform actions and control the display. Is this app even safe to ...
  • 67
0 votes
0 answers
74 views

TPM (Trusted Platform Module) vs. TEE (Trusted Execution Environment) - can credentials be *stored* on both?

TPM is physically isolated from the rest of the system (i.e. it is a standalone chip on the mainboard), while TEE is a secure area of the main CPU. The key function of both TPM and TEE is to do ...
1 vote
0 answers
20 views

FindMyDevice without having access to the device

This is a bizarre question to have to ask but: how am I supposed to use FindMyDevice if it requires my device to confirm it's me who's trying to find my device? I recently lost my phone (I luckily got ...
  • 111
2 votes
0 answers
300 views

I keep seeing a popup in Android: "Install now to control when your device updates" - is my phone compromised?

I am seeing this occasionally over more than one app (In this image, it is appearing over my calendar app). It appears without any prompting action on my part, which makes me suspicious. Furthermore, ...
1 vote
0 answers
505 views

Increase number of fingerprint attempts

Is there any way to increase the number of allowed fingerprint attempts before PIN etc is demanded? I'm comfortable using adb shell if necessary.
  • 111
1 vote
0 answers
1k views

Accessing An Android Device With Broken Screen Via ADB and Unauthorized Machine in 2022

I've done a lot of experimentation on this, but can't seem to get anywhere. I'm looking for guidance on recovering data from my broken Android phone(s). It seems like this is going to require some ...
  • 51
0 votes
0 answers
280 views

Google activity showing things I didn't do

I have a Galaxy S10 Lite and I need some help because I really don't know what to do about this. I have looked up for a solution and can't find one anywhere. Since I got my phone last year I have had ...
1 vote
0 answers
131 views

FBE securely wipe all data

According to android documentation the FBE system has two different levels. Credential Encrypted (CE) storage and Device Encrypted (DE) storage. Does a factory reset of an FBE phone reset the keys of ...
  • 11
0 votes
1 answer
158 views

Pixel 6a does not show available Android security updates

On a Pixel 6a device, Android seems to have trouble finding the latest security updates. On the one hand, it warns me under Settings->Security like this: (!) Update this device This device hasn't ...
1 vote
0 answers
30 views

If I turned off the wireless display while my phone was still connected to my neighbor's TV, would it automatically disconnect from it?

I accidentally connected my phone to my neighbor's TV. I instantly turned off the wireless display, did my phone disconnect from his TV? If I turned on the wireless display again, will his TV ...
  • 11
1 vote
0 answers
399 views

HttpCanary target app uses a non system certificate

I'm looking for a way to bypass a target app using a non-system certificate. The HttpCanary app itself does give a 'solution' however it's incredibly unclear: Goto Settings->HttpCanary root CA ...
  • 11

1
2 3 4 5
25