I'd like some guidance on ways to verify cab or exe files posted here and elsewhere for security purposes. Are they somehow verified by senior members here to ensure they are not malicious?
For example, the Facebook app being developed here obviously requires a username and password. So what is to stop the developer from redirecting that secure information elsewhere to be used for, say, distributing that Facebook virus or other mischief?
The question doesn't just apply to that one app so I'm not singling cornelha out. What is to stop someone from distributing a cab that provides some necessary or useful function, but also has a small hidden exe buried inside it that can intercept text messages or e-mails or record keystrokes in a browser? Does Windows Mobile itself guard against such behavior?
I'm not asking about viruses...I know the virus threat on Windows Mobile is nil. And I know each device owner has to exercise caution when installing anything and should only use trusted sources. I'm just wondering if there is any security beyond that? Thanks.
Any developer that follows up on his app is unlikely to be a fraudster. Having been a member for a while I can now recognise peoples names and I can see that there is a lot of trust in each other, that is what makes this a great and strong community.
Here's a neat app to add into your cell, this I've just begun testing and may stay with it for awhile.
The idea of a security app for Windows Mobile was not a very convincing one in the past but when we hear about new security vulnerability on Windows Mobile devices, we have to give more priority for security related apps for Windows Mobile. Flexilis is one of our favorite in this category. They have responded to the new vulnerability very quickly, the latest version will detect and delete the ” Phone Creeper ” app which gave us Windows Mobile users a security. ( a fix for version 0.6 will be rolled out soon ).
Along with the Anti-Virus and Firewall app, Flexilis also provides a module for Backup , this module will let you back up your contacts and photos. You can also transfer your data to a new phone.
The Anti-Theft Module in Flexilis enables you to respond when your device is lost or stolen. Locate your device, sound an alarm, wipe your personal information, remotely from the web.
The best part of this is all of this is for FREE and if you find a new security flaw with your device you can also let the Flexilis team know about it.
Visit m.flexilis.com on your
mobile browser or https://beta.flexilis.com/ from your PC to create account
Hi,
I am a system administrator for my company and i am considering switching from windows mobile devices to android devices in our company.
What i am looking for is people who use or have used there android with exchange.
This is mandatory in our company.
The phone needs to be able to sync Email, Contacts and Calendar with MS Exchange.
Are there people who can confirm that
- this works.
- what is your experience.
- Does is work like on a windows mobile device?
- Does it run smooth
- are there any complications.
- Is there anything that needs to be done server side (i assume not)
Any information would help.
Also i would like to know,
From the 3 android phones that are now available (g1, magic & hero)
Seeing that they are all HTC made, do they all have the htc exchange support implemented?
And if not, which ones don't support it, and is there an alternative solution for it?
Thank you in advanced.
Alex
A little info...
anheuer said:
Hi,
Are there people who can confirm that
- this works.
Click to expand...
Click to collapse
Yes, this works. The HTC Exchange app "Work Mail" (mail.apk) allows for syncing of mail only. Complete Exchange sync support is available at this time via thrid party apps only. The best I've seen so far is Touchdown. A 5 day demo is available for testing. This solution is frowned upon by all my sysadmin pals because of two reasons... 1) added cost per end user and 2) its not native therefore you're relying on a third party for support. If they go under, your elegant solution is toast.
- what is your experience.
--> See above. Touchdown works well. Mail.apk gets the mail down but sync can be an issue and calendar, contacts and tasks is a NOGO.
- Does is work like on a windows mobile device?
--> Don't think I know what you're asking but... if you mean does it work like windows mobile's implementation of Outlook/Activesync then... not really. Sync is just like Activesync in that it polls your Exchange server periodically and checks for new items. See above for differences.
- Does it run smooth
--> Sure, though some have reported intermittent sync issues, I have not had that problem. Bear in mind pretty much everyone using Mail.apk is running some flavor of an experimental ROM.
- are there any complications.
-->typically, yes. See above
- Is there anything that needs to be done server side (i assume not)
-->no, no config changes are required to run either mail.apk or Touchdown
Click to expand...
Click to collapse
Also i would like to know,
From the 3 android phones that are now available (g1, magic & hero)
Seeing that they are all HTC made, do they all have the htc exchange support implemented?
Click to expand...
Click to collapse
Mail.apk or Work Mail is a part of the ROMS for newer HTC devices, it is not intended to be used on the HTC Dream/G1 but has been ported over by kickass people to be used on the G1 and is included in newer modded roms like Cyanogens. I believe it first popped up in the Sapphire ROM, search here for in And.dev for the thread that clued me in to its existence.
