Wednesday, April 8, 2020

How Mumuso taught the kids to respect Women first and not only their Mothers!!

A global and lifestyle brand Mumuso focuses on selling products which are reliable in terms of quality and affordable in terms of...
More

    Latest Posts

    Bill Gates Biography: Success Story of Microsoft Founder

    In this success story post, we are going to share the Bill Gates biography, a prominent American entrepreneur, investor, philanthropist with a terrific career...

    NewsReach – We digitalize, aggregate & sell/syndicate regional & local news through news marketplace

    Five years ago, on 1st July 2015, when Hon. Prime Minister Narendra Modi announced the Digital India initiative, India set forth on...

    NIC, hospitals, housing societies opt door-to-door diesel delivery during lockdown

    Repos Energy, a Pune based door-to-door diesel delivery start-up is powering the National Information Centre, city hospitals and residential societies in the wake...

    Meet The Young Entrepreneur Who’s Giving Voice To Indian Artisans

    Amounee: beyond silence. That’s what this Gurmukhi word means. There’s a reason why young Megha Das picked this word...

    Those crappy pre-installed Android apps can be full of security holes

    If you’ve ever bought an Android phone, there’s a good chance you booted it up to find it pre-loaded with junk you definitely didn’t ask for. These pre-installed apps can be clunky, annoying to remove, rarely updated… and, it turns out, full of security holes.

    Security firm Kryptowire built a tool to automatically scan a large number of Android devices for signs of security shortcomings and, in a study funded by the U.S. Department of Homeland Security, ran it on phones from 29 different vendors. Now, the majority of these vendors are ones most people have never heard of — but a few big names like Asus, Samsung and Sony make appearances.

    Kryptowire says they found vulnerabilities of all different varieties, from apps that can be forced to install other apps, to tools that can be tricked into recording audio, to those that can silently mess with your system settings. Some of the vulnerabilities can only be triggered by other apps that come pre-installed (thus limiting the attack vector to those along the supply chain); others, meanwhile, can seemingly be triggered by any app the user might install down the road.

    Kryptowire has a full list of observed vulnerabilities here, broken down by type and manufacturer. The firm says it found 146 vulnerabilities in all.

    As Wired points out, Google is well aware of this potential attack route. In 2018 it launched a program called the Build Test Suite (or BTS) that all partner OEMs must pass. BTS scans a device’s firmware for any known security issues hiding amongst its pre-installed apps, flagging these bad apps as Potentially Harmful Applications (or PHAs). As Google puts it in its 2018 Android security report:

    OEMs submit their new or updated build images to BTS. BTS then runs a series of tests that look for security issues on the system image. One of these security tests scans for pre-installed PHAs included in the system image. If we find a PHA on the build, we work with the OEM partner to remediate and remove the PHA from the build before it can be offered to users.

    During its first calendar year, BTS prevented 242 builds with PHAs from entering the ecosystem.

    Anytime BTS detects an issue we work with our OEM partners to remediate and understand how the application was included in the build. This teamwork has allowed us to identify and mitigate systemic threats to the ecosystem.

    Alas, one automated system can’t catch everything — and when an issue does sneak by, there’s no certainty that a patch or fix will ever arrive (especially on lower-end devices, where long-term support tends to be limited).

    We reached out to Google for comment on the report, but have yet to hear back.

    Update — Google’s response:

    We appreciate the work of the research community who collaborate with us to responsibly fix and disclose issues such as these.

    Latest Posts

    Bill Gates Biography: Success Story of Microsoft Founder

    In this success story post, we are going to share the Bill Gates biography, a prominent American entrepreneur, investor, philanthropist with a terrific career...

    NewsReach – We digitalize, aggregate & sell/syndicate regional & local news through news marketplace

    Five years ago, on 1st July 2015, when Hon. Prime Minister Narendra Modi announced the Digital India initiative, India set forth on...

    NIC, hospitals, housing societies opt door-to-door diesel delivery during lockdown

    Repos Energy, a Pune based door-to-door diesel delivery start-up is powering the National Information Centre, city hospitals and residential societies in the wake...

    Meet The Young Entrepreneur Who’s Giving Voice To Indian Artisans

    Amounee: beyond silence. That’s what this Gurmukhi word means. There’s a reason why young Megha Das picked this word...

    Don't Miss

    A Call Center employee who became the 7-Figure ‘Young Entrepreneur of the Year’ Awardee; Vandit Shah

    How many people do you know who made the wildest of their dreams come true through sheer dedication and discipline?

    How 9th Annual Flagship Event of EDII -Empresario Startup Summit 2020 helping Startup Ecosystem?

    Empresario Startup Summit 2020 is the 9th Annual Flagship Event of Entrepreneurship Development Institute of India, Ahmedabad. It is an exclusive platform for startups, new age...

    The Rendezvous with art at ICAC Art Gallery

    The rendezvous with art at ICAC Art Gallery saw Sonal Ambani talk about not only the beauty of a painting but...

    WEE Organized WEE Pune Business Networking event

    WEE (Women Entrepreneurs Enclave) organized Business Networking Meet for Pune WEE Members on 22nd February, 2020. This event was facilitated and...

    StartupIndia Partners with Syrow to help Startups and Aspiring Entrepreneurs with Customer Experience Management

    Monday, February 24, 2020: StartupIndia, an initiative of Government of India has partnered with Syrow, a leading Bangalore based AI + Human Powered Customer Service...

    Stay in touch

    To be updated with all the latest news, offers and special announcements.