Android – Page 2

New Google Chrome Feature Created For Better Password Security

September 24, 2018 by Joseph Martin

Google is taking yet another important step to help save us from ourselves. The company is releasing a complete redesign of their Chrome browser, which is exciting. There’s one feature in particular, however, that bears taking a special look at.

Perhaps the most significant change to the browser is the addition of a new password manager, which will offer to generate a random password when you sign into a website for the first time. The randomly generated password will be securely tucked away inside your Google Account and synced across both desktop and mobile versions of Chrome.

Password security is something humans aren’t very good at. Despite the risks and the repeated dire warnings, many people still have the tendency to use the same passwords that are only marginally different, across multiple websites they have accounts on.

The problem is that if one of the websites you have an account on is breached, it puts most (if not all) of your other web accounts at risk. It’s an extremely bad habit from a security standpoint, and unfortunately, it is one that has proved to be notoriously difficult to break.

Google’s solution to the problem is interesting,T but it should be noted that it is far from all-inclusive. Bear in mind that Chrome only manages passwords inside the browser, so if you log into services like Netflix on your smart TV, those login details won’t be captured in, or stored by your Google Account.

Google isn’t the only company doing what it can to save us from our worst password impulses. Apple is making changes too. With the release of iOS 12, Apple will give its OS the ability to autofill passwords across browsers and apps from third-party password managers.

Joseph Martin

President & CEO
I hope you enjoyed this article. My mission is to take your stress away from dealing with IT problems. Call (252) 565-1235 or send me a message at our contact us page if you have a question, comment or want help.

Air Canada Customers May Have Had Their Data Exposed

September 17, 2018 by Joseph Martin

If you fly Air Canada and use their mobile app, it may be time to change your password. The company recently announced that between August 22nd and August 24th of this year, they detected “unusual log-in behavior,” and that a small fraction (some 20,000) of their 1.7 mobile app users may have had their data compromised as a result.

The company stressed that no credit card information was compromised, but that doesn’t make the breach much less damaging.

The exposed data included:

Customer name

Physical address

Email address

Phone number

Any information an individual customer added to his or her profile

Worst of all is the fact that passport numbers were also exposed. Using that information, a hacker could easily gain access to the countries that a person has been to, when the passport expires, country of residence, the flight numbers of any flights they’ve taken, their gender, birthday and more.

As is usually the case when events like this occur, Air Canada has apologized to their customers and has reached out to all of their potentially impacted users.

Even if you didn’t get a notification from Air Canada, it would be prudent to change your password as soon as possible.

The company has not released any details about exactly how the breach occurred, and the matter is still under investigation.

Note that in terms of scope and scale, this is a fairly small breach. The 20,000 users represents about 1 percent of the total user base. Even so, the data stolen has the potential to be quite damaging. Even after you change your password, since email addresses were compromised during the breach, be on the alert for phishing emails, as the group responsible may attempt to leverage the information they have to get even more.

Joseph Martin

Tech Support Scammers Are Advertising Online

September 17, 2018 by Joseph Martin

Tech Support scams are nothing new, but they are getting increasingly sophisticated. Worse, tech giants like Google are finding it notoriously difficult to detect them.

A report recently released by the venerable data security firm, Symantec, indicates that tech support scammers are increasingly integrating call optimization into their schemes, which allows them to insert phone numbers into web pages dynamically. Among other things, this allows the scammers to display the phone number of someone who speaks the language of the victim, which makes the whole act more convincing and much more likely to succeed.

In recent years, tech support scams have begun promoting their “services” via ads, where they claim to be legitimate, authorized service centers for companies like Apple, Microsoft, or Dell. The brand recognition and professional presentation combine to put their victims at ease.

They’re so slick and professional, and their “employees” so good at mimicking the employees of legitimate service centers that it can be virtually impossible to tell the real companies from the fake ones.

David Graff, Google’s Director of Global Product Policy had this to say about the matter:

“For many years, we’ve consulted and worked with law enforcement and government agencies to address abuse in this area. As the fraudulent activity takes place off our platform, it’s increasingly difficult to separate the bad actors from the legitimate providers.”

