Difference between revisions of "Android Security and Privacy"

Revision as of 20:31, 26 May 2012

The number of free Android apps that may be infected with malware is on the rise. Although some of free apps might look suspicious, others bearing names such as "Quick Notes" or "Chess" seem innocent, yet contain some of the worst payloads.

Tips to Avoid Malware

1. Always research the publisher of the app. What other apps does it offer? Do any of them look a bit shady? If so, you should probably stay away.
2. Read online reviews. Android Market reviews may not always be truthful. Check around to see what reputable Websites are saying about the app before you hit the download button.
3. Always check app permissions. Whenever you download or update an app, you get a list of permissions for it. An alarm clock app, for instance, probably shouldn't need to look through your contacts. The general rule of thumb: If an app is asking for more than what it needs to do its job, you should skip it.
4. Avoid directly installing Android Package files (APKs). When Angry Birds first came to Android, you could get it only through a third party. This is called "sideloading," or installing apps using an .APK file. Although Angry Birds wasn't malware, in general it is highly advisable not to download and install .APK files that you randomly come across. Most of the time you won't know what the file contains until you install it--and by then it's too late.
5. Put a malware and antivirus scanner on your phone. Although many people still think that antivirus scanners on phones are useless, maybe outbreaks such as this one will change minds. Several different big-name security companies already offer mobile-security options, many of them free. I myself had downloaded "Spider Man," which is on a bad-apps list. My Lookout software identified it as a Trojan horse.

source: PC World Malware Off Your Android Phone: 5 Quick Tips

Free Apps and Adware

Some free android apps do not have advertisements, while others do. Adware is free software that has advertisements for other products and services traditionally (until recently) displayed within the app that you see while you use the app. They connect to the Internet, using your data, and update the advertisements. The more aggressive ones collect data about you from your device memory and send it back to companies that use that data. Finally, the most aggressive adware actually downloads and installs trial apps onto your device without your permission.

A Major criticism of Google Play is that it is not clear which apps are adware and which are not. In the days of Tucows, Freeware is not the same as adware. What's worse is that passive adware is being replaced by more aggressive push adware, and furthermore by outright spyware that is collecting data about you from your own android device and sending it back to 3rd parties.

Detect addons (push adware and some malware related to advertising): Use https://market.android.com/details?i...addonsdetector

There is also "Lookout Security launched its free Ad Network Detector" but it does not flag apps that exhibit aggressive ad serving. Lookout only protects against malware that threatens your phone as opposed to adware.

"The intent of this product is to clarify for users the behaviour of applications that display ads," said Derek Halliday, senior product manager for security at San Francisco-based Lookout. "And two, to show users what privacy and information collection apps and their ad networks are doing. We're trying to provide transparency."

source: ComputerWorld UK Lookout Ad Network Detector sniffs out aggressive Android 'adware'

Android Phone's Notification Area Ads

If you have installed an adware app using push ads, you may see behavior described by Android user as follows, "In my notification bar (where phone signal, etc. is) a green plus symbol will appear. When i bring down my notification menu it's suggesting to download an app." This person installed something from Google Play containing push ads. It was advertised as a free app with no mention of using push ads.

One remedy is to install an app such as "Airpush detector" or "Addons Detector". They can identify which app has those plug-ins.

There are some new apps reported to block ads from going to your phone even if you have adware installed. One is known as Adaway but should be used with caution.

source: The Spicy Gadgematics Remove Android Phone's Notification Area Ads Quickly - Airpush.

Adware Getting More Aggressive

Thousands of Android apps now include software that shoves marketing icons onto your phone's start screen or pushes advertising into your notification bar--and many of the apps give you no warning about the ad invasion. Many of these ads come from mobile marketing firms such as AirPush, Appenda, LeadBolt, Moolah Media, and StartApp. The companies work with greedy app developers.

Push Ads

The mobile ads are called "push notification ads" and "icon ads." Push notification ads deliver small alerts to an Android phone's notification bar. Icon ads, as the name implies, are icons that are inserted onto an Android phone’s start screen.

Push notification and icon ads are more intrusive than in-app ads. In-app ads are only visible whilst you use the app that the advertisement supports development of. Push and icon ads invade areas of your phone outside of the adware program they came with.

The main crime is that the app developer is often not disclosing the push ad payload that goes on your android when you install their app. These obnoxious intrusive ads are being installed without the android owner's consent.

Both AirPush and Appenda offer clear ways to opt out of receiving ads via their websites. But it isn't obvious that consumers would know they should visit those sites to opt out. On Appenda’s site, you submit your phone number to opt out of receiving push notification ads, which leads to privacy concerns. What will they do with your phone number later on? Do you like telemarketers and text spam?

source: PC World Sneaky Mobile Ads Invade Android Phones

Keywords: Android Tablet PC Samsung Galaxy Tab Two 2