A smartphone is a mobile device which combines many of the basic features of personal computing such as email, media playback and web browsing, with the traditional features of a telephone.

learn more… | top users | synonyms

138
votes
5answers
134k views

Is Telegram secure?

There is a new WhatsApp-killer application called Telegram. They said that it's open source and that it has a more secure encryption. But they store all the messages in their servers and WhatsApp ...
76
votes
6answers
6k views

What security features are important when buying a smartphone?

I'm looking at replacing my very old android smartphone. Information security is increasingly a feature that I'm looking for. As well as being slow, I don't think I can upgrade my current handset to ...
29
votes
3answers
3k views

Can malware be transmitted via a USB charger plugged into a wall socket?

I have a smart phone that I often plug into a wall socket for charging via a small adapter that rectifies the AC to DC power and transforms the voltage from line (120V or 240V) to 5 V DC, probably ...
28
votes
7answers
3k views

What is a good way to authenticate a user to a smart phone?

What would be a good way to authenticate a user to a smart phone? By good, I mean that it is both secure, and user-friendly. Passwords don't seem to be the best fit because a password needs to be ...
26
votes
12answers
7k views

Can I get malware on my phone, if my phone is tethered to my laptop downloading torrents?

I used a dongle before getting a phone, but now use my phone as a hotspot. I don't want my phone to get malware or viruses. Can my phone get viruses if I use it as a hotspot while downloading ...
24
votes
3answers
3k views

Listening to phone calls as user profiling for marketing [closed]

I had a landline phone call about xyz with an xyz-expert (also on landline) for about an hour, for the first time. After couple of days I started getting suggested links on websites as an ad exactly ...
19
votes
3answers
3k views

Could my bank's two-factor authentication be hacked?

When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account. Is this vulnerable to attack, without ...
14
votes
3answers
14k views

How secure is Android's facial recognition?

Android supports using facial recognition for unlocking your phone. How secure is that mechanism? For instance, if someone has a good quality picture of your face, can they defeat the facial ...
14
votes
2answers
5k views

Cordova/Phonegap: RefreshToken in localstorage

I am (partly) following a tutorial to develop a cordova app, based on angularJS. The author stores the refresh token in local storage, which was said to be very bad practice in one of the comments on ...
11
votes
1answer
157 views

Why does Android mix phone state with phone identity?

The "Phone State" permission on Android is widely requested by many apps. The explanation often given by the developer is that the app needs it in order to determine when you're on the phone, to stop ...
9
votes
5answers
8k views

Is it possible for a phone to be transmitting even while turned off and the battery removed?

Is it technically or theoretically possible for any part of a mobile phone's circuitry to be still on and transmitting even while turned off and the battery has been removed? If so, how? I am ...
8
votes
6answers
2k views

Are smartphones at least as safe as “regular” computers for personal data?

Like a lot of people, I pretty much run my life on the Web these days. I use online bill pay, I shop at Internet retailers, I keep in touch with friends electronically, &c. I'm pretty comfortable ...
8
votes
1answer
486 views

Connection Android - Baseband Processor - SIM Card

I currently examine the hidden components of a smartphone, inspired by the research of Weinmann All your baseband belong to us and Karsten Nohl Rooting Sim Cards. According to Weinmann, the ...
7
votes
4answers
724 views

airgap a smartphone?

I'm looking to use my smartphone purely as a portable computer, with no network functionality in order to protect my privacy. Is removing the sim cards from it enough to airgap it or do I need to go ...
7
votes
1answer
56 views

Does the use of a smartphone's Secure Element really offer security benefits to a banking app?

My bank's Android application allows users to perform financial transactions without the use of the physical token generator (which requires an ATM card to be inserted and a valid PIN to be provided) ...
6
votes
7answers
4k views

Can smartphone spyware work even if there is no data connection?

I am using an Android phone. Is it possible for spyware to transmit data even when I don't have any internet plan/connection? Can it use some other way, say, cellular network etc.? EDIT1: SMS and ...
6
votes
4answers
33k views

Is it possible to have a text message that I didn't send appear on my smart phone making it look as if I did send the text?

