Mobile Security Threats Continue To Grow

According to industry analysts, mobile device shipments will exceed a billion devices in 2015 and will rapidly outrun PC shipments. That’s great news for end user convenience, mobility, and work-anywhere productivity. But it also means that enterprises must prepare for the fact that the criminals will target these devices with attack exploits, spyware,
and rogue applications.

And while IBM’s IT security research team, X-Force, predicts a modest 33 software exploits targeting mobile devices in the year ahead, that’s roughly twice the number of such attack code released in the past year.

The group also sees a number of other troubling mobile security trends. First, when software flaws do surface, many mobile phone makers do not rapidly deploy software patches to devices; malicious apps are often distributed through third-party app markets. Another troubling trend is that some mobile malware can collect end user’s personal information for use in phishing attacks.

An example of vulnerabilities that would make such attacks possible are the two recent Android security flaws that were reported to affect popular handsets including the AT&T Samsung Galaxy SII and various HTC devices.

The security find announced by security researcher Trevor Eckhart, called HTClogger (logging tools introduced by handset maker HTC) that could leak email account information, user location, phone numbers, and messaging logs.

Handset maker HTC said, in a statement, that it is working to quickly issue an update to its customers. “HTC is working very diligently to quickly release a security update that will resolve the issue on affected devices. Following a short testing period by our carrier partners, the patch will be sent over-the-air to customers, who will be notified to download and install it. We urge all users to install the update promptly,” the company said.

Source….

Will The FTC Block The Google?

The FTC has asked Google for more information about its $12.5 billion acquisition of Motorola Mobility. Google is buying the outfit as a defence against Apple and Microsoft patent law suits, however in a filing with the U.S. Securities and Exchange Commission, Motorola said it received a request for “additional information and documentary material” from the U.S. Department of Justice’s antitrust division.

According to Reuters, Motorola said Google also received a similar request and repeated its expectation the deal would close by the end of 2011 or early 2012. Writing in his bog, Google Senior Vice President Dennis Woodside said the DOJ’s “second request” was “pretty routine” and there was nothing to see here, move on please. Google usually gets a note from the FTC even if it buys lunch for a client. A similar one appeared when it bought ITA Software.

Read More…

Most Tegra 2 Tablets Will Get ICS

Sources have confirmed that most Tegra 2 tablets you know will get Ice Cream Sandwich. We are still sniffing around to find out if the ICS is going to end up as Android 4.0 but it will bring phones and tablets much closer and should ship in October or November.

Many Asus, Samsung, Toshiba, Lenovo, Sony and any other Android 3.x compatible tablets on market will have a chance to get the new one. The upgrade will come as manufacturers get it ready and customized for its tablets but most tablets will ship with Android 4.0, Ice Cream Sandwich, probably early next year at the latest.

This is good news for many who were brave to buy the first generation of tablets not based on Apple’s architecture and it will help Google to gather even more momentum for 2012. 2012 looks like a year when Google will be ready for real war against Apple, but at the same time, Android supporters fear that Windows 8 will get a lot of attention when it ships in late 2012.

Read More….

Patches Released For Firefox and Thunderbird

The release of Firefox 7 is important because the new version features better memory management and is the first step in Mozilla’s long term plan to make the browser more resource friendly.

Nevertheless, users who upgrade to it will also benefit from improved security as this release fixes six critical and two moderate severity security vulnerabilities.

Four of the critical patches are shared with Thunderbird 7 and address a use-after-free condition with OGG headers, an exploitable crash in the YARR regular expression library, a code installation quirk involving the Enter key and multiple memory hazards.

A moderate severity patch that provides defence against multiple Location headers caused by CRLF injection attacks is also common to both products.

In addition to these patches Firefox 7 also contains fixes for two critical and one moderate severity vulnerabilities, with one of them resulting in a potentially exploitable WebGL crash.

It’s worth pointing out that Microsoft previously motivated its decision to not include support for WebGL in Internet Explorer by saying that the 3D graphics library opens a large attack surface.

So far several serious vulnerabilities have been identified and patched in WebGL, which partially supports Microsoft’s assessment, but the library’s supporters claim this is no different than with other technologies.

Firefox 7 also updates Websocket, a protocol disabled in the past because of security issues, to version 8, which is no longer vulnerable to known attacks.

Read More…..

Intel, Samsung Behind New Phone OS

Two Linux software groups have decided to collaborate, they said on Wednesday, to develop a new operating system for cellphones and other devices in partnerships with Intel and Samsung Electronics.

However, analysts said the new Tizen platform is likely to struggle to attract wider developer and manufacturer support to compete with the dozen or so other mobile operating systems in a market dominated by Apple and Google’s Linux-based Android.

Even industry majors Nokia and Hewlett-Packard have canceled their mobile platforms this year.

“The best hope for them is that big operators get worried by Android’s increasing smartphone dominance and decide to consciously switch their allegiances to rival platforms to restrict Google’s huge influence over the mobile market,” said analyst Neil Mawston from Strategy Analytics.

LiMo Foundation and the Linux Foundation said the new Tizen platform is an open-source, standards-based software platform that supports multiple devices including smartphones, tablets, smart TVs, netbooks and in-vehicle ‘infotainment’ systems.

The initial release is planned for the first quarter of 2012, enabling the first devices using Tizen to come to market in mid-2012, the two groups said.

Read More….

Oracle Claims It Lost Over 1 Billion

Oracle now estimates it has lost $1.16bn from Google’s alleged copyright and patent infringement by the Android operating system.

