Category: Noname

…thanks to an extracted Android APK-file.

See here: http://forum.xda-developers.com/showthread.php?t=2642971

 

Updated 13.04.2014.

Or play it on a Point of Sale

(updated Jan 8.) More speakers cancelling here

Last february I had the pleasure to attended the RSA Conference in San Francisco. Among the speakers was the well known security professional and Chief Research Officer in F-Secure, Mikko Hypponen. His talk about Botnet mitigations was, in my opinion, one of the most inspiring talks at that conference.

Mikko, being one of the “Top Rated Speakers” at RSA conference, he will not attend the 2014 conference due to the report on NSA secret payments to RSA. This to make RSA incorporate a flawed encryption algorithm into security software (according to Reuters).

Read Mikkos email to RSA, cancelling his attendance as a speaker for next years conference here

If (for some reason) you don’t want to attend the event as Mikko, you can check out last years talks here, and my personal event photos below;)

Continue reading “Hypponen (+++) cancelling his talk at the RSA Conference USA 2014 in San Francisco”

I wonder what source of malware they base the following diagram on. Are the malicious apps targeting Android based on the same “scam”, e.g., SMS trojans or do these 79% represent exclusively the number of different malware types?

Source: http://publicintelligence.net/dhs-fbi-android-threats/

If you would like to remove your tracks (at least your user accounts), this site classifies how hard or easy it can be… and how to do it.

http://justdelete.me/

According to Android.com, more accurate OS version detection methods, using stats from Google Play visits, shows that most users are noe using Jelly Bean –  Yeey. The more phones running the latest version, the more up-to-date/secured Android devices..

 

As you May notere, users of third party app stores are not included in these numbers. I believe there are unfortunately a lot more old Android versions running than what is reflected by Android.com. However, from a security point of view, I would like to add to the discussion of Android Vs iOS (when it comes to Malware stats) that the Google Play stats of OS versions reflect best what can be compared to Apples Appstore and their numbers of malicious apps.

http://developer.android.com/about/dashboards/index.html

Just recognized an in-App ad, telling me my Android could be infected with Viruses, interresting… This I had to check out, hence my rationale regarding Antivirus Apps in general (later in this post). The following are some screenshots of this “great” secuirty App:

Continue reading “Phishy Security App?”

Took this video at my mom and dad’s house this summer. A happy family was living in the bird house next to our terrasse.

Check out the video: bird

Updated Google Play Developer Program Policies makes it harder to publish Android malapps (malicious apps) on Google Play. E.g., Google will not accept apps that spoof logos, names to be confused with legitimate apps etc., as this have been used to trick users to download fake apps (trojans).

Read more about it here http://play.google.com/about/developer-content-policy.html

Interesting reading about improved security features, e.g., ASLR, to mitigate risk of exploitation.

Check out Jon Oberheide’s blog for his analysis, https://blog.duosecurity.com/2012/07/exploit-mitigations-in-android-jelly-bean-4-1/

Will this certification help organizations understand that cloud services (in particular Google Apps) aren’t that risky to use anymore?

[snap url=http://www.theregister.co.uk/2012/05/29/google_apps_iso_27001/ alt=”This snapshot has taken by Snap A Site”]

Services Covered: GMail, Google Talk, Google Calendar, Google Docs (documents, spreadsheets, presentations), Google Sites, Control Panel (CPanel), Google Contacts, Google Video, Google Groups, Directory Sync, Provisioning API, SAML-Based SSO API, Reporting API, Audit API.

http://googleenterprise.blogspot.com/2012/05/google-apps-receives-iso-27001.html