Security on my phone?

[xguy]

Hi, I have wondered about whether the smartphones are secure and after hearing the recent news, I am concerned to say the least!

I have an Htc Incredible and use it sometimes to tether my laptop. I have disclosed personal and financial information and am really worried.

I know there are security apps for a phone but do they really work and do I need one? If so, what are the best ones?

Thanks in advance.

 

[alostpacket]

http://androidforums.com/android-ap...ps-avoid-viruses-guide-those-new-android.html

 

[A.Nonymous]

http://androidforums.com/android-ap...ps-avoid-viruses-guide-those-new-android.html

I'm going to second this. It's an awesome guide. The best protection for your phone is common sense. Sadly, not nearly as common as the name infers.

 

[wayrad]

This raises an interesting question though. I interpreted the OP's post as saying he had transmitted sensitive data while tethering, i.e. while simply using the phone as a 3G modem. Would the normal strictures against disclosing information in the phone's browser or a possibly dubious mobile app apply in this case, or would the major concerns just be the same ones that normally apply to using a computer with wireless connectivity?

 

[alostpacket]

Well most of the same security best practices apply to any and all computing platforms.

However specifically comparing 3G vs WiFi, 3G is a bit safer in the sense that you have much less of a chance of a Man in the Middle attack like Firesheep (though it's not impossible). Regardless, being diligent about security is still recommended on any platform/connection -- as the internet is still the internet. So fake sites can still be fake no matter your connection, bad apps could still be bad, etc. Also, there's a quick section in my guide about WiFi as well.

Man-in-the-middle attack - Wikipedia, the free encyclopedia

Firesheep - Wikipedia, the free encyclopedia

 

[wayrad]

Right, but there isn't any way possibly malicious apps on the phone could access the information during tethering, is there? Or is there? I've certainly never heard of such an app, but is it possible?

 

[alostpacket]

Ganerally only if rooted. You'd need something like tcpdump to read in-transit data which requires superuser permissions.