Welcome to XDA

Search to go directly to your device's forum

Register an account

Unlock full posting privileges

Ask a question

No registration required
Post Reply

[Suggestions & Discussions] Why mobile security matters

OP

11th October 2012, 01:55 PM   |  #1  
Dô's Avatar
OP Recognized Contributor
Flag ▂ ▃ ▅ ▆ █ Watching You @!@
Thanks Meter: 4,461
 
7,853 posts
Join Date:Joined: May 2012
Donate to Me
More
Hey XDAian...

Here I am back again for few suggestions & discussion.

Based on some pretty interesting facts about "mobile in general", The smartphone segment has brought accessibility to millions around the world, at work and at home. Naturally, all the data in those devices, wirelessly accessible, becomes a gold mine for those with nefarious motives to exploit.

On the work front, smartphones are a huge contributor to productivity. At home, they provide meaningful and useful (and sometimes redundant) ways to stay in touch with friends and family. The more of these devices we buy, the bigger the opportunity is for criminals, because there are so many ways to get the data. We might lose a device, or its is stolen, we might download a bad application, or soon brush against an NFC tag or visit a bad web-page. The possibilities are so diverse compared to a PC or server farm hardwired to the internet.

With the tremendous growth of the smartphone market not expected to slow down anytime soon, people and organizations must be vigilant in guarding against breaches of their data and/or personal information. Even as organized hackers work on ways to score the high-value breach, they are working on high-volume, low-risk attacks against weaker targets as well.

In addition to some tips about securing mobile devices, the infographic has some interesting facts from 2011 in there as well, such as 855 breaches resulted in the theft of 174 million records.

We Need some Security Applications for preventing our valuable data (like Msgs, Contacts, Pin codes etc). Therefore, from my side this thread belong to all XDAians.

Please suggest the latest, finest Applications & few tremendous suggestion from all Devs, RC, RD & Members.

I like a Security based Application called LBE Privacy Guard to Prevent sending data through various applications installed at our Mobile.




Some Great Ideas Received from Our XDA Members. Which are here follows:
As this OP thread may become too long so, for Batter view just press "Show Contents" for there suggestions.


This One is provided by Our Great Sr.MOD Justin:

Personally, I place little emphasis on mobile security. Things like antivirus, password protectors etc. make sense if you store a lot of mission-critical, sensitive data on your phone, or frequent a lot of open hotspots, leave your Bluetooth on and 'visible' in public places, but otherwise just chew battery, CPU cycles and money.

I can appreciate the need for such things, in some instances (proper business users, etc.). I have little faith in an app to look after my security however, and would instead recommend a few lifestyle changes where possible, to improve your security:

1. Never use open, public WiFi. If you must, never use it for sites you log into, sites that control your money, or sites that contain other sensitive information. Doesn't take much for that guy outside McDonalds on his laptop to be sniffing packets.

2. Turn on Bluetooth and NFC only when you intend to use them. Not only do you save precious battery, you ensure that your close-range transmission technologies are only on when you need them, and not at other times. Also, set a unique Bluetooth passcode for your device, rather than the generic '0000'.

3. Never let your browser remember any passwords.

4. When setting passwords and PINs, never use a bank PIN, and always use 'leetspeak' for your passwords. For example, I would like my password for XDA to be 'firewood'. Rather than just typing it, try substituting letters for numbers, like this: F1r3W00d. Mix up your capital and lower-case letters, even substitute characters for letters or numbers. Do anything you can to ensure your passwords don't resemble anything from a dictionary!

I have no idea whether these steps have helped, but I haven't been the victim of online identity theft yet - even my passwords have never been compromised.

I think it's something we should always keep in mind, but never worry too much about. The risk is always there but it's a big, wide world.


This One is provided by Our Great buddy Adam77root:

Mobile security is getting more and more important nowadays. But the worst is that people don't know about and are not aware of the security issues that all pose a high threat to gadget users. There are plenty of ways for which stolen data can be used for and most of the people don't even think of themselves being impersonated by hackers.

Because of the design of the Android system it's very easy to write fully-featured malwares for this platform as the permissions are not handled on a low native (even kernel) level, but there are the Android permissions most of you are already aware of. A lot of users don't read through the permissions that the application they install asks for, making it easy to fool them.

Hackers usually give such application and package names that they are very similar to those of the inner Android system, so the users don't delete those apps after a little Google search.

Coding in Java is extremely easy, you don't even have to free memory, as the garbage collector does that for you. This opens this platform for the so-called script-kiddies who are wannabe 'hackers' and want to create the 'best malware ever'. They're dangerous as there are a lot of them. There are also a lot of prebuilt libraries for Java, which can be used for making for example network communication easy.

If such an application is installed on a system, its easy to root the victim's device, opening a new way to compromise the OS. There are methods to root a great deal of devices (of course excluding some) and plant a rootkit on them for a longer stay. For example the app is then moved to the system partition where it cannot be deleted from.

