Android is an operating system for mobile devices such as smartphones and tablet computers. It is developed by the Open Handset Alliance led by Google.

learn more… | top users | synonyms

0
votes
1answer
25 views

Phone is sending weird sms [on hold]

I have an Android device. I just noticed the it sent an sms to a number I do not know. The message is... ...
1
vote
0answers
25 views

How can I view the Chrome padlock SSL certificate information in Chrome Mobile on Android? [migrated]

When I'm on my Desktop Chrome, I can click on the padlock icon in the address bar and see the information about my SSL connection, like the TLS version, the certificate strength, the authority that ...
33
votes
4answers
3k views

How does Android L achieve strong encryption with a low entropy passphrase?

After upgrading to Android L on my Nexus 5, I was pleased to find that I can enable encryption using a pattern as the passphrase. However, it soon got me thinking. I'm guessing the encryption key is ...
-1
votes
1answer
42 views

Android Device Manager lockout [on hold]

I have been HACKED!!! Someone logged into my Android Device Manager and locked me out of my own phone. Not only did they lock me out, they also wiped my phone and changed my Google, Dropbox, Lookout, ...
1
vote
1answer
28 views

Downloading and updating the software via Playstore

I'm using android play store to download and update software for my phone. And some times its automatically updated as by settings.The play store is linked to one of my Gmail account. Here my question ...
-3
votes
0answers
61 views

What's a good secure Android ROM? [closed]

I realize this is a nearly impossible request due to Android's deeply embedded high level backdoors hidden within the kernel, but nevertheless I need something that meets the following standards as ...
0
votes
0answers
34 views

What can Android Antivirus apps really do? [duplicate]

I am studiying about android development and given the permission restriction between apps and isolation that the operating system itself imposes, I was wondering what can an antivirus app distributed ...
4
votes
1answer
51 views

Android app using FTP

I have done some android programming (self taught). I have started working on an app idea. The idea is pretty much that people with the app installed can post pictures/videos and text which can be ...
1
vote
0answers
37 views

Android 5 encryption

There's been lots of talk about the allegedly improved encryption in Android 5. Some questions about this: What is the maximum length for passphrases? (i.e. is it still limited to 16 characters?) ...
1
vote
2answers
33 views

Determining safety of Android APK executable

On my request, a developer gave me a new version of his Android app to test. The app requires root permissions. I do not know the developer personally. I have no specific reasons to trust or ...
0
votes
0answers
20 views

Start a Windows app without user interaction just after installation on Windows Phone [migrated]

I read that on android all applications, upon installation, are placed in a "stopped" state. This is the same state that the application winds up in after the user force-stops the app from the ...
2
votes
3answers
87 views

How do I know if Google keyboard input is safe for use?

I wanted to send out a message containing some non-Latin characters on my Android phone. When I tried to change the keyboard input method, a warning came out: ATTENTION This input method may be ...
2
votes
1answer
125 views

Intercepting HTTPS Android app traffic

I'm trying to intercept Android application traffic from my Android phone....Basically what worked before was that i had simply installed fiddler proxy on my PC, exported the root certificate (and ...
0
votes
0answers
75 views

Codeigniter RESTful web api creation for mobile and web applications general guidelines

I'm having application with running good in codeigniter, mysql and jquery. Currently we are planning to evaluate our web application with mobile application. So we planned to develop web application, ...
1
vote
1answer
35 views

Simple way to secure a webservice used by mobile clients

I am currently working on a RESTful webservice with Java that is used by mobile devices, namely Android and iOS, using a framework that allows me to abstract from both. I'm adding this information ...
0
votes
1answer
51 views

What could be the possible exploit for android adware vulnerability?

I have read about the adware vulnerability here. An adware is a software that automatically displays or downloads advertising material like banners or pop-ups when a user is online. I have seen many ...
1
vote
1answer
66 views

Secure copy-paste from phone to computer

Some computers on my university block the keepass application which I use as a password manager. I'm thinking of building a small web application + Android app which lets me securely copy a string ...
1
vote
0answers
21 views

How can I know what type of encryption is used by my mobile phone? [migrated]

I'm interested in finding out what kind of cipher is used on my Android phone. For example A5/1, A5/3 or is the GSM connection unencrypted. I was thinking about sending AT commands to the GSM modem ...
1
vote
1answer
56 views

How can I intercept XMPP traffic on Android?

I have been learning about security testing on Android apps, and to intercept traffic I was using Burp Suite. I know it works perfectly for HTTP/HTTPS traffic, but most of the messenger apps are using ...
2
votes
0answers
27 views

Does changing my password after OAuth login in mobile app help reduce risk?

When you use a mobile app that needs Google OAuth login, you can't fully trust the third party app because you can't tell what url the webview is using. Who knows if they aren't storing my login and ...
-1
votes
1answer
93 views

Android phone (Kitkat) list A LOTS of CA under setting->security->Trusted credential,

My Android phone (Kitkat) list a LOTS of CA under setting->security->Trusted credential, does it mean that anyone who has accessed to anyone of those private keys of those CA(s) can monitor or do "Man ...
-1
votes
1answer
153 views

Use openssl key to decrypt file in android/java [closed]

I want to decrypt file encrypted in openssl in java. File is encrypted with private key using openssl and on java side i want to decrypt it using public key. The code: public void testRSA() throws ...
-1
votes
1answer
65 views

How to make a android phone anonymous off contract [closed]

How can I make my 2 year old phone not appear to be the same phone? I would like to make it into a WiFi browsing phone that cannot connect to the phone it used to be by it online footprint. Is ...
0
votes
2answers
105 views

Secure android and server calls

I plan on adding an authentication system on my android app using web services. When my app calls the server using a POST call how can i secure the client can't find the URL and try to do his own ...
2
votes
1answer
138 views

Arduino to Android secure bluetooth connection

I'm using an Arduino Uno and a nRF8001 board from Adafruit to connect to an Android phone over bluetooth. I will be using it to lock and unlock a lock and I need to make sure only verified devices are ...
2
votes
4answers
198 views

Can visiting a malicious website infect an iOS or Android device?

