Walled Garden Not Enough To Safeguard Mobile Platforms

As much as Apple would like to control how users use their iPhones, like denying them Google Voice or Podcaster, or protect users from viruses, it's never enough and someone will always find a way to get into the walled garden or fortress.

I suppose it's about building a better mouse-trap thing.  Still, always someone who can get around it as in the case of an European app that found a way to gain access to iPhone user's telephone number whereby iPhone users then started getting unsolicited calls.

This first came up at a site called Mac4Ever when they successfully tested the incriminating app, mogoRoad.  (More about iLounge)

Here's where it worries me.  What's to keep this app and others like it from accessing even more information in your iPhone's database?  Supposedly, this ability was available to developers since iPhone 2.1, oh, more than a year ago.

And another thing that worries me about this.  Apple is pretty anal about the app approval process so what about the less anal competitors out there?  Android users like myself.  Feeling good right about now?  And BB users.  Feeling safe too?

No matter what Apple or anything else tries to "protect" us, we're really the only ones who can decide what apps to install and what information to give out.  So far, this situation has been benign but highly irritating for the folks who received unwanted calls.  Still, it is quite alarming.

And since more folks are now frequenting 3rd party app stores, this problem is likely to crop up again and again.

Gizmodo Got It Right on Conficker

Gizmodo of hate seems to have a new blog feature where they explain things rather than just report new gadgets and regurgitate rumors from other sources. And this post on the Conficker virus is pretty good that all mobile warriors should pay attention to. I agree with their assessment on the future of virus.

In fact, with such a network the virus author(s) seems to be creating and no security expert appears to know what it is suppose to do scares me. It doesn't matter if you're a OS X or Windows users, this affects everyone.

What also is frightening is the rule of "one up". Someone will always be around later to do better (in the virus sense, I mean "worse"). Could there be a day when a virulent computer code appear on the Internet or network without attracting anyone's attention?

Via Gizmodo

Virus Alert: Conficker

I've got a couple of computer viruses in the past. The worst one I got, I was forced to reformat my drive and then later find out that I didn't have to. We've got anti-virus software on all PCs running Windows but we managed to get an infection anyway. Now, there's the Conficker.

According to 60 Minutes and Symantec believes its one of the worst computer viruses out there. So, take notice. Protect yourselves. I'm on a Mac so I'm not too concern but a large majority of my fellow mobile warriors are on Windows.

According to Daily Wireless, there are online help:

• CNet
• Symantec
• Microsoft

I suggest everyone running Windows (heck, anyone with a computer) to pay attention. From what I'm able to gather on the Web, it's an April 1 event. That means you've got about to days to do something about this.

Via Daily Wireless

UPDATE: MICROSOFT HAS A PAGE DEDICATED TO THE CONFICKER VIRUS.

Note: Some day soon, we'll look back at this and end up talking about the same thing with our mobile devices.

ISS Laptops Catch Computer Virus

Talk about mobility.  It doesn't get any more mobile than taking your laptop onto the International Space Station.  Nor is catching or bring a computer virus up there.  Wired has reported that two laptops aboard the ISS has caught a computer virus.

You'd really have to wonder with all the security involved, how this can happen.

Sadly, this is not the first time.  More than that, NASA, at least publicly, is not calling this a big problem.  Privately...

According to NASA, everything is scanned before it's allowed to go up to the ISS.  A storage device, as it may be the case here, was taken up there without being scanned or authorization. Both possibilities points a great lapse in judgment and likely violation of protocols to the greatest degree.

Regardless, if this can happen to astronauts more than 200 miles above Earth, it can happen to any of us.  I'm sure the Mac guys should have a field day with this one.

Cyber Threats: Just Some of the Time?

I recently read a WSJ report, about cyber security in light of the Olympics.  For some traveling to Beijing for the games, as spectators or those seeking business opportunities, they may take with them laptops, smartphones, or digital storage media.  Pay attention.

WSJ reported that a debate had taken place whether to warn the public of the danger posed by Chinese hackers.  Let me put the debate to rest.  I'll do it here and now.  Okay, it's public.  But shouldn't cyber security be a year round threat and not just during the Olympics in China?

And it's not just Chinese hackers we need to be wary of.  How about being wary of hackers in general?  Despite the paralysis suffered by the US government on this issue, the Department of Homeland Security has issued warnings of cyber threats against mobile workers who travel overseas.  Because the threat was not specific, this alert was not made public.  


The WSJ article came out before it was made public of the IOC's deal with the organizers of the Beijing Games to allow the Chinese government to implement Internet censorship it deemed not related to the Olympics, cutting off thousands of journalists off at the knees.  

Somtimes bloggers to reprint materials from other sources, I have reservations about copyright ownership.  So I will offer links to pertinent information instead of posting the relevant information here.  I apologize for the inconvience :)

I've included the Homeland Security assessment here.  I hope WSJ will make this perpetually available to the general public.  It is a 3-page PDF file that described key finds as follows:  foreign powers targeting Americans traveling abroad with the goal of fathering "economic, military and political information".  Essentially, viruses, trojan horses, or exploitations of any security holes will be pursued to that end.  Even trickery.  

