Forums > General Discussion   Shooting the breeze...

Latest Android security issue

Reply
Created by westozwind > 9 months ago, 16 Dec 2014
westozwind
WA, 1395 posts
16 Dec 2014 2:19PM
Thumbs Up

If you are running Android 4.3 or earlier
(If you don't know which version you are running, please find the nearest bin to deposit your phone in, then go and get a feature phone)

www.itnews.com.au/news/android-apps-accessing-user-data-without-asking-398845

If you install apps from outside the play store, you are at greatest risk.

Haydn24
QLD, 473 posts
16 Dec 2014 5:36PM
Thumbs Up

At great risk of what? Knowing your name and birth date?

Geez, that makes me tremble.

This society is the biggest bunch of wimps, scaredy cats, pathetic space cadets.

Who cares

Quit worrying, go outside and have some fun, go explore the countryside, go for a surf

Dawn Patrol
WA, 1991 posts
16 Dec 2014 4:18PM
Thumbs Up

I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.

TheWolf
SA, 247 posts
16 Dec 2014 7:19PM
Thumbs Up

Select to expand quote
Haydn24 said..
At great risk of what? Knowing your name and birth date?



Full name
Address
DOB
Parents name
Friends details
E-mail addresses
Work details
Usernames/passwords
Bank account details
Current location
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity

JulianRoss
WA, 543 posts
16 Dec 2014 5:34PM
Thumbs Up

Select to expand quote
Haydn24 said..
At great risk of what? Knowing your name and birth date? Geez, that makes me tremble. This society is the biggest bunch of wimps, scaredy cats, pathetic space cadets. Who cares Quit worrying, go outside and have some fun, go explore the countryside, go for a surf



Go for a surf, In Perth?. C'mon Haydo that is just a step too far mocking some one.

Haydn24
QLD, 473 posts
16 Dec 2014 8:29PM
Thumbs Up

Select to expand quote
JulianRoss said..

Haydn24 said..
At great risk of what? Knowing your name and birth date? Geez, that makes me tremble. This society is the biggest bunch of wimps, scaredy cats, pathetic space cadets. Who cares Quit worrying, go outside and have some fun, go explore the countryside, go for a surf




Go for a surf, In Perth?. C'mon Haydo that is just a step too far mocking some one.


Well thats your fault for living there

Haydn24
QLD, 473 posts
16 Dec 2014 8:30PM
Thumbs Up

Select to expand quote
TheWolf said..

Haydn24 said..
At great risk of what? Knowing your name and birth date?




Full name
Address
DOB
Parents name
Friends details
E-mail addresses
Work details
Usernames/passwords
Bank account details
Current location
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity


AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da


elmo
WA, 8726 posts
16 Dec 2014 6:35PM
Thumbs Up

Select to expand quote
Haydn24 said..

TheWolf said..


Haydn24 said..
At great risk of what? Knowing your name and birth date?





Full name
Address
DOB
Parents name
Friends details
E-mail addresses
Work details
Usernames/passwords
Bank account details
Current location
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity



AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da





yes and it's a bastard to fix up and clear your name + being chased for debts

evlPanda
NSW, 9202 posts
17 Dec 2014 5:04PM
Thumbs Up

Select to expand quote
Haydn24 said..

AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da




One. About $10k was racked up on a credit card that was ordered in their name and delivered to some other (fake) address.

Source of identity theft: Their letterbox.

Honestly it's pretty easy to do via 'social engineering'. At a previous place of work we had a password reset system that asked you a few personal questions. I cracked my colleague's in about 20 seconds.

"So you grew up in Perth yeah?"
"Yep"
"I used to live there. Hang on how old are you?"
"35"
"So might have gone to the same school."
"Something School" - 1 point
"No ****! Me too! So where did you live?"
"Something street." - 2 points
"I was in [made up street]"
"There were some great teachers there. Best school I ever went to actually. Who was your favourite teacher?"
"That's hard to say, probably Miss Smith... hey... wait a minute... are you?" - 3 points
"Yep."

Not even trying.

genuine
332 posts
17 Dec 2014 2:34PM
Thumbs Up

Select to expand quote
evlPanda said..