So bear in mind, any solution you employ will either be entirely 3rd party or incomplete at this time. Also, the Dream/G1 is the only phone with a keyboard, I don't know about you but I wouldn't be composing emails with an onscreen keyboard.
Hope that helps and that I didn't misrepresent anything. If I got any of this wrong get in here and spank me good guys.
innerspace said:
Yes, this works. The HTC Exchange app "Work Mail" (mail.apk) allows for syncing of mail.....................
Click to expand...
Click to collapse
Thank you for your reply.
I assume that when i use the application Touchdown on the G1, that this will also work right?
On our mail server we enforce 2 things when connected to the exchange mail.
1. force password protection on the device
2. force encryption for files on device and SD card.
Do you have experience with this in combination with Touchdown?
Does it ignore it?
Will it enforce it?
Because i think we at least want password protection
(and then i mean that the entire phone cannot be used until the password has been typed. to protect all date on the phone.)
Just one additional point - the "work email" app DOES provide for full Exchange support (ie. contacts, calendar, email) on SOME ROMs. Any ROM that uses an HTC branded Magic ROM as its basis will have this, whereas Google branded ROMs do not (although they can run the application if one acquires it, in such case you'll get email only - most ROMs over on the development board bundle at least the email only version).
A good ROM to use for this is the Smartphone France ROM, which has full support, and is a moderately fast ROM.
I'm not sure about encryption and/or password protection for Exchange but certainly you can add passwords or even gesture based locking onto Android phones.
I personally found Touchdown to be complete and total gash, just couldn't get it to work at all well. Either it wouldn't sync at all, or it'd take ages for mails to appear, or you'd get a random subset of an inbox rather than a complete listing. However, most people who have used Touchdown seem to think my experience is in a minority.
Loccy said:
Just one additional point - the "work email" app DOES provide for full Exchange support (ie. contacts, calendar, email) on SOME ROMs. Any ROM that uses an HTC branded Magic ROM as its basis will have this, whereas Google branded ROMs do not (although they can run the application if one acquires it, in such case you'll get email only - most ROMs over on the development board bundle at least the email only version).
A good ROM to use for this is the Smartphone France ROM, which has full support, and is a moderately fast ROM.
I'm not sure about encryption and/or password protection for Exchange but certainly you can add passwords or even gesture based locking onto Android phones.
I personally found Touchdown to be complete and total gash, just couldn't get it to work at all well. Either it wouldn't sync at all, or it'd take ages for mails to appear, or you'd get a random subset of an inbox rather than a complete listing. However, most people who have used Touchdown seem to think my experience is in a minority.
Click to expand...
Click to collapse
Could you suggest one or more of those locking apps?
So if i understand correct.
The only way to not have to worry about which android phone people would like to use, and still have full exchange functionality is by using touchdown.
If i dont want to use that, then i need to get an android phone that is htc branded, or change the rom to a custom rom.
All Rogers and Hero ROM's have full exchange support NATIVE to the ROM.. do not go the Touchdown route.
As Android is increasingly supporting exchange, Touchdown will be less and less supported.
I am currently running Soulife's Rogers ROM and it handles exchange (email/contacts/calendar) totally native and works really well.
As for your company, it really depends on how many handsets you are supporting, and also depends on whether you really want to root and run different roms on all these devices as well.
I'd probably wait until an Android phone is released in your area that fully supports exchange natively.
There is no remote wipe for Android ... so if you are concerned about security or have to enforce password or locking policies then you should consider blackberry server ... I'm in the same boat as you, would like to use Android but the management tools are not there yet.
I have a magic flashed to jacHero, all aspects of exchange work fine, except one thing. When I try to change the date on a meeting invitation, I get a force close. I guess this is a problem with the ROM, as the stock Rogers ROM did not have this issue.
I have also tried touchdown, which works fine, and has tasks (which is a plus), but I prefer the native app.
Loccy said:
Just one additional point - the "work email" app DOES provide for full Exchange support (ie. contacts, calendar, email) on SOME ROMs. Any ROM that uses an HTC branded Magic ROM as its basis will have this, whereas Google branded ROMs do not (although they can run the application if one acquires it, in such case you'll get email only - most ROMs over on the development board bundle at least the email only version).
Click to expand...
Click to collapse
i'm using an HTC ROM on my vodafone/Google branded magic (which does not sync with exchange by default) and the exchange sync works quite well. i get email, calendar and contacts.
one thing though, with regards to exchange contacts, there doesn't seem to be a way to browse the GAL.
in my case i have to click menu, then company directory. then i can type an entry into the search box.
it does feel a bit cumbersome, but i guess it's better than your phone trying to download several thousand GAL entries to your phone.
