Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
0
votes
0answers
2k views

How can I disable the official YouTube app's incognito mode?

Preface: A warning for parents If you want to protect your kids, disabling Incognito mode is usually not enough. If your kids are under age 13, it's wise to use a good filter to block the YouTube app ...
-1
votes
2answers
60 views

Are these app permissions normal?

Can it be used to steal personal data or intercept/view online activity?
1
vote
1answer
63 views

Should I be worried about this strange notification from Delta?

I got a notification from the Fly Delta app that just says "test". The icon appears to be missing. Should I be concerned about this? I've uninstalled the Delta app, but I'm unsure if I need to do more....
4
votes
1answer
69 views

Should warnings about not charging your phone at airport/public usb ports be taken seriously?

There are many articles on the internet saying that charging at the usb ports available at the airport and public places can cause your phone to get hacked. Is there any any truth behind this? If ...
0
votes
0answers
4k views

“Certificate not secure” error on Samsung Email app on Note 8

I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email. Recently I went abroad and had to rely on ...
3
votes
1answer
4k views

Is there a way to root an Android phone without unlocking the bootloader?

I've tried almost any method to root my ASUS ZenFone Live, but no one seems to work. Also I only need root, no unlocked bootloader (don't want to wipe data) or custom recovery (not essential ATM).
4
votes
0answers
699 views

Exploiting Janus (CVE-2017-13156) - what do these error messages mean?

I am working on a school research project about the Janus vulnerability (CVE-2017-13156). Janus is a vulnerability of the signature scheme v1 while installing APKs. I know this does not correspond ...
1
vote
0answers
219 views

What's inside the Android A/B-Update payload.bin?

I am using Android 8 for an embedded device, with Android Verified Boot 2.0 secured via HW-keys, and A/B OTA update (no streaming). I want to make sure that the software on the device is tightly ...
0
votes
1answer
77 views

What private data can apps access without any specified permissions?

Let's say an app doesn't require any permissions at all. What could that app access that could be a potential privacy risk? Other app usage? List of installed apps? Check is my screen unlocked? Google ...
-2
votes
2answers
213 views

Does the use of Android One remove the risk of OEM spying?

China is forcing tourists to install text-stealing malware at its border. Also, U.S. intelligence officials imply that Huawei, ZTE devices aren't safe for consumers (even in the West). Some ...
0
votes
0answers
51 views

Help with compromised phone Android 7.0

I want to ask if there's any way I can get rid of whatever's allowing my phone to be unlocked easily without any resetting or Google account? My phone has been messed with and now it keeps getting ...
3
votes
1answer
476 views

Can a virus/spyware install itself on a system partition remotely?

If I install malicious app accidentally can it copy itself onto the system partition? Or if a hacker gains access to my phone remotely can he install spyware onto the system partition? I have read ...
9
votes
4answers
28k views

How to protect my Wi-Fi password from being displayed by Android phones when sharing it with QR code?

I would like to know if there is any workaround to protect or hide my TP-LINK Wi-Fi router password from being displayed on phones using Xiaomi (Redmi) phones. If we go to Wi-Fi in a Redmi phone and ...
2
votes
1answer
3k views

How do I connect to 802.1x EAP Wi-Fi network from an Android 10 device?

My Wi-Fi uses 802.1x EAP with TLS. It works well with the old Android devices, but an Android 10 device pretends that it's trying to connect, and a few seconds later marks the connection as disabled. ...
2
votes
1answer
3k views

How to secure phone for repair shop?

I've been an android user for many years and so far I've been lucky enough not to need to have a phone repaired by a shop, so I'd never considered this problem until recently. I had to give my Galaxy ...
3
votes
1answer
1k views

What is a “synthetic password” and how is it used by Android?

On a first-generation Pixel that is running Pie, in locksettings.db there is a field named sp-handle that contains a 64-bit value. sp is an abbreviation for "synthetic password". Under /data/system_de/...
1
vote
1answer
3k views

SELinux always set to permissive, how to set enforcing permanently?

