Questions tagged [security]

For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android

Filter by
Sorted by
Tagged with
1
vote
1answer
647 views

How to delete my personal files retained by an app?

I'm using Android Excel and Word apps on a non-rooted Galaxy Note 8. Over the past months I've opened a couple of files from external sources (email and SD card), but was shocked to find these files ...
2
votes
2answers
106 views

Can my father's smartphone be compromised?

My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing). In ...
3
votes
1answer
114 views

Does mobile hotspot have security vulnerabilities in older phones?

I want to use my Samsung Galaxy Trend Plus as a mobile hotspot, for my laptop. I have installed a custom ROM on the phone -- Official Lineage OS 14.1. There are no security updates for this OS. Does ...
2
votes
1answer
206 views

Why is there “/proc/net/snmp” file on my device? Could it be due to a malware?

After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly. My question is simple, do the bootkits ...
1
vote
0answers
368 views

Android verified boot and custom ROMs

I'm trying to figure out how exactly works the Android Verified Boot process and its usage with custom ROMs. The documentation I found on it is unclear (or outdated) as there seems to be several ways ...
0
votes
0answers
51 views

Can I use DNS-over-TLS below Android Pie?

Unfortunately DoT isn't part of Android below version 9. Is there a workaround app or should I better install LineageOS 16 on my old smartphone device?
1
vote
1answer
313 views

Is Android Pie vulnerable to ADB server attack?

According to The Hacker News, many Android devices are running insecure remote ADB service: Thousands of Android Devices Running Insecure Remote ADB Service Despite warnings about the threat of ...
1
vote
0answers
80 views

Android Pie background apps

Android Pie does not allow background apps to have access to microphone or Camera. Is this valid in case of screenshot also? Does the app needs to be foreground and visible for any of the above ...
3
votes
0answers
750 views

Samsung Galaxy s10e requires password every few days, is it possible to disable safely?

Galaxy s10e, protected by a very long password and fingerprints. I specifically went for a very long password intending to only type it in after restarting the phone. In fact, the phone requires ...
1
vote
1answer
2k views

Allow android chrome to load unsafe scripts

When any site has mixed content (HTTPS + HTTP), and when you try to open HTTP content, on Desktop chrome, it shows a "shield" icon like screen below, This allow user to load unsafe script. However, ...
0
votes
1answer
211 views

Is it possible to access Face ID sensors raw data?

My Honor 10 has facial recognition capability in the dark, I suppose it works like Apple's Face ID which would rely on and IR camera and an Infrared pattern/dot projector. So, since the Settings app ...
0
votes
1answer
80 views

How to know whether TrustyOS is running in Android mobile or not

I'm referring TEE(Trusted Execution Environment) for Android Here. Can anybody help me to check whether any device is runnning Android along with Trusty OS?
4
votes
1answer
159 views

For basic users - Any reason to install mobile security App?

For users that play it straight, never going to doubted sites, never enabling APK from non-play sources... (e.g typical seniors) Any reason to install a mobile security app? Because Such users ...
9
votes
1answer
901 views

If an app requires no permission, can I be completely sure that it is safe to install?

I have an app that requires no permissions whatsoever. Please note that this app does not come from an official source. Given that the app requires no permissions: Can I be completely sure that it ...
0
votes
1answer
55 views

How to permanently erase the deleted files from Nexus 6p?

I had deleted several files like from my Nexus 6P, I want to permanently erase all deleted files, how to do it? where are the deleted files stored?
0
votes
1answer
1k views

Apps whitelisted in AFWall+ without my knowledge

I've installed a firewall (AFWall+) on my phone, and I've manually whitelisted every app I wanted to allow accessing the Internet, including system apps. So everything is blocked by default, and I add ...
1
vote
0answers
120 views

How to prevent external USB HID devices enable without confirmation

Android support USB HID devices like keyboard and mouse. If you have a USB-C keyboard, or connect via a USB hub. The USB keyboard will have control to the system, without on-screen confirmation. I ...
4
votes
1answer
948 views

Are multiple-users protected from each other differently than apps?

