Tips and tricks for protecting Android devices

Android doesn't rival BlackBerry when it comes to security and enterprise support. But Android devices can still be reasonably secure. Here are some tips to help you protect your investment, privacy, and data.

Password Protection

Android supports screen lock protection that requires a numeric pin or pattern to be entered before the device can be used. Though Android devices currently don't encrypt the files and data, this can still be a great way to keep out casual snoopers or thieves. However, you must enter this pin or pattern every time you use your phone, or after each time the screen goes black and locks.

8 essential security apps

If you find that too time consuming or annoying, consider using Unlock With WiFi. It will at least prevent you from having to keep entering pin or pattern while connected to your home or work Wi-Fi network — usually a safe place where your phone won't be stolen. Use it free with one Wi-Fi network or pay $3.99 for the full version, which can also automatically turn off GPS while on the network — saving battery power.

If you have a corporate Exchange email account on your phone, you might actually be forced to use screen lock protection via security polices set by your company. This means you also can't use apps like Unlock With WiFi.

If you think protecting your entire phone is overkill, you can protect individual apps (like Email, Calendar, Settings, Market, etc) using third-party app protectors. Here are two you might consider:

Application Protection (Free): This lets you protect an unlimited number of individual apps with a password of numbers or a pattern like the Android system supports. It's a relatively simple app protector. But you can configure whether to always prompt for the password/pattern, unlock the individual app until the phone is locked again, or unlock all protected apps until the phone is locked again.

You can input your email address so you can get a message with the correct password if someone has incorrectly guessed your password 10 or more times. This is helpful to alert you that someone is trying to guess your password or if you actually have forgotten it yourself.

Smart App Protector (Free or $1.50): This also supports number passwords (eight digits) or patterns. The free version lets you protect up to five apps in addition to the Market and Package Installer apps to protect against tampering. The free version also limits you from unlocking all protected apps when entering the password/pattern for one. But you don't have to re-enter the password/pattern for the same app in a given period of time, or until the phone is locked.

You can configure the amount of incorrect password/pattern attempts before you can try again. You can customize the app lock screen background. You can even set a time frame to limit when protection is active.

This app also provides some bonus features. You can prevent the screen from turning off when using select apps or auto-rotating.

If you only want to protect a few apps, you can probably get away with using the free version. Consider purchasing the Pro version if you need to protect more or you want to only enter the password/pattern once to unlock all protected apps.

Data Encryption

Unlike iOS and BlackBerry, most Android devices on the market today don't support full storage encryption, which can keep your data secure from the most determined thief. In Android 3.0, an API was added to the platform to help developers use encryption. Thus in the near future we should see more encrypted Android devices. One developer, WhisperCore, already offers a free beta version of an app for Nexus S and Nexus One devices.

Given the lack of encryption (and other enterprise-type features), many businesses are hesitant to support Android for corporate email usage. However, this app helps to at least secure your sensitive work data:

Exchange for Android ($19.99 after free trial): Although Android natively supports MicrosoftExchange for corporate access to email, calendar, and contacts, this app adds many more features and improved Exchange support. The native Exchange feature in Android supports SSL encrypted communications between the device and server, but doesn't keep the data on the device encrypted. Thus the data can potentially be recovered by a determined snooper or thief. This app can encrypt the sensitive Exchange data stored on the Android device and can be enforced by security policies set by the network administrators.

Malware, Theft, and Lost Protection

Mobile devices are becoming more like computers, thus becoming more vulnerable to viruses and other malware. Android is even more susceptible than other platforms due to the openness of the platform and App Market and its multitasking capabilities. Therefore you'll find many antivirus and security apps for Android. (Laptop theft gives 85,000 doctors the blues.)

Mobile devices can also be easily misplaced or stolen. Most security apps include antitheft and locating features to help find your device and protect it in case it gets into someone else's hands. Additionally, some security apps provide backup capabilities of your important data in case it's not recovered.

