Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 59811

Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at android.stackexchange.com.

2
votes
1answer
Once an Android device has been successfully rooted, are there any additional security risks created (besides telling SuperUser to trust a rogue root app)? For example, on a rooted Android device …
asked Mar 19 '15 by RockPaperLizard
2
votes
0answers
Occasionally, an Android app will require access to Accessibility services. As an example, see App Hibernator. What are the security implications of allowing an app access to Android's … Accessibility services? Obviously, it can record every keystroke. Are there any other concerns? Does the situation change if the device is rooted, even if the app does not use root privileges? Are there different concerns depending on the version of Android? …
asked Apr 12 '16 by RockPaperLizard
6
votes
1answer
On many of its Android devices, Samsung encourages the user to accept updates for Security Enhancements for Android. Here is Samsung's official page on the updates: http://www.samsung.com/hk_en … /support/skp/faq/1028007 The user is presented with the following message encouraging them to allow updates to to SE for Android: Security policy updates Security Enhancements for Android
asked Jun 4 '17 by RockPaperLizard
1
vote
1answer
Assuming: You control access to an Android device You never connect that Android device to a malware-infected system via a USB cable Are there any risks with keeping USB Debugging always enabled on the Android device? If your answer is Android version-dependent, please explain. …
asked Jan 26 '16 by RockPaperLizard
5
votes
1answer
What are the appropriate steps to recommend for people to take after they connect their Android device to questionable open WiFi access points? When I say "people", I mean friends and colleagues. I … am not referring to establishing a corporate security policy. This seems especially important for Android, since unlike some other operating systems, very few people actually use properly patched …
asked May 4 '16 by RockPaperLizard
6
votes
1answer
Situation: User installed an Android app from the Google Play Store. User's device is rooted, but that app does not have root privileges. XPrivacy reveals that the app is trying to make IPC (inter … " without providing references explaining how an app without root privileges can break out of the Android sandbox. Note that this particular case was for Android KitKat, so information for that version of …
asked Feb 22 '16 by RockPaperLizard
2
votes
2answers
On my request, a developer gave me a new version of his Android app to test. The app requires root permissions. I do not know the developer personally. I have no specific reasons to trust or … distrust him/her. How can I check the APK to best ensure it is safe? Virustotal is a common site to check files, but it's unclear if it is appropriate or comprehensive for Android APK files. …
asked Feb 21 '15 by RockPaperLizard
4
votes
2answers
When I connect most Android phones to a Windows 7 computer via USB, Windows will install the appropriate drivers for the device. My (possibly incorrect) understanding is that those drivers come with … Microsoft channels. When I plug in a ZTE Android phone to a Windows computer, however, I get a unique menu on the phone. Three of the options are expected: Charge only Media device (MTP) Camera …
asked Dec 19 '16 by RockPaperLizard
11
votes
2answers
In a previous question in InfoSec, I asked about how to determine the safety of a sideloaded Android app that requires root permissions. Now I would like to ask a related, but different question: Is … it important to check the safety of an Android app that does not require root permissions and will not have data access? If data access is disabled for the app (via a firewall with root permissions …
asked Mar 8 '15 by RockPaperLizard
56
votes
as "Patch Tuesday". There's a reason we call the next day "Exploit Wednesday". It's unfortunate that a significant chunk of the Android ecosystem has not learned from this phenomenon. Updates … ". Netflix, YouTube, and Twitch stream videos to millions of people every day, and even with their combined traffic, they have yet to "crash the internet". On the other hand, Android patches are …
answered May 16 '16 by RockPaperLizard
2
votes
0answers
When an Android app deletes a calendar event in a local (offline / non-synced) calendar, does Android's Calendar Storage (com.android.providers.calendar) actually delete the event or does it just … flag the event as deleted? The reason I ask is because I was shocked to discover that one of the most popular Android calendar apps, Business Calendar 2, includes deleted events in export files. If you …
asked May 26 '16 by RockPaperLizard