Last year Oracle sued Google claiming that its popular Android operating system infringed Java patents and copyrights. Since then the two sides have been trying to come to an agreement on any damages Google might have to pay.

Initially Oracle claimed $6.1bn from Google, but Judge William Alsup quickly told Oracle to come back with something more realistic. Oracle did just that yesterday with a figure $2.2bn, a figure that Google has urged the court to reject. Now Oracle claims it has lost $1.16bn due to Google’s Android, though this figure is not related to the damages claim it made yesterday.

Google on the other hand has claimed that Oracle’s expert witness Iain Cockburn, who calculated the damages, was a little too zealous in adding up his figures. Judge Alsup has already rebuked Google twice, once for trying to downplay the significance of Android and a second time for trying to use failed licensing talks with Sun to reduce any damage award.

Read More…..

BlackBerry Falls Behind In Workplace

More workers use iPhone and Android smartphones combined than BlackBerry devices, according to a survey of 1,681 U.S.-based workers released today by Forrester Research.

That finding highlights what many have known for a while about the entrenched workplace smartphone veteran: the BlackBerry faces trouble from its competitors.

The BlackBerry, made by Research in Motion, still leads among U.S. workers, with 42%, the survey said, with Apple’s iPhone accounting for 22% and Android devices, 26%.

The survey also found that nearly half, or 48% of the group, said that they chose the primary smartphone used for their work without considering what their company supports. Only 29% said they chose the smartphone from a list of phones the company supports, while 23% said they had no choice in the matter.

Often, corporate IT shops will choose BlackBerry smartphones when requiring a worker to use a specific smartphone, partly because of the perceived security benefits, many analysts, including at Forrester, have found. The growth in Android phones and the iPhone — many of them brought to workplaces by workers independently — are forcing IT shops to rethink that decision, however.

Ted Schadler, a Forrester analyst, said the survey points to two major trends. The first is that more workers than ever are bringing consumer-focused devices, such as Android and iPhone smartphones, to use for work, and more companies are supporting those devices.

Read More…..

Did Google Increase Microsoft’s Ad Rates?

Google might have increased Microsoft’s ad rates 50 fold, a Bloomberg report says.

Someone familiar with the matter told Bloomberg that the US Federal Trade Commission (FTC) is looking into the rate increase.

It will also be looking into other allegations against Google about advertising as a result of complaints from Microsoft.

This is part of a larger antitrust probe into Google that began earlier this year, the source told Bloomberg.

An antitrust lawyer at Doyle Barlow & Mazard PLLC in Washington, Andre Barlow, told Bloomberg that, if true, the Microsoft allegations could be used to help the FTC build a case showing that Google has abused its power as the owner of the world’s most popular search engine, violating the Sherman Act and other antitrust laws.

He said, “A lot of this conduct, when put together with a firm with market power, could be viewed as a violation” of antitrust laws.

Read More…

Adobe Patches Security Holes in Flash

Adobe has released a security update for Flash Player in order to address several critical vulnerabilities, including one that is being exploited in the wild.

The Flash Player 10.3.183.10 for Windows, Mac and Linux, and Flash Player 10.3.186.7 for Android, contain patches for six security flaws.

One of them is a cross-site scripting (XSS) weakness that can be exploited to execute rogue actions on behalf of web sites or webmail providers if victims click on maliciously-crafted links.

“There are reports that this issue is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message,” Adobe warns in its security advisory.

XSS vulnerabilities are the result of improper user input validation and allow attackers to execute rogue code in the context of the current web site. For example, they can be leveraged to extract session cookies or load rogue forms into legitimate pages, which makes for very credible phishing attacks.

Adobe credits Google for reporting this cross-site scripting vulnerability, which is identified as CVE-2011-2444. This means it might have been detected in attacks against Gmail users.

Two other patched vulnerabilities allow for arbitrary code execution and are located in the AVM stack. One of them can also lead to a denial of service condition. Two remote code execution logic errors and a Flash Player security control bypass have also been addressed.

Users should deploy the new update as soon as possible because browser plug-ins like Java, Adobe Reader or Flash Player are amongst the most attacked pieces of software one can have on a computer. However, unlike Adobe Reader X (10.0) which features sandboxing technology, Flash Player doesn’t have any anti-exploitation mechanism built-in.

Read More……

Flash Player 11 Launched With 3D Gaming

Adobe Systems announced Flash Player 11 and Adobe Air 3 software Wednesday to assist developers in building more sophisticated applications with dozens of new features across smartphones and tablets as well as desktop computers.

The releases are Adobe’s biggest in two years, and will be available free of charge in early October, said Anup Murarka, Adobe’s director of product marketing. The related tools, Flash Builder and Flex, will support new features in Flash Player 11 and Adobe Air 3 by the end of the year.

The releases will enable delivery of 2D and 3D games over the Internet to various devices, Murarka said. Developers of enterprise applications will also find the 3D capabilities popular for data-centric apps. Enterprises, for example, will be able to build application dashboards to “visualize complex data sets” with 3D images, he said.

Developers will also be able to use the tools to more deeply integrate business software like Excel and Outlook in devices and to access hardware programming interfaces for functions such as Near-Field Communication being used more widely in smartphones, Murarka said.

The new versions will also help developers build more secure applications with the ability to leverage cryptographically secure random number generation, he said.

Read More…..

« Previous Page — Next Page »