Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
0
votes
0answers
58 views

How secure is your data in Android when an app is given access to storage, camera, contacts

I am just trying to understand that, these days most of the apps require access to things like camera, storage, contacts. Is there any data privacy link to read through for an app consumer to know ...
1
vote
1answer
41 views

Chrome, autofill, and biometric security

One of the recently added Android features is biometric-protected autofill. It should enable something similar to iOS, where credit card numbers and passwords are protected by a fingerprint or Face ID....
0
votes
0answers
31 views

Is the Android Emulator from Android Studio vulnerable to Dirty COW?

I want to try out the DirtyCOW Exploit in a Virtual Machine or an Emulator. I have made DirtyCOW run on some versions of Android-x86, with Android-x86 running in VirtualBox. I want to know if DirtyCOW ...
0
votes
1answer
111 views

Password-protected APK installation?

I am seeking ways to disable installing apps with APK, i.e. make the setting "Allow apps from unknown sources" password-protected or disable completely for user. Is there a way? Maybe it's ...
1
vote
0answers
37 views

Make my screen unlock pin longer than 31 digits

My question is pretty self-explaining. Currently I have a PIN number of maximum possible digits (31) that my Android 10 supports (phone is Huawei P20 Pro). Is there a way to make it longer than that? ...
2
votes
1answer
399 views

Is there a way for a website or app to view the contents of my internal storage without my permission?

I see there are a lot of articles about the restrictions imposed on JavaScript in Windows Chrome. It can't access the filesystem of a user without the user himself uploading it to the server of the ...
1
vote
0answers
52 views

What is the support timeline for Google Play System Updates (GPSU) from Project Mainline?

Since Android 9 more and more core components can be updated by Google by the Google Play System Updates (GPSU) that come from Project Mainline (https://www.xda-developers.com/android-project-mainline-...
0
votes
0answers
19 views

Add clock to secure folder

I have a Samsung J6 2018 and I want to add Clock to Secure folder to prevent someone from dismissing my morning alarm. However, when I go to the secure folder, I can't find the Clock app, but I can ...
1
vote
0answers
127 views

Is there alternative to the Shred utility for Android?

There is such utility for Linux systems called shred. It writes files with random values several times and then also can write it with zeroes (to hide overwriting) and delete them so that files couldn'...
1
vote
1answer
244 views

On Whatsapp can I know if I am in someone's contact list based on the “security code” messages?

Can I know if someone has me in their contacts based on the security code messages that are sent when there is a change or is that based on whether I have them in my contacts? I want to know if ...
0
votes
0answers
26 views

Lock computer USB connection with anther password

I'm looking for a way to lock computer USB connection with second password, not with the regular lock screen password but with a different password. Thus, people who already know the password of my ...
2
votes
0answers
212 views

Encryption: can't decrypt data after rom downgrade

I downgraded an Android 10 custom rom while I had encryption enabled (rom). Basically I dirty flashed a previous minor version of the rom via TWRP (with just a simple "wipe cache/dalvik"). ...
0
votes
0answers
23 views

WhatsApp cannot receive any broadcast

I am using the latest version of WhatsApp . for some reason I still can't understand people cannot send me broadcast even though they are in my contact list ( & I am also in their ) . however ...
6
votes
1answer
1k views

APK signature verified but warns file “not protected by signature”?

I'm using apksigner to verify the authenticity of a Google Podcast apk that I downloaded from an apk mirror. This apk (and older versions) verifies successfully (v1/v2/v3) and returns exit code 0 but ...
0
votes
0answers
57 views

Checking Android Certificates

I recently purchased a Galaxy A51. I noticed certificates that were located in the Credntial Storage in User Certificates. 10164_KNOX_Enhacened_Attestation Enhacened_Attestation_SSL FindMyMobile Are ...
0
votes
0answers
27 views

How to Enable Bluetooth on my Device or Browser

I am trying to log into Gmail by making my Phone a Security Key Below are the specifics Samsung Galaxy J3 Prime (SM-J327T1) Android Version 7 I get following error whether I use Brave or Chrome ...
1
vote
1answer
56 views

How can I make my rooted Android 7 phone as secure as possible for financial transactions?

