Back to top

Latest Android security issue

Created by westozwind westozwind  > 9 months ago, 16 Dec 2014
Register to post, see what you've read, and subscribe to topics.
westozwind
westozwind

WA

1416 posts

16 Dec 2014 2:19pm
If you are running Android 4.3 or earlier
(If you don't know which version you are running, please find the nearest bin to deposit your phone in, then go and get a feature phone)

www.itnews.com.au/news/android-apps-accessing-user-data-without-asking-398845

If you install apps from outside the play store, you are at greatest risk.
Haydn24
Haydn24

QLD

473 posts

16 Dec 2014 5:36pm
At great risk of what? Knowing your name and birth date?

Geez, that makes me tremble.

This society is the biggest bunch of wimps, scaredy cats, pathetic space cadets.

Who cares

Quit worrying, go outside and have some fun, go explore the countryside, go for a surf
Dawn Patrol
Dawn Patrol

WA

1991 posts

16 Dec 2014 4:18pm
I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.
TheWolf
TheWolf

SA

247 posts

16 Dec 2014 7:19pm
Select to expand quote
Haydn24 said..
At great risk of what? Knowing your name and birth date?



Full name
Address
DOB
Parents name
Friends details
E-mail addresses
Work details
Usernames/passwords
Bank account details
Current location
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity
JulianRoss
JulianRoss

WA

544 posts

16 Dec 2014 5:34pm
Select to expand quote
Haydn24 said..
At great risk of what? Knowing your name and birth date? Geez, that makes me tremble. This society is the biggest bunch of wimps, scaredy cats, pathetic space cadets. Who cares Quit worrying, go outside and have some fun, go explore the countryside, go for a surf



Go for a surf, In Perth?. C'mon Haydo that is just a step too far mocking some one.
Haydn24
Haydn24

QLD

473 posts

16 Dec 2014 8:29pm
Select to expand quote
JulianRoss said..

Haydn24 said..
At great risk of what? Knowing your name and birth date? Geez, that makes me tremble. This society is the biggest bunch of wimps, scaredy cats, pathetic space cadets. Who cares Quit worrying, go outside and have some fun, go explore the countryside, go for a surf




Go for a surf, In Perth?. C'mon Haydo that is just a step too far mocking some one.


Well thats your fault for living there
Haydn24
Haydn24

QLD

473 posts

16 Dec 2014 8:30pm
Select to expand quote
TheWolf said..

Haydn24 said..
At great risk of what? Knowing your name and birth date?




Full name
Address
DOB
Parents name
Friends details
E-mail addresses
Work details
Usernames/passwords
Bank account details
Current location
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity


AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da


elmo
elmo

WA

8879 posts

16 Dec 2014 6:35pm
Select to expand quote
Haydn24 said..

TheWolf said..


Haydn24 said..
At great risk of what? Knowing your name and birth date?





Full name
Address
DOB
Parents name
Friends details
E-mail addresses
Work details
Usernames/passwords
Bank account details
Current location
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity



AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da





yes and it's a bastard to fix up and clear your name + being chased for debts

evlPanda
evlPanda

NSW

9207 posts

17 Dec 2014 5:04pm
Select to expand quote
Haydn24 said..

AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da




One. About $10k was racked up on a credit card that was ordered in their name and delivered to some other (fake) address.

Source of identity theft: Their letterbox.

Honestly it's pretty easy to do via 'social engineering'. At a previous place of work we had a password reset system that asked you a few personal questions. I cracked my colleague's in about 20 seconds.

"So you grew up in Perth yeah?"
"Yep"
"I used to live there. Hang on how old are you?"
"35"
"So might have gone to the same school."
"Something School" - 1 point
"No ****! Me too! So where did you live?"
"Something street." - 2 points
"I was in [made up street]"
"There were some great teachers there. Best school I ever went to actually. Who was your favourite teacher?"
"That's hard to say, probably Miss Smith... hey... wait a minute... are you?" - 3 points
"Yep."

Not even trying.
genuine
genuine

332 posts

17 Dec 2014 2:34pm
Select to expand quote
evlPanda said..

Haydn24 said..

AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da





One. About $10k was racked up on a credit card that was ordered in their name and delivered to some other (fake) address.