Haydn24 said..

AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da





One. About $10k was racked up on a credit card that was ordered in their name and delivered to some other (fake) address.

Source of identity theft: Their letterbox.

Honestly it's pretty easy to do via 'social engineering'. At a previous place of work we had a password reset system that asked you a few personal questions. I cracked my colleague's in about 20 seconds.

"So you grew up in Perth yeah?"
"Yep"
"I used to live there. Hang on how old are you?"
"35"
"So might have gone to the same school."
"Something School" - 1 point
"No ****! Me too! So where did you live?"
"Something street." - 2 points
"I was in [made up street]"
"There were some great teachers there. Best school I ever went to actually. Who was your favourite teacher?"
"That's hard to say, probably Miss Smith... hey... wait a minute... are you?" - 3 points
"Yep."

Not even trying.


Yep Ive been done too but not that much!!

Haydn24
QLD, 473 posts
17 Dec 2014 4:51PM
Thumbs Up

Look, what im trying to get at is if someone wants to steal your identity, they are going to do it. The amount of information every single person on the internet has entered about them is more than enough for someone to take an identity.

Worrying about what apps you install is irrelevant.


mineral1
WA, 4564 posts
17 Dec 2014 4:41PM
Thumbs Up

Select to expand quote
Haydn24 said..
Look, what im trying to get at is if someone wants to steal your identity, they are going to do it. The amount of information every single person on the internet has entered about them is more than enough for someone to take an identity.

Worrying about what apps you install is irrelevant.




Haydn, the original chap posting this alert, is in a field that has first hand up front knowledge of any such issues that may be a problem to a purchaser. I would guess he would have probably forgotten more about this stuff than you would ever know.
If he indicates there is an issue, then take that to the bank, its an issue.
He wasn't asking for any help, just putting it out there. If it helps just one.........its a good thing, yes

westozwind
WA, 1395 posts
18 Dec 2014 9:56AM
Thumbs Up

OK, I'll wade back in to this one. I posted this as general info for seabreeze folks. The general category atracts some nerdy topics from time to time so I did'nt think it was out of order.
Many breezers are tech savy and this is a double edge sword. They may be more likley to install apps from untrusted sources cause their mates said it was cool. Others will store a great deal of their personal info on their phone (passwords, accounts etc.) thinking that it is safe. Some have kids who do all kinds of stuff with their phones and unwittingly introduce something nasty.
True, social engineering and honeypots are easier vectors for known targets, but this is a shotgun delivery method that just sprays it out there in the hope they get a % of punters entraped.
What's app, a popular multi platform messaging app, was launched a few years ago. The company that makes the app is based in Cyprus and hence avoids the EU privacy laws put in place to protect consumers. The first version of the app copied all of your contacts to the companies servers without asking permission. This was done without informing the user (except if you read the fine print in the T's&C's). A lot of this information magically turned up on russian hacking sites. Probably not an issue that someone know's auntie Berryl's mobile number, but it's still info that most people would not want out in the open.
So, to minimise the risk of having problems, do as Haydn suggested and only store what is necessary on your phone and if you have not done so recently, change the passwords for the apps you use.
As for passwords, there is two types, sensitive & non sensitive. You can use simple passwords for stuff that does not matter (Facebook, instagram etc, but some may disagree, facebook MATTERS, mkay). You can even use the same one if you want.
Once you get to banking passwords etc, you gotta go a little more sensitive. Can't be the same. A simple trick is to prepend or append the first 3-4 characters of the service you are using to a current password, that way it's easy to remember, but different for every site.
Probably telling you how to suck eggs, but if it helps one person, it's worth it.

pepe47
WA, 1381 posts
18 Dec 2014 10:58AM
Thumbs Up

mkay, lol, southpark fan

Mark _australia
WA, 22380 posts
18 Dec 2014 11:00AM
Thumbs Up

Select to expand quote
Dawn Patrol said..
I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.


And that's why it is a dumb idea.
Use a computer

grumplestiltskin
WA, 2331 posts
18 Dec 2014 3:02PM
Thumbs Up

Select to expand quote
Mark _australia said..

Dawn Patrol said..
I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.



