Questions tagged [security]
For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android
507
questions with no upvoted or accepted answers
8
votes
1
answer
625
views
Unsafe certificate protection in Android?
Maybe I'm wrong. If so, please let me know.
Here is my question. I've followed the instructions here and installed my personal certificate stored in a pfx file (PKCS#12) in my Google Nexus (ICS 4.0.4)...
- 181
7
votes
1
answer
11k
views
Allow fingerprint unlock but require password after a certain time limit
Currently with a Samsung Galaxy S8, but I believe this is common to other devices, I can setup fingerprint unlock which requires a password when the device starts up or if I fail to scan my finger ...
- 71
7
votes
0
answers
728
views
Is it possible to crack encrypted device?
I have device powered by Qualcomm MSM8974AC Snapdragon 801 cpu and running Cyanogenmod 13 (6.0.1 android) rom with unlocked bootloader and TWRP (3.0) recovery.
ROM has security patch level December ...
- 71
6
votes
0
answers
2k
views
Exploiting Janus (CVE-2017-13156) - what do these error messages mean?
I am working on a school research project about the Janus vulnerability (CVE-2017-13156).
Janus is a vulnerability of the signature scheme v1 while installing APKs. I know this does not correspond ...
- 223
6
votes
0
answers
500
views
FBE - Why does each user get a separate DE key
I've been reading about how File-Based Encryption and Direct Boot work. There's one thing I don't understand.
According to https://developer.android.com/training/articles/direct-boot
Device ...
- 193
6
votes
1
answer
7k
views
Make Google Pay require unlocking for NFC payment?
I have installed Google Pay and NFC credit card payment is neat. However, I don't feel safe about it. What if someone snatches my phone, then pays with it before I notice, or after I notice but before ...
- 161
5
votes
1
answer
768
views
Prevent application to make silently install file(s) or making changes
'Request Install Packages' let's say if an app has this permission ex- facebook(Check it in playstore head to facebook then 'app permissions' and click 'see more'. I used to read articles related to ...
- 396
5
votes
0
answers
180
views
Is my device vulnerable to the SwiftKey update bug? (June 2015)
Quoth The Independent:
There are usually protections in place that stop hackers from performing what is called a “man in the middle attack”, by encrypting communication with the server, as well as ...
- 617
5
votes
1
answer
3k
views
How to encrypt an external SD card natively?
There are several questions regarding the possibility to encrypt an external SD card on Android. None of them are satisfactory. They either point to a third party solution (e.g. BoxCryptor, Cryptonite,...
- 51
4
votes
0
answers
191
views
How to disable Unknown Tracker Alerts for specific trackers?
Android warns you of unknown trackers following you without their owners. EG Apple Airtags and Life360 Tiles. This can warn you if someone has planted a tracker on you or your property without your ...
- 141
4
votes
0
answers
169
views
Is Amazon's Fire OS more or less secure than the latest Android OS?
I picked up a tablet from Amazon in a recent sale. I noticed the device (Fire HD 10 2021) is running Fire OS 7. (7.3.2.6 as of now) which is based on Android 9.0 (Pie). I have heard the tablets stay ...
- 151
4
votes
0
answers
684
views
ADB/PM command to disable data and wifi access for Apps
Is there a way via adb shell to disable an apps access to WiFi and Data? I'd like to turn off internet for all apps and then selectively turn it on for required apps.
I know the manual way by going to ...
- 141
4
votes
0
answers
928
views
Recovering data from Android 10 (forgotten PIN)
Long story short: I have forgotten the PIN to my Android device, as it wasn't being used for a while.
Steps that I have tried/am trying/planning to try:
Brute forcing - I have been trying to brute ...
4
votes
0
answers
2k
views
How to determine if an android application uses Trusted Execution Environment (TEE) and Secure Element (SE)?
I have gone through questions One and Two. But still I have an additional question.
How do we find out that an android application uses Trusted Execution Environment (TEE) and Secure Element (SE). ...
4
votes
0
answers
165
views
Replacing Malware System Apps with Clean Versions of Apps
I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions.
Background:
In many ...
- 41
4
votes
0
answers
370
views
Android phone lost, Data wipe after password change
Here's an urgent situation regarding phone robbery:
My android phone (note 8) gets robbed and as far as i know it has not lost its way to some general person. It was robbed by force, so people ...
- 41
4
votes
0
answers
396
views
What is tested in the Google Play Pre-Launch Security Report?