Here are two security suites you might consider using to protect your gadget and the data on it:

Lookout (Free or $2.99 per month or $29.99 per year): The free version provides malware protection, backup of your contacts, and map/sound locating. The premium service adds Web browsing protection, backup of photos and calls, remote lock, and remote wipe. It also adds Privacy Advisor that shows which apps can access your personal data, such as contacts, location, SMS text messages, and identity info.

Both the free and premium services give you Web access to their online dashboard. There, you can review and change the app settings, access your backed up data, locate your phone on a map, and perform other remote locating/protecting tasks.

Though there isn't a specific SIM card protection feature, if the card is changed, you can see the new phone number online.

AVG Antivirus (Free or one-time $9.99): The free version provides malware and Web browsing protection. It supports backup of contacts, text messages, bookmarks, calls and system settings. It offers all the basic anti-theft and locating features for no charge: map and audio locator, remote message, lock and wipe.

SIM card protection is also provided. You'd receive an e-mail alert if the SIM card is changed. Though you won't see the new phone number, you can see the serial number on new SIM card.

Though you can't change the app settings via the Web interface online, you can locate the device on a map and use the other remote features. It also offers simple remote application management, which makes it quick and easy to uninstall apps you don't want anymore.

You can also initiate the remote locating/anti-theft features via texting commands from another mobile phone as well. This is great if you don't have a PC with Internet around.

The Pro edition adds SMS and spam protection, an app locker, and backup of your apps.

Password Management

As with PCs, another security concern is how your passwords are stored by the browser. A determined snooper or thief could potentially recover passwords from your Android. But there are apps and browsers that can store and/or retrieve your passwords using encryption, so not even a hacker could get to them. Here are some solutions:

LastPass ($12 per year after free trial): Though LastPass offers a free service, using its mobile apps requires the premium service. It works in conjunction with the other LastPass mobile and PC apps, so you'll have the same login credentials and form details stored for both PCs and mobile devices. It also supports the storage and auto fill of form data (name, email, address, credit card details) and secure notes.

LastPass installs a new Web browser, which you must use to access your LastPass account and the stored credentials. One big disadvantage of using this browser is the lack of a bookmark feature, which is provided by the native Android browser.

If the LastPass browser doesn't cut it, consider installing Dolphin Browser HD and its LastPass add-inor Firefox Mobile and its LastPass add-in. Though the browsers are free, the add-ins still require the premium service of LastPass.

Firefox Mobile (Free): You could install the free Firefox Mobile browser and — until they add native support — use its Password Manager add-in to password protect and encrypt stored passwords. The first time you visit a website that needs a password stored by Firefox you'll be prompted for the master password, and then it will fill-in the stored password.

You can also use Firefox Sync to synchronize your passwords, history, bookmarks, and tabs between all your computers and mobile devices.

Summary

Remember, the first layer of protection is setting a PIN or pattern; or at least locking your sensitive apps with a third-party app protector, such as Application Protection or App Locker II: Fake Crash. It's best to go a step further and encrypt sensitive data, such as your work email using Exchange for Android. Plus keep your eye on WhisperCore and other apps to come that will provide full device encryption.

To be better protected in case your Android device gets misplaced or stolen, you should use an anti-theft and remote locator app, such as Lookout or AVG Antivirus. These can also help combat viruses and malware that will likely become more prevalent on mobile devices.

Last but not least, you should secure your website passwords with an app like LastPass or Firefox Mobile with the Password Manager add-in.

HP planning to bring WebOS to appliances, cars?

HP is currently working to bring its WebOS mobile operating system to cars and appliances, the Wall Street Journal is reporting.

According to the Journal, HP can see a world where many of the products consumers currently use in the home or while on the road will have touch screens that connect to the Web and deliver WebOS functionality.

Speaking to the Journal in an interview, WebOS head Stephen DeWitt said that there is an "enormous amount of interest" from companies that want to bring WebOS to their devices, but he wouldn't say which firms are thinking seriously about it.

HP took control of WebOS after it acquired Palm last year in a $1.2 billion deal. Since then, the company has brought WebOS to its line of smartphones, as well as its latest tablet, the TouchPad.

