Questions tagged [security]
For more generic questions relating security issues. For specific issues having their own tags, please use those -- e.g. 'malware', 'antivirus', 'privacy', 'lost-phone'. Please see the full tag wiki for more. For more in-depth Android security issues, you might rather want to visit our sister-site at http://security.stackexchange.com/questions/tagged/android
1,260
questions
0
votes
0
answers
52
views
Help with compromised phone Android 7.0
I want to ask if there's any way I can get rid of whatever's allowing my phone to be unlocked easily without any resetting or Google account?
My phone has been messed with and now it keeps getting ...
user308501
3
votes
1
answer
1k
views
Can a virus/spyware install itself on a system partition remotely?
If I install malicious app accidentally can it copy itself onto the system partition? Or if a hacker gains access to my phone remotely can he install spyware onto the system partition?
I have read ...
- 191
12
votes
4
answers
60k
views
How to protect my Wi-Fi password from being displayed by Android phones when sharing it with QR code?
I would like to know if there is any workaround to protect or hide my TP-LINK Wi-Fi router password from being displayed on phones using Xiaomi (Redmi) phones.
If we go to Wi-Fi in a Redmi phone and ...
- 283
2
votes
1
answer
5k
views
How do I connect to 802.1x EAP Wi-Fi network from an Android 10 device?
My Wi-Fi uses 802.1x EAP with TLS. It works well with the old Android devices, but an Android 10 device pretends that it's trying to connect, and a few seconds later marks the connection as disabled. ...
- 401
2
votes
1
answer
6k
views
How to secure phone for repair shop?
I've been an android user for many years and so far I've been lucky enough not to need to have a phone repaired by a shop, so I'd never considered this problem until recently. I had to give my Galaxy ...
- 123
5
votes
1
answer
3k
views
What is a "synthetic password" and how is it used by Android?
On a first-generation Pixel that is running Pie, in locksettings.db there is a field named sp-handle that contains a 64-bit value. sp is an abbreviation for "synthetic password". Under /data/...
- 685
1
vote
1
answer
6k
views
SELinux always set to permissive, how to set enforcing permanently?
I flash a custom ROM to my HTC B2UL.
The ROM, by default, has the SELinux policy set to Permissive instead of Enforcing.
I can use adb shell setenforce 1 to make SElinux enforcing. But after reboot, ...
- 13
0
votes
0
answers
856
views
AFWall+ not blocking consistently
I'm running a rooted pixel 3 (Magisk) with the "liboemcrypt disabler" module for running Netflix, Magisk Hide and the dg.db edit to disable attestation for running Google Pay.
The firewall will work ...
- 11
1
vote
0
answers
185
views
How does an app (e.g. Whatsapp) automatically detect when the phone receives a 2FA SMS verification code without being granted SMS read permissions? [duplicate]
When installing some apps (for example Whatsapp) the user is required to receive a verification code on the phone via SMS.
I have noticed that some apps automatically verify this code as soon as the ...
- 129
0
votes
1
answer
84
views
My android phone is often getting affected with virus
My problem :
Hello friends. I use Asus zenfone go T500 android phone. My problem is, my phone often gets affected by some kind of virus which sometimes installs some chinese apps without my knowledge ...
- 103
0
votes
0
answers
713
views
Android : how to remove the downloaded android update
I have a securities concern. I installed a VPN software on my android and just after (the next day) android asks me do install an update (that is already downloaded via the VPN). I don't fully trust ...
- 101
0
votes
1
answer
80
views
Why can't I change my password in system settings? Nexus 6p Resurrection Remix Pie
After entering the wrong password too many times in VPN settings, I can't enter my password in settings. Whenever I do, I get sent back to the previous page. I can't even change my password!
0
votes
1
answer
296
views
Always require PIN to unlock device
Is there any way to always require the user to enter the PIN (instead of fingerprint) to unlock the device?
It seems that as soon as you add a fingerprint to the phone, now it no longer requires the ...
- 3
0
votes
0
answers
115
views
I found apps that I have not installed. How can I investigate this?
There are 6 apps on my phone that I haven't explicitly or implicitly installed.
Most likely they were installed today, as they happened to get on the first screen/page, so I immediately noticed them.
...
2
votes
1
answer
5k
views
Is there a way to set up a firewall on mobile hotspot to block incoming connections?
I've been using the Android mobile hotspot to get an Internet connection while traveling. The stock hotspot is fine for my laptop which is firewalled, but there are a few devices (smart TV, game ...
- 23
0
votes
1
answer
145
views
How do I get a hacker out of my phone?