The Google Play store includes a pre-launch security scan in Pre Launch Report -> Security. I am trying to find out what it is actually testing for. Are there any resources that get into detail on ...
- 141
4
votes
1
answer
2k
views
How to use network interface as non-root user?
I want to communicate between my Android device and my Linux box over IP through the USB network interface mode. The device I'm using is a OnePlus One running CM12.1 nightly builds. It's rooted and ...
- 41
4
votes
0
answers
793
views
Nexus 5 WiFi problems
I believe it's somewhat well-known that the Nexus 5 has had more than a few hiccups with certain wifi networks. However, I'm not sure that the main reasons for wifi connectivity issues is as well ...
- 255
4
votes
1
answer
374
views
Does Android's implementation of SELinux's MAC inhibit apps with root privileges from accessing other app's data?
Starting with Android 4.4, SELinux's MAC is enforced. Does this mean that if an app somehow can get installed and exploit the kernel to get root privileges, that MAC will still prevent that app with ...
4
votes
2
answers
5k
views
How can I tell if my International Galaxy S3 is suffering from Sudden Death Syndrome? If it is, how can I fix it?
I have a 16GB International Samsung Galaxy S3 (XEF) running the latest firmware, 4.1.2 (yes, the Premium Suite update, I was thinking that this would've fixed it but it seems not) with baseband XXELKB....
- 41
4
votes
1
answer
4k
views
Does Wunderlist store data in the server in encrypted form?
How secure and private is Wunderlist? For example does it only transfer data in encrypted form but stores it unencrypted? I would like to be able to store passwords relating to work on my phone but am ...
- 1,795
3
votes
0
answers
80
views
Protecting google account password reset from device pin/password compromise?
Today I realized that by just knowing the phone PIN it is possible to reset the Google account password... doesn't matter what 2FA/Backup codes you configured.
For example, you can go under the ...
- 159
3
votes
0
answers
88
views
Remove/Change Android password
A friend gave me an old Android tablet (Medion Junior Tab S7322) which dates back into the Android 4.4 days and asked if I can get access to his pictures on the internal storage because she forgot her ...
- 131
3
votes
0
answers
85
views
Prevention of Android devices being hacked
I keep seeing media articles saying that smart phones etc are being hacked, particularly by NSO Pegasus. I would like to know how this is done. I'm particularly interested in how to protect against it....
- 231
3
votes
0
answers
2k
views
Disable "PIN required for additional security" prompt
I have a Pixel 4a, and I constantly have to re-enter the pin, even though it hasn't been more than 48/72 hours. My Pixel 4a currently has a pretty bulky case, making it unreasonable that the ...
- 131
3
votes
0
answers
2k
views
Is it possible using Yubikey as a login authenticator on lock screen?
This question was already well asked and answered in the negative back in 2017 (see at bottom). However, as I'm about to purchase an Android phone, I'm hoping things have changed. I'm a newbie to ...
- 31
3
votes
0
answers
131
views
Check for the existence of files without root privileges
How do apps check for the existence of files and folders on /data and /system partitions without having root privileges?
I know some games and apps do this for anticheat and security reasons.
3
votes
0
answers
239
views
Notification showing on my android without a specific App
I have a Xiaomi Note 9s phone updated with the latest security patched running
MIUI Global 12.0.4.0(RJWMIXM)
Android version: RKQ1.200826.002
Android Security Update: 2021-07-01
I am getting a ...
3
votes
0
answers
104
views
Checking if my second hand Android phone is safe: am I right?
First of all, I know that this question has been asked before, but I'd like to hear if the way I'm checking my "new" phone is safe. I know I'm probably overthinking things, but I just would ...
- 31
3
votes
0
answers
804
views
How to make Private DNS unchangeable?
Are there any way to make android private dns settings unchangeable?
I need app locker for android that password-protect private dns activity or class
3
votes
0
answers
398
views
Does android keystore and “Clear data” of the “Settings” app are related?
I am working on a system app where i am storing some sensitive data in EncryptedSharedPreference.
I realise that my app is not working as expected if I do clear data of android Settings app. That is ...
- 31
3
votes
0
answers
4k
views
How do I check if my Android SD is encrypted?
I can't remember if I encrypted it already or not. How do I verify that?
Under SETTINGS - SECURITY - ENCRYPTION, there is just "Encrypted phone", but nothing related to the SD card.
The SD is NOT ...
- 201
3
votes
0
answers
521
views
Tangerine app security warning?
