Tag Archives: Enterprise

Know How Androids Crack

There was news about older versions of the iPhone OS being maliciously cracked. Now, news of the Android in a worse situation.


Protecting Users Against This Kind of Attack—This attack takes advantage of the poor way that Android GUI displays permissions requests and takes advantage of the fact that Google does not attempt to vet apps before they appear on the Android Market (and allows them to be distributed elsewhere as well.) The best way to mitigate against it is to educate users of the importance of examining and understanding all permissions requests that an app presents, and warning them that some permission requests may not be visible without scrolling down list, before deciding whether to install the app or not. In particular, users should probably be advised not to install any application that asks for permission to change APN settings.

[……]

Read more