I confess that I come from the happy world of unix computers, and am used to the concept of user accounts and hence group gids and userids uids. For the occasional usage of an untrusted app (i.e. ...
0
votes
1answer
76 views

Firefox wants to record video/audio

I have an Xperia Z5, running 7.1.1. When I browse the web using Firefox, I keep getting requests from Firefox to record audio and take photos/videos. Both requests always happen together, in that ...
1
vote
0answers
2k views

How do I check if my Android SD is encrypted?

I can't remember if I encrypted it already or not. How do I verify that? Under SETTINGS - SECURITY - ENCRYPTION, there is just "Encrypted phone", but nothing related to the SD card. The SD is NOT ...
2
votes
1answer
25k views

Is there anything malicious with play support libraries?

I was doing my daily stuff on my Android Nougat. And then something started downloading, play support libraries. I think OK right. But the moment downloading stopped, and installation started my ...
0
votes
1answer
47 views

Files stealing from device or onedrive

I have word files on onedrive and i use word for android to edit theme. I want to know if the are secure. Can other applications acces themes ? Can appliaction that have storage permession steall my ...
2
votes
1answer
2k views

Why reading permission to /proc/1/maps is denied and why doesn't the denial appear in logcat?

I'm developing a native app for Android, and I'm occasionally confronted with permission denied which doesn't trigger a log in the logcat logs. For example, trying to run: shell@kltevzw:/ $ cat /proc/...
0
votes
1answer
34 views

Setup Android for kids?

How to setup Android so that the phone app is completely usable without a pin, but all others apps need unlocking
6
votes
3answers
745 views

How to find out stolen phone of android by using IMEI number?

I have already tried by finding findDeviceWebsite Is there any way to find device by IMEI number?
3
votes
0answers
222 views

FBE - Why does each user get a separate DE key

I've been reading about how File-Based Encryption and Direct Boot work. There's one thing I don't understand. According to https://developer.android.com/training/articles/direct-boot Device ...
0
votes
0answers
55 views

How do I verify my second-hand phone is 'clean'

I have just bought a second-hand Android phone (Samsung) and would like to check that there's nothing nasty on there before I start using it in earnest. It's my first smartphone! I have some ...
1
vote
2answers
148 views

Malicious software runs on the background of Android phone, but I cannot see it - how to find and remove it?

I know that a malicious malware/spyware has been installed on my Samsung Galaxy S3 phone and I constantly get the message to close apps not in use because they drain my battery. But I do not have ...
5
votes
1answer
192 views

Should a certificate be installed when a browser offers to install it?

I was accessing my internet banking site, and I found my browser asking to install some certificates noted some extensions of certificate. Do I need to install certificate to access the site safely ...
4
votes
1answer
535 views

Prevent application to make silently install file(s) or making changes

'Request Install Packages' let's say if an app has this permission ex- facebook(Check it in playstore head to facebook then 'app permissions' and click 'see more'. I used to read articles related to ...
2
votes
3answers
2k views

control per app internet (non-rooted) while using actual VPN?

I am trying all sorts of (non-root) security software that allows me to block internet for apps. so far every one needs some kind of fake VPN to gain access to traffic, I guess so no root is needed. I ...
1
vote
0answers
179 views

gboard suggesting passphrase after deleting app data and learned dictionary

I have been using the gboard keyboard app for as long as I can remember. I also use password managers for nearly every situation, but they do not completely eliminate passwords. To my horror, gboard's ...
0
votes
1answer
3k views

What are the risks involved in unlocking the bootloader?

A locked bootloader is one that will only boot an OS and recovery that it "approves" of. Vendors digitally sign the recovery, kernel and kernel modules and unsigned binaries are refused to flash and ...
0
votes
0answers
326 views

Can not re-sign Android system app without app crashing (using LineageOS)

I have re-signed all system apps of LineageOS with my own key and have replaced them all before the first boot. LineageOS boots normally but then all re-signed system apps crash with an error like: ...
2
votes
0answers
2k views

Unlock with fingerprint instead of PIN after Device reboot or Device Locked by admin

Android has a security feature that requires the user to input PIN/Pattern/Password if the device was locked by an app using the Device Administrator permission or when the device is restarted. ...
2
votes
0answers
517 views

Is it possible to make Android remember the SIM PIN and automatically unlock the SIM upon reboot?

