Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,785,791 Members 47,264 Now Online
XDA Developers Android and Mobile Development Forum

[Suggestions & Discussions] Why mobile security matters

Tip us?
 
Old
(Last edited by Dô; 20th December 2012 at 08:07 AM.)
#1  
Dô's Avatar
Recognized Contributor - OP
Thanks Meter 4,424
Posts: 7,804
Join Date: May 2012
Location: ▂ ▃ ▅ ▆ █ Watching You @!@

 
DONATE TO ME
Default [Suggestions & Discussions] Why mobile security matters

Hey XDAian...

Here I am back again for few suggestions & discussion.

Based on some pretty interesting facts about "mobile in general", The smartphone segment has brought accessibility to millions around the world, at work and at home. Naturally, all the data in those devices, wirelessly accessible, becomes a gold mine for those with nefarious motives to exploit.

On the work front, smartphones are a huge contributor to productivity. At home, they provide meaningful and useful (and sometimes redundant) ways to stay in touch with friends and family. The more of these devices we buy, the bigger the opportunity is for criminals, because there are so many ways to get the data. We might lose a device, or its is stolen, we might download a bad application, or soon brush against an NFC tag or visit a bad web-page. The possibilities are so diverse compared to a PC or server farm hardwired to the internet.

With the tremendous growth of the smartphone market not expected to slow down anytime soon, people and organizations must be vigilant in guarding against breaches of their data and/or personal information. Even as organized hackers work on ways to score the high-value breach, they are working on high-volume, low-risk attacks against weaker targets as well.

In addition to some tips about securing mobile devices, the infographic has some interesting facts from 2011 in there as well, such as 855 breaches resulted in the theft of 174 million records.

We Need some Security Applications for preventing our valuable data (like Msgs, Contacts, Pin codes etc). Therefore, from my side this thread belong to all XDAians.

Please suggest the latest, finest Applications & few tremendous suggestion from all Devs, RC, RD & Members.

I like a Security based Application called LBE Privacy Guard to Prevent sending data through various applications installed at our Mobile.




Some Great Ideas Received from Our XDA Members. Which are here follows:
As this OP thread may become too long so, for Batter view just press "Show Contents" for there suggestions.


This One is provided by Our Great Sr.MOD Justin:
 

Personally, I place little emphasis on mobile security. Things like antivirus, password protectors etc. make sense if you store a lot of mission-critical, sensitive data on your phone, or frequent a lot of open hotspots, leave your Bluetooth on and 'visible' in public places, but otherwise just chew battery, CPU cycles and money.

I can appreciate the need for such things, in some instances (proper business users, etc.). I have little faith in an app to look after my security however, and would instead recommend a few lifestyle changes where possible, to improve your security:

1. Never use open, public WiFi. If you must, never use it for sites you log into, sites that control your money, or sites that contain other sensitive information. Doesn't take much for that guy outside McDonalds on his laptop to be sniffing packets.

2. Turn on Bluetooth and NFC only when you intend to use them. Not only do you save precious battery, you ensure that your close-range transmission technologies are only on when you need them, and not at other times. Also, set a unique Bluetooth passcode for your device, rather than the generic '0000'.

3. Never let your browser remember any passwords.

4. When setting passwords and PINs, never use a bank PIN, and always use 'leetspeak' for your passwords. For example, I would like my password for XDA to be 'firewood'. Rather than just typing it, try substituting letters for numbers, like this: F1r3W00d. Mix up your capital and lower-case letters, even substitute characters for letters or numbers. Do anything you can to ensure your passwords don't resemble anything from a dictionary!

I have no idea whether these steps have helped, but I haven't been the victim of online identity theft yet - even my passwords have never been compromised.

I think it's something we should always keep in mind, but never worry too much about. The risk is always there but it's a big, wide world.


This One is provided by Our Great buddy Adam77root:
 

Mobile security is getting more and more important nowadays. But the worst is that people don't know about and are not aware of the security issues that all pose a high threat to gadget users. There are plenty of ways for which stolen data can be used for and most of the people don't even think of themselves being impersonated by hackers.

Because of the design of the Android system it's very easy to write fully-featured malwares for this platform as the permissions are not handled on a low native (even kernel) level, but there are the Android permissions most of you are already aware of. A lot of users don't read through the permissions that the application they install asks for, making it easy to fool them.

Hackers usually give such application and package names that they are very similar to those of the inner Android system, so the users don't delete those apps after a little Google search.

Coding in Java is extremely easy, you don't even have to free memory, as the garbage collector does that for you. This opens this platform for the so-called script-kiddies who are wannabe 'hackers' and want to create the 'best malware ever'. They're dangerous as there are a lot of them. There are also a lot of prebuilt libraries for Java, which can be used for making for example network communication easy.

If such an application is installed on a system, its easy to root the victim's device, opening a new way to compromise the OS. There are methods to root a great deal of devices (of course excluding some) and plant a rootkit on them for a longer stay. For example the app is then moved to the system partition where it cannot be deleted from.