I recently got the Essential phone and I started downloading all my apps back. I downloaded the Tangerine banking app, and I got this security warning as soon as I opened the app.
"It seems your ...
- 131
3
votes
2
answers
2k
views
Phone keeps prompting for pattern confirmation
About two weeks ago, my Motorola Droid Turbo on Android 5.1 Lollipop started popping up the confirm pattern screen for no apparent reason.
It happens like every 10-15 minutes whether I'm using the ...
- 81
3
votes
0
answers
251
views
Can't change lock screen to a non-password option
This is on a Galaxy Note 3.
On Kitkat, in order to access work email we had to install MobileIron, which is a horrible suite of supposedly secure apps. As part of the installation I had to define ...
3
votes
0
answers
120
views
Log what an application does and accesses
I'm a bit paranoid about the permissions that certain applications require to work on an Android phone. Specially the "Access to your storage" permission. What I'm scared of is if an application is ...
- 131
3
votes
1
answer
418
views
Secure Android browser
The desktop versions of Firefox and Chrome use Google’s Safe Browsing service to warn the users about known bad websites.
Looking at a Samsung handset running Android v5 I noticed that neither the ...
- 141
3
votes
0
answers
30
views
Safely buy a used mobile
Is there any step I need to take after buying a used Android phone from a stranger?
Is restoring the device to defaults enough?
The hardware should be fine; I'm talking more about the OS itself and ...
- 39
3
votes
0
answers
733
views
How to tell what app or process periodically sends SMS messages?
About a week ago I purchased a T-Mobile SIM card and activated it on a $3/mo prepaid program. This program requires you to load your account with $3 per month to keep it alive, and these include 30 ...
- 293
3
votes
0
answers
1k
views
Can an antivirus really stop the broadAnywhere threat?
I had a look at the diff where the broadAnywhere threat is fixed, and it's basically just mPendingIntent = PendingIntent.getBroadcast(this, 0, new Intent(), 0); replaced with:
Intent ...
- 131
3
votes
0
answers
439
views
ICS: external microsd storage card: can i use it with camera and not encrypt?
So, I just bought a microSD card for my Ice Cream Sandwich phone. I put it in, it's recognized. But it appears I must encrypt it before I can use it for the camera's storage, otherwise if it is not ...
- 31
3
votes
0
answers
1k
views
Wipe everything after failed decryption attempts, but make it usable?
I have CM10 running on my rooted Galaxy Nexus and I just enabled the disk encryption. However, I can't find any options what happens after a few failed attempts? I would like to reset and wipe my data ...
- 141
3
votes
3
answers
4k
views
How to avoid silent app installations
I have gone through this post Silent app installation wherein it clearly mentions it's highly impossible to self install the application without going through the whole installer proceedure.But when i ...
- 1,228
2
votes
0
answers
824
views
How to revoke all authorizations (to private data) given to Xiaomi in MIUI?
On Xiaomi Mi Note 10 there are three prompts asking for authorizations:
When opening Bereinigung (the stock cleaning app; I tried using that because I still can't delete caches with Xiaomi Mi Note 10)...
2
votes
0
answers
723
views
Strange message after wiping data/factory resetting on Pixel 6 device
Last night, I flashed my Pixel 6 phone because I want to move to Pixel 7. After flashing, I turned on the phone for a while, and then I used the Recovery >Wipe data/factory reset option. ...
- 21
2
votes
0
answers
41
views
Trojan downloaded
Not sure this is the best place to ask but I'll give it a shot...
My son clicked a link in a spam message on my phone which downloaded
Android/trojan.downloader.agent
Instantly kaspersky and ...
- 21
2
votes
0
answers
71
views
Can an Android app with device management and microphone permissions spy in background secretly?
As far as I know, since Android 12 an app needs to have a Foreground Service Worker (with an active permanent notification) to run in all the time without being stopped when no activity is in ...
- 401
2
votes
0
answers
89
views
Does Android Lolipop 5.1 get encrypted by itself upon first boot?
My doubts are,
Would an android device shipped with Lollipop 5.0 get encrypted itself upon first boot? I saw a lot of blogs saying Lolipop does not come with default encryption but in the official ...
- 21
2
votes
0
answers
106
views
"Auto Update: Security" apk in downloads section
I found an apk called "Auto Update: Security" in the downloads folder of my phone.
I wasn't able to access its details as every time I tried to do so the package installer would start, with ...
