Android

(get it in RSS or Atom)

Google to pay $19,000,000 compensation for taking candy from kids

ftcgoog-250

Google will stump up $19,000,000 in a settlement with the US Federal Trade Commission.

The money will be used to refund Android users whose children, says the FTC, were able rack up in-app purchases too easily.

SSCC 163 - So THAT'S why you can't erase Flash RAM properly [PODCAST]

chet-chat-logo-featured-250

Here's this week's Sophos Security Chet Chat.

Our regular security podcast that turns news into useful advice...

Watch out for fake versions of Flappy Bird sequel Swing Copters in Google Play Store!

sc-250

Remember Flappy Bird, and the imposter apps that swarmed around at his death?

The imposters were back in force at the birth of Flappy's follow-on game, Swing Copters...

Monday review - the hot 21 stories of the week

dow-250

Catch up with everything we wrote in the last seven days - it's weekly roundup time...

Android users - Sophos needs you (and you could bag a prize)!

Sophos Mobile Security app

Sophos is looking for beta testers for the new version of Sophos Anti-Virus and Security for Android. And to sweeten the deal, we're giving away 20 Google Play gift cards worth $25.

The EPIC edition - 60 Sec Security [VIDEO]

60ss-video-250

One less opt-in app, one more Android virus, and a bunch of EPIC failures...

All in this week's 60 Second Security.

SSCC 160 - That's not just any old malware - that's a TRUE VIRUS! [PODCAST]

chet-chat-logo-featured-250

Ready for listening...

Here's this week's Sophos Security Chet Chat podcast.

Android "Heart App" virus spreads quickly, author arrested within 17 hours

Q. How to attract the attention of the police if you're a bored student on summer vacation?

A. Write a virus that unleashes 20,000,000 SMSes, infects 100,000 devices, and steals personal data...

Monday review - the hot 22 stories of the week

dow-250

Make sure you're up to date with everything we wrote in the last seven days - it's weekly roundup time.

Android "FakeID" security hole causes a pre-BlackHat stir

Seems that a rogue Android app can get more privileges than it deserves simply by saying that someone trustworthy has vouched for it.

It's been dubbed the "FakeID" hole...

SSCC 158 - What do you mean, "Don't knit your own remote authentication"? [PODCAST]

chet-chat-logo-featured-250

Here's this week's Chet Chat security podcast for your listening pleasure.

Chester Wisniewski and Paul Ducklin of Sophos dissect the week's security news to see what we can learn from other people's mistakes...

Android "FBI Lock" malware - how to avoid paying the ransom

andr-cuff-250

The latest "FBI Lock" Android ransomware reported by SophosLabs follows a familiar theme.

But it has a slight sting in the tail to make it trickier to remove, so we thought we'd take you through the steps...

Android app market pirates busted by FBI

pirate-250

Six Americans charged with large-scale piracy of Android apps.

But what about their "customers"?

Is there really an increased risk of malware from unlawfully acquired apps?

Introducing Jibo: adorable home robot or the Eye of Sauron?

Introducing Jibo: adorable home robot or the Eye of Sauron?

Launched by famed MIT Media Labs roboticist Cynthia Breazeal, he's poised to smile, dance, and giggle his way into our hearts, our homes, and hopefully not into the lucrative position of pawning data about where we like to shop.

SSCC 156 - Warbiking in Manhattan, hubris for Google, and how less can be more [PODCAST]

chet-chat-logo-featured-250

Sophos experts Chester Wisniewski and Paul Ducklin are back with this week's security podcast, turning plain old news into advice you can use.

Monday review - the hot 22 stories of the week

dow-250

It's weekly roundup time!

Here's all the great stuff we've written in the past seven days.

SSCC 154: Fraud, viruses, patches and encryption (in that order!) [PODCAST]

chet-chat-logo-featured-250

Where does your country sit on the fraud list? Just how much can you trust SMSes on Android? Is Apple serious enough about iOS security? And will Google's End-To-End email encryption plugin save the world?

Find out with Chet and Duck in this week's Chet Chat podcast...

Coinbase wallet app in SSL/TLS SNAFU

Bitcoin digital wallet

The popular Bitcoin wallet Coinbase has a security flaw in its Android apps which could allow an attacker to steal authentication codes and access users' accounts, according to a security researcher.

Coinbase is far from alone in leaving its wallet app users vulnerable, so what should you do to stay safe when using mobile banking apps?

Anatomy of a buffer overflow - Google's "KeyStore" security module for Android

ks-250

Here's a cautionary tale about a bug, courtesy of IBM.

Not that IBM had the bug, just to be clear: Google had the bug, and IBM researchers spotted it.