The other day my phone number was added to my Google account, data was turned on and off. Different things have been happening. I have a LG V35 and it has an LG VPN section and when I check the log. ...
0
votes
1
answer
784
views
How do I prevent my phone from restarting after a System Update?
Phone: Mobicel TRENDY_LITE
Android: 8.1.0
For about two days now, I have been receiving many Security and System Updates.
Every time an update is ready, my phone restarts without permission.
After ...
- 125
0
votes
1
answer
114
views
Remove the lock for the app
I installed one particular app two months ago. When I opened it the first time, a popup opened with a suggestion to enable the screen lock pin. And I enabled the screen lock. From that time whenever I ...
- 3
1
vote
0
answers
65
views
Can not select secure screen lock option on Samsung Galaxy s8+
I am trying to set my screen lock to pattern/pin/password but it reverts back to a non-secure option (swipe/none).
I have tried:
Clearing cache
Clearing credentials
Removing Nova-launcher
I'm all ...
- 111
0
votes
2
answers
630
views
Cannot add "Amazfit Bip" watch as a "trusted device"
I've got a ZTE Axon 7 phone, and it generally works fine. I also have an Amazfit "Bip" watch, and I've successfully paired it with the phone via Bluetooth. However, when I try to add the watch as a "...
- 250
0
votes
0
answers
2k
views
App Installation "blocked by your IT admin"? (Galaxy Note 8)
I use YMusic to listen to music/audio books, which is an outsider app from xda-developers. When I tried to install an update, I got the message below, as if YouTube is preventing me from installing ...
6
votes
1
answer
6k
views
Decrypting microSD card on another Android device or desktop computer
I'm looking for a solution that would allow to encrypt external microSD card with the following conditions:
external microSD card is not merged with the internal storage;
encrypted external microSD ...
- 163
0
votes
1
answer
5k
views
How to set password request for booting the smartphone?
How can I set the phone so it requests to unlock the screen before starting up?
Earlier I had to unlock the phone so it starts up but now it boots without unlocking (and I didn't change anything in ...
- 1,113
2
votes
2
answers
436
views
WhatsApp Messenger zero-day exploit: How to upgrade?
It turns out that WhatsApp Messenger is affected by an exploitable buffer overflow vulnerability, which can be used to take over the phone with "zero clicks", by placing a call using ...
- 133
1
vote
1
answer
142
views
End-to-End Encryption IMAP client
I recently discovered that Outlook for Android uses an intermediate server for IMAP connections, meaning that:
mail is accessed in plain-text by a third-party
credentials are known in plain-text by a ...
user296111
0
votes
1
answer
129
views
How to apply the latest security patches on Nokia 3.1?
I've a Nokia 3.1 with build number 00WW_2_680_SP02. When I run Check for updates, I have the message:
Your system is up to date
Android version: 8.1.0
Security patch level 1: 1 February 2019
But ...
- 131
0
votes
1
answer
2k
views
How do I set up erase and secure?
My phone was stolen so I tried to erase from Samsung Device Manager but it just sends an erase instruction which I don't know whether the person who turns my phone on will be able to just stop from ...
- 1
9
votes
1
answer
3k
views
Attempting to brute force Android security pattern through TWRP via adb
Yesterday I somehow forgot the Android security pattern on my phone. Due to muscle memory I sort of know what it was, but can't figure out the true pattern. Therefore I'm attempting to brute force it ...
- 261
0
votes
0
answers
1k
views
How to create Android sepolicy based on the denial "execute_no_trans"?
I am trying to execute my script /vendor/bin/init.inmod.sh using below method:
Script init.inmod.sh:
#!/shebang???
/vendor/bin/test_disp hdcp disable
In vendor specific .rc file:
on ???
start ...
- 1
0
votes
1
answer
81
views
Sensitive information in the About screen [closed]
Which of the following information from the About screen (Settings -> System -> About) is considered sensitive and shouldn't be shared publicly?
IMEI
IP address
Wi-Fi MAC address
Bluetooth address
...
0
votes
0
answers
130
views
Android asks to re-enter WiFi passwords. Is my phone compromised?
I have a Galaxy S8 (SM-950F) with Android version 8.0.0. I have rooted the device with Magisk. I have a couple of Magisk modules, including Bixby remapper, F-Droid Privilaged Extension, liboemcrypto ...
- 201
1
vote
0
answers
271
views
Marshmallow: Adding system-wide custom root certificate
On Android 6 if I move my own root CA from
/data/misc/user/0/cacerts-added
to
/system/etc/security/cacerts/
it doesn't work anymore.