The latest security update patches for my phone was in 2017. My phone is rooted. What steps can I take to make it as secure as possible to be able to safely use financial apps where I'd be transacting ...
0
votes
0answers
32 views

Why does SElinux deny `setcon` only after the ART is running?

I'm writing a JNI application that changes user & process-context to debug other apps. The user is changed with seteuid and the context is changed with setcon or selinux_android_setcon. Originally ...
4
votes
3answers
2k views

Is it possible to somehow understand from the logs what happened to the phone a month ago? Are there such logs?

I didn’t have access to my phone for a month, I’m afraid that I could have installed any software or hardware spyware. Is it possible to check it somehow by logs? Does the Android system keep logs for ...
0
votes
1answer
38 views

In AFWall+, how do you block everything by default?

I want the default to be blocked unless I specifically allow that app. I understand you can tick all what you want blocked or not. But, what I want is for any app that gets installed to be ...
1
vote
1answer
120 views

Is a rooted phone safe for phone banking?

My phone (Android 7) has been rooted for years. That means it hasn't updated in years. I'm wondering if it's safe to do financial transactions on it...like download my banks app and a bitcoin e-wallet....
0
votes
0answers
32 views

If your phone was compromised by a government body, how would you return it to it's original state?

Say your phone was confiscated and consequently compromised, how would you ensure that it is no longer bugged?
4
votes
2answers
848 views

Are security patches only applied to the latest Android version?

I've got a Pixel phone from Google, but it really doesn't matter, I guess the question would apply to any AOSP-based device. They state that they provide 3 years of version updates and security ...
0
votes
0answers
56 views

MI Security App Scanner

I had to reset my redmi note 9 pro phone recently due to an issue but now my apps aren't being scanned before installing from google playstore. I have checked the options is on in security settings in ...
0
votes
0answers
278 views

How to sniff android app connected URLs

I want to intercept a traffic and found out some streaming URLs from an android app. When I tried to use Packet Capture, the app says "please turn off VPN connection" once started. So I can'...
0
votes
0answers
24 views

How safe is my Nexus 6 with Android 7.1.1 and the possible latest update (Oct 5th 2017)?

I found my old Nexus 6. No SIM in it, just connects to the Internet via my home wifi. I've tried to catch the latest updates, upgrades, and security patches, then I realized, unless I doing something &...
0
votes
0answers
82 views

Chromium-based browsers can download without storage permission

I just installed Brave browser, and it looks like the browser can download files into the Downloads folder without being granted the Storage permission. I have not previously granted it, and it does ...
3
votes
1answer
11k views

Screen Lock Service as a Device Administrator

Background: I was looking at the device administrators of my phone in the settings and saw a device administrator called "screen lock service". It's description is "Activating this ...
3
votes
1answer
542 views

How do I verify that the USB debugging key fingerprint is correct? [duplicate]

When I try to enable USB debugging on my Android device, I am prompted with this message: The computer's RSA key fingerprint is: FE:35:23:34:... I see the public key in ~/.android/adbkey.pub How can ...
0
votes
0answers
35 views

Android SmartLock - Proximity to home wifi

I have seen other topics similar to this that are locked to further comments but the conversation goes way sideways. The issue is whether I can have my phone unlocked when I'm within range of my home ...
1
vote
1answer
64 views

How to force a smartphone to do update?

How come two Nokia 9 phones have the same model, phone service provider and location, but one of them insists there were no updates (neither security nor Android itself which should be 10, not 9, by ...
1
vote
0answers
13 views

why DAC isn't sufficient for Android that it needs MAC(selinux)

I learned that each app is assigned a separate UID so that a rogue app cannot access other apps data and system sensetive data and files. What's problem with this that they have to use MAC(selinux)
2
votes
0answers
108 views

Is there a way to receive security updates after vendor stops them, without compromising SafetyNet attestation?