Google is taking steps to try and combat the rising threat. Recently, they’ve made a change to their policy as it relates to tech support companies, only accepting ads from verified third-party support vendors.

Even with this added layer of protection, however, the tech support scam is thriving. Scammers have already begun taking steps to get around the new restrictions by cold-calling their victims. For the most part, this has proved to be a successful tactic for them. However, in at least one instance, where the scammers called the New Zealand Police, it ended quite badly for the criminals.

Joseph Martin

Vulnerability Found In Major Manufacturers Of Android Phones

September 8, 2018 by Joseph Martin

Researchers operating out of the University of Florida, Stony Brook University and Samsung Research America have made a disturbing discovery. Millions of Android smartphones manufactured by eleven different OEMs (Original Equipment Manufacturers) were found to be vulnerable to attack via AT Commands.

If you’re not sure what an “AT Command” is, you’re not alone. Part of the Hayes Command Set, ATtention Commands were developed in the early 1980s and designed to be transmitted via phone lines to issue commands to modems.

Most people aren’t even aware of the fact that their high-tech smartphones contain a basic modem within them, which allows the high-tech wonder to connect to the internet. While AT Commands have been standardized, many vendors have added custom AT Commands to their devices, and unfortunately, these commands can control a surprising variety of advanced features including the built-in camera and the touchscreen interface.

The AT Commands can be accessed via the phone’s USB interface. This means that a would-be attacker would have to gain physical access to the device, or place a malicious component inside a user’s charger, charging station, or USB dock.

Once a hacker is connected in this manner to the victim’s phone, he could use one of the AT Commands to steal data, unlock the screen, mimic touchscreen events, or even rewrite the phone’s firmware.

The research team has complied a database of phone models and firmware versions that are vulnerable to this type of attack. They have contacted all the vendors, and are continuing their testing.

Initially, the team tested AT Commands via the USB interface. Phase two of the research will test to see if those commands can be issued via WiFi or Bluetooth connections. The team has also published the Shell script they used in their original testing, available on GitHub.

So far, none of the OEMs contacted have released any information or given a timetable for a fix.

Joseph Martin

Millions Of T-Mobile Customers Data May Have Been Leaked

September 4, 2018 by Joseph Martin

Telecommunications giant T-Mobile is the latest victim of a large-scale data breach, with personal data belonging to more than two million of its customers having been leaked. The exposed information included customer name, phone number, email address, billing zip code, account number and whether the account was pre-paid or post-paid.

As bad as that is, it could have been far worse. Fortunately, no financial information, passwords, or social security numbers were compromised.

According to the official statement released by T-Mobile, their security team shut down the “unauthorized capture of some information” on August 20th of this year. The statement did not provide specific details about how the hackers got into the company’s servers, and only provided an estimate of the total number of customer records impacted.

The statement read, in part:

“We take the security of your information very seriously and have a number of safeguards in place to protect your personal information from unauthorized access. We truly regret that this incident occurred and are so sorry for any inconvenience this has caused you.”

T-Mobile has reached out to law enforcement and has contacted all customers who were impacted by the breach.

Although no passwords were compromised, if you received a notification from the company that information about your account was compromised, it would be wise to change your password just to be safe. Be on guard against phishing attacks that may target you based on the information that was gleaned via the breach.

This is but the latest in a long and growing stream of high profile breaches this year, but it is by no means the largest. Earlier this year, for example, Car phone Warehouse suffered a breach that impacted all of its ~10 million customers. As ever, vigilance is the key.

Joseph Martin

Android Malware Could Access Your Pictures And Calls

September 1, 2018 by Joseph Martin

Android users have a new threat to contend with, according to a sixteen-page whitepaper outlining a new malware strain.

The paper was published by a group of security researchers working for Bitdefender. They identified a robust new strain of malware called “Triout.”

According to the report, although they just discovered the malware a month ago, there are indications that it has been in use since at least mid-May of this year.