Source of identity theft: Their letterbox.

Honestly it's pretty easy to do via 'social engineering'. At a previous place of work we had a password reset system that asked you a few personal questions. I cracked my colleague's in about 20 seconds.

"So you grew up in Perth yeah?"
"Yep"
"I used to live there. Hang on how old are you?"
"35"
"So might have gone to the same school."
"Something School" - 1 point
"No ****! Me too! So where did you live?"
"Something street." - 2 points
"I was in [made up street]"
"There were some great teachers there. Best school I ever went to actually. Who was your favourite teacher?"
"That's hard to say, probably Miss Smith... hey... wait a minute... are you?" - 3 points
"Yep."

Not even trying.


Yep Ive been done too but not that much!!
Haydn24
Haydn24

QLD

473 posts

17 Dec 2014 4:51pm
Look, what im trying to get at is if someone wants to steal your identity, they are going to do it. The amount of information every single person on the internet has entered about them is more than enough for someone to take an identity.

Worrying about what apps you install is irrelevant.


mineral1
mineral1

WA

4564 posts

17 Dec 2014 4:41pm
Select to expand quote
Haydn24 said..
Look, what im trying to get at is if someone wants to steal your identity, they are going to do it. The amount of information every single person on the internet has entered about them is more than enough for someone to take an identity.

Worrying about what apps you install is irrelevant.




Haydn, the original chap posting this alert, is in a field that has first hand up front knowledge of any such issues that may be a problem to a purchaser. I would guess he would have probably forgotten more about this stuff than you would ever know.
If he indicates there is an issue, then take that to the bank, its an issue.
He wasn't asking for any help, just putting it out there. If it helps just one.........its a good thing, yes
westozwind
westozwind

WA

1416 posts

18 Dec 2014 9:56am
OK, I'll wade back in to this one. I posted this as general info for seabreeze folks. The general category atracts some nerdy topics from time to time so I did'nt think it was out of order.
Many breezers are tech savy and this is a double edge sword. They may be more likley to install apps from untrusted sources cause their mates said it was cool. Others will store a great deal of their personal info on their phone (passwords, accounts etc.) thinking that it is safe. Some have kids who do all kinds of stuff with their phones and unwittingly introduce something nasty.
True, social engineering and honeypots are easier vectors for known targets, but this is a shotgun delivery method that just sprays it out there in the hope they get a % of punters entraped.
What's app, a popular multi platform messaging app, was launched a few years ago. The company that makes the app is based in Cyprus and hence avoids the EU privacy laws put in place to protect consumers. The first version of the app copied all of your contacts to the companies servers without asking permission. This was done without informing the user (except if you read the fine print in the T's&C's). A lot of this information magically turned up on russian hacking sites. Probably not an issue that someone know's auntie Berryl's mobile number, but it's still info that most people would not want out in the open.
So, to minimise the risk of having problems, do as Haydn suggested and only store what is necessary on your phone and if you have not done so recently, change the passwords for the apps you use.
As for passwords, there is two types, sensitive & non sensitive. You can use simple passwords for stuff that does not matter (Facebook, instagram etc, but some may disagree, facebook MATTERS, mkay). You can even use the same one if you want.
Once you get to banking passwords etc, you gotta go a little more sensitive. Can't be the same. A simple trick is to prepend or append the first 3-4 characters of the service you are using to a current password, that way it's easy to remember, but different for every site.
Probably telling you how to suck eggs, but if it helps one person, it's worth it.
pepe47
pepe47

WA

1382 posts

18 Dec 2014 10:58am
mkay, lol, southpark fan
Mark _australia
Mark _australia

WA

23526 posts

18 Dec 2014 11:00am
Select to expand quote
Dawn Patrol said..
I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.


And that's why it is a dumb idea.
Use a computer
grumplestiltskin
grumplestiltskin

WA

2331 posts

18 Dec 2014 3:02pm
Select to expand quote
Mark _australia said..

Dawn Patrol said..
I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.



