Android & android phone security opinions

Forums › Android › Android & android phone security opinions

gzt

10195 posts

Uber Geek
+1 received by user: 1562

Topic # 160087 23-Dec-2014 09:07

I would like to know more about android o/s security & android phone security.

What are the main risks for Android o/s devices?
Are there ways to mitigate these risks? (settings, habits, etc)
Are any of the security apps useful, worthwhile, or otherwise?

timmmay

14152 posts

Uber Geek
+1 received by user: 2546

Trusted

Subscriber

Reply # 1202481 23-Dec-2014 09:50

One person supports this post

You can encrypt Android devices. Slows them down a bit but without the PIN no-one can see anything even if they have the device. Then you probably just have to consider remote vulnerabilities - if half your data's in cloud storage/services which is the easier attack vector?

AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer

Wade

2173 posts

Uber Geek
+1 received by user: 359

Reply # 1202503 23-Dec-2014 10:12

One person supports this post

I have all contacts associated with my gmail/facebook/linkedIn/etc ie nothing stored locally on phone, i have photos and videos automatically back up to dropbox, i use Google Music so any music on my phone is already backed up there, in reality, my smartphone is a dumb terminal of sorts, most likely if i lose my phone the pattern lock will be sufficient to keep most at bay or at least buy me enough time to find another phone or browser to access Google device manager and remote wipe the device

reven

3373 posts

Uber Geek
+1 received by user: 653

Trusted

Reply # 1202504 23-Dec-2014 10:12

timmmay: You can encrypt Android devices. Slows them down a bit but without the PIN no-one can see anything even if they have the device. Then you probably just have to consider remote vulnerabilities - if half your data's in cloud storage/services which is the easier attack vector?

encrypting my phone now :) didnt really think about it before (which is odd as my tablets are encrypted....)

nathan

4977 posts

Uber Geek
+1 received by user: 1323

Trusted

Microsoft

Reply # 1202508 23-Dec-2014 10:23

One person supports this post

being "open" is both a blessing and a curse

From <https://bluebox.com/blog/business/santa-or-the-grinch-android-tablet-analysis-2014/>

Bluebox Labs purchased over a dozen of these Black Friday “bargain” Android tablets from big name retailers like Best Buy, Walmart, Target, Kmart, Kohl’s and Staples, and reviewed each of them for security. What we found was shocking: most of the devices ship with vulnerabilities and security misconfigurations; a few even include security backdoors.

What seemed like great bargains turned out to be big security concerns. Unfortunately, unsuspecting consumers who purchase and use these devices will be putting their mobile data & passwords at risk.

View the infographic summarizing this data here: https://bluebox.com/wp-content/uploads/2014/11/Black-Friday-Infographic-rev.pdf

timmmay

14152 posts

Uber Geek
+1 received by user: 2546

Trusted

Subscriber

Reply # 1202512 23-Dec-2014 10:28

One person supports this post

I left my phone at home today, not really a problem. My calendars, contacts, to do list, etc are all online. Sure I can't receive calls but I changed my voicemail to tell people to call me at work or email me. Very handy :)

AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer

gzt

10195 posts

Uber Geek
+1 received by user: 1562

Reply # 1202741 23-Dec-2014 15:56

nathan: Bluebox Labs purchased over a dozen of these Black Friday “bargain” Android tablets from big name retailers like Best Buy, Walmart, Target, Kmart, Kohl’s and Staples, and reviewed each of them for security. What we found was shocking: most of the devices ship with vulnerabilities and security misconfigurations; a few even include security backdoors.

That was interesting. I don't think i will be needing it but good to know an assessment app exists and might develop further.

https://play.google.com/store/apps/details?id=com.bluebox.trust

nathan

4977 posts

Uber Geek
+1 received by user: 1323

Trusted

Microsoft

Reply # 1203145 24-Dec-2014 12:48

Five of the best (and free) Android security apps

http://www.zdnet.com/pictures/five-of-the-best-and-free-android-security-apps/

blakamin

Aussie
4237 posts

Uber Geek
+1 received by user: 1208

Trusted

Subscriber

Reply # 1203171 24-Dec-2014 13:22

One person supports this post

nathan: Five of the best (and free) Android security apps

http://www.zdnet.com/pictures/five-of-the-best-and-free-android-security-apps/

And I personally wouldn't touch any of them with a barge pole due to my past experiences with AV software from Avast, Norton etc.

That said, I do use "Lookout" and have since release. Doesn't slow my device.

Common sense is the big thing. Don't download "crappy" apps (look at reviews, but don't believe the ones with no comments / same wording), don't use free wifi for important things (banking etc), encrypt your device (mine unlocks when my pebble is within range), use android device manager, and back things up.
:)

nathan

4977 posts

Uber Geek
+1 received by user: 1323

Trusted

Microsoft

Reply # 1203178 24-Dec-2014 13:26

2 people support this post

people don't have common sense

blakamin

Aussie
4237 posts

Uber Geek
+1 received by user: 1208

Trusted

Subscriber

Reply # 1203182 24-Dec-2014 13:28

nathan: people don't have common sense

Good point. :D

gzt

10195 posts

Uber Geek
+1 received by user: 1562

Reply # 1203496 25-Dec-2014 01:05

Lookout might be a sensible and minimal solution. Would you recommend it for non-tech users? Is it silent and block stuff by default? or lots of dialogs and things for a user to deal with?

Thank you all and Merry Xmas and Seasonal Greetings : )