And that's why it is a dumb idea.
Use a computer


Bahahahaha!, and you think using the computer is safer?
c'mon Mark, might be time to pack it back into the box it came in and take it back to the store :-)

pueter66
QLD, 205 posts
18 Dec 2014 5:12PM
Thumbs Up




My New I Bacus 6 doesnt seem to have an operating system

MintoxGT
WA, 975 posts
18 Dec 2014 8:05PM
Thumbs Up

Westoz, mate we who know you appreciate your sound knowledge in your specific chosen field, those who heed your info appreciate you sharing and those who choose to be arrogant can be just that!

However if you choose to be arrogant your opinion does not need to be heard, keep it with you so you can empower yourself with whatever you need to feel for what ever. This was an "Info post" take it for that and shut the &*^% up because some of us are pretty stupid when it comes to IT and I find the information helpful.

Will I use it? I will try as best I can.

FFS stop the bull**** negative comments, you dont have to respond even if the content is valid! That means take it or leave it!

Merry Xmas........... I'm too stupid to spell Kristmas, flame me!

GT

Haydn24
QLD, 473 posts
19 Dec 2014 12:05AM
Thumbs Up

Select to expand quote
MintoxGT said..
Westoz, mate we who know you appreciate your sound knowledge in your specific chosen field, those who heed your info appreciate you sharing and those who choose to be arrogant can be just that!

However if you choose to be arrogant your opinion does not need to be heard, keep it with you so you can empower yourself with whatever you need to feel for what ever. This was an "Info post" take it for that and shut the &*^% up because some of us are pretty stupid when it comes to IT and I find the information helpful.

Will I use it? I will try as best I can.

FFS stop the bull**** negative comments, you dont have to respond even if the content is valid! That means take it or leave it!

Merry Xmas........... I'm too stupid to spell Kristmas, flame me!

GT


Its Christmas

MintoxGT
WA, 975 posts
18 Dec 2014 10:35PM
Thumbs Up

Yes, I like chrisesmissus...... I mean Christmas!

Ya wally :)

Now be nice or Santa wont be visiting you

Mark _australia
WA, 22380 posts
18 Dec 2014 10:48PM
Thumbs Up

Select to expand quote
grumplestiltskin said..

Mark _australia said..


Dawn Patrol said..
I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.




And that's why it is a dumb idea.
Use a computer



Bahahahaha!, and you think using the computer is safer?
c'mon Mark, might be time to pack it back into the box it came in and take it back to the store :-)



You have some semblance of control with a computer.
Virus scanners, proper cleaners and undeleters, registry fixups etc.

I am bemused that so many people do so much on a phone and do NONE of the above, and keep downloading the latest timewasting fad "app" cos the Joneses have it.
Yeah, I'm the idiot.




lotofwind
NSW, 6451 posts
19 Dec 2014 2:06AM
Thumbs Up

You sound exactly like my grandpa.

Haydn24
QLD, 473 posts
19 Dec 2014 1:19AM
Thumbs Up

Select to expand quote

MintoxGT said..
Yes, I like chrisesmissus...... I mean Christmas!

Ya wally :)

Now be nice or Santa wont be visiting you



MintoxGT said..

Yes, I like chrisesmissus...... I mean Christmas!

Ya wally :)

Now be nice or Santa wont be visiting you


i like you

cisco
QLD, 12326 posts
19 Dec 2014 11:55AM
Thumbs Up

Select to expand quote
lotofwind said..
You sound exactly like my grandpa.


You need to be reminded. Don't mess with old folk!!!

kernal
WA, 541 posts
19 Dec 2014 12:05PM
Thumbs Up

Select to expand quote
Haydn24 said..

TheWolf said..


Haydn24 said..
At great risk of what? Knowing your name and birth date?





Full name Hayden Porter
Address ****n redcliffe somewhere
DOB 90's baby for sure
Parents name
Friends details weirdos
E-mail addresses
Work details dont think he does to be honest
Usernames/passwords haydn24 password
Bank account details hungry
Current location talking smack on seabreeze like its 4chan sa or reddit
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity



AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da







Subscribe
Reply

Forums > General Discussion   Shooting the breeze...


"Latest Android security issue" started by westozwind