Most of the modern malwares communicate through the internet with their author. If somebody uses a 2G/3G data connection and has no or limited data plan, it may cost high amount of money for the user. For example: Here, in Hungary, lot of teenagers use 0.facebook.com which allows them to browse Facebook without paying for it. Just imagine their parents when they get the bill because of a hacker.

I, personally, do not use any antiviruses on my phone. Even, I use only a free AVG on my Windows PC and nothing on my Linux box. Every system can be hacked and all AV-s can be bypassed. Sometimes I check the autorun apps to see if there isn't any suspicious.

To sum up: I advise you not to download/install any suspicious app on your phones and if you notice some strange network activity, do a deeper inspection on it and wipe your data (very important as most of the malwares are still installed there) or reflash your system if you want to make sure everything.



Here is few more points from our great RC Selva.simple.



Mobile security not only matters about protecting our data from phising and virus attacks but also protecting it when v lost our device. Because a smartphone falling into wrong hands can cause so much of trouble. So just wanna list down following points interms of mobile security

* When u buy a new smartphone, take a mobile-insurance along with it (atleast for an year). We may sometime doesn't know its importance. But it matters a lot. It comes around of 3% of mobile cost. Keep your bills and insurance papers safely.


* For all important personal contents (Contacts, Pics, Videos, Docs, Messages) you store in smartphone, have a secondary backup in your system or hard disk. It comes in handy when ur phone is totally dead or lost. Take this backup atleast once in two months. Lots of software available for this.


* Use personal lock apps like "Keep safe" to lock/hide your personal data.


* Use Mobile security apps like "Lookup" or "Avast". Even if not for its ant-virus feature, but must for its features of "Anti-theft" features. Apps that help in locating the device if in case the mobile is stolen and kept on.Or when your sim card is replaced with a new sim, sending out a sms from the new sim to a pre-configured number.


* Apart from all these, an important feature is to destroy all your personal contents (complete Erase) in your mobile if in case it is stolen. This will prevent our data falling in hands of wrong people.More than device, our data matters a lot.

I'm a personal victim of a stolen mobile phone, my Wave II. Since that was the time, i flashed a leaked Bada 2.0, no data was there in my mobile. So atleast i was happy with that. I had my mobile insurance which got me the 80% of money which led my way to Android world via Galaxy R.

Source of this amazing ad is Phone Arena.


"How to secure your Android phone and protect your data"


Just Go to this thread for the same ->How to secure your Android phone and protect your data


Download LBE privacy Gaurd / master for mobile -> Click here for thread.
Last edited by Dô; 20th December 2012 at 09:07 AM.
The Following 8 Users Say Thank You to Dô For This Useful Post: [ View ]
11th October 2012, 04:28 PM   |  #2  
chandrus1983's Avatar
Senior Member
Flag Somewhere In India
Thanks Meter: 197
 
966 posts
Join Date:Joined: Jan 2012
More
FOA, good thread (Y)
i know two apps which are good in security...
one is APPLOCK - https://play.google.com/store/apps/d...=search_result

another AFARIA - my bro uses this on his note, its suggested by his company to maintain their mails and lot other office stuff store on the phone-
https://play.google.com/store/apps/d...=search_result
The Following User Says Thank You to chandrus1983 For This Useful Post: [ View ]
11th October 2012, 05:05 PM   |  #3  
Senior Member
Flag Mumbai
Thanks Meter: 280
 
1,056 posts
Join Date:Joined: Feb 2012
More
U brought to my attention the importance of security...
Till nw i was least bothered n never paid attention...
Bt thanks...

Sent from my GT-I9103 using Tapatalk 2
The Following User Says Thank You to vipul12389mehta For This Useful Post: [ View ]
11th October 2012, 06:23 PM   |  #4  
chandrus1983's Avatar
Senior Member
Flag Somewhere In India
Thanks Meter: 197
 
966 posts
Join Date:Joined: Jan 2012
More
Quote:
Originally Posted by vipul12389mehta

U brought to my attention the importance of security...
Till nw i was least bothered n never paid attention...
Bt thanks...

Sent from my GT-I9103 using Tapatalk 2

security is important man!! how can you let others read your messages or your mails or even look at your gallery ???
security is must!!
The Following User Says Thank You to chandrus1983 For This Useful Post: [ View ]
11th October 2012, 06:43 PM   |  #5  
Dô's Avatar
OP Recognized Contributor
Flag ▂ ▃ ▅ ▆ █ Watching You @!@
Thanks Meter: 4,461
 
7,853 posts
Join Date:Joined: May 2012
Donate to Me
More
Quote:
Originally Posted by chandrus1983

FOA, good thread (Y)
i know two apps which are good in security...
one is APPLOCK - https://play.google.com/store/apps/d...=search_result

another AFARIA - my bro uses this on his note, its suggested by his company to maintain their mails and lot other office stuff store on the phone-
https://play.google.com/store/apps/d...=search_result

Thanks buddy. U r like my bro.. :thumbup:can u pls add few more lines abt these two application. I will add both of it in OP.