And that's why it is a dumb idea.
Use a computer


Bahahahaha!, and you think using the computer is safer?
c'mon Mark, might be time to pack it back into the box it came in and take it back to the store :-)
pueter66
pueter66

QLD

205 posts

18 Dec 2014 5:12pm



My New I Bacus 6 doesnt seem to have an operating system
MintoxGT
MintoxGT

WA

975 posts

18 Dec 2014 8:05pm
Westoz, mate we who know you appreciate your sound knowledge in your specific chosen field, those who heed your info appreciate you sharing and those who choose to be arrogant can be just that!

However if you choose to be arrogant your opinion does not need to be heard, keep it with you so you can empower yourself with whatever you need to feel for what ever. This was an "Info post" take it for that and shut the &*^% up because some of us are pretty stupid when it comes to IT and I find the information helpful.

Will I use it? I will try as best I can.

FFS stop the bull**** negative comments, you dont have to respond even if the content is valid! That means take it or leave it!

Merry Xmas........... I'm too stupid to spell Kristmas, flame me!

GT
Haydn24
Haydn24

QLD

473 posts

19 Dec 2014 12:05am
Select to expand quote
MintoxGT said..
Westoz, mate we who know you appreciate your sound knowledge in your specific chosen field, those who heed your info appreciate you sharing and those who choose to be arrogant can be just that!

However if you choose to be arrogant your opinion does not need to be heard, keep it with you so you can empower yourself with whatever you need to feel for what ever. This was an "Info post" take it for that and shut the &*^% up because some of us are pretty stupid when it comes to IT and I find the information helpful.

Will I use it? I will try as best I can.

FFS stop the bull**** negative comments, you dont have to respond even if the content is valid! That means take it or leave it!

Merry Xmas........... I'm too stupid to spell Kristmas, flame me!

GT


Its Christmas

MintoxGT
MintoxGT

WA

975 posts

18 Dec 2014 10:35pm
Yes, I like chrisesmissus...... I mean Christmas!

Ya wally :)

Now be nice or Santa wont be visiting you
Mark _australia
Mark _australia

WA

23526 posts

18 Dec 2014 10:48pm
Select to expand quote
grumplestiltskin said..

Mark _australia said..


Dawn Patrol said..
I think you'd find most people that use a smart phone have a significant amount of personal information on them. From accounts details/passwords/emails the works. Could be an easy target for identity theft.




And that's why it is a dumb idea.
Use a computer



Bahahahaha!, and you think using the computer is safer?
c'mon Mark, might be time to pack it back into the box it came in and take it back to the store :-)



You have some semblance of control with a computer.
Virus scanners, proper cleaners and undeleters, registry fixups etc.

I am bemused that so many people do so much on a phone and do NONE of the above, and keep downloading the latest timewasting fad "app" cos the Joneses have it.
Yeah, I'm the idiot.




lotofwind
lotofwind

NSW

6451 posts

19 Dec 2014 2:06am
You sound exactly like my grandpa.
Haydn24
Haydn24

QLD

473 posts

19 Dec 2014 1:19am
Select to expand quote

MintoxGT said..
Yes, I like chrisesmissus...... I mean Christmas!

Ya wally :)

Now be nice or Santa wont be visiting you



MintoxGT said..

Yes, I like chrisesmissus...... I mean Christmas!

Ya wally :)

Now be nice or Santa wont be visiting you


i like you
cisco
cisco

QLD

12364 posts

19 Dec 2014 11:55am
Select to expand quote
lotofwind said..
You sound exactly like my grandpa.


You need to be reminded. Don't mess with old folk!!!

kernal
kernal

WA

541 posts

19 Dec 2014 12:05pm
Select to expand quote
Haydn24 said..

TheWolf said..


Haydn24 said..
At great risk of what? Knowing your name and birth date?





Full name Hayden Porter
Address ****n redcliffe somewhere
DOB 90's baby for sure
Parents name
Friends details weirdos
E-mail addresses
Work details dont think he does to be honest
Usernames/passwords haydn24 password
Bank account details hungry
Current location talking smack on seabreeze like its 4chan sa or reddit
previous locations
planned future locations
access to photos

Y'know, all the stuff you need to steal someones identity



AND?? how often has someone stolen your identity or you know anyone who's has been stolen?

woop di do da





End of posts
Please Register, or first...
Topics Subscribe Reply

Return To Classic site