Imagine the following situation: The vendor of my phone has stopped providing security patches for the stock OS. The HW is perfectly fine and powerful enough for years to come, so I'm definitely not ...
1
vote
0answers
29 views

What are some good security practices to take on a newly rooted Android phone and improvise further

I've managed to root my Mediatek Android smartphone using Magisck. I've managed to set up Afwall+ for now and was wondering how to further harden this device. If you have a smartphone with root ...
2
votes
0answers
475 views

Is it possible to have a custom ROM with a locked bootloader?

I just mention in-advance to please correct me if I'm mistaken on anything, I've a limited tech proficiency. I've a Samsung S9 (Android 10) and I wish to install an AOSP ROM (also on Android 10), but ...
0
votes
1answer
152 views

“Your Phone Companion” only works on unlocked phone

I do not know if this is a bug or a feature, but it does not make much sense. I have a Samsung S9, and I managed to connect it to my Windows 10 laptop. I can only start apps when my phone is unlocked, ...
3
votes
0answers
869 views

What is this device administrator called screen lock service? [duplicate]

I was looking at the device administrators of my phone in the settings and saw a device administrator called "screen lock service". It's description is "Activating this administrator ...
0
votes
1answer
193 views

What type of hardware support is required for getting the widevine L1 level?

It s said that widevine L1 level requires hardware support so that it s impossible even for manufacturer to provide it through a system update. But what exactly has to be done by the hardware?
0
votes
1answer
77 views

How can I configure Android so that all Internet traffic goes through a VPN and is blocked if the VPN isn't activated, without rooting Android?

How can I configure Android so that all Internet traffic goes through a VPN and is blocked if the VPN isn't activated, without rooting Android?
1
vote
1answer
31 views

Safe to share boot partition?

On XDA, at times I see users requesting for boot partitions of a particular version of stock ROM and some people helping out by uploading and linking them. I am not sure if it is a good practice, ...
0
votes
0answers
81 views

import pem file containing multiple CA certs

Using Samsung S4, Android 5.0.1, not rooted. Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
1
vote
1answer
166 views

My android keeps telling me my lock password is wrong but it's correct

After rebooting my rooted, unencrypted, android phone, the lock screen keeps telling me my password is wrong. But I am very sure that the password is correct. Because I input this password once per ...
1
vote
0answers
41 views

Is there a way to allow app permissions while not allowing them?

I have an app (android) I want to use for something minor, so it's not a need, just a want. All it's supposed to do is control some lights. But it's asking for every permission you can think of (...
2
votes
0answers
140 views

How to instantly wipe an Android phone in case of arrest?

A Belarusian friend asked me this, but I can't find anything on my own. Protesters in Belarus are beaten once arrested until they give up the pin code to the phone. So, if he could give a pin code ...
1
vote
0answers
35 views

Security of Solid Explorer Hash

I am not sure if this is the right place to ask, but how secure is checking file hash with Solid Explorer for Android? I don't have computer access so it's my only option. Does anyone know if it's a ...
0
votes
2answers
81 views

Why would an app ask for location permission when configuring an IP camera?

Why would this android phone app for this IP camera need location services to be turned on before it gets set up? Surely that's a security risk. If the camera company's database is ever hacked, an ...
0
votes
1answer
855 views

com.whatsapp_preferences.xml periodically gets overwritten how to prevent that from happening

on a magisk rooted Android 10 device com.whatsapp_preferences.xml ( /data/data/com.whatsapp ? ... can't remember that path now ) has been updated with non default parameters as I needed but it ...
1
vote
0answers
26 views

How to root CovrWare Android phone?

NOTE: This is a very specific question on manufacturer name of the Android phone I am talking about... Hey, guys, I am needing to try and root a CovrWare manufacturer-made Android phone, from https://...
1
vote
1answer
1k views

I get the following message on my phone: “confirm if it's you recovering your account”

But I didn't do any recovery and of course I didn't press any button. It happened already two times. What does it mean? Does somebody is trying to hack my google account? I have 2 factor google ...
0
votes
0answers
24 views

How do I remove an account from the Lastpass authenticator app?

I don't want the app cluttered with old codes that I am no longer using but there seems to be no way to remove a code. The Lastpass/LogMeIn online support site also doesn't appear to be any help in ...

1
2
3 4 5
23