Not content with its own products, HP has indicated that it would license its operating system to other mobile-device makers, and in June, HP CEO Leo Apotheker said that offering WebOS solely on his company's products would be a mistake.

"I happen to believe that WebOS is a uniquely outstanding operating system," Apotheker said during an interview at the D9 conference. "It's not correct to believe that it should only be on HP devices. There are all kinds of other people who want to make whatever kind of hardware they make and would like to connect them to the Internet."

In March, HP indicated that it was also looking beyond the mobile space with its operating system, saying that it plans to offer WebOS on every single computer it ships starting next year.

However, until today, the company has not made any clear indication that it was actually planning to bring its products to appliances and cars.

If HP does, in fact, break into the car space, it will face serious competition from a host of services, including Ford's Sync technology. That offering is becoming increasingly more-capable, thanks to the integration of application support. The platform also allows drivers to place calls, integrate their MP3 players, and more.

However, the chances of HP finding friends in the car business seem slim, an analyst speaking to the Journal said. According to Thilo Koslowski, car makers are unlikely to invest in a new technology, since most of them already have services in place.

"The automobile industry has no interest in changing suppliers every year," Koslowski told the Journal.

It could be a similar scenario on the appliance side. Whirlpool, which makes a host of appliances under several names, including Maytag and KitchenAid, told the Journal that it won't be integrating WebOS for one key reason: appliances are designed to last a long time, and WebOS might not be able to hold up over that period.

HP did not immediately respond to request for comment.

Source : cnet

Android malware masquerading as Google+ app

A new flavor of Android malware is disgusing itself as a Google+ app in an attempt to capture instant messages, GPS, location, call logs, and other sensitive data.

Uncovered by the team at Trend Micro, the new malware known as ANDROIDOS_NICKISPY.C can also automatically answer and record phone calls. To capture data, the app loads at boot-up and runs certain services that can monitor messages, phone calls, and the user's location, thereby stealing e-mail and other content.

Detailing its findings in a blog last Friday, Trend Micro discovered that the malicious app tries to trick people by installing itself under the name Google++.

But instead of providing access to Google's new social network, the app sends its stolen user data to a remote site where presumably cybercriminals can grab it. Unlike some malware that in the past masqueraded as legitimate apps through Google's Android Market, this particular one must be downloaded by an unsuspecting user from a malicious Web site and then manually installed.

And even if installed, the app can be uninstalled from an Android device by selecting Settings > Application > Manage applications, choosing Google++ and then clicking Uninstall, according to Trend Micro.

Trend Micro gives the app a low-risk rating, but it's still something that Android owners should be sure to avoid.

Android users concerned about security can learn how to better protect themselves through Trend Micro's online guide "5 Simple Steps to Secure Your Android-Based Smartphones."

BlackBerry Bold 9930 goes on sale at Verizon for $250

Without any fanfare, Verizon has started selling the BlackBerry Bold 9930. The 9930 is an update to RIM's classic BlackBerry design. It carries the same features as the Bold 9900, its GSM-based sibling.

Both mix a 2.8-inch, 640x480 touchscreen with a full-size keyboard and are the first to ship running BlackBerry 7. They share a much faster 1.2GHz processor (likely a Snapdragon) and a five-megapixel camera that lacks autofocus but does record 720p video. A total of 8GB of built-in flash provides the storage.


Price for the 9930 on Verizon is $510 contract-free, or $250 with a two-year contract. It should reach retail stores on August 25.

HTC Ruby specs leak out, show dual-core 1.5GHz chip

The forthcoming HTC Ruby has had its specs revealed. The Android device will be powered by a 1.5GHz dual-core processor and will center on a 4.3-inch qHD display. It will also be equipped with dedicated camera and video buttons, which will activate either its 8-megapixel rear camera or its 2-megapixel front camera.

The HTC Ruby, which previously surfaced in a Flickr photostream, will launch on T-Mobile’s network when it arrives in the next few weeks. Although it resembles a cross between HTC’s Sensation and a myTouch, it will not ship as a myTouch device. [via TmoNews]