TurboLab.it

[Claudio] ha scritto:fai sapere come si comporta (e sviluppa la APP).

[Claudio] ha scritto:l'app in questione è in prealfa e richiede il root

gli IMSI-Catcher possono intercettare il traffico in uscita dal dispositivo ma non fare il contrario.

Ganondolf ha scritto:Il root è necessario solo per la funzionalità "AT Command Injection" (che a me crasha), per il resto è utilizzabile anche senza.

In addition, they can all crack A5/1 encryption which is most commonly used for GSM traffic on the fly (passively)! Only the latest A5/3 encryption which is used for securing mobile data (4G and 3G) and is offered as new security standard for GSM encryption remains secure in practice while susceptible to theoretical attacks. Although A5/3 withstands passive eavesdropping, it can be bypassed by IMSI-Catchers forcing a mobile device into 2G mode and downgrade encryption to A5/1 or disable it.

Ganondolf ha scritto:Ciò spiegherebbe il contenuto del secondo post del topic su xda

What more, that you are not mentioning is the fact that there is also the hidden Google interface that can remotely install or pull any application on your phone. (These have (AFAIK) already been used on the rouge Angrybirds App.) This function can and should be disabled on a secured phone.

Exercising Our Remote Application Removal Feature [This post is by Rich Cannings, Android Security Lead. — Tim Bray]

Every now and then, we remove applications from Android Market due to violations of our Android Market Developer Distribution Agreement or Content Policy. In cases where users may have installed a malicious application that poses a threat, we’ve also developed technologies and processes to remotely remove an installed application from devices. If an application is removed in this way, users will receive a notification on their phone.

Recently, we became aware of two free applications built by a security researcher for research purposes. These applications intentionally misrepresented their purpose in order to encourage user downloads, but they were not designed to be used maliciously, and did not have permission to access private data — or system resources beyond permission.INTERNET. As the applications were practically useless, most users uninstalled the applications shortly after downloading them.

After the researcher voluntarily removed these applications from Android Market, we decided, per the Android Market Terms of Service, to exercise our remote application removal feature on the remaining installed copies to complete the cleanup.

The remote application removal feature is one of many security controls Android possesses to help protect users from malicious applications. In case of an emergency, a dangerous application could be removed from active circulation in a rapid and scalable manner to prevent further exposure to users. While we hope to not have to use it, we know that we have the capability to take swift action on behalf of users’ safety when needed.

This remote removal functionality — along with Android’s unique Application Sandbox and Permissions model, Over-The-Air update system, centralized Market, developer registrations, user-submitted ratings, and application flagging — provides a powerful security advantage to help protect Android users in our open environment.