New answers tagged android
2
So I was curious what that text in Mandarin Chinese says and run it through an online OCR reader. The text that comes out is 百度浏览器 and (using Google Translate) translates into Baidu browser. Baidu Browser or 百度浏览器 is a browser that can be also downloaded from Google Play and is a perfectly legitimate piece of software.
I suspect all this you're experiencing ...
1
Find the cause
If using "Jelly Bean", it is easy to know that which app make the push notification. Find out which app is pushing ads in my notification bar?
Otherwise, use Addons Detector to find out which apps are using push notifications inappropriately. Though it needs manual inspection.
Scan malicious file with ALYac. It can catch commonly-seen ...
13
@Stolas has already explained that the only way to be sure what an application does is to reverse engineer it and inspect its code, and @RoryAlsop already described why such access permissions are required from the application architectural point of view. But there's one thing that I feel I should add.
I think there's not much to worry about here. Why? ...
7
LinkedIn offers specific functionality to link to your contacts list and calendar. These are parts of the application. Without these permissions it wouldn't work.
At least they are up front about saying what the application does, but it would be nice to have the ability to select specific functions and if you didn't want the calendar function just install ...
10
You could only know for sure by reverse engineering (RCE) the source code. But I recall LinkedIn having a calendar app built in, and using Google Calendar system as a backend.
And, well its spyware in the sense that all social networks are spyware.
1
Check out Dark Reading. They have quite a few blog entries about this sort of thing and they offer daily and weekly e-mail subscriptions (They'll also sign you up for subscriptions to some of their partner publications). Not all of it on Dark Reading is news, and a bit of it is white papers you have to log in in order to download. Overall they've had some ...
0
What stops someone from attacking the system outside of the operating system? Or (at the very 'worst'), simply taking a copy of the storage and reloading the image onto the original device repeatedly?
On a PC, attacking outside the operating system is dead easy when you have physical access. All you need to do is boot from a CD or USB drive. If the BIOS ...
1
The security of a pattern lock is going to depend greatly on a) how it is implemented and b) how long and what path the user chooses. The interesting metric you are looking for to know how secure something is is a concept called entropy or randomness.
If entropy is maximized, then each choice should be unrelated to prior choices and the difficulty of ...
1
Kos demonstrated a P2P attack on Android at Derbycon last year that only takes seconds. PDF Warning: http://kyleosborn.com/android/AndroidPhySec.pdf Here is a video of the demonstration from Hak5 http://hak5.org/episodes/hak5-1205 (Kos starts at 6:55).
A lot of time with the pattern lock, there are ways you can just look at it and see what the pattern is ...
1
Some mobile devices provide on device encryption to protect them, tied to the passcode/password that the user enters. When tied to a device wipe after a certain (small) number of incorrect attempts, they can provide an effective mechanism to protect the data held on the device in a "lost/stolen device" scenario.
To take iOS devices as an example, you can't ...
2
You are missing the point of the lockscreens of the various mobile operating systems.
They are not an effective deterrent for attackers who has stolen your phone and has an unlimited period of time to attack it. However, they are effective in deterring chance attackers who happens to walk by and only has a short period of access to your phone.
6
In a certificate, the serial number is chosen by the CA which issued the certificate. It is just written in the certificate. The CA can choose the serial number in any way as it sees fit, not necessarily randomly (and it has to fit in 20 bytes). A CA is supposed to choose unique serial numbers, that is, unique for the CA. You cannot count on a serial number ...
2
The keyboard is provided as a service that is registered with the OS. The OS then displays it when a keyboard is requested and passes the information to the application requesting it. Most keyloggers are likely registering themselves as the keyboard provider and then displaying the previously selected keyboard and recording the result. This is why newer ...
2
There has been research done on the ability to recover data from an Android device that issuing the stock Android encryption. There was a similar question that you could peruse. You could also check out the Frost ROM. Which was a recovery ROM built to demonstrate the potential for using a cold boot attack to recovery key data from an encrypted device, their ...
2
At best, this question is asking us to Google a specific research for you. So I flagged it as "Not Constructive".
First I'd start with checking the implementation notes, a quick look can tell you many things. They're using 128-bit AES-CBC ESSIV:SHA256, which seems top-notch to me.
A closer look would tell you that they're not encrypting the SD card. They ...
4
The principle is the same whether Apple or Google does it. Most of the data stored on the device (including all user data — everything but some startup code and of course the encryption key) is encrypted, and the only way to decrypt it is with a key that is stored on the device. (The key may be itself encrypted with the unlock passcode, but that's a separate ...
0
This code won't work indeed on Android 3.0 and above unless app is installed in /system/app partition. Those are now protected settings.
Also it doesn't answer the question of setting DNS when on mobile data instead of WiFi.
Top 50 recent answers are included