Do you need wi-fi?
If you need to use wi-fi in your company, and if you are using WPA-Enterprise (AD auth), keep in mind that android doesn't support it yet (at least out of the box).
An SMS-sending piece of malware has hit Android phones, according to a Tuesday note from antivirus vendor Kaspersky Labs.
The so-called "Trojan-SMS.AndroidOS.FakePlayer.a" appears as a "normal media player application," according to Kaspersky, but can send SMS text messages to premium numbers without the user's consent. It is the first such piece of malware to target Android devices, and it is already in the wild.
Kaspersky, however, did not name the innocuous media player application, although the firm did say that it is about 13 Kbytes in size.
Not surprisingly, Kaspersky has added it to its antivirus database, although the company does not currently offer an antivirus solution for the Android OS, just versions of Windows Mobile and the Symbian operating system. An Android version is on the way, however.
"The IT market research and analysis organization IDC has noted that those selling devices running Android are experiencing the highest growth in sales among smartphone manufacturers," said Denis Maslennikov, mobile research group manager at Kaspersky Lab, in a statement. "As a result, we can expect to see a corresponding rise in the amount of malware targeting that platform. Kaspersky Lab is actively developing technologies and solutions to protect this operating system and plans to release Kaspersky Mobile Security for Android in early 2011."
Maslennikov said that users should keep a close eye on what services an app says it will request before they install it, which implies that it will not spread without a user's permission
It should also be noted that it is received as an SMS requesting the user to install a small update (.apk). Therefore, in order to contract the virus, the user must open and install the apk. Just receiving the SMS will not infect your phone. Also updates are not sent via SMS. They are via the Market Place app.
It's like the email phishing schemes that provide a weblink to update some personal information on your Payal account for example. Never click on a link from an email involving personal info or logins, and never open an app or .exe from an SMS or email either.
Not really a new concept when you put it into perspective.
Sent from my PC36100 using XDA App
Hey guys, just wondering if any skilled devs could think about this
What is iMessage?: iMessage is a great product that Apple uses to bring to and keep people on the iOS platform. But what if we could bridge it to android?
Situation: Many people have old iPhones (or can buy cheap on Swappa) I have a jailbroken iPhone 5. I also have an LG Nexus 5X. What if we could bridge the two and bring iMessage to Android?
Is it possible?: A while ago, some "enterprising developer" found a way to let android users communicate with iMessage. But all of the traffic was being pushed through a server in China. It was shady as shady gets. An APK teardown revealed some unwanted code abilities. But the point is that someone did it and that it is possible. Here at XDA, we can open source the code. We can create a clean, safe version for daily use. Just a little more DIY action.
The Idea: Use an iPhone/iOS Device as the host for iMessage. (The Android will handle SMS, but the iPhone will have no SIM and only send/receive iMessage messages) (P.S: Keep phone number attached to iMessage) The iOS device will most likely need jailbreak to execute the actions as it is far more locked down than Android. So the iOS device will likely sit on a charger, connected to wifi 24/7, acting as the messenger between your device and iMessage. Think of it as a translator.
You will also have an Android device with the appropriate software to connect to the iOS device over the web and send/receive your iMessage texts over the internet. The android app will either be the primary messaging app or a background app. Maybe it will even need root. I don't know. But if it's the main messaging app, it would be a fork of the default messaging app in Android and have the mods needed to connect to the iOS device running iDroidChat. If it's a background app, it will work with any messenger app and will simply act as another source of messages. Like a second SMS server/SIM. It may need root for this functionality.
The Bridge - A connection made over the internet between the iOS device and the Android device. The 2 apps will be encrypted with manual username and password entries. Both of which are entered into each app. The iOS device will host the connection (secured, of course) and the Android device will connect to it using the app. Once the iOS server is running, it will display it's IP, Username, and Password. Just enter these 3 strings on the android app to connect to the iOS server.
Future Plans:
1) An HTML implementation where you can type the iOS device IP into a web browser and it will have a UI for iMessage.
2) Pushbullet integration for mixed SMS and iMessage.
Execution: I'm going to say it up front. I don't know much about coding. That's why I am actively learning Java. But for this project to be possible, I need the XDA community. I will not accept any cash or profits whatsoever from this. I simply want to support the community.
My Role: I will keep the project in shape and help out devs as much as I can. Let's do this. Project Manager. yay.
Check out amphora Messenger on Twitter. So far it seems possible however developer is extremely busy currently. Pie message is also a working solution however needs a dedicated Mac computer, I phones are not possible