Questions tagged [android-security]

Tag used by Android in Security Alert messages to developers. The Security Alert message is often accompanied with a Google-Play rejection. AOSP instructions state to tag a question with it.

Tag used by Android in Security Alert messages to developers. The Security Alert message is often accompanied with a Google-Play rejection. AOSP instructions state to tag a question with it.

656 questions
4
votes
3 answers

Any Good way of securing assets and video file store internal in android or react-native

We are building completely offline commercial eLearning app. we have to store some important video locally in the app and we don't want that to be stolen by extracting apk. Is there any good way to achieve this with encryption/decryption or password…
Bheru Lal Lohar
  • 880
  • 9
  • 17
4
votes
2 answers

Android Keystore?.getKey returns null on some devices

I'm implementing fingerprint authentication in my application. I faced the problem that in doesn't work properly on some devices and my application crashes. Nevertheless, it works on some devices too. The issue is in this line val key =…
4
votes
1 answer

How to disable audio recording apps in Android

We are developing live streaming video application. So we need to give secure for Audio & Video content. What I am tried I am able to restrict screenshots & video content with help of following…
Ranjithkumar
  • 16,071
  • 12
  • 120
  • 159
4
votes
0 answers

what if my device doesn't support work profiles?

I want to create an android enterprise app that manages which apps to show to an owner device. I tried the BasicManagedProfile sample but I got "This device doesn't support work profiles" on my device. Is it possible to do something else to get…
Josema
  • 445
  • 2
  • 6
  • 22
4
votes
1 answer

Alternative way removes security warning when using ANDROID_ID and how to get the device id?

public static String getDeviceID(Context mContext) { String deviceId = Settings.Secure.getString(mContext.getContentResolver(), Settings.Secure.ANDROID_ID); return deviceId; } This shows a security warning, "Using 'getString'…
Dino Sunny
  • 921
  • 1
  • 10
  • 18
4
votes
2 answers

How to create an SSL connection using an installed user certificate on android

We are using user certificates for authentication from our mobile application to an F5 server. We have tested the process using a test certificate that we installed and created a keystore to use in creating our SSLContext object. For production we…
Mike
  • 41
  • 2
4
votes
2 answers

Get all permissions during app installation on targeting API 26

In Android API version 22 and before, system will get all permission while installation. From API 23(Marshmallow), system asks for permission during runtime(when the app actually tries to use a feature). This is not working out very well for some of…
whoami
  • 1,517
  • 1
  • 21
  • 29
4
votes
3 answers

Apktool Error retrieving parent for item: No resource found that matches the given name '@android:style/Animation.OptionsPanel'

I was trying to rebuild an apk using apktool (apktool-2.1.1). Encountered an error i) No resource found that matches the given name '@android:style/Animation.OptionsPanel' ii)No resource found that matches the given name…
4
votes
1 answer

Android NDK: override dynamic linking for native libraries?

I have an application that uses some native libraries through .SO files. I'm in a situation where I can't upload a new version of the app to Google play because those native libraries link to old versions of OpenSSL and LibPNG which have security…
Mina Wissa
  • 10,923
  • 13
  • 90
  • 158
4
votes
1 answer

System Overlay Detector

Is there a way to detect within my own app that a Screen Overlay is currently present? For example, I see in the settings that they detect it: I would like to know if there is a way to detect it myself within my own app.
hellowill89
  • 1,538
  • 2
  • 15
  • 26
4
votes
1 answer

How check programmaticallly TEE support on Android?

How check programmaticallly TEE support on Android? In a project we need check if TEE (Trusted Execution Environment) is supported in order to make a decision. Regards.
Zeus Monolitics
  • 832
  • 9
  • 19
4
votes
1 answer

Can i skip asking Runtime Permissions on marshmallow?

Now this is something very interesting for me, I know mostly about Runtime Permissions and i am well aware of why Runtime Permissions proposed? and How we can use it? but in this question which is about a problem rising due to this run time…
4
votes
0 answers

How is application sandbox implemented in Android?

I'm interested in understanding the implementation of application sandbox in Android. My understanding is that it is by creating user accounts for each application and giving appropriate permissions. Also, how is the call to internal storage mapped…
Srinivas
  • 332
  • 4
  • 18
4
votes
1 answer

Simulate the solution for Security Alert - unsafe implementation of X509TrustManager

So, Lately I am getting the below warning inside my developer console and to resolve the same I have done the required fixes. As suggested by Google , here To confirm you’ve made the correct changes, submit the updated version of your app to the…
Prateek
  • 3,923
  • 6
  • 41
  • 79
4
votes
1 answer

How secure is GoogleAuthUtils.getToken() if app gets decompiled

I am currently building an app for Android that requests data from my backend server. Of course, I want to know if a request received on my server really comes from my app or if someone just sends HTTP requests from another server etc. I read Tim…
svenpanko
  • 180
  • 8