Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
0
votes
0answers
54 views

What commands should I use to block three different ranges of ports, or to block all ports except two?

I'm new to iptables and I want to block some ports. I'm using a rooted Android phone. What commands are used to block three different ranges of ports or block all ports except two? I don't want to ...
0
votes
0answers
53 views

Firefox Android with password storage

Can you suggest a good solution how I can store my passwords secure with Firefox for Android? Firefox sync has no "cloud storage" which means I have no cloud backup. Keepass2Android with ...
1
vote
0answers
66 views

Why does LineageOS 17.1 on Android maintain 2 mac addresses?

I understand that LineageOS randomizes the phones wifi mac address - and thats fine. But on analysis of the traffic from the phone, it seems to have 2 mac addresses simultaneously, and both are on the ...
0
votes
0answers
90 views

Samsung Galaxy Note 10+ 5G - cellebrite mobile forensics data extractions - locked with pattern

I've got a locked Samsung Galaxy Note 10+ 5G (running the latest android 10 and patches) The phone is locked with a pattern (unknown) What are my chances of any data extraction with cellebrite or ...
1
vote
0answers
63 views

AOSP x86 adb secure

I'm trying to build a custom ROM with secure access via adb. My goal is to secure the android image so that it can only be accessed with a certain adb RSA key pair. When I build AOSP with 'user' ...
0
votes
0answers
45 views

Detect which type of SSL Pinning is being used on Android Applications

Is there a way to detect what the Android Application is using as SSL Pinning. Whether it is certificate Pinning , Public Key Pinning or Hash Pinning ? I am doing a study on local Android Applications ...
1
vote
1answer
174 views

With Android, does a factory reset truly reset the device to the same as it was when it left the factory (unlike an iPhone)?

When you reset an iPhone, my understanding is that the device does not truly get reset to how it was when it exited the factory. What about with an Android device? Does performing a factory reset on ...
2
votes
0answers
268 views

ADB - bypass lock screen

I am using Lineageos 17.1 on the FP3 (the phone is not rooted). I do know my screen pattern code (it is a 6x6 pattern), but I am not able to enter it correctly, because I disabled that the pattern is ...
1
vote
0answers
20 views

Prevent Wifi and mobile broadband from being turned off when phone is locked

On my old android 10 phone (an LG) if I pull down the shade when the phone is locked and try to turn off wifi or mobile broadband, it asks me for my password. My new phone doesn't do that. Is that a ...
1
vote
0answers
569 views

How to determine if an android application uses Trusted Execution Environment (TEE) and Secure Element (SE)?

I have gone through questions One and Two. But still I have an additional question. How do we find out that an android application uses Trusted Execution Environment (TEE) and Secure Element (SE). ...
1
vote
0answers
54 views

Can applications access users information without having permissions?

When i scan apps with Am pre_release Some apps have this access, which is in the photo. My question is, what is this access?  Can you explain about it first?  And in the second place While camera ...
0
votes
0answers
45 views

Can applications access users information without having ( camera , microphone or etc) permissions?

I recently became very suspicious of apps.  And a few questions have occupied my mind, please help me Is there any way that an application can access the camera without having the camera permission ...
1
vote
0answers
393 views

Are there any issues with allowing the KLMS Agent app (part of Samsung KNOX) to be restricted by Data Saver?

I use the "Data Saver" feature to extend battery life and to prevent/reduce apps from accessing the internet when the phone/tablet is sleeping and when they are not supposed to be running. ...
0
votes
0answers
52 views

How to determine default enabled permissions for for pre-installed applications?

Many Android apps that are pre-installed by manufacturers have extensive and intrusive requested permissions. When looking at the permissions of each app via Settings > Apps, some of the ...
2
votes
2answers
2k views

What are all these Google internet hosts (domains) and why is stripped-down Android connecting to all of them?

Technology users are faced with a challenge: Allowing our tech devices to work without them invading our privacy. Obviously choosing products carefully is a critical step. Unfortunately, the two main ...
1
vote
0answers
73 views

Non-native network interfaces

I have these strange non-native network interfaces popping up on my phone... and mind you, this is after factory resetting my phone 5 times in a row. Can anyone help me make sense of these? Instead of ...
2
votes
1answer
200 views

Can an app installed from the Google Playstore install another app with different permissions?