Can visiting a malicious website infect an iOS or Android device? We're talking about visiting such sites via a browser. We're not talking about downloading any malicious apps. Thanks!
0
votes
2answers
94 views

how to encrypt a sensitive model on android and ios

I am writing a mobile app which uses a statistical model contained in binary files. I want to be able to distribute the app freely, but I don't want anyone to be able to use my model files, even on a ...
1
vote
0answers
64 views

Force TLS on mobile app

i'm developing a mobile application for iOS and Android. On this app i'm asking resources on a secure server through ajax. Server's developers asked me to force the call in order that we use TLS ...
0
votes
0answers
94 views

sending data from android client to database

I have created an android app which sends data to a web service (wcf). Right now the user sends his test result (test id, test name, test time and user ID) the problem is I that i send the data from ...
0
votes
2answers
224 views

How to call webservice securely in Android

Hello I am working on an Android application in which I'm required to execute a few https web service calls. All my web-service URLs and Web API KEYs are in the code plus the IP address of the server. ...
0
votes
0answers
48 views

Silent security on android

I saw a DEFCON talk about owning back a stolen PC/Mac, with a SSHd daemon and a dynamic-ip service installed,running in background. I was wondering if is it possible to achieve tha same results on an ...
0
votes
2answers
89 views

Mobile App Security vs. Traditional PC Desktop Security In The New Era

I have been using a Windows PC for many years now. Since Android has come to market, I have been very wary of installing apps that require unrelated permissions. Obvoiusly, these extra permissions ...
0
votes
1answer
115 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
1
vote
0answers
152 views

How to root a virtual device in android-sdk?

I was amused to see no one have ever asked such a question here before. After a little research in google I found only a few links to root a device in avd. Somewhere I also read that the sdk is ...
1
vote
1answer
184 views

How android WebView can be exploited and how to secure my app from WebView vulnerability?

I heard that WebView vulnerability is active in android versions before 4.2. I read that it is fixed by google in their newer updates from 4.2. What I want to know is a brief description of the ...
3
votes
2answers
212 views

Preventing Illegal Access to Webservice

Let me start off by saying that I read other StackExchange questions related to this and they weren't really able to answer my question. I have a feeling this may be an unsolvable problem, but I'm ...
0
votes
2answers
99 views

What are the possible exploits over a debuggable APK?

I have heard that an Android APK can be debugged if android:debuggable="true" is set. What are the possible threats in allowing an app to be debugged?
0
votes
1answer
51 views

LastPass Bootstrap on New Android Phone [closed]

I've been using LastPass to manage all my passwords, including the password for Google account. The thing is, on a new Android Phone, in order to sign in (for Gmail, Play store, etc), I need the ...
1
vote
1answer
162 views

Android encryption when phone is on

So I have android lollipop installed, which should be encrypted automatically with some startup password. My question is, what happens if the phone get stolen while its on, and the screen is locked? ...
1
vote
1answer
94 views

Secure voice app [closed]

When I look in the Google play store (android apps market), I see that there are a lot of apps to make secure phone calls. However, all the apps I have seen so far all seem to use data packets over ...
0
votes
1answer
59 views

How much security would I lose if I enabled “easy enter” pins on an android device?

There is an option on android devices to unlock when the correct pin/password is entered, but without the user explicitly pressing the "done" or "enter" button. How much security does this remove from ...
3
votes
3answers
912 views

Android/iOS application security testing checklist

According to OWASP, we have a list of top ten mobile application vulnerabilities. But we are damn sure that the number of vulnerabilities on mobile apps, especially android apps are far more than ...
2
votes
2answers
93 views

How secure is a MD5 hash of an 128bit key

Apparently, for the Android KeyChain an encrypted master key is stored along the MD5 hash of the unencrypted Key. How secure is that? MD5 is known to have collisions, but I guess we can assume with an ...
3
votes
1answer
89 views

Offline phone security

How secure is an offline android phone? Some background. I want to use an app called Bither on android, which allows me to create a cold wallet on 1 phone and a hot wallet on another phone. Cold ...
3
votes
1answer
91 views

How does Android's security model differ from UNIX's?

In UNIX's security model, you log in as a user, and then every process you start can access everything that belongs to your user account - that is, the trust is based on the user account, not on the ...
1
vote
1answer
81 views

encryption of Google's android apps

Does Google use encryption on it's Android apps like Gmail, drive, Google Play, docs, others in authentication and transit? What the type of encryption is it? Is it secure? I have tried searching ...
2
votes
2answers
177 views

What are methods to protecting an android phone from law enforcement

From what I hear, android uses the standard linux dm-crypt for encryption. Obviously you should have: A pin/password for your phone That pin/password should at least be 8 characters The question ...
1
vote
2answers
577 views

Intercepting SSL traffic on Android app

I am trying to intercept SSL traffic from my Android app to test the security. I am using certificate pinning in the hopes I can prevent people from snooping. I have tested by configuring ProxyDroid ...
0
votes
1answer
134 views

Rooted android cached password

Assume you could exploit a vulnerability on an old Android 2.2, the questions are: 1- Is there anyway you could see stored passwords on that operating system, specially Facebook password. 2- Can you ...
6
votes
1answer
784 views

Competitor app blocks our app, need a way to bypass their check [closed]

We have a taxi app which has been quite successful in Europe. But recently one of our competitors has started checking if our app is installed and if it is, theirs won't run until the user uninstalls ...