Questions tagged [security]
For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android
1,246
questions
2
votes
1
answer
1k
views
Is there a way for a website or app to view the contents of my internal storage without my permission?
I see there are a lot of articles about the restrictions imposed on JavaScript in Windows Chrome. It can't access the filesystem of a user without the user himself uploading it to the server of the ...
- 21
1
vote
0
answers
211
views
What is the support timeline for Google Play System Updates (GPSU) from Project Mainline?
Since Android 9 more and more core components can be updated by Google by the Google Play System Updates (GPSU) that come from Project Mainline (https://www.xda-developers.com/android-project-mainline-...
- 111
1
vote
0
answers
344
views
Is there alternative to the Shred utility for Android?
There is such utility for Linux systems called shred. It writes files with random values several times and then also can write it with zeroes (to hide overwriting) and delete them so that files couldn'...
- 163
1
vote
1
answer
6k
views
On Whatsapp can I know if I am in someone's contact list based on the "security code" messages?
Can I know if someone has me in their contacts based on the security code messages that are sent when there is a change or is that based on whether I have them in my contacts?
I want to know if ...
- 11
0
votes
0
answers
32
views
Lock computer USB connection with anther password
I'm looking for a way to lock computer USB connection with second password, not with the regular lock screen password but with a different password. Thus, people who already know the password of my ...
- 95
2
votes
0
answers
436
views
Encryption: can't decrypt data after rom downgrade
I downgraded an Android 10 custom rom while I had encryption enabled (rom).
Basically I dirty flashed a previous minor version of the rom via TWRP (with just a simple "wipe cache/dalvik").
...
- 21
8
votes
1
answer
5k
views
APK signature verified but warns file "not protected by signature"?
I'm using apksigner to verify the authenticity of a Google Podcast apk that I downloaded from an apk mirror. This apk (and older versions) verifies successfully (v1/v2/v3) and returns exit code 0 but ...
- 237
1
vote
1
answer
73
views
How can I make my rooted Android 7 phone as secure as possible for financial transactions?
The latest security update patches for my phone was in 2017. My phone is rooted. What steps can I take to make it as secure as possible to be able to safely use financial apps where I'd be transacting ...
- 21
4
votes
3
answers
2k
views
Is it possible to somehow understand from the logs what happened to the phone a month ago? Are there such logs?
I didn’t have access to my phone for a month, I’m afraid that I could have installed any software or hardware spyware. Is it possible to check it somehow by logs? Does the Android system keep logs for ...
- 41
0
votes
1
answer
213
views
In AFWall+, how do you block everything by default?
I want the default to be blocked unless I specifically allow that app. I understand you can tick all what you want blocked or not. But, what I want is for any app that gets installed to be ...
- 21
1
vote
1
answer
689
views
Is a rooted phone safe for phone banking?
My phone (Android 7) has been rooted for years. That means it hasn't updated in years. I'm wondering if it's safe to do financial transactions on it...like download my banks app and a bitcoin e-wallet....
- 21
5
votes
2
answers
1k
views
Are security patches only applied to the latest Android version?
I've got a Pixel phone from Google, but it really doesn't matter, I guess the question would apply to any AOSP-based device. They state that they provide 3 years of version updates and security ...
- 51
0
votes
0
answers
58
views
How safe is my Nexus 6 with Android 7.1.1 and the possible latest update (Oct 5th 2017)?
I found my old Nexus 6. No SIM in it, just connects to the Internet via my home wifi.
I've tried to catch the latest updates, upgrades, and security patches, then I realized, unless I doing something &...
- 142
4
votes
1
answer
24k
views
Screen Lock Service as a Device Administrator
Background:
I was looking at the device administrators of my phone in the settings and saw a device administrator called "screen lock service". It's description is "Activating this ...
user332973
6
votes
1
answer
2k
views
How do I verify that the USB debugging key fingerprint is correct? [duplicate]
When I try to enable USB debugging on my Android device, I am prompted with this message:
The computer's RSA key fingerprint is:
FE:35:23:34:...
I see the public key in ~/.android/adbkey.pub
How can ...
- 231
1
vote
1
answer
84
views
How to force a smartphone to update?
How come two Nokia 9 phones have the same model, phone service provider and location, but one of them insists there were no updates (neither security nor Android itself which should be 10, not 9, by ...