Among other things, it can:

Steal call log data

Collect and steal SMS messages

Record every call taking place on the phone

Upload recordings of those calls to a remote server

Send the phone’s GPS coordinates to a remote server

Upload a copy of every picture taken with the phone’s camera to a remote server

Hide from the user’s view

These are robust, highly advanced features that require extensive, detailed knowledge of the Android OS. Typically, malware of this type is used by nation-state hackers with deep pockets, or by well-heeled networks of cybercriminals. At this point, there’s no clear indication which category Triout’s creators fall into.

The malware strain has been found masquerading as a legitimate app, but the team has been unable to trace it back to its source of origin. At this point, there’s no clear indication where it’s coming from. The first sample was uploaded to VirusTotal from Russia, but subsequent samples were uploaded from an Israeli IP address.

The researchers note that despite its advanced feature set, the group responsible appears to have made a mistake:

“What is striking…is that it’s completely obfuscated, meaning that simply by unpacking the cloned app’s .apk file, full access to the source code becomes available….this could suggest that the Triout framework may be a work-in-progress, with developers testing features and compatibility with devices.”

Joseph Martin

Survey Shows Teens Are Concerned About Their Screen Time

August 31, 2018 by Joseph Martin

According to a recent survey conducted by Pew Research Center, 54 percent of teens say that they spend too much time on their cellphones.

Acknowledging you have a problem is the first, necessary step toward correcting it, and the survey reports that significant percentages of teens are taking steps to do just that.

The Survey Specifically States:

52 percent of teens report that they are actively trying to cut back on their mobile phone use

57 percent report that they’re taking steps to limit the amount of time they spend on social media

58 percent report that they’re cutting back on the time they spend playing video games

Some other interesting and noteworthy statistics collected via the survey include the following:

72 percent of teens say that they often or sometimes check for messages and notifications first thing in the morning, just after waking up.

56 percent of teens report feeling lonely or anxious if they find themselves separated from their cherished phones.

36 percent of parents admit that they, like their teen children, spend too much time on their phones.

51 percent of teens report that their parents are distracted by their phones when teens try to have a conversation with them.

57 percent of parents say they set screen time restrictions for their teens in an attempt to limit phone use.

Smartphones are deeply embedded in our day to day activities, so these numbers are perhaps unsurprising.

What is both surprising and more than a little disturbing is the fact that a significant percentage of both teens and parents report that excessive cellphone use impacts their school and work performance, with 31 percent of teens admitting that their phone is a source of distraction that causes them to lose focus in school, and 39 percent of parents reporting that they lose focus at work for the same reason.

Unfortunately, while the statistics are illuminating, there are no easy solutions here. There’s little evidence that self-imposed use limits are having an impact.

Joseph Martin

Encrypted Chats Are Now Available In Skype

August 30, 2018 by Joseph Martin

Earlier this year, Microsoft announced that it had entered into a partnership with Open Whisper Systems, the makers of the Signal app. The purpose of the partnership was to bring Signal’s open source, end-to-end encryption protocol to Skype.

As of the latest Skype builds, that is now a reality. Stable versions of Skype have been released for Windows, macOS, Linux, android, and iOS. If you haven’t yet upgraded to the latest versions and want to begin making use of the new protocol, you should upgrade to Skype v8.15.0.306 if you’re an Android user, or Skype v8.28.0.41 if you’re a Windows user.

The new feature is called “Skype Private Conversations.” To access it, just press the “+Chat” button at the top of your contacts sidebar and select “New Private Conversation.”

A couple of caveats here. First, both parties will have to have the latest version of Skype to make use of the feature. Second, a new private conversation needs to be started from each device.

Assuming that’s the case, Skype sets up keys to encrypt the conversation. Note that as the name of the protocol indicates, this is end-to-end encryption, which means that the messages remain in an encrypted state even while in transit between the two devices that are communicating.

It’s a good feature, and a long-overdue addition that makes Skype even more useful. At present, however, the implementation is a bit cumbersome. It won’t see widespread adoption until a majority of the Skype user base has upgraded to the latest version.

