Android Security

Discussion in 'mobile device security' started by rm22, Jun 23, 2016.

  1. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Talkin’ Treble: How Android engineers are winning the war on fragmentation
    Q&A: Android engineers Dave Burke and Iliyan Malchev talk Android P progress at length.
    June 8, 2018

    https://arstechnica.com/gadgets/201...gineers-are-winning-the-war-on-fragmentation/
     
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    123,254
    Location:
    Texas
  3. daman1

    daman1 Registered Member

    Joined:
    Mar 27, 2009
    Posts:
    1,292
    Location:
    USA, MICHIGAN
    My small cellular company where I live is bad with pushing updates but I see that they do carry the LG G6 witch is on this list so would I expect to get timely updates then with this phone? Just wondering as I want to get a new phone here soon.
     
  4. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,071
    Probably not. That is the problem you face, when updates are supplied by your carrier, rather than the manufacturer. But, you may be able to update it manually, with LG's PC software, LG Bridge.
     
  5. daman1

    daman1 Registered Member

    Joined:
    Mar 27, 2009
    Posts:
    1,292
    Location:
    USA, MICHIGAN
    Thanks roger for the link!
     
  6. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,071
    You're welcome.
     
  7. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Google Play security metadata and offline app distribution
    June 19, 2018
    https://android-developers.googleblog.com/2018/06/google-play-security-metadata-and.html
     
  8. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Google is adding DRM to all Android apps, but it's for the right reasons
    Metadata will be added to application files when they are digitally signed and built. That's a lot of letters to say DRM.
    June 23, 2018

    https://www.androidcentral.com/google-drm-android-apps
     
  9. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Google Expands Android's Compiler-Based Mitigations
    June 29, 2018
    https://www.securityweek.com/google-expands-androids-compiler-based-mitigations
     
  10. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Android P: Cheat sheet
    Google's Android P is rumored to include security upgrades, a multi-camera API, a notch, and much more.
    Here's what developers, businesses, and users need to know about Android 9.0.

    July 5, 2018

    https://www.techrepublic.com/article/android-p-cheat-sheet/
     
  11. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Google's Fuchsia OS is building momentum internally, could replace Android in the coming years
    Are we looking at Android's successor?
    July 19, 2018

    https://www.techspot.com/news/75586...ilding-momentum-internally-could-replace.html
     
  12. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Apps shared via Google Files Go, SHAREIt, and Xender will be verified by Google Play
    October 21, 2018
    https://www.xda-developers.com/google-play-offline-p2p-sharing-files/
     
  13. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    41,727
    Google Boosts Android Security with Protected Confirmation
    October 22, 2018
    https://www.securityweek.com/google-boosts-android-security-protected-confirmation
     
  14. Nulix

    Nulix Registered Member

    Joined:
    Nov 9, 2018
    Posts:
    6
    Location:
    Europe
    Hi,

    I use an Android tablet to connect to the Internet via public WIFI. So even after reading this thread I have many questions regarding the security of those connexions.

    But first, is there any difference securitywise between commercial WIFI hotspots and shared private WIFI connexions ?

    Thanks
     
  15. Nulix

    Nulix Registered Member

    Joined:
    Nov 9, 2018
    Posts:
    6
    Location:
    Europe
    Anybody ?
     
  16. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    630
    Location:
    Germany
    'Public' as in unsecured?
    Anything that you share with others is potentially bad. If you use unsecured WiFi you should get a VPN, free or not.
     
  17. Nulix

    Nulix Registered Member

    Joined:
    Nov 9, 2018
    Posts:
    6
    Location:
    Europe
    Thanks, actually is it posible to use a VPN with a commercial hotspot ?
     
  18. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    630
    Location:
    Germany
    Should be. Unless the ISP decided that 'you don't want that, silly you.' ;)
    Just try a free VPN like ProtonVPN or Windscribe. Don't use just any free VPN, but one of the big player. Most are malicious in some way or the other.
     