- 245
1
vote
0
answers
38
views
why DAC isn't sufficient for Android that it needs MAC(selinux)
I learned that each app is assigned a separate UID so that a rogue app cannot access other apps data and system sensetive data and files.
What's problem with this that they have to use MAC(selinux)
- 11
2
votes
0
answers
215
views
Is there a way to receive security updates after vendor stops them, without compromising SafetyNet attestation?
Imagine the following situation:
The vendor of my phone has stopped providing security patches for the stock OS.
The HW is perfectly fine and powerful enough for years to come, so I'm definitely not ...
- 121
2
votes
0
answers
1k
views
Is it possible to have a custom ROM with a locked bootloader?
I just mention in-advance to please correct me if I'm mistaken on anything, I've a limited tech proficiency.
I've a Samsung S9 (Android 10) and I wish to install an AOSP ROM (also on Android 10), but ...
0
votes
1
answer
635
views
"Your Phone Companion" only works on unlocked phone
I do not know if this is a bug or a feature, but it does not make much sense.
I have a Samsung S9, and I managed to connect it to my Windows 10 laptop. I can only start apps when my phone is unlocked, ...
- 620
3
votes
0
answers
978
views
What is this device administrator called screen lock service? [duplicate]
I was looking at the device administrators of my phone in the settings and saw a device administrator called "screen lock service". It's description is "Activating this administrator ...
- 31
0
votes
1
answer
700
views
What type of hardware support is required for getting the widevine L1 level?
It s said that widevine L1 level requires hardware support so that it s impossible even for manufacturer to provide it through a system update.
But what exactly has to be done by the hardware?
- 407
0
votes
1
answer
395
views
How can I configure Android so that all Internet traffic goes through a VPN and is blocked if the VPN isn't activated, without rooting Android?
How can I configure Android so that all Internet traffic goes through a VPN and is blocked if the VPN isn't activated, without rooting Android?
- 2,244
1
vote
1
answer
46
views
Safe to share boot partition?
On XDA, at times I see users requesting for boot partitions of a particular version of stock ROM and some people helping out by uploading and linking them.
I am not sure if it is a good practice, ...
- 38.5k
0
votes
0
answers
225
views
import pem file containing multiple CA certs
Using Samsung S4, Android 5.0.1, not rooted.
Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
- 121
1
vote
1
answer
354
views
My android keeps telling me my lock password is wrong but it's correct
After rebooting my rooted, unencrypted, android phone, the lock screen keeps telling me my password is wrong. But I am very sure that the password is correct. Because I input this password once per ...
- 322
1
vote
0
answers
42
views
Is there a way to allow app permissions while not allowing them?
I have an app (android) I want to use for something minor, so it's not a need, just a want. All it's supposed to do is control some lights. But it's asking for every permission you can think of (...
Micah Bell
2
votes
0
answers
461
views
How to instantly wipe an Android phone in case of arrest?
A Belarusian friend asked me this, but I can't find anything on my own. Protesters in Belarus are beaten once arrested until they give up the pin code to the phone.
So, if he could give a pin code ...
- 121
1
vote
0
answers
58
views
Security of Solid Explorer Hash
I am not sure if this is the right place to ask, but how secure is checking file hash with Solid Explorer for Android?
I don't have computer access so it's my only option.
Does anyone know if it's a ...
- 11
0
votes
2
answers
259
views
Why would an app ask for location permission when configuring an IP camera?
Why would this android phone app for this IP camera need location services to be turned on before it gets set up?
Surely that's a security risk. If the camera company's database is ever hacked, an ...
- 121
0
votes
1
answer
2k
views
com.whatsapp_preferences.xml periodically gets overwritten how to prevent that from happening
on a magisk rooted Android 10 device
com.whatsapp_preferences.xml
( /data/data/com.whatsapp ? ... can't remember that path now )
has been updated with non default parameters as I needed but it ...
- 417
1
vote
0
answers
28
views
How to root CovrWare Android phone?
NOTE: This is a very specific question on manufacturer name of the Android phone I am talking about...
Hey, guys, I am needing to try and root a CovrWare manufacturer-made Android phone, from https://...
1
vote
1
answer
2k
views
I get the following message on my phone: "confirm if it's you recovering your account"
But I didn't do any recovery and of course I didn't press any button.
It happened already two times.
What does it mean? Does somebody is trying to hack my google account?