I installed an app for custom notifications from the Playstore. The app requires sensitive permissions (camera, contacts, and storage), but has no network access. When I selected a setting the app ...
1
vote
1answer
138 views

Is it possible for a phone to still be compromised/infected by malware or spyware even after a factory reset?

If yes then how can one ensure that its %100 wiped clean? Android 7 | rooted EDIT: Same question but how about when rom is flashed ?
1
vote
0answers
85 views

How to whitelist websites? [closed]

How would I whitelist so that I can only use certain websites in my browser?
2
votes
1answer
102 views

Google showing places I haven't been

I am shown on google that I have visited Liverpool and Cornwall both of which are 100's of miles away from where I live. Any ideas why? My Facebook was hacked could this be the same thing?
0
votes
1answer
84 views

Problem with a sdcard under Android 7.1.2 three partitions can not be mounted / used

Happy New Year! there is a problem with my sdcard under Android 7.1.2 (Custom Rom) (root=true, adb=possible). The vFat Partition can be used, but the rest is not mounted and can not be used. mmcblk1p1 ...
1
vote
1answer
38 views

What level of permeability is there between Android and installed apps?

I just installed Protonmail on my Android device, and I was wondering how much data can Android (Google, really) can get from my use of that app, or from any app in general for that matter. I write ...
2
votes
1answer
28 views

Utilizing an old Android as a security camera and saving footage to HDD [closed]

I would like to create a small security camera network utilizing devices I already have, namely Android phones. All phones can have a constant sources of charge, as well as be attached to my wifi ...
2
votes
0answers
20 views

Does ShareIt use the content we share?

In the TOS it seems they say that we give right to use our content.
6
votes
1answer
408 views

Updating Pixel after many months. Will I get all the missing monthly security patches?

Not a duplicate of this Are security patches only applied to the latest Android version? I have a Pixel 4a, Android 11, running November security update. For various reasons, I do not wish to apply ...
0
votes
0answers
59 views

How secure is your data in Android when an app is given access to storage, camera, contacts

I am just trying to understand that, these days most of the apps require access to things like camera, storage, contacts. Is there any data privacy link to read through for an app consumer to know ...
1
vote
1answer
56 views

Chrome, autofill, and biometric security

One of the recently added Android features is biometric-protected autofill. It should enable something similar to iOS, where credit card numbers and passwords are protected by a fingerprint or Face ID....
0
votes
0answers
38 views

Is the Android Emulator from Android Studio vulnerable to Dirty COW?

I want to try out the DirtyCOW Exploit in a Virtual Machine or an Emulator. I have made DirtyCOW run on some versions of Android-x86, with Android-x86 running in VirtualBox. I want to know if DirtyCOW ...
0
votes
1answer
508 views

Password-protected APK installation?

I am seeking ways to disable installing apps with APK, i.e. make the setting "Allow apps from unknown sources" password-protected or disable completely for user. Is there a way? Maybe it's ...
1
vote
0answers
46 views

Make my screen unlock pin longer than 31 digits

My question is pretty self-explaining. Currently I have a PIN number of maximum possible digits (31) that my Android 10 supports (phone is Huawei P20 Pro). Is there a way to make it longer than that? ...
2
votes
1answer
783 views

Is there a way for a website or app to view the contents of my internal storage without my permission?

I see there are a lot of articles about the restrictions imposed on JavaScript in Windows Chrome. It can't access the filesystem of a user without the user himself uploading it to the server of the ...
1
vote
0answers
109 views

What is the support timeline for Google Play System Updates (GPSU) from Project Mainline?

Since Android 9 more and more core components can be updated by Google by the Google Play System Updates (GPSU) that come from Project Mainline (https://www.xda-developers.com/android-project-mainline-...
1
vote
0answers
176 views

Is there alternative to the Shred utility for Android?

There is such utility for Linux systems called shred. It writes files with random values several times and then also can write it with zeroes (to hide overwriting) and delete them so that files couldn'...
1
vote
1answer
4k views

On Whatsapp can I know if I am in someone's contact list based on the "security code" messages?