Most of the modern malwares communicate through the internet with their author. If somebody uses a 2G/3G data connection and has no or limited data plan, it may cost high amount of money for the user. For example: Here, in Hungary, lot of teenagers use 0.facebook.com which allows them to browse Facebook without paying for it. Just imagine their parents when they get the bill because of a hacker.

I, personally, do not use any antiviruses on my phone. Even, I use only a free AVG on my Windows PC and nothing on my Linux box. Every system can be hacked and all AV-s can be bypassed. Sometimes I check the autorun apps to see if there isn't any suspicious.

To sum up: I advise you not to download/install any suspicious app on your phones and if you notice some strange network activity, do a deeper inspection on it and wipe your data (very important as most of the malwares are still installed there) or reflash your system if you want to make sure everything.



Here is few more points from our great RC Selva.simple.

 


Mobile security not only matters about protecting our data from phising and virus attacks but also protecting it when v lost our device. Because a smartphone falling into wrong hands can cause so much of trouble. So just wanna list down following points interms of mobile security

* When u buy a new smartphone, take a mobile-insurance along with it (atleast for an year). We may sometime doesn't know its importance. But it matters a lot. It comes around of 3% of mobile cost. Keep your bills and insurance papers safely.


* For all important personal contents (Contacts, Pics, Videos, Docs, Messages) you store in smartphone, have a secondary backup in your system or hard disk. It comes in handy when ur phone is totally dead or lost. Take this backup atleast once in two months. Lots of software available for this.


* Use personal lock apps like "Keep safe" to lock/hide your personal data.


* Use Mobile security apps like "Lookup" or "Avast". Even if not for its ant-virus feature, but must for its features of "Anti-theft" features. Apps that help in locating the device if in case the mobile is stolen and kept on.Or when your sim card is replaced with a new sim, sending out a sms from the new sim to a pre-configured number.


* Apart from all these, an important feature is to destroy all your personal contents (complete Erase) in your mobile if in case it is stolen. This will prevent our data falling in hands of wrong people.More than device, our data matters a lot.

I'm a personal victim of a stolen mobile phone, my Wave II. Since that was the time, i flashed a leaked Bada 2.0, no data was there in my mobile. So atleast i was happy with that. I had my mobile insurance which got me the 80% of money which led my way to Android world via Galaxy R.

Source of this amazing ad is Phone Arena.


"How to secure your Android phone and protect your data"


Just Go to this thread for the same ->How to secure your Android phone and protect your data


Download LBE privacy Gaurd / master for mobile -> Click here for thread.
The Following 8 Users Say Thank You to Dô For This Useful Post: [ Click to Expand ]
 
chandrus1983
Old
#2  
chandrus1983's Avatar
Senior Member
Thanks Meter 197
Posts: 966
Join Date: Jan 2012
Location: Somewhere In India
FOA, good thread (Y)
i know two apps which are good in security...
one is APPLOCK - https://play.google.com/store/apps/d...=search_result

another AFARIA - my bro uses this on his note, its suggested by his company to maintain their mails and lot other office stuff store on the phone-
https://play.google.com/store/apps/d...=search_result
Did I Help You ??? Hit Thanks

Paranoid Android 4.4.3

---------------------------------------------------------------------------------------------------------------------------------------------------
The Following User Says Thank You to chandrus1983 For This Useful Post: [ Click to Expand ]
 
vipul12389mehta
Old
#3  
Senior Member
Thanks Meter 277
Posts: 1,048
Join Date: Feb 2012
Location: Mumbai
U brought to my attention the importance of security...
Till nw i was least bothered n never paid attention...
Bt thanks...

Sent from my GT-I9103 using Tapatalk 2
Don't just say thanks......Press thanks if i have helped you

The Following User Says Thank You to vipul12389mehta For This Useful Post: [ Click to Expand ]
 
chandrus1983
Old
#4  
chandrus1983's Avatar
Senior Member
Thanks Meter 197
Posts: 966
Join Date: Jan 2012
Location: Somewhere In India
Quote:
Originally Posted by vipul12389mehta View Post
U brought to my attention the importance of security...
Till nw i was least bothered n never paid attention...
Bt thanks...

Sent from my GT-I9103 using Tapatalk 2
security is important man!! how can you let others read your messages or your mails or even look at your gallery ???
security is must!!
Did I Help You ??? Hit Thanks

Paranoid Android 4.4.3

---------------------------------------------------------------------------------------------------------------------------------------------------
The Following User Says Thank You to chandrus1983 For This Useful Post: [ Click to Expand ]
 
Old
#5  
Dô's Avatar
Recognized Contributor - OP
Thanks Meter 4,424
Posts: 7,804
Join Date: May 2012
Location: ▂ ▃ ▅ ▆ █ Watching You @!@

 
DONATE TO ME
Quote:
Originally Posted by chandrus1983 View Post
FOA, good thread (Y)
i know two apps which are good in security...
one is APPLOCK - https://play.google.com/store/apps/d...=search_result

another AFARIA - my bro uses this on his note, its suggested by his company to maintain their mails and lot other office stuff store on the phone-
https://play.google.com/store/apps/d...=search_result
Thanks buddy. U r like my bro.. :thumbup:can u pls add few more lines abt these two application. I will add both of it in OP.