Nonetheless, this is an excellent development that will, over the medium term, make communications more secure. Be sure your team is aware, and if you want to begin using encrypted chat right away, make sure that all users upgrade to the latest version.

Joseph Martin

Android Still Tracking Users With Location History Turned Off

August 22, 2018 by Joseph Martin

According to Google’s support page on the matter, disabling your phone’s “Location History” in your phone’s privacy settings will prevent Google from tracking every move you make.

The support page reads as follows:

“You can turn off Location History at any time. With Location History off, the places you go are no longer stored.”

That doesn’t leave much in the way of wiggle room. A pity it’s not even close to being true.

A new investigation conducted by the Associated Press reveals that even with your Location History turned off, some Google Apps are designed so that they automatically store time-stamped location data on users, without asking their permission.

The AP report on the matter explains in further detail:

“…for example, Google stores a snapshot of where you are when you merely open its Maps app. Automatic daily weather updates on Android phones pinpoint roughly where you are, and some searchers that have nothing to do with location, like “chocolate chip cookies,” or “kids science kits,” pinpoint your precise latitude and longitude – accurate to the square foot – and save it to your Google account.”

To demonstrate their claim, the AP created a map of the movements of Gunes Acar, who carried his Android phone with “Location History” switched off in a bid to prevent his location data from being collected.

Despite taking this step, the AP researchers were able to produce a map of his train commute on a pair of trips to New York and visits to the High Line park, Chelsea Market, Hell’s Kitchen, Central Park, and Harlem. The team also discovered his home address in this manner, but in a bid to protect the professor’s privacy, they did not publish that information on the map tracing the routes mentioned above.

At this point, Google has not responded to the AP’s research.

Joseph Martin

Android Gets New OS Update Named Android Pie

August 17, 2018 by Joseph Martin

Android 9 is finally here, at least for some users. As of today, if you have any of the following phones, you can get the latest update:

The Google Pixel

The Pixel XL

The Pixel 2

The Pixel 2 XL

The Essential Phone

The company is currently working with other vendors to make the new update available. So if you’ve got an Android device other than those listed above, you should have access to the new version later this fall.

As to features, there’s a lot to like. Google borrowed from Apple’s playbook in at least one way by changing its navigation. It replaced its three-button navigation bar with a new gesture-based system that allows you to switch from one app to another by using natural gestures, which is a nice addition.

Additionally, the new OS makes excellent and much heavier use of machine learning and AI than any of its predecessors. Among other things, these changes subtly impact your phone’s brightness and battery power prioritization, which extends the time between recharges.

The phone learns how you use it and adapts accordingly. It also adapts to environmental conditions, adjusting display brightness as those conditions change.

Another new feature called ‘Slices’ brings relevant segments of certain apps forward, as needed. For example, if you’re searching for a ride, your phone will bring real-time pricing and driver ETAs from services like Lyft and Uber to the foreground.

There’s also a new suite of features under the general heading of “Digital Wellbeing,” which includes a “Do Not Disturb” mode that blocks notifications and sounds, and also grays out the screen to help eliminate unwanted intrusions.

The Digital Wellbeing dashboard also tracks and displays how much time you’re spending on each of the apps on your phone and allows you to set App Timers which will help you better manage the time you’re spending.

On balance, we love the robust new feature set, and we think you will too! If you have one of the devices mentioned above, you can download the update now by going to “Settings – System – System Update”, and then tapping “download and install.”

Joseph Martin

New Google Chrome Feature Created For Better Password Security

Air Canada Customers May Have Had Their Data Exposed

Tech Support Scammers Are Advertising Online

Vulnerability Found In Major Manufacturers Of Android Phones

Millions Of T-Mobile Customers Data May Have Been Leaked

Android Malware Could Access Your Pictures And Calls

Encrypted Chats Are Now Available In Skype

Android Still Tracking Users With Location History Turned Off

Android Gets New OS Update Named Android Pie

Contact Info

Navigation