This way the phone could be unlocked and used with the visual pattern. (Or some other mechanism, e.g. fingerprint, face scan, etc.) The SIM card PIN wouldn't have to be repeatedly input after every ...
2
votes
2answers
175 views

How can my employer change my Andriod security settings?

I got the following email from my employer: Passwords required on all mobile devices In order to protect College data stored on portable devices, from Tuesday 20 November ICT will enable a ...
-1
votes
1answer
3k views

What are “minuhome.Black.[…]” apps?

I've downloaded an app locker on my Samsung Galaxy Note 8, and as I was trying to import apps to the locker, on category "M" of the app list comes out a lot of Android icons with the file name of ...
0
votes
0answers
38 views

Are non-Google emails stored only locally when using the Gmail app? [duplicate]

The Gmail app allows to add non-Google email provides (via POP and IMAP). Is it mentioned somewhere that the emails pulled from these providers stay on the device and are not stored/shared with ...
1
vote
1answer
148 views

Working with Security Metadata in APK file

According to this Blog post, Google has added a Security Metadata on top of an APK to verify that it was originally distributed by Google Play. More specifically it adds APK Signing Block to the APK ...
2
votes
0answers
44 views

Security related concern for my android phone

i purchased an android mobile and had my google account set up but the device later went faulty and would not turn on, so now I got the same brand phone exchanged. meanwhile I have also set up my ...
3
votes
1answer
5k views

Make Google Pay require unlocking for NFC payment?

I have installed Google Pay and NFC credit card payment is neat. However, I don't feel safe about it. What if someone snatches my phone, then pays with it before I notice, or after I notice but before ...
0
votes
0answers
61 views

In Android, got click-jacked into clicking “Allow” for a pop-up that flashed for 0.1 seconds. How do I find out what I allowed?

In Android, I was using Google Chrome. I clicked on a sketchy website which popped up a new chrome tab. I pressed the tabs button which caused me to view the various tabs. Right as I was clicking on ...
1
vote
0answers
99 views

Create a private folder in Android: set the SELinux attribute of a folder in external storage

There are quite a few apps that require read and write access to the external storage, which gives them access to the whole /sdcard directory. But since that is also the only storage the user ...
0
votes
0answers
79 views

KitKat exploit for reading fils in /data

My Motoroa Droid MAXX is running a version of Android that has no rooting method. All I want to do is read Chrome's backed up file of tge list of open tabs. Does Android 4.4.4 have any known ...
1
vote
0answers
2k views

When I click “enable secure and erase” in Find My device it says “request sent”, but nothing happens

I'm trying to enable remote locking and wiping for a phone. When I go to https://www.google.com/android/find and click on “enable secure and erase” then it says "request sent", but I see nothing on ...
0
votes
1answer
49 views

How to disable sending all sensible information to the cloud?

Recently I found, that my Samsung Galaxy S7 was sending all my photos to Samsung without my explicit permission. I would like to ban any such activity from any application. Is it possible to do this ...
0
votes
1answer
73 views

Does syncing gallery means sending all photos to internet?

I found with fear, that my Gallery on Samsung Galaxy S7 was set up to sync with cloud by default. Does this mean, that all my photos, including secret ones, were silently sended to Samsung??????
3
votes
1answer
18k views

How to Disable FLAG_SECURE without root?

I just realised the only way to bypass screenshot security on certain apps is to disable this FLAG_SECURE, which as I see can be done using Xposed module. But I don't want to root my phone. Is there ...
8
votes
2answers
3k views

WhatsApp: How to isolate contacts and photos - Privacy concerns

Whatsapp is ubiquitous and is commonly used despite the long scary list of permissions it seeks ( see Help understanding Whatsapp's permissions ) Privacy and security conscious people would like ...

1
3 4
5
6 7
23