Saturday, September 10, 2011

Android Security : Best practices summary (rev 2)

This is the second revision of my summary of best practice for increasing security for your Android phone.
I would recommend this to all Android users.

a) Switch off WIFI when not in use. This is to reduce chances of attack , and saves your battery consumption.
Believe me it saves battery power a LOT.
My Samsung Galaxy Ace would last only 1 day when used heavily with WIFI internet access, but it lasts 2 days when the WIFI Internet access is not much used and is switched off when not being used.


b) Switch off Bluetooth when not in use. This is to reduce chances of attack via anonymous Bluetooth connections from other phones. Users will suddenly be prompted that someone you don't know , wants to connect to you via Bluetooth, once allowed it infects your phone with virus/malware. I had a lot of this attack on my Nokia phone.


c) Install only authorised & signed apps from Android Market. This can be done by unticking "Unknown Sources" option in the Settings -> Applications settings menu. It makes sure you are downloading only signed apps.


d) Install mobile antivirus software ( example : Lookout Mobile Security, AVG Mobile Antivirus ). The two examples are good antivirus software for the Android phone which scans apps , content & SMS. A must-have.


e) Implement a screen lock password for your Android phone. Use complex password to make it difficult to guess ( alphanumeric, upper/lower case ). You also use the initials of a sentence you like as a password . Example : I love the way you look tonight , my darling - take the first letters of the sentence as the password --> iltwyltmd

f) Implement a SIM card password for your SIM card



Note : this post will be updated when required.

Best Social Media Tools

I found this article to be interesting :

MRSAYS.COM : Best Social Media Monitoring Tools

Thursday, September 1, 2011

Android Security : Lookout Mobile Security part 2 ( backup/restore, missing device alert features )

As mentioned in previous blog post , the Lookout Mobile Security has several features only offered in premium version :

Free version
a) Antivirus/malware security.
b) Backup and restore phone data (Contacts only).
c) Missing device alert ( alarm trigger scream on the phone, location pinpoint via login to MyLookout.com ).
d) Privacy Advisor (not available in free version, only in paid premium version)
d) Safe browsing (advises whether the site is OK or contains malware, not available in free version, only in paid premium version).

Premium version
a) Backup and restore phone data (Contacts, Pictures , call logs - up to 1.5GB space limit).
b) Missing device alert ( alarm trigger scream on the phone, location pinpoint via login to MyLookout.com, LOCK phone, WIPE PHONE DATA ).
c) Privacy Advisor
d) Safe browsing (advises whether the site is OK or contains malware, not available in free version, only in paid premium version).

Note : I was only evaluating the free version , so I could not test the premium version features.

Testing on the phone location pinpoint
Based on my testing of the location pinpoint feature using the MyLookout.com site , the location pinpoint works well, but accuracy is more towards 1KM area.
Please refer to the green circle in the screenshot below, that is the accuracy range.
/
Testing on the phone alarm screen trigger feature
Based on my testing, the phone alarm sound was triggered successfully within seconds, and the sound is similar to a US police car siren. The sound generated was almost at max volume. Please refer to the screenshot below, which shows the trigger was activated successfully.


The MyLookout page





The green circle is the phone location possibility , accurate within 1KM