Questions tagged [security]
For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android
1,260
questions
0
votes
0
answers
83
views
Ensuring that a deleted file cannot be recovered
A few months back, I had deleted a media file from my gallery. My phone wasn't encrypted at this point. Now, I wish to ensure that this file cannot be recovered in any way. What is the best way of ...
- 353
0
votes
0
answers
52
views
High battery usage (no wifi no apps no wireless)?
I've noticed that I lose about 20% battery each hour while my phone is unattended and offline. I check the battery settings and find that no apps are running.
The phone is rooted, and I'm wondering ...
- 619
0
votes
0
answers
72
views
Can I install replicant on a Galaxy A10e without bricking it?
I'm trying to UnGoogle my phone for privacy/security reasons, and from one source I heard that if you want to use a smartphone, you're better off getting a Pinephone running GrapheneOS / LineageOS. ...
0
votes
1
answer
551
views
Is Google Voice susceptible to hacking like regular MMS or Whatsapp messages?
I have been using Google voice in a public facing way so as to reduce the chance of receiving malware messages over SMS/MMS or Whatsapp.
But is it just as susceptible for someone to be able to sneak ...
- 131
1
vote
1
answer
14k
views
What can class 0 message (flash SMS) do to Android devices?
I'm using a Samsung phone and I recently got an anonymous message via Class 0 Message
Class 0 Message
URGENT MATTER ,CONTACT
ME MY EMAIL NOW
(email redacted)
From: (phone no. ...
- 11
0
votes
0
answers
168
views
"System" is trying to access Internet
I am using OnePlus 3T, Android 9. Recently I installed an app called "NoRoot Firewall" to prevent the apps from accessing the internet. I explicitly allowed and denied access to internet for some apps ...
- 101
0
votes
0
answers
160
views
Automatic downloads
I've noticed in several occasions that on mobile browsers (I suppose it happens also on desktop ones) downloads can be forced without user consent. I've studied the matter and I've learnt that this is ...
- 165
0
votes
1
answer
508
views
Can a blocked contact see any number changes?
I would like to ask, whether a blocked contact will receive an information,if I change my Viber phone number?
Is it possible to make the change by only informing a selected group of contacts or ...
- 3
1
vote
0
answers
49
views
Constantly changing app "shortlist"
I have a shortlist of five app icons at the bottom of my home screen, usually Phone, Messaging, Chrome, Google and Camera. These tend to remain constant (I've not seem them change).
When I swipe up ...
- 111
4
votes
0
answers
154
views
Replacing Malware System Apps with Clean Versions of Apps
I have many times found devices or ROMs that have malware installed as system apps. This thread is intended to define a recurring problem and discuss and determine solutions.
Background:
In many ...
- 41
1
vote
1
answer
281
views
how does disabling 'password at startup' works before file-based encryption?
Android 6 (before file based encryption):
after encrypting device and setting screen lock, i can choose an option 'require the PIN, password, or pattern at startup' or can i choose 'no thanks'. in ...
- 111
0
votes
0
answers
412
views
App from playstore run but same apk crashes on sideload install
On my noughat device, I have downloaded app from playstore, which is running great. Extract apk from install app, uninstall it and again succussfully install with package installer. But second time on ...
1
vote
0
answers
54
views
Are there any downsides to encrypting an Android device?
Besides requiring a lock screen, are there any downsides to encrypting an Android device (using the native encryption)?
For example:
is there a performance decrease?
is there a temperature increase?
...
0
votes
1
answer
443
views
to identify these services after upg. to andr 10?
To all,
please tell me if this is relevant to the forum.
the problem:
I want to identify these services that appear after the upgrade to Android 10, in adjustments -> applications and ...
- 1
0
votes
1
answer
4k
views
How to enable 'install unknown apps' on Samsung mobile device? [closed]
My Samsung device is running on Android 10, One UI 2.0. I want to install apps using apk file via non-official platforms (the app is not published on Google Play, Galaxy Store). But it won't let me.
...
Boosted Nub
2
votes
1
answer
138
views
How are apps installed on Android ? context - symbolic links of only some apps disappear after reboot
I am using Apps2sd to move some apps to ext4 partition mmcblk1p2. It successfully moved 1 app ( see code below ) but after linking another , the symblink for app gets deleted but data folder's ...
- 417
1
vote
0
answers
2k
views
can't pass / unlock Secure startup with PIN code
I have a problem with my LG G5 (but saw it happens in other LG phones)
I have a PIN screen lock and I changed it a couple of days ago.
I was talking on the phone when it restarted (I remember the ...
- 11
3
votes
1
answer
572
views
Can apps use USB communications without USB debugging?
This question is from a user's perspective, but it's about whether or not developers can accomplish this.
I recently installed DroidCam to use my phone as a webcam for my computer. It works either ...
- 141
1
vote
0
answers
199
views
Securely storing keyfiles with authentication and alike
I am using Keepass as my password manager. I am using a keyfile for securing access to my database. However when I want to do the same on my android phone I have to store the keyfile in my phone ...
- 111
1
vote
1
answer
213
views
How does Android know my password contains only numbers?
My Android phone's unlock type is set to a password, but it only contains numbers for fast unlocking (I'm well aware that a PIN is an option, but this way presents more possibilities to an attacker). ...
Purple P
0
votes
1
answer
61
views
Can we stop Gmail from calling home to google before resolving a url?
When you click on a link in gmail on your phone, it first queries www.google.com with the url of your query, and then redirects to the destination URL. Is there a way to stop this "feature" of google ...
- 1
0
votes
0
answers
172
views
How is it possible that I run android apps with the right user rights
I learned for every app I installed on my Android, a new user is created. And the data for this app is stored in /data/data/app folder with the only access permission to the user that is created for ...
- 1
1
vote
0
answers
28
views
Why are certain functions permissible while others are not (from a security standpoint)?
You would think there must be some sort of logical convention or decision-making that leads to what is or is not permissible, followed by sanity checks against each functions' interactions for ...
- 607
1
vote
1
answer
3k
views
Android 9 pie see if device is encrypted
I am trying to figure out if my Android (Pie) is encrypted.
Per Is there a way for a user to tell if their Android device is encrypted or not?, it says my phone will be reported as phone encrypted.
...
4
votes
1
answer
3k
views
FreeOTP or FreeOTP+ - Which is More Secure?
I have been using FreeOTP by Redhat/Fedora for a few years now as my main two way authentication app. However, I have realised that the current version (1.5) is quite a few years old (having been ...
- 195
2
votes
1
answer
2k
views
Why root cannot access ".android_secure" directory on external SD card?
I have an Android 9 tablet, rooted by way of Magisk. It has an external SD card mounted as sdfat on /mnt/media_rw/1234-5678 which is mounted on four other mount points, all as type sdcardfs, with some ...
- 21
30
votes
1
answer
6k
views
Suspicious notification from "Find My Mobile"
I just received a notification from Samsungs "Find My Mobile" service, without having triggered anything. The same thing happened to my work mate today morning.
As I almost never use my Samsung ...
- 407
1
vote
0
answers
10k
views
Bypass Samsung Knox factory reset protection
I have an Android device supplied by my government for students and secured by Samsung Knox. However & unfortunately, I forgot the security pattern of the device and I want to hard reset it to ...
- 111
1
vote
0
answers
149
views
What mitigation can I take for CVE-2020-0022 (aka BlueFrag)?
A vulnerability, CVE-2020-0022, was recently announced in some versions of Android. My phone, a Sony Xperia XA2, does not yet have an update available.
What should I do in the meantime?
The report ...
- 607
1
vote
1
answer
687
views
How does rooting affect full disk encryption (Oneplus 3T)?
My oneplus 3T running Oxygen OS 9.0.6 (Android 9) came with full system encryption by default.
I want to install root but also keep full system encryption.
Will root disable encryption?
Does root ...
- 181
1
vote
0
answers
962
views
How to block app silent installation
Recently I noticed I have opera browser installed. I definitely did not install it because I was sleeping at that time. I checked installation time and revealed it was the day before yesterday
...
- 403
0
votes
0
answers
443
views
Set a password at boot before recovery mode on Android Q Huawei P30 Pro
on my old cellphone, I could set a password that was asked at startup to protect it I did not find any similar setting in Android 10
I need help to properly secure my cell phone in case I lose it
Pierre-Olivier Pignon
1
vote
0
answers
708
views
Removing DRM from android using root
I would like to know what would one have to do to remove DRM (Digital Restrictions/"Rights" Management) completely from an Android phone one has root access to.
So far I have thought about removing /...
- 21
0
votes
0
answers
177
views
/system/media Directory
First of all, I am currently learning about Android security and wasn't sure if to post it on the Android or Security StackExchange, either way here is my problem...