  19. Nulix

    Nulix Registered Member

    Joined:
    Nov 9, 2018
    Posts:
    6
    Location:
    Europe
    Actually I am testing Orbot now.
    Sometimes it is a little unstable / finicky.
    It works most of the times on shared private WIFI connexions.
    But I tried several commercial hotspots and it never worked.:rolleyes:

    Anyway I am also wondering about the real threats assiociated with such WIFI connexions. I suppose Orbot takes care of the interception risks since it encrypts my communications.
    But should I fear attackers gaining access to my tablet ?
    I came across different products that seem to counter this kind of threat, but are they efficient ?
    • Security apps : Bitdefender,
      Zemanac, Sophos, Webroot ...
    • Firewalls : Noroot and Netpatch
    • WIFI secutity app : Arp guard WIFI security
     
  20. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    630
    Location:
    Germany
    Please stop saying "connexions" :p

    If you are happy with the speeds Orbot achieves, use it. :) But make sure that your device can not have anyother network connections around that TOR tunnel! Turn on "Always-On VPN" and "Block connections without VPN" in the VPN settings of your tablet, not the app.

    If it doesn't work like you want, just use Windscribe. But download the beta app from their Discord server. (Ask there. It sucks, I know. But best imo)
    It's a possibility. If you block all traffic around the tunnel they can't, except there is some issue with your other connections, like bluetooth or whatever. (AFAIK)
     
  21. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,441
    Location:
    Slovenia
  22. Nulix

    Nulix Registered Member

    Joined:
    Nov 9, 2018
    Posts:
    6
    Location:
    Europe
    For me the problem with Orbot is not speed, but restrictions. Apparently it doesn't work with commercial hotspots and some Internet providers. But when it works the speed is fine, since I don't watch video nor play videogames.

    Anyway in order to funnel all Internet trafic through the Orbot VPN, I went to Android Parameters / Connections / More parameters / VPN / Add a VPN /
    Then I was asked about :
    Name
    Type
    Server address
    Encryption
    DNS search domains
    DNS servers

    What values should I put for those parameters ?

    Thanks
     
  23. __Nikopol

    __Nikopol Registered Member

    Joined:
    Aug 13, 2008
    Posts:
    630
    Location:
    Germany
    You shouldn't have to do that. If the Orbot app actually uses a VPN it does that for you. Orbot is a proxy, a VPN is something else. What you experience with it now is probably not going to get better.
    You need a VPN if you want to use these settings. They also do the settings for you. You just have to install it and make an account.

    Use only VPNs from a big player. NOT just any old app you find in the Playstore. Try ProtonVPN. They are unlimited free for a few servers.
     
  24. boredsecenthusiast

    boredsecenthusiast Registered Member

    Joined:
    Oct 4, 2018
    Posts:
    19
    Location:
    United States
    Good call.

    Although! VPN is real necessity for a phone which get connected to open and public wifi I would not recommend you to use a freeVPN.

    They are like hazards of worst kind. I have read articles in many articles. I can share it. Other than Ads and installing Malware into the phone they can also turn your phone into exit nodes for their VPN services.

    https://www.tomsguide.com/us/risk-of-free-vpn,news-24690.html
    https://www.vpncrew.com/5-risks-of-using-android-free-vpn-apps-and-how-to-avoid-them/
    https://www.purevpn.com/blog/paid-vpn/

    Even though I am android user I think that no platform can beat Apple when it comes to privacy it is in their DNA and unfortunately android sucks at that. I wish they have stricter play store and policies like app store.

    I would also recommend you to use lastpass (but do it on your own responsibility) as they have history of data breaches. I think android 5 don't have any builtin password protector.

    If you can pay install one password they are the best and have good reviews. If you opt for not signing in google account for your phone please please use verified APKs.

    Have a safe android device!
     
    Last edited: Nov 16, 2018
  25. Nulix

    Nulix Registered Member

    Joined:
    Nov 9, 2018
    Posts:
    6
    Location:
    Europe
    Thanks, I think I will dig a little deeper into Orbot configuration, possibilities and integration with a VPN.

    Regarding the other solutions : Firewalls / Arp guard WIFI security app / Internet security apps, do you think they make a real difference concerning the security of the WIFI connection ?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.