Today, Google expressed its thoughts on the controversial Wassenaar Arrangement. The company stated that “the proposal would make the world less secure.”
According to AppBugs many popular apps on iOS or Android are vulnerable to password cracking. Very big name apps such as Walmart, ESPN, Pocket, CNN, Slack, SoundCloud, etc. Appbugs testing suggest these apps are subject to brute force attacks. That means an attacker can make unlimited login attempts to a web service until the users password is found.
Dashlane announced today that they have added fingerprint support to their app for Samsung devices. Right now, the only devices supported are the Galaxy S5, Galaxy Note 4, Galaxy Note Edge, Galaxy S6, and Galaxy S6 Edge. You can log in to the password manager app with just your fingerprint; no need to enter a password.
Remember Geeksphone, Spain’s first smartphone manufacturer that developed a MultiOS platform allowing you to choose when you want to use Google’s Android, Mozilla’s Boot2Gecko or another community developed operating system on its handsets? Well, today Geeksphone has announced it will quit making smartphones and leave further development of its MultiOS software in the hands of its community.
Earlier today, a massive security exploit involving Samsung’s default SwiftKey keyboard spread across the internet like wildfire showing the dangers of manufacturers pre-loading third-party software on their phones. The vulnerability was pretty obscure and wouldn’t affect everyone with a Samsung device, but it was still a fairly serious exploit Fortunately, Samsung has issued a relatively quick response about the whole situation.
Samsung has stated that they’re working on a fix, and it will be deployed through a security policy update via Knox. The vulnerability was based in how language packs for Samsung’s SwiftKey-backed keyboard were updated, and doesn’t affect the normal version of SwiftKey that you may have downloaded through the Play Store. Read more
Some recent security work on new Samsung smartphones will likely increase the pressure on manufacturers and carriers to dispense with preloading third-party apps. According to security researchers, they were able to figure out a way to deliver a payload capable of executing remote code via the Swift keyboard app that comes pre-installed on new Samsung devices. The vulnerability gives an attacker the ability to run code as a system user, one step shy of being root, and can be launched without input from the device’s user. Read more
Google takes security very seriously, and now that’s more true than ever. The company has offered bounties for anyone that could find or solve vulnerabilities in Chrome and their websites with their Security Rewards program, and today they’re extending that to cover Android, too. Read more
Over the years owners of smartphones have learned the hard way that they need to keep their devices secured against attempts to get private information off of the devices. The worry is not so much that someone will intercept data on the fly, but that a misplaced device could fall into the wrong hands that have plenty of time to try to break through security to access private data. Researchers from the University of New Haven have started work on examining how secure a new crop of devices – smartwatches – may be and the results are not promising. Read more
Google’s Gmail app for Android has gotten some extra new security features that will be very important for those of you using a Yahoo! or Microsoft account. The new update brings Oauth support for both accounts, bringing the security of using those email addresses closer to what you’ll typically experience with Gmail.
Oauth allows users to take advantage of two-step authentication and Google’s account recovery process, both of which are staple security features in 2015. If you use either a Yahoo! or Microsoft mail account in your Gmail app, keep an eye out for this update over the next few days. Read more
Smartphone manufacturer ZTE and antivirus company AVG have announced a new partnership that will ship AVG’s AntiVirus Pro software on all new ZTE phones going forward. The antivirus app will offer its full feature set for 60 days, after which users can pay for an annual subscription or continue using the free version of the software. Read more