Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

gzt



10195 posts

Uber Geek
+1 received by user: 1562


Topic # 160087 23-Dec-2014 09:07
Send private message

I would like to know more about android o/s security & android phone security.

What are the main risks for Android o/s devices?
Are there ways to mitigate these risks? (settings, habits, etc)
Are any of the security apps useful, worthwhile, or otherwise?

Create new topic
14152 posts

Uber Geek
+1 received by user: 2546

Trusted
Subscriber

  Reply # 1202481 23-Dec-2014 09:50
One person supports this post
Send private message

You can encrypt Android devices. Slows them down a bit but without the PIN no-one can see anything even if they have the device. Then you probably just have to consider remote vulnerabilities - if half your data's in cloud storage/services which is the easier attack vector?




AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


2173 posts

Uber Geek
+1 received by user: 359


  Reply # 1202503 23-Dec-2014 10:12
One person supports this post
Send private message

I have all contacts associated with my gmail/facebook/linkedIn/etc ie nothing stored locally on phone, i have photos and videos automatically back up to dropbox, i use Google Music so any music on my phone is already backed up there, in reality, my smartphone is a dumb terminal of sorts, most likely if i lose my phone the pattern lock will be sufficient to keep most at bay or at least buy me enough time to find another phone or browser to access Google device manager and remote wipe the device

3373 posts

Uber Geek
+1 received by user: 653

Trusted

  Reply # 1202504 23-Dec-2014 10:12
Send private message

timmmay: You can encrypt Android devices. Slows them down a bit but without the PIN no-one can see anything even if they have the device. Then you probably just have to consider remote vulnerabilities - if half your data's in cloud storage/services which is the easier attack vector?


encrypting my phone now :) didnt really think about it before (which is odd as my tablets are encrypted....)

4977 posts

Uber Geek
+1 received by user: 1323

Trusted
Microsoft

  Reply # 1202508 23-Dec-2014 10:23
One person supports this post
Send private message

being "open" is both a blessing and a curse

From <https://bluebox.com/blog/business/santa-or-the-grinch-android-tablet-analysis-2014/>

Bluebox Labs purchased over a dozen of these Black Friday “bargain” Android tablets from big name retailers like Best Buy, Walmart, Target, Kmart, Kohl’s and Staples, and reviewed each of them for security. What we found was shocking: most of the devices ship with vulnerabilities and security misconfigurations; a few even include security backdoors.

What seemed like great bargains turned out to be big security concerns. Unfortunately, unsuspecting consumers who purchase and use these devices will be putting their mobile data & passwords at risk.

View the infographic summarizing this data here: https://bluebox.com/wp-content/uploads/2014/11/Black-Friday-Infographic-rev.pdf

14152 posts

Uber Geek
+1 received by user: 2546

Trusted
Subscriber

  Reply # 1202512 23-Dec-2014 10:28
One person supports this post
Send private message

I left my phone at home today, not really a problem. My calendars, contacts, to do list, etc are all online. Sure I can't receive calls but I changed my voicemail to tell people to call me at work or email me. Very handy :)




AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


gzt



10195 posts

Uber Geek
+1 received by user: 1562


  Reply # 1202741 23-Dec-2014 15:56
Send private message

nathan: Bluebox Labs purchased over a dozen of these Black Friday “bargain” Android tablets from big name retailers like Best Buy, Walmart, Target, Kmart, Kohl’s and Staples, and reviewed each of them for security. What we found was shocking: most of the devices ship with vulnerabilities and security misconfigurations; a few even include security backdoors.

That was interesting. I don't think i will be needing it but good to know an assessment app exists and might develop further.

https://play.google.com/store/apps/details?id=com.bluebox.trust

4977 posts

Uber Geek
+1 received by user: 1323

Trusted
Microsoft

  Reply # 1203145 24-Dec-2014 12:48
Send private message
Aussie
4237 posts

Uber Geek
+1 received by user: 1208

Trusted
Subscriber

  Reply # 1203171 24-Dec-2014 13:22
One person supports this post
Send private message

nathan: Five of the best (and free) Android security apps

http://www.zdnet.com/pictures/five-of-the-best-and-free-android-security-apps/


And I personally wouldn't touch any of them with a barge pole due to my past experiences with AV software from Avast, Norton etc.

That said, I do use "Lookout" and have since release. Doesn't slow my device.

Common sense is the big thing. Don't download "crappy" apps (look at reviews, but don't believe the ones with no comments / same wording), don't use free wifi for important things (banking etc), encrypt your device (mine unlocks when my pebble is within range), use android device manager, and back things up.
:)

4977 posts

Uber Geek
+1 received by user: 1323

Trusted
Microsoft

  Reply # 1203178 24-Dec-2014 13:26
2 people support this post
Send private message

people don't have common sense

Aussie
4237 posts

Uber Geek
+1 received by user: 1208

Trusted
Subscriber

  Reply # 1203182 24-Dec-2014 13:28
Send private message

nathan: people don't have common sense


Good point. :D

gzt



10195 posts

Uber Geek
+1 received by user: 1562


  Reply # 1203496 25-Dec-2014 01:05
Send private message

Lookout might be a sensible and minimal solution. Would you recommend it for non-tech users? Is it silent and block stuff by default? or lots of dialogs and things for a user to deal with?

Thank you all and Merry Xmas and Seasonal Greetings : )

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.