Sent from my GT-I9103 using xda premium
The Following User Says Thank You to Dô For This Useful Post: [ Click to Expand ]
 
Old
#6  
Dô's Avatar
Recognized Contributor - OP
Thanks Meter 4,424
Posts: 7,804
Join Date: May 2012
Location: ▂ ▃ ▅ ▆ █ Watching You @!@

 
DONATE TO ME
Quote:
Originally Posted by vipul12389mehta View Post
U brought to my attention the importance of security...
Till nw i was least bothered n never paid attention...
Bt thanks...

Sent from my GT-I9103 using Tapatalk 2
Buddy if u will PM me then i will disclose u few points of applications.. bt security is highly recommended over android mobiles.

Sent from my GT-I9103 using xda premium
 
Old
(Last edited by Dô; 11th October 2012 at 05:55 PM.)
#7  
Dô's Avatar
Recognized Contributor - OP
Thanks Meter 4,424
Posts: 7,804
Join Date: May 2012
Location: ▂ ▃ ▅ ▆ █ Watching You @!@

 
DONATE TO ME
Quote:
Originally Posted by chandrus1983 View Post
security is important man!! how can you let others read your messages or your mails or even look at your gallery ???
security is must!!
This is what i was telling in whole thread buddy. Security is as much as essential like security of ur bank account. If a unknown person is having ur personal data, it means u are in big trouble. So, for security point of view we must have knowledge abt the same.

Edit: thats why i asked fron Devs/RC/RD to come ahead and provide us the right path of security.
Sent from my GT-I9103 using xda premium
 
chandrus1983
Old
#8  
chandrus1983's Avatar
Senior Member
Thanks Meter 197
Posts: 966
Join Date: Jan 2012
Location: Somewhere In India
Quote:
Originally Posted by kataria.vikesh View Post
Thanks buddy. U r like my bro.. :thumbup:can u pls add few more lines abt these two application. I will add both of it in OP.

Sent from my GT-I9103 using xda premium
Yes I will write when I get on pc, and ask more info about the afaria app from my brother.and update it.

From my Limited Edition SGR
Did I Help You ??? Hit Thanks

Paranoid Android 4.4.3

---------------------------------------------------------------------------------------------------------------------------------------------------
 
Adam77Root
Old
#9  
Adam77Root's Avatar
Recognized Developer
Thanks Meter 11,005
Posts: 2,412
Join Date: Jul 2012
Location: My coordinates

 
DONATE TO ME
Mobile security is getting more and more important nowadays. But the worst is that people don't know about and are not aware of the security issues that all pose a high threat to gadget users. There are plenty of ways for which stolen data can be used for and most of the people don't even think of themselves being impersonated by hackers.

Because of the design of the Android system it's very easy to write fully-featured malwares for this platform as the permissions are not handled on a low native (even kernel) level, but there are the Android permissions most of you are already aware of. A lot of users don't read through the permissions that the application they install asks for, making it easy to fool them.

Hackers usually give such application and package names that they are very similar to those of the inner Android system, so the users don't delete those apps after a little Google search.

Coding in Java is extremely easy, you don't even have to free memory, as the garbage collector does that for you. This opens this platform for the so-called script-kiddies who are wannabe 'hackers' and want to create the 'best malware ever'. They're dangerous as there are a lot of them. There are also a lot of prebuilt libraries for Java, which can be used for making for example network communication easy.

If such an application is installed on a system, its easy to root the victim's device, opening a new way to compromise the OS. There are methods to root a great deal of devices (of course excluding some) and plant a rootkit on them for a longer stay. For example the app is then moved to the system partition where it cannot be deleted from.

Most of the modern malwares communicate through the internet with their author. If somebody uses a 2G/3G data connection and has no or limited data plan, it may cost high amount of money for the user. For example: Here, in Hungary, lot of teenagers use 0.facebook.com which allows them to browse Facebook without paying for it. Just imagine their parents when they get the bill because of a hacker.

I, personally, do not use any antiviruses on my phone. Even, I use only a free AVG on my Windows PC and nothing on my Linux box. Every system can be hacked and all AV-s can be bypassed. Sometimes I check the autorun apps to see if there isn't any suspicious.

To sum up: I advise you not to download/install any suspicious app on your phones and if you notice some strange network activity, do a deeper inspection on it and wipe your data (very important as most of the malwares are still installed there) or reflash your system if you want to make sure everything.
The Following 8 Users Say Thank You to Adam77Root For This Useful Post: [ Click to Expand ]
 
mj.vikram
Old
#10  
mj.vikram's Avatar
Recognized Contributor
Thanks Meter 2,401
Posts: 2,707
Join Date: Mar 2012
Location: XDA 24 X 7
I never thought this but after reading this i am also thinking .....

Yep buddy you are correct, we need to think about this very seriously ....

Sent from my GT-I9103 using xda premium

Don't say thanks, Press it ....

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes