Evo Security Threats - Know Your Apps!

[keatre]

Hey guys,

Let me preface this with: I work in tech security, so I'm semi-anal, but you still need to pay attention to this:

This has been discussed semi-, but has just been confirmed in the rooting community.

The Evo stock has a laundry list of security vulnerabilities. So much so, that any malicious app dev could potentially 'hack' your phone and steal pretty much anything. It's so bad, infact, that the Grack boys recommend not even purchasing the device (that's not gonna stop me or anyone else, but it shows how sincere he's being).

Check out the guys at grack (unrevoked guys -- not Toast's root), and their post about security concerns.

Long story short - know what apps your putting on your device, and be careful.

--

If this has been discussed, please merge. If mods think this needs to be root, go ahead -- but I feel this points out security faults with STOCK software.

 

[SprintFun]

I'm assuming this explains why some Apps (like ShootMe) don't require root access.


Personally, I'm not really concerned. I'm not the adventurous type that downloads apps for the hell of it and stick to the mainstream.

 

[somnambulus]

Personally I am going to stick to the most positive reviewed and largest developers. I suppose there is always a security threat, but I think common sense will suffice.

 

[keatre]

I'm assuming this explains why some Apps (like ShootMe) don't require root access.


Personally, I'm not really concerned. I'm not the adventurous type that downloads apps for the hell of it and stick to the mainstream.

Could be -- And you're right, as long as you stick the mainstream apps, you should be ok, but for those that like to try the new apps that 'sound cool', just be careful.

Personally I am going to stick to the most positive reviewed and largest developers. I suppose there is always a security threat, but I think common sense will suffice.

True, there's always a threat. The problem being that the Sprint software has made it so plainly obvious that an exploit is there, it wouldn't take much to implement.

 

[v01rider]

are there firewall apps?

 

[ColeRoolz]

is this only the rooted apps? or is it the ones from the android market? sorry android noobie

 

[hopalee]

So do you recommend having anti-virus software? Or is the only TRULY safe thing to do is not download apps?? :/

 

[rdegk15]

That being said, there should be an official apps not to download thread

 

[v01rider]

That being said, there should be an official apps not to download thread

agreed. also include apps that one has loaded and it was junk so as to warn others not to waste time.

 

[v01rider]

So do you recommend having anti-virus software? Or is the only TRULY safe thing to do is not download apps?? :/

ha not download apps, thats awesome!! i guess live and learn! i got pretty good at rebuilding my bbcurve once i junked it up. guess its time to learn the same with the evo!

 

[nickoakdl]

I find it interesting that this is one of the only truly informative threads I have read in the past few days and the OP doesn't get a single "thanks" because he warns of risks of the phone, but if the thread was a picture of an EVO urinating on an Iphone he would have got a dozen.

 

[Kaskimondo]

Good advice.

Maybe there should be a thread here dedicated to tested apps, like a safe list.

 

[keatre]

I find it interesting that this is one of the only truly informative threads I have read in the past few days and the OP doesn't get a single "thanks" because he warns of risks of the phone, but if the thread was a picture of an EVO urinating on an Iphone he would have got a dozen.

Haha, your last sentence actually made me laugh out loud...

I think it has more to do with timing -- everyone is SO pumped (including me) about getting our phones tomorrow, who cares if my contacts and data streams get stolen - I get to hold my phone!

Anyways, to answer a lot of your questions above, the main story is - be careful. Most app devs won't try and cripple or steal your data, it's bad business. But, the exploits (that's an 's', as in multiple) are out there, so I can't say it enough -- know your apps. Don't go too crazy tomorrow when you first get your phone and download anything and everything that sounds cool. Check around and see how the app rates/how long the dev has been around/and their history on apps.

As for a 'firewall' or anti-virus, there are some anti-virus apps out there, and some are good, and some just suck CPU power - I'll test them out with some different programs I use and see how 'good' they are over the weekend. Firewalls? Ehhh, not really. I think anti-virus is what you'll want to look for.

Have fun with our Evo's tomorrow, just be careful (not tryin to be the buzzkill, just good ol' Dad before I hand you the car keys)

 

[Kaskimondo]

Does anyone see any apps in my list that they know might cause issues.?

I probably won't install all of these right away but was interested in them. I did check the reviews before I added them to my list to make sure they were well regarded by the community.


94 total, 94 free (100%), 0 paid (0%), 96MB total size, $0 total price

• Bible King James Version
• Dictionary.com
• Guitar : Solo Lite
• NewsRob (Google Reader / RSS)
• EStrongs File Explorer
• AppBrain Market Sync
• Gensoid Lite(SEGA Genesis Emu)
• UltraChron Stopwatch Lite
• Sex Position & Animation
• SystemPanel App / Task Manager
• Dolphin Browser HD
• Handcent SMS
• TicketTalker 3000 from 76

 

[Kaskimondo]

Does anyone see any apps in my list that they know might cause issues.?

I probably won't install all of these right away but was interested in them. I did check the reviews before I added them to my list to make sure they were well regarded by the community.


94 total, 94 free (100%), 0 paid (0%), 96MB total size, $0 total price

• Bible King James Version
• Dictionary.com
• Guitar : Solo Lite
• NewsRob (Google Reader / RSS)
• EStrongs File Explorer
• AppBrain Market Sync
• Gensoid Lite(SEGA Genesis Emu)
• UltraChron Stopwatch Lite
• Sex Position & Animation
• SystemPanel App / Task Manager
• Dolphin Browser HD
• Handcent SMS
• TicketTalker 3000 from 76

 

[keatre]

Does anyone see any apps in my list that they know might cause issues.?

Haha, the sex position one is interesting.

Torrent-fu comes with all the usual precautions you need to take with torrents. The most common malicious apps are usually found in "wallpaper" and "ringtone" apps, so I would check those out fairly well before downloading.