Linked by Thom Holwerda on Thu 14th Mar 2013 10:26 UTC
Permalink for comment 555506
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
News
Linked by Thom Holwerda on 05/22/13 22:23 UTC
Linked by Thom Holwerda on 05/22/13 13:38 UTC
Linked by Thom Holwerda on 05/22/13 13:30 UTC, submitted by JRepin
Linked by Thom Holwerda on 05/21/13 22:06 UTC
Linked by Thom Holwerda on 05/21/13 21:45 UTC
Linked by Thom Holwerda on 05/21/13 15:53 UTC
Linked by Thom Holwerda on 05/20/13 22:43 UTC
Linked by Thom Holwerda on 05/20/13 21:50 UTC
Linked by Thom Holwerda on 05/19/13 23:15 UTC
Linked by Thom Holwerda on 05/19/13 23:11 UTC, submitted by Drumhellar
More News »
Sponsored Links



Member since:
2007-03-26
I don't know of any specific cases on Android, but I'm guessing it's only a matter of time, either through applications or the web itself.
Google controls most of the in app ads so I'd be surprised if anything leaked through that way. But I could see the potential with web adds though. In either case, users would have to have side-loading apk files enabled, and even if that is, users would still be prompted with a permissions / install screen should an apk file try to auto-install.
I will admit that I've not done a huge amount of security testing in Android (unlike securing Windows and Linux; which is part of my day job), but I think it's quite hard to sneak malware onto the phone itself without tricking the users into installing an apk. So the biggest threat would be more social engineering (eg porn sites that say they are only viewable via a specific Android codec) than drive-by downloads and other such attacks that silently infect the client.
You don't really need to disable Javascript. It shouldn't be possible for Javascript to break out of it's sandbox. I mean, obviously there will be bugs and vulnerabilities that can be exploited, but the same is true for anything that can be rendered (even the JPEG format has been known to serve malware in the past). Such vulnerabilities usually get patched pretty quickly though, so it's more a case of keeping your browser up-to-date and Java plugins disabled (Java and Flash are by far the biggest two weaknesses on a modern browser).
That's not a bad idea. I like that
Edited 2013-03-15 01:00 UTC