Investigating the content ...
0
votes
1
answer
61
views
Is permission elevation still a security issue for end users when updating Android?
Is this still an issue for end users?:
Researchers have determined that the Android update process has a vulnerability that allows permission elevation without user knowledge.
Android allows ...
1
vote
1
answer
675
views
What are possible consequences of not installing updates
I've a many-years-old android phone on which I've never updated the OS, never logged in to Google Play. I haven't had any google accounts for years.
I deleted nearly all apps that came ...
- 11
5
votes
1
answer
20k
views
Android Verified Boot and generation of vbmeta image
I'm in the process of unofficial device bring up, and I'm stuck unable to progress due to Android Verified Boot.
As per specification, Android Verified Boot can be disabled with the --disable-verity ...
- 55
0
votes
0
answers
348
views
Understanding Secure Enclave (or equivalent) - Samsung S8+ SM-955F
I'm trying to understand the limits of the Secure Enclave (or equivalent, I'm not certain what its called) on the Samsung S8+
Specifically, does the secure enclave include any features related to ...
- 233
1
vote
1
answer
732
views
Is it possible to encrypt system partition with custom rom?
I have galaxy s9 and i wanted to have lineageos rom.
So i unlocked bootloader and wiped stock firmware of galaxy s9.And then i installed lineageos 15.1 with twrp 3.2.3-0
Then i encrypted phone. I ...
- 53
3
votes
1
answer
4k
views
SELinux permissive kernel - is it a security risk?
As in title. I am talking of Kernel, not ROM (plenty of questions dealing with ROM on this site).
I have a OnePlus 7 running stock Android 10 and prefer a custom kernel. Of late, OnePlus hasn't ...
- 38.6k
0
votes
1
answer
5k
views
How can I disable the official YouTube app's incognito mode?
Preface: A warning for parents
If you want to protect your kids, disabling Incognito mode is usually not enough. If your kids are under age 13, it's wise to use a good filter to block the YouTube app ...
-1
votes
2
answers
64
views
Are these app permissions normal?
Can it be used to steal personal data or intercept/view online activity?
- 173
1
vote
1
answer
80
views
Should I be worried about this strange notification from Delta?
I got a notification from the Fly Delta app that just says "test". The icon appears to be missing. Should I be concerned about this? I've uninstalled the Delta app, but I'm unsure if I need to do more....
- 123
4
votes
1
answer
77
views
Should warnings about not charging your phone at airport/public usb ports be taken seriously?
There are many articles on the internet saying that charging at the usb ports available at the airport and public places can cause your phone to get hacked.
Is there any any truth behind this?
If ...
- 191
0
votes
0
answers
4k
views
"Certificate not secure" error on Samsung Email app on Note 8
I have a Samsung Galaxy Note 8 (Android 9, One UI 1.0) and am using Samsung's Email app (which comes preloaded on Samsung phones) to access my work email.
Recently I went abroad and had to rely on ...
8
votes
1
answer
8k
views
Is there a way to root an Android phone without unlocking the bootloader?
I've tried almost any method to root my ASUS ZenFone Live, but no one seems to work. Also I only need root, no unlocked bootloader (don't want to wipe data) or custom recovery (not essential ATM).
- 81
6
votes
0
answers
1k
views
Exploiting Janus (CVE-2017-13156) - what do these error messages mean?
I am working on a school research project about the Janus vulnerability (CVE-2017-13156).
Janus is a vulnerability of the signature scheme v1 while installing APKs. I know this does not correspond ...
- 213
2
votes
1
answer
546
views
What's inside the Android A/B-Update payload.bin?
I am using Android 8 for an embedded device, with Android Verified Boot 2.0 secured via HW-keys, and A/B OTA update (no streaming). I want to make sure that the software on the device is tightly ...
- 153
0
votes
1
answer
113
views
What private data can apps access without any specified permissions?
Let's say an app doesn't require any permissions at all. What could that app access that could be a potential privacy risk? Other app usage? List of installed apps? Check is my screen unlocked? Google ...
- 385
-2
votes
2
answers
262
views
Does the use of Android One remove the risk of OEM spying?
China is forcing tourists to install text-stealing malware at its border.
Also, U.S. intelligence officials imply that Huawei, ZTE devices aren't safe for consumers (even in the West).
Some ...
- 183