It is in the system list and active, but my browser says ...
- 11
1
vote
2
answers
10k
views
"Device Admin" apps are asking for permission to erase my data after failed login attempts! How can I confirm?
I was about to install the Outlook app on my phone, when it asked me to activate it as a device admin. (See image below):
I'm sure few people read the whole warning. One part greatly concerned me:
...
- 989
0
votes
1
answer
974
views
Chrome - unprompted auto-download of files after opening the browser - bug or something else?
Upon opening google chrome on android, it suddenly downloaded (unprompted by me) a jpeg, as well as a "seed" file.
After scanning both files with the mobile version of kaspersky, i opened the jpeg ...
- 101
0
votes
2
answers
56
views
Security question incoming calls
I've got an Nokia 6 with Pie! How do I stop others from answering my calls, or more correct, how do I stop incoming calls from opening my phone?? Everytime there's an incoming call, all security ...
2
votes
2
answers
4k
views
Revoking Bluetooth permission from all apps?
I noticed that my phone silently enables bluetooth when screen turns off. When phones remains inactive for few minutes and I click unlock button I can see bluetooth indicator showing up for around 1-2 ...
- 125
-1
votes
2
answers
241
views
How do I safely flash a new rom on an infected android phone? [duplicate]
Is using a live cd a good idea? Will it keep the rest of my computer including storage and installed OS safe?
- 191
1
vote
1
answer
546
views
Link between device state & user settable root of trust
I am (still) trying to understand exactly how verified boot works and I am wondering what happens when a user-settable root of trust is used by the device.
As said here:
If the device is LOCKED, ...
- 31
1
vote
1
answer
978
views
How to delete my personal files retained by an app?
I'm using Android Excel and Word apps on a non-rooted Galaxy Note 8. Over the past months I've opened a couple of files from external sources (email and SD card), but was shocked to find these files ...
2
votes
2
answers
136
views
Can my father's smartphone be compromised?
My father said to me that he allowed installation of apps from unknown sources when he was asked to do it to go further with something (he said that he don't remember when or what he was doing).
In ...
- 143
3
votes
1
answer
815
views
Does mobile hotspot have security vulnerabilities in older phones?
I want to use my Samsung Galaxy Trend Plus as a mobile hotspot, for my laptop. I have installed a custom ROM on the phone -- Official Lineage OS 14.1. There are no security updates for this OS. Does ...
- 31
2
votes
1
answer
352
views
Why is there "/proc/net/snmp" file on my device? Could it be due to a malware?
After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly.
My question is simple, do the bootkits ...
- 23
2
votes
0
answers
672
views
Android verified boot and custom ROMs
I'm trying to figure out how exactly works the Android Verified Boot process and its usage with custom ROMs. The documentation I found on it is unclear (or outdated) as there seems to be several ways ...
- 31
0
votes
0
answers
56
views
Can I use DNS-over-TLS below Android Pie?
Unfortunately DoT isn't part of Android below version 9. Is there a workaround app or should I better install LineageOS 16 on my old smartphone device?
- 49
1
vote
1
answer
455
views
Is Android Pie vulnerable to ADB server attack?
According to The Hacker News, many Android devices are running insecure remote ADB service:
Thousands of Android Devices Running Insecure Remote ADB Service
Despite warnings about the threat of ...
1
vote
0
answers
81
views
Android Pie background apps
Android Pie does not allow background apps to have access to microphone or Camera. Is this valid in case of screenshot also?
Does the app needs to be foreground and visible for any of the above ...
3
votes
0
answers
865
views
Samsung Galaxy s10e requires password every few days, is it possible to disable safely? [duplicate]
Galaxy s10e, protected by a very long password and fingerprints.
I specifically went for a very long password intending to only type it in after restarting the phone.
In fact, the phone requires ...
- 143
1
vote
1
answer
2k
views
Allow android chrome to load unsafe scripts
When any site has mixed content (HTTPS + HTTP), and when you try to open HTTP content, on Desktop chrome, it shows a "shield" icon like screen below,
This allow user to load unsafe script.
However, ...
- 2,341
0
votes
1
answer
353
views
Is it possible to access Face ID sensors raw data?
My Honor 10 has facial recognition capability in the dark, I suppose it works like Apple's Face ID which would rely on and IR camera and an Infrared pattern/dot projector.
So, since the Settings app ...
- 11
0
votes
1
answer
121
views
How to know whether TrustyOS is running in Android mobile or not
I'm referring TEE(Trusted Execution Environment) for Android Here. Can anybody help me to check whether any device is runnning Android along with Trusty OS?
- 111