I have 2 factor google ...
- 151
0
votes
0
answers
40
views
Is it possible to have shell access to Trusted Certificates
I have an Android Application that launches Python via JNI. Inside of Python I have web requets that I make, some need to be secure. I can configure the APK to be able to access a User CA certificate, ...
- 101
2
votes
0
answers
38
views
Better Protection for Login Data on Firefox for Android?
Across the Desktop, Android and iOS versions of Google Chrome and Android, Firefox for Android is the only browser that allows viewing the list of saved passwords even when a master password is set. ...
Anon
-1
votes
1
answer
113
views
a sketchy person has my phone for half an hour. what should i look for? [closed]
Summary: what sketchy things, could someone do if they get your phone for half an hour. And could you do to find it out and protect yourself.
Luckily, nothing happened for me.
2
votes
0
answers
155
views
Forgot Authy password
I accidentally broke my OnePlus 5 which contained the recovery codes for my Instagram and Facebook, both were using Authy as their two factor authenticator. Thing is I apparently don't remember my ...
- 21
0
votes
0
answers
82
views
Ensuring that a deleted file cannot be recovered
A few months back, I had deleted a media file from my gallery. My phone wasn't encrypted at this point. Now, I wish to ensure that this file cannot be recovered in any way. What is the best way of ...
- 353
0
votes
0
answers
51
views
High battery usage (no wifi no apps no wireless)?
I've noticed that I lose about 20% battery each hour while my phone is unattended and offline. I check the battery settings and find that no apps are running.
The phone is rooted, and I'm wondering ...
- 579
0
votes
0
answers
70
views
Can I install replicant on a Galaxy A10e without bricking it?
I'm trying to UnGoogle my phone for privacy/security reasons, and from one source I heard that if you want to use a smartphone, you're better off getting a Pinephone running GrapheneOS / LineageOS. ...
0
votes
1
answer
532
views
Is Google Voice susceptible to hacking like regular MMS or Whatsapp messages?
I have been using Google voice in a public facing way so as to reduce the chance of receiving malware messages over SMS/MMS or Whatsapp.
But is it just as susceptible for someone to be able to sneak ...
- 131
1
vote
1
answer
14k
views
What can class 0 message (flash SMS) do to Android devices?
I'm using a Samsung phone and I recently got an anonymous message via Class 0 Message
Class 0 Message
URGENT MATTER ,CONTACT
ME MY EMAIL NOW
(email redacted)
From: (phone no. ...
- 11
0
votes
0
answers
155
views
"System" is trying to access Internet
I am using OnePlus 3T, Android 9. Recently I installed an app called "NoRoot Firewall" to prevent the apps from accessing the internet. I explicitly allowed and denied access to internet for some apps ...
- 101
0
votes
0
answers
146
views
Automatic downloads
I've noticed in several occasions that on mobile browsers (I suppose it happens also on desktop ones) downloads can be forced without user consent. I've studied the matter and I've learnt that this is ...
- 165
0
votes
1
answer
486
views
Can a blocked contact see any number changes?
I would like to ask, whether a blocked contact will receive an information,if I change my Viber phone number?
Is it possible to make the change by only informing a selected group of contacts or ...
- 3
1
vote
0
answers
49
views
Constantly changing app "shortlist"
I have a shortlist of five app icons at the bottom of my home screen, usually Phone, Messaging, Chrome, Google and Camera. These tend to remain constant (I've not seem them change).
When I swipe up ...
- 111
3
votes
0
answers
148
views
Replacing Malware System Apps with Clean Versions of Apps
I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions.
Background:
In many ...
- 31
1
vote
1
answer
277
views
how does disabling 'password at startup' works before file-based encryption?
Android 6 (before file based encryption):
after encrypting device and setting screen lock, i can choose an option 'require the PIN, password, or pattern at startup' or can i choose 'no thanks'. in ...
- 111
0
votes
0
answers
412
views
App from playstore run but same apk crashes on sideload install
On my noughat device, I have downloaded app from playstore, which is running great. Extract apk from install app, uninstall it and again succussfully install with package installer. But second time on ...
1
vote
0
answers
54
views
Are there any downsides to encrypting an Android device?
Besides requiring a lock screen, are there any downsides to encrypting an Android device (using the native encryption)?
For example:
is there a performance decrease?
is there a temperature increase?
...