Can I know if someone has me in their contacts based on the security code messages that are sent when there is a change or is that based on whether I have them in my contacts? I want to know if ...
0
votes
0answers
26 views

Lock computer USB connection with anther password

I'm looking for a way to lock computer USB connection with second password, not with the regular lock screen password but with a different password. Thus, people who already know the password of my ...
2
votes
0answers
333 views

Encryption: can't decrypt data after rom downgrade

I downgraded an Android 10 custom rom while I had encryption enabled (rom). Basically I dirty flashed a previous minor version of the rom via TWRP (with just a simple "wipe cache/dalvik"). ...
7
votes
1answer
2k views

APK signature verified but warns file "not protected by signature"?

I'm using apksigner to verify the authenticity of a Google Podcast apk that I downloaded from an apk mirror. This apk (and older versions) verifies successfully (v1/v2/v3) and returns exit code 0 but ...
1
vote
1answer
62 views

How can I make my rooted Android 7 phone as secure as possible for financial transactions?

The latest security update patches for my phone was in 2017. My phone is rooted. What steps can I take to make it as secure as possible to be able to safely use financial apps where I'd be transacting ...
4
votes
3answers
2k views

Is it possible to somehow understand from the logs what happened to the phone a month ago? Are there such logs?

I didn’t have access to my phone for a month, I’m afraid that I could have installed any software or hardware spyware. Is it possible to check it somehow by logs? Does the Android system keep logs for ...
0
votes
1answer
78 views

In AFWall+, how do you block everything by default?

I want the default to be blocked unless I specifically allow that app. I understand you can tick all what you want blocked or not. But, what I want is for any app that gets installed to be ...
1
vote
1answer
447 views

Is a rooted phone safe for phone banking?

My phone (Android 7) has been rooted for years. That means it hasn't updated in years. I'm wondering if it's safe to do financial transactions on it...like download my banks app and a bitcoin e-wallet....
5
votes
2answers
1k views

Are security patches only applied to the latest Android version?

I've got a Pixel phone from Google, but it really doesn't matter, I guess the question would apply to any AOSP-based device. They state that they provide 3 years of version updates and security ...
0
votes
0answers
38 views

How safe is my Nexus 6 with Android 7.1.1 and the possible latest update (Oct 5th 2017)?

I found my old Nexus 6. No SIM in it, just connects to the Internet via my home wifi. I've tried to catch the latest updates, upgrades, and security patches, then I realized, unless I doing something &...
4
votes
1answer
18k views

Screen Lock Service as a Device Administrator

Background: I was looking at the device administrators of my phone in the settings and saw a device administrator called "screen lock service". It's description is "Activating this ...
4
votes
1answer
1k views

How do I verify that the USB debugging key fingerprint is correct? [duplicate]

When I try to enable USB debugging on my Android device, I am prompted with this message: The computer's RSA key fingerprint is: FE:35:23:34:... I see the public key in ~/.android/adbkey.pub How can ...
1
vote
1answer
78 views

How to force a smartphone to update?

How come two Nokia 9 phones have the same model, phone service provider and location, but one of them insists there were no updates (neither security nor Android itself which should be 10, not 9, by ...
1
vote
0answers
17 views

why DAC isn't sufficient for Android that it needs MAC(selinux)

I learned that each app is assigned a separate UID so that a rogue app cannot access other apps data and system sensetive data and files. What's problem with this that they have to use MAC(selinux)
2
votes
0answers
161 views

Is there a way to receive security updates after vendor stops them, without compromising SafetyNet attestation?

Imagine the following situation: The vendor of my phone has stopped providing security patches for the stock OS. The HW is perfectly fine and powerful enough for years to come, so I'm definitely not ...
2
votes
0answers
802 views

Is it possible to have a custom ROM with a locked bootloader?

I just mention in-advance to please correct me if I'm mistaken on anything, I've a limited tech proficiency. I've a Samsung S9 (Android 10) and I wish to install an AOSP ROM (also on Android 10), but ...
0
votes
1answer
320 views

"Your Phone Companion" only works on unlocked phone

I do not know if this is a bug or a feature, but it does not make much sense. I have a Samsung S9, and I managed to connect it to my Windows 10 laptop. I can only start apps when my phone is unlocked, ...

1 2
3
4 5
24