Sent from my GT-I9103 using xda premium
The Following User Says Thank You to Dô For This Useful Post: [ View ]
11th October 2012, 06:44 PM   |  #6  
Dô's Avatar
OP Recognized Contributor
Flag ▂ ▃ ▅ ▆ █ Watching You @!@
Thanks Meter: 4,461
 
7,853 posts
Join Date:Joined: May 2012
Donate to Me
More
Quote:
Originally Posted by vipul12389mehta

U brought to my attention the importance of security...
Till nw i was least bothered n never paid attention...
Bt thanks...

Sent from my GT-I9103 using Tapatalk 2

Buddy if u will PM me then i will disclose u few points of applications.. bt security is highly recommended over android mobiles.

Sent from my GT-I9103 using xda premium
11th October 2012, 06:50 PM   |  #7  
Dô's Avatar
OP Recognized Contributor
Flag ▂ ▃ ▅ ▆ █ Watching You @!@
Thanks Meter: 4,461
 
7,853 posts
Join Date:Joined: May 2012
Donate to Me
More
Quote:
Originally Posted by chandrus1983

security is important man!! how can you let others read your messages or your mails or even look at your gallery ???
security is must!!

This is what i was telling in whole thread buddy. Security is as much as essential like security of ur bank account. If a unknown person is having ur personal data, it means u are in big trouble. So, for security point of view we must have knowledge abt the same.

Edit: thats why i asked fron Devs/RC/RD to come ahead and provide us the right path of security.
Sent from my GT-I9103 using xda premium
Last edited by Dô; 11th October 2012 at 06:55 PM.
11th October 2012, 07:48 PM   |  #8  
chandrus1983's Avatar
Senior Member
Flag Somewhere In India
Thanks Meter: 197
 
966 posts
Join Date:Joined: Jan 2012
More
Quote:
Originally Posted by kataria.vikesh

Thanks buddy. U r like my bro.. :thumbup:can u pls add few more lines abt these two application. I will add both of it in OP.

Sent from my GT-I9103 using xda premium

Yes I will write when I get on pc, and ask more info about the afaria app from my brother.and update it.

From my Limited Edition SGR
11th October 2012, 08:10 PM   |  #9  
Adam77Root's Avatar
Recognized Developer
Flag My coordinates
Thanks Meter: 11,121
 
2,480 posts
Join Date:Joined: Jul 2012
Donate to Me
More
Mobile security is getting more and more important nowadays. But the worst is that people don't know about and are not aware of the security issues that all pose a high threat to gadget users. There are plenty of ways for which stolen data can be used for and most of the people don't even think of themselves being impersonated by hackers.

Because of the design of the Android system it's very easy to write fully-featured malwares for this platform as the permissions are not handled on a low native (even kernel) level, but there are the Android permissions most of you are already aware of. A lot of users don't read through the permissions that the application they install asks for, making it easy to fool them.

Hackers usually give such application and package names that they are very similar to those of the inner Android system, so the users don't delete those apps after a little Google search.

Coding in Java is extremely easy, you don't even have to free memory, as the garbage collector does that for you. This opens this platform for the so-called script-kiddies who are wannabe 'hackers' and want to create the 'best malware ever'. They're dangerous as there are a lot of them. There are also a lot of prebuilt libraries for Java, which can be used for making for example network communication easy.

If such an application is installed on a system, its easy to root the victim's device, opening a new way to compromise the OS. There are methods to root a great deal of devices (of course excluding some) and plant a rootkit on them for a longer stay. For example the app is then moved to the system partition where it cannot be deleted from.

Most of the modern malwares communicate through the internet with their author. If somebody uses a 2G/3G data connection and has no or limited data plan, it may cost high amount of money for the user. For example: Here, in Hungary, lot of teenagers use 0.facebook.com which allows them to browse Facebook without paying for it. Just imagine their parents when they get the bill because of a hacker.

I, personally, do not use any antiviruses on my phone. Even, I use only a free AVG on my Windows PC and nothing on my Linux box. Every system can be hacked and all AV-s can be bypassed. Sometimes I check the autorun apps to see if there isn't any suspicious.

To sum up: I advise you not to download/install any suspicious app on your phones and if you notice some strange network activity, do a deeper inspection on it and wipe your data (very important as most of the malwares are still installed there) or reflash your system if you want to make sure everything.
The Following 8 Users Say Thank You to Adam77Root For This Useful Post: [ View ]
12th October 2012, 06:13 AM   |  #10  
mj.vikram's Avatar
Recognized Contributor
Flag XDA 24 X 7
Thanks Meter: 2,407
 
2,721 posts
Join Date:Joined: Mar 2012
More
I never thought this but after reading this i am also thinking .....

Yep buddy you are correct, we need to think about this very seriously ....

Sent from my GT-I9103 using xda premium

Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes