Questions tagged [android]
Questions tagged [Android] should focus on security of the operating system itself, or of Android-specific apps. Questions about Android that are not directly security-related should be asked at android.stackexchange.com.
1,399 questions
0 votes
0 answers
4 views
How to analyse Android mobile memory? [migrated]
Is there any method to forensically analyse Android mobile memory without rooting the phone. I want to capture malware in my Android phone.
0 votes
0 answers
29 views
Whatsapp notifications bypassing Nordvpn despite "Block connection without VPN" on Android. How to resolve? [migrated]
I use Nordvpn on my Xiaomi Redmi Note 12. When Nordvpn is not connected I still receive notifications via Whatsapp "You may have new messages". When I then connect to Nordvpn the actual new ...
- 183
0 votes
0 answers
100 views
Why are the Chrome/Chromium JavaScript engines (V8) vulnerabilities more difficult to reproduce on Android compared to Windows and Debian?
I conducted tests on the vulnerabilities of 5 Chrome/Chromium JavaScript engines (V8) on three platforms (the list of vulnerabilities is as follows). Without exception, the Android system failed to ...
- 1
1 vote
1 answer
142 views
Is Android Keystore/iOS Keychain without biometric authentication still secure against physical access attacks?
I'm implementing refresh token storage in a mobile app and trying to understand the practical security differences between these two approaches: Option 1: Hardware-backed storage WITHOUT biometric ...
- 185
0 votes
1 answer
166 views
Securing OpenSSL for my Android project
I am working on a security-related project and have to make sure there are no OpenSSL attacks. According to my understanding, OpenSSL attacks can be at at hardware as well as software level. Currently ...
- 1
0 votes
0 answers
157 views
Altered Android app icon, indication of spyware?
While setting up and debugging a VPN connection on an Android device with the “Net Analyzer” app, I spotted by chance a suspicious icon in the application as shown in the screenshot below (shows the ...
- 1
1 vote
0 answers
55 views
Where can I get a list of trusted certificate authorities? [duplicate]
Background (Disclaimer: I know very little on this whole topic) Let's Encrypt has recently dropped some Certificate Authorities (the TLSv1.0?), which is an issue for Android 4 devices, since now they ...
- 235
6 votes
3 answers
1k views
Keyboard isolation in Android
I'm currently running GrapheneOS on a Pixel 6a, and I have installed several alternative keyboards from F-Droid and the Play Store. How isolated are keyboards in Android? When I enable a keyboard in ...
- 975