I have a client who claims that some text messages "appeared" on her phone that she did not send. I think she may be telling the truth because it seems entirely too coincidental that these messages ...
6
votes
2answers
5k views

iPhone full disk encryption and theft protection?

Is it possible to fully encrypt an iPhone? What cipher does it use and are there any weaknesses? How can I protect my valuable data, such as email, when my iPhone gets stolen?
6
votes
3answers
423 views

Phone Privacy for Small Business

I'm a small business operator and I'm looking for ways to provide security and reasonable privacy for my own business communications and communications of customers. All these businesses operate ...
6
votes
3answers
6k views

how can I tell if I'm under IMSI cell phone surveillance

I've recently had an encounter with the law, the details of which I won't disclose here since the case is still in court. They took my phone, naturally. I deactivated it as soon as I was released ...
6
votes
1answer
547 views

Deal with number changes in a phone number based authentication/login system

Twitter Digits (https://get.fabric.io/digits) provides an authentication/login system based on phone numbers for mobile apps, and several other mobile apps (e.g. Square Cash, https://squareup.com/help/...
5
votes
4answers
510 views

Contact person by phone, when their phone might have malware

I have a problem setting where I want to contact a user by phone, and where I need to protect the integrity of the phone call as much as possible. I'm wondering about how to design the interaction in ...
5
votes
1answer
324 views

Android, how to protect in case of theft

What are some steps to take into account to protect an Android phone in case of theft? Smartphones are everywhere now, before the market was dominated by Blackberry and Windows Mobile. These days ...
5
votes
1answer
2k views

Is it safe to use public USB charging stations? [duplicate]

I'm beginning to see more and more public device charging stations — okay, they're still mostly in airports — that include USB outlets, not just regular power outlets. Are these safe to ...
5
votes
2answers
828 views

Can a caller “Hijack” your SIM information?

We have all heard them, rumors about people randomly calling you on your mobile phone number and asking you to confirm something by typing in a specific combination onto your dial pad (the rumor I'm ...
4
votes
3answers
676 views

What are the problems with bring-your-own-device related to smartphones?

What are the problems with bring-your-own-device related to smartphones? Companies see this more and more everyday, people want to use their personal devices on the corporate network or even use them ...
4
votes
3answers
331 views

Are there any known botnets targetting smartphones?

Are there any known botnets that specifically target smartphones? What is their topology and how are they controlled? What are they used for?
4
votes
1answer
136 views

Is it unsafe to restore backed up data from Google servers?

I have an Android smartphone that I don't trust. It has an old version of Android and has been vulnerable to Stagefright and a host of a hundred other vulnerabilities for months. Although there is no ...
4
votes
2answers
1k views

How can I recover files encrypted by Android ransomware?

My Samsung Galaxy Note II was infected by a virus called the "FBI virus." Fortunately, I've managed to remove the malware but my problem now is that all my files have been encrypted. How can I ...
4
votes
2answers
6k views

How to secure usb data storage of Android phones?

I just found out that if I connect my phone to a laptop with a cable, the password becomes completely USELESS. So how can I protect the data in my phone from a usb cable? It's actually very easy to ...
4
votes
1answer
180 views

What are some security measurements that can be taken with Windows Phone?

In corporate security it's often important to have confidential information, such as email, encrypted on your phone. How does Windows Phone (not Windows Mobile) cope with these issues?
4
votes
1answer
148 views

Way to keep Google from knowing the SIM card I am using on Android

We see that the the details of the Telecom operator along with other details are available to Google for the SIM card that we are using on an Android Phone. Is there any way that can be applied or ...
3
votes
5answers
768 views

What are the major security concerns for smartphones? [closed]

With sales of smartphone on the ascend and PC sales on the decline, the demand for smartphones will soon outstrip the PC. What will be some of the new major foreseeable security concerns present on ...
3
votes
2answers
114 views

My cellphone is infected, and it keeps coming back

Please bear with me as English is not my native language My Android smartphone downloads apps automatically without any interaction. Generally the apps are known but some are unknown apps. I can only ...
3
votes
2answers
337 views

Phone Applications having SSL/TLS enabled behind the scenes?

Please Note: This question is slightly based on me being a tin foiled hat with the issues that has arisen from the leaks, documents, and questioning trust thanks to Edward Snowden. Thanks to adding ...
3
votes
1answer
287 views

Smartphone motherboard - Does it hold any data?

I recently went for a smartphone repair and got its motherboard replaced. However, it didn't occur to me to ask for the damaged motherboard back. I had confidential credentials and data stored. No ...
3
votes
1answer
148 views

Password security on lost or stolen smartphone

I have a number of apps on my smartphone that store the passwords - facebook, mail, etc. So say the phone is lost or stolen and the finder decides he wants my passwords - what can he do to get them, ...
2
votes
4answers
2k views

Tails like OS for Smartphones

In Jacob Applebaum's latest talk at the 30c3 conference, he advised all journalists to use Tails or similar OS for their laptops. Does anyone know of a similar OS or functionality for Smartphones? ...
2
votes
1answer
220 views

Why Google and smartphone manufacturers don't care about updates?

For Windows, Firefox/Chrome, Java, Flash critical updates are issued each couple weeks, and as far my understanding goes, it is REALLY bad not to install them ASAP. For my 3 year old Samsung ...
2
votes
1answer
534 views

Can malicious phone software mount a MITM attack on a phone call?

Suppose my smartphone has been compromised and there is malicious software running on it. You can assume that the malicious software has broken out of any sandboxes and is running as root. If I'm on ...
2
votes
2answers
648 views

Can you protect corporate email on personal phones without the option of wiping all personal data?

Our company recently announced a new IT policy that requires encryption of any personal smartphone used to connect to the corporate Exchange server. As far as I can tell, they're using Exchange ...
2
votes
3answers
220 views

Is it possible to jam just one persons Cellphone but keep all other working?

I know devices that are jamming everyones Cellphones in a radius of X meters but this is only distracting the frequency cellphones work on. This is not very handy. Is it be possible to jam just one ...
2
votes
6answers
454 views

Deterring Mobile phone Tethering in the workplace

How do you put in controls to prevent a staff using his/her mobile phone to tether 3G/4G connection and download unauthorized files onto the office PC? Of course minimally there must be an AV in ...
2
votes
1answer
91 views

VPN using SmartPhone Location

When you VPN using your smartphone as a hotspot, can the VPN tell your location like it can when you VPN over a wireless connection hotspot?
2
votes
2answers
117 views

Actual issue? Phone switches from 3G to router makes session switch from https to http

I heard that a security issue exists in some cases when a mobile phone has: Connected to a website via https via 3G Connects to a router I'm told that that in this particular scenario the router ...
1
vote
2answers
92 views

Phone Hacked. How serious is it?

I was in an argument online with a guy and he sent me a fake youtube link. I clicked on it like an idiot and he asked me how my city is (he knows the name) and he knows my cable provider. Does anyone ...
1
vote
1answer
98 views

(Theoretically) intercepting GCHQ's smartphone exploit

In the lastest Snowden interview, it was revealed that GCHQ used an exploit sent via SMS to gain access to smartphones, and that this 'exploit' goes unnoticed to the handset user. I was wondering if ...
1
vote
1answer
158 views

Cell phone cloning and applications that use internet

I recently watched a show where someone was able to clone a smartphone with the FID, IMEI or other numbers found on a phone. They were able to see the other parties text messages and call logs. My ...
1
vote
2answers
522 views

Could one fit a root application in sim card

In the third Mr.Robot episode a character inserted a Micro-SD card in a smartphone in order to root it and gain information, so I thought maybe someone could fit a root-kit on a Sim-card. Would that ...
1
vote
1answer
235 views

Is there a backdoor in the hardware of our smartphones?

I don't know for you but I always felt like Android especially is not safe. Is somebody - the government or other - able to listen to my microphone, or access my hard drive remotely ? I'm wondering ...