Tag: mobile security

Mobile security flaw places millions of app users at risk

Researchers in Germany have now identified a common weakness in programming practices.

A research team in Germany has now stated that they have found a common poor programming practice that has left a flaw that could lead to a mobile security exposure that risks data breaches for millions of app users.

The method of authenticating users could potentially place the personal data of those individuals at risk.

The flaw in the programming could potentially expose the personal data of the users of the apps in which the developers used those mobile security practices. The reason is because of the method by which the app developers authenticate users during the data storage and retrieval processes with cloud databases, such as the Amazon Web Services and Parse at Facebook. The reasearchers are from the Darmstadt University of Technology and the Fraunhofer Institute for Secure Information Technology.

The researchers identified the mobile security flaw by looking into 750,000 Google Play and Apple Store apps.

Mobile Security threat to many usersWhat the researchers found was that many of them use mobile authentication strategies by way of basic API-tokens, despite the fact that there are other methods readily available that are considered to be notably more secure.

This app development strategy is in direct opposition to the advice for best practices that has been issues by cloud storage providers. According to a statement made by Amazon Web Services, they have been advised of a “small number” of mobile app developers who have apps that hold AWS credentials. It said that it is their belief that those developers have “inadvertently embedded their own AWS credentials within their mobile applications, which could lead to unauthorized use of the developer’s AWS services and data.”

The statement also pointed out that AWS took the step to communicate directly with each of those developers in order to offer them guidance for the removal of their credentials from the apps. They also took the step to “encourage them to carefully examine their AWS resources for unauthorised activity and provide assistance as needed.”

The German team’s leader, Professor Eric Bodden said that this was a significant mobile security issue, as they were able to identify 56 million unprotected data sets.

Ear scanning mobile security technology patented by Amazon

This would allow a person to hold a smartphone up to the side of the face to unlock it.

Amazon has now received a new mobile security patent that would make it possible for smartphone users to unlock their devices simply by holding them up in order to scan the shape of their ears.

The patent is for a type of technology that will allow the device to scan the ear through the camera.

The concept of the ear scanning mobile security is not unlike that of a fingerprint scanner. It uses the device’s front facing camera to scan the person’s ear and then conduct a comparison to an image of the owner’s ear that has already been placed on file. The fact is that an individual’s ear is just as unique as his or her fingerprint, which means that aside from the case of identical twins, this can be a method that is just as secure as fingerprint scanning. The exception is in the case of identical twins because they may have the same ears, but their fingerprints differ.

This new mobile security technology would also make it possible to perform a number of other tasks, as well.

Mobile Security Technology - Ear ScanFor example, the ability to scan for a person’s ear can also make it possible for a device to adjust its speaker volume, based on how close it is to the individual. By being able to recognize that it is getting closer or farther away from a person’s ear, it becomes possible to make the speaker volume louder or more quiet as appropriate.

Amazon hasn’t yet stated whether or not it has any intentions to use the new ear scanning patent within any of its upcoming devices, such as the next generation of its Fire smartphone. That said, it is also not known exactly how helpful this mobile technology will be to a user as the majority of devices will allow someone to answer an incoming call without having to unlock it. Speaking on the device is the only behavior that actually requires it to be held up to the ear, which means that in most other cases, it is just as easy to use a fingerprint scan for the purpose of unlocking the device.

It will be interesting to find out what Amazon has up its sleeve for this mobile security feature, as the company has always been an innovator in technology.