I flash a custom ROM to my HTC B2UL. The ROM, by default, has the SELinux policy set to Permissive instead of Enforcing. I can use adb shell setenforce 1 to make SElinux enforcing. But after reboot, ...
0
votes
0answers
590 views

AFWall+ not blocking consistently

I'm running a rooted pixel 3 (Magisk) with the "liboemcrypt disabler" module for running Netflix, Magisk Hide and the dg.db edit to disable attestation for running Google Pay. The firewall will work ...
1
vote
0answers
107 views

How does an app (e.g. Whatsapp) automatically detect when the phone receives a 2FA SMS verification code without being granted SMS read permissions? [duplicate]

When installing some apps (for example Whatsapp) the user is required to receive a verification code on the phone via SMS. I have noticed that some apps automatically verify this code as soon as the ...
0
votes
1answer
69 views

My android phone is often getting affected with virus

My problem : Hello friends. I use Asus zenfone go T500 android phone. My problem is, my phone often gets affected by some kind of virus which sometimes installs some chinese apps without my knowledge ...
1
vote
0answers
264 views

Android : how to remove the downloaded android update

I have a securities concern. I installed a VPN software on my android and just after (the next day) android asks me do install an update (that is already downloaded via the VPN). I don't fully trust ...
0
votes
1answer
76 views

Why can't I change my password in system settings? Nexus 6p Resurrection Remix Pie

After entering the wrong password too many times in VPN settings, I can't enter my password in settings. Whenever I do, I get sent back to the previous page. I can't even change my password!
0
votes
1answer
105 views

Always require PIN to unlock device

Is there any way to always require the user to enter the PIN (instead of fingerprint) to unlock the device? It seems that as soon as you add a fingerprint to the phone, now it no longer requires the ...
0
votes
0answers
66 views

I found apps that I have not installed. How can I investigate this?

There are 6 apps on my phone that I haven't explicitly or implicitly installed. Most likely they were installed today, as they happened to get on the first screen/page, so I immediately noticed them. ...
1
vote
1answer
2k views

Is There A Mobile Hotspot App With A Firewall to Block Incoming Connections?

I've been using the Android mobile hotspot to get an Internet connection while traveling. The stock hotspot is fine for my laptop which is firewalled, but there are a few devices (smart TV, game ...
0
votes
1answer
125 views

How do I get a hacker out of my phone?

The other day my phone number was added to my Google account, data was turned on and off. Different things have been happening. I have a LG V35 and it has an LG VPN section and when I check the log. ...
0
votes
1answer
313 views

How do I prevent my phone from restarting after a System Update?

Phone: Mobicel TRENDY_LITE Android: 8.1.0 For about two days now, I have been receiving many Security and System Updates. Every time an update is ready, my phone restarts without permission. After ...
0
votes
1answer
97 views

Remove the lock for the app

I installed one particular app two months ago. When I opened it the first time, a popup opened with a suggestion to enable the screen lock pin. And I enabled the screen lock. From that time whenever I ...
0
votes
2answers
861 views

Logging off viber account on my stolen phone

I lost my phone last Friday, May 31. I was able to get already a replacement SIM card for me to use the same no. again for my new phone now. My Facebook was already hacked yesterday since my FB app in ...
1
vote
0answers
61 views

Can not select secure screen lock option on Samsung Galaxy s8+

I am trying to set my screen lock to pattern/pin/password but it reverts back to a non-secure option (swipe/none). I have tried: Clearing cache Clearing credentials Removing Nova-launcher I'm all ...
0
votes
2answers
348 views

Cannot add “Amazfit Bip” watch as a “trusted device”

I've got a ZTE Axon 7 phone, and it generally works fine. I also have an Amazfit "Bip" watch, and I've successfully paired it with the phone via Bluetooth. However, when I try to add the watch as a "...
0
votes
0answers
1k views

App Installation “blocked by your IT admin”? (Galaxy Note 8)

I use YMusic to listen to music/audio books, which is an outsider app from xda-developers. When I tried to install an update, I got the message below, as if YouTube is preventing me from installing ...
6
votes
1answer
3k views

Decrypting microSD card on another Android device or desktop computer

I'm looking for a solution that would allow to encrypt external microSD card with the following conditions: external microSD card is not merged with the internal storage; encrypted external microSD ...
2
votes
0answers
86 views

Can I secure my android phone from being hacked while hosting a website?