I think the report is right in not mention any specific foreign state or body that poses as a threat.  This is not just a matter of the Olympics because cyber security threats exist all year around all over the world.  Here are the highlights of the report:

• Travelers are to assume that they will be unable to protect their data that they may transmit over the Internet.
  
• Expect no privacy.  You're always a potential target.
• Expect all transmission to be intercepted.  
• Expect viruses, malware, and spyware to be installed at all ports of electronic access - cafes, hotels, etc.  And expect all portal media to be infected if they were connected to to these access points.  
• Assume foreign authorities may find an excuse for inspections of laptops or portal media for the sole purpose of copying information.  

I stated those main points to highlight what a mobile worker could be up against.  The later part of the report, "protective measures", offer tips on what to do to avoid being a victim of information theft.  The gist of the report recommendation is this:  use common sense.  

• If you don't have to bring your laptop overseas, leave it at home. 
• Assume your portal media is infected with malicious software.  Plug it into your network back home can make things worse.
• Use the best encryption available to you to protect your data.  

While I generally believe in our government's ability to provide for the common defense and against terrorism, I believe it our duty to be pro-active in matters where it's within our control.  I hope the information and guidelines help you protect your data whether you're a mobile warrior in the private or public sector.


The US Cyber Consequences Unit also offered a similar guideline to protect your data.  They help you assess whether you are a potential target of cyber theft, how to do a presentation without a laptop, and how best to secure your portable devices.  Also for your consideration:

• USCCU Laptop Travel Guidelines
• USCCU Cyber-Security Check List (also available in German/Italian)

I understand the sensitive geopolitical nature of making such an announcement so close to the Games.  I'll leave the politics to the politicians.  Luckily for the rest of us, we don't have to worry about that.  

Mobility Tip: Just Be Smart

Ah, computer virii (though some prefer "viruses").  Trojans.  Spyware.  A whole industry spawned as a result with anti-virus companies valuing in the billions.  





I love computers.  Not a geek.  They wouldn't have me.  Just a geek-wannabe.  But I've learned to be smart.

To protect myself, these are the programs I've got in my PC and habits I've developed over the years that has helped me over the years.  It's helped me and I hope it'll help you as well.

• Ad-Aware 2008:  It's one of the most robust spyware software I've used.  And it's free.  And it does a good enough job where it doesn't interfere with the normal operation of your computer or mine.  Did I mention it's free?  It may also have background monitoring.  I'd have to check to be sure about that.


• Spybot - Search and Destroy:  It offer what Ad-Aware does for the most part.  Added bonus is that it's got a function that lets the user go through the startup files and decide what gets loaded during startup.  I find this just as useful as it's background monitoring system.  


• Zonealarm:  Best firewall software.  Everyone says that.  I don't trust the default one that comes with Windows.  It offers a two week trial with virus and other Internet protection.  While I suggest getting the subscription (I did for my mom's laptop), once the trial period is over, the firewall continues to work.  Great work over there at Zonealarm.  


• AVG Anti-Virus:  Works well enough.  I don't have a problem with it.  Real-Time protection.  There is a professional version with more control if you like that sort of thing.  Also check out Avira too.  Like AVG Anti-Virus, it is also free.


• Norton Anti-Virus:  You get this with your computer when you buy it from Dell or another top tier brand.  True to my word, I have this on my computer but once the 90-days protection was up, I switched over to AVG Anti-Virus and Avira.  It's not free.  Norton offers a two week trial period.  Also, there is an option for someone from Symantec to remotely fix your PC.  It'll cost you though.

I highly recommend these programs.  If not for yourself then for someone who is not as savy with the Wild Wild Web as you are.  I've done this for my family and I'm going to insist a concoction of the mentioned protections for work.  





However, nothing substitute using your head.  There's one rule:  don't venture anywhere on the Internet you're not familiar with.  Don't go down that dark alley.  Don't even look!  Eyes forward!





Sometimes, that's all it takes for bad elements of the digital society to find you.  The lure of naked pictures of Jessica Alba is powerful.  I get it!  I'm a guy too.  But when someone you don't know sends you an e-mail claiming to have them, it's spam.  Infested.  Delete it!





In life, when you see something on the ground, you don't go picking it up.  Same principle on the virtual mean streets of the Web.   Free iPhones!  Woohoo!  Where do I click and sign up?!  No! Nothing is free.  Just avoid it. No free computers, gas, or Vigra pills.  There are no hot girls waiting to chat with you online.





Just be smart.  As always, any tips you can share with everyone would be greatly appreciated.  Stories too :)  





Happy e-mailing, surfing, and chatting!



Note:  My fellow mobile warriors, I know you're very smart about such things already.  This is more of a rant of something that happened at work.  We have a very liberal Internet policy here; as a result, we got an outbreak.  It was bound to happen.  Always that the bad apple.  The one who doesn't listen.