I have been able to host a website of my own using "apache http server" app from my android adjoining with "termux" app using serveo as ssh tunneling. Can I make my phone more secure, so that it can ...
1
vote
1answer
2k views

How to set password request for booting the smartphone?

How can I set the phone so it requests to unlock the screen before starting up? Earlier I had to unlock the phone so it starts up but now it boots without unlocking (and I didn't change anything in ...
2
votes
2answers
391 views

WhatsApp Messenger zero-day exploit: How to upgrade?

It turns out that WhatsApp Messenger is affected by an exploitable buffer overflow vulnerability, which can be used to take over the phone with "zero clicks", by placing a call using ...
1
vote
1answer
97 views

End-to-End Encryption IMAP client

I recently discovered that Outlook for Android uses an intermediate server for IMAP connections, meaning that: mail is accessed in plain-text by a third-party credentials are known in plain-text by a ...
0
votes
1answer
119 views

How to apply the latest security patches on Nokia 3.1?

I've a Nokia 3.1 with build number 00WW_2_680_SP02. When I run Check for updates, I have the message: Your system is up to date Android version: 8.1.0 Security patch level 1: 1 February 2019 But ...
0
votes
1answer
735 views

How do I set up erase and secure?

My phone was stolen so I tried to erase from Samsung Device Manager but it just sends an erase instruction which I don't know whether the person who turns my phone on will be able to just stop from ...
8
votes
1answer
2k views

Attempting to brute force Android security pattern through TWRP via adb

Yesterday I somehow forgot the Android security pattern on my phone. Due to muscle memory I sort of know what it was, but can't figure out the true pattern. Therefore I'm attempting to brute force it ...
0
votes
0answers
756 views

How to create Android sepolicy based on the denial “execute_no_trans”?

I am trying to execute my script /vendor/bin/init.inmod.sh using below method: Script init.inmod.sh: #!/shebang??? /vendor/bin/test_disp hdcp disable In vendor specific .rc file: on ??? start ...
0
votes
1answer
78 views

Sensitive information in the About screen [closed]

Which of the following information from the About screen (Settings -> System -> About) is considered sensitive and shouldn't be shared publicly? IMEI IP address Wi-Fi MAC address Bluetooth address ...
0
votes
0answers
120 views

Android asks to re-enter WiFi passwords. Is my phone compromised?

I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
1
vote
0answers
215 views

Marshmallow: Adding system-wide custom root certificate

On Android 6 if I move my own root CA from /data/misc/user/0/cacerts-added to /system/etc/security/cacerts/ it doesn't work anymore. It is in the system list and active, but my browser says ...
1
vote
2answers
4k views

“Device Admin” apps are asking for permission to erase my data after failed login attempts! How can I confirm?

I was about to install the Outlook app on my phone, when it asked me to activate it as a device admin. (See image below): I'm sure few people read the whole warning. One part greatly concerned me: ...
0
votes
1answer
587 views

Chrome - unprompted auto-download of files after opening the browser - bug or something else?

Upon opening google chrome on android, it suddenly downloaded (unprompted by me) a jpeg, as well as a "seed" file. After scanning both files with the mobile version of kaspersky, i opened the jpeg ...
0
votes
2answers
49 views

Security question incoming calls

I've got an Nokia 6 with Pie! How do I stop others from answering my calls, or more correct, how do I stop incoming calls from opening my phone?? Everytime there's an incoming call, all security ...
2
votes
2answers
2k views

Revoking Bluetooth permission from all apps?

I noticed that my phone silently enables bluetooth when screen turns off. When phones remains inactive for few minutes and I click unlock button I can see bluetooth indicator showing up for around 1-2 ...
-1
votes
2answers
177 views

How do I safely flash a new rom on an infected android phone? [duplicate]

Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
0
votes
1answer
243 views

Link between device state & user settable root of trust

I am (still) trying to understand exactly how verified boot works and I am wondering what happens when a user-settable root of trust is used by the device. As said here: If the device is LOCKED, ...

1 2 3
4
5
23