Connect with us

Featured

Big hole in Android phones

Published

on

Check Point’s mobile security research team has discovered Certifi-gate, a vulnerability that allows applications to gain illegitimate privileged access rights and attackers can exploit Certifi-gate to gain unrestricted device access.

Pure-play security vendor Check Point Software Technologies has announced that its mobile security research team discovered a vulnerability in Android that affects devices made by major manufacturers, including LG, Samsung, HTC and ZTE. The team disclosed its findings during a briefing session at Black Hat USA 2015 in Las Vegas, NV yesterday.

Certifi-gate” is a vulnerability that allows applications to gain illegitimate privileged access rights which are typically used by remote support applications that are either pre-installed or personally installed on the device.  Attackers can exploit Certifi-gate to gain unrestricted device access, allowing them to steal personal data, track device locations, turn on microphones to record conversations, and more.

Android offers no way to revoke the certificates that are providing privileged permissions.  Left unpatched, and with no reasonable workaround, devices are exposed right out of the box. All affected vendors were notified by Check Point about Certifi-gate and have begun releasing updates. The vulnerability cannot be fixed, and can only be updated when a new software build is pushed to the device – a notoriously slow process. Android also offers no way to revoke certificates used to sign vulnerable plugins.

In July, Vodacom, South Africa largest telecoms service provider, reported that it had 6.1 million Android users on its network, far more than the second-placed BlackBerry, with 2.2 million users, and reflecting a massive increase from the 1.4 million Android users it reported in 2013. This represents more than 60% of its subscriber base and places Android in the top position among service providers in South Africa.

“Every day, people around the globe use mobile devices to manage important aspects of their lives: they access work email, manage bank accounts, and track health information,” said Doros Hadjizenonos, Country Manager of Check Point South Africa. “The problem is, they rarely stop to think about whether their data is secure. This vulnerability is very easily exploited, and can lead to the loss and dissemination of a user’s personal data. It’s time to take mobile security seriously.”

Android users can check to see if their device is vulnerable to Certifi-gate by downloading this free Check Point Certfi-gate scanner app in Google Play.

The Company launched Check Point Mobile Threat Prevention, a new mobile security solution enterprises can use to battle the evolving mobile threat environment and to detect threats such as Certifi-gate, malicious apps, Man-in-the-Middle attacks and more. With the highest level of security for stopping threats on iOS and Android, the solution delivers real-time visibility and threat intelligence into an organisation’s existing security and mobility infrastructures. Deployment is easy and not only has integration into an organisations mobility and security infrastructure but it also provides a transparent user experience that maintains privacy and performance.

Featured

Appdate: No wallet? No problem?

In his app roundup, SEAN BACHER highlights VodaPay Masterpass, Charge Running, South African App Integrator Directory, uKheshe Health and LocTransie.

Published

on

VodaPay Masterpass

Digital mobility is now a way of life and most are using smartphones to pay bills. 

To meet this need Vodacom and Mastercard have launched VodaPay Masterpass, which enables Vodacom customers to load any bank card into a secure digital wallet, downloaded as an app on their smartphone. Once loaded, these cards and the secure credentials associated with them are safely stored, enabling customers to start transacting immediately without the hassle of entering card details each time they make a purchase.

Vodacom customers can buy prepaid data, airtime and SMS, or voice bundles, directly through the app. They can also select the Pay Bills menu option to settle their DStv accounts, pay a utility bill or take care of a traffic fine.

With the app’s Scan to Pay functionality, users can scan a QR code to pay for goods and services wherever Masterpass is accepted, including all SnapScan and Zapper merchants. Once a QR code is scanned, users select the card they wish to use, and enter their bank PIN number on their own device to complete the transaction.

Platform: Android and iOS

Expect to pay: A free download and users will not be charged for any transaction fees.

Stockists:  Download VodaPay Masterpass for iOS here and for Android here.

Charge Running

Most running apps track data like pace and distance and, in some cases play audio designed to motivate you, but don’t give you the push you get when you run with a friend. Charge Running is an app that lets you run alongside other runners, virtually, as well as giving live coaching to help you go the distance.

The app includes features such as:

·       Unlimited access to live running classes and virtual races  

·       The ability to compete with runners anywhere in the world in real-time

·       A live leaderboard that shows where you are in the pack to keep you pushing

·       Live, personalised feedback from professional trainers 

·       Group chats with coaches and fellow runners throughout the run

·       On-demand runs for times when you can’t join the live groups 

·       A choice of difficulty levels and race types 

Platform: Android and iOS

Expect to pay: A free seven-day trial; thereafter R150 per month

Stockists: Visit the Charge Running site here for downloading instructions.

South African App Integrator Directory

The South African App Integrator Directory from Xero is designed to solve the complexity of choosing apps for small business owners.

The directory is now available in South Africa with six partners, including Realm Digital, Radical Cloud Solutions, Nimacc, Insights, Iridium Business Solutions and Creative CFO. According to Xero, these are all organisations with a proven track record of successfully integrating marketplace apps into Xero businesses. There are also currently over 700 apps in Xero’s App Marketplace worldwide, 21 of which are South African born.

As small businesses become more tech-savvy, they need to know exactly which apps to install on their devices and how the apps will help them. They also need to be able to install these apps from a trusted integrator so they know for what they are paying. 

Platform: Any device with an up-to-date Internet browser.

Expect to pay: A one month trial version is offered, after which the App Integrator ranges from R125 to R245 per month, depending on the company’s needs.

Stockists: Visit Xero here for downloading instructions.

Click here to read about uKheshe Health and LocTransie.

Previous Page1 of 2

Continue Reading

Featured

Prize offered for drone films

Published

on

DJI and SkyPixel, the world’s most popular aerial photography community, have announced the first short film contest inviting users to submit cinematic stories shot with camera and gimbal products. The 2019 SkyPixel Short Film Contest will accept entries until 14 October 2019. It welcomes submissions from all creators, ranging from hobbyists to social media users and professional videographers. around the globe.

../GT_FileRecv/0731@SP-banner-2400x640-en(1).png

The 2019 SkyPixel Short Film Contest consists of three storytelling categories—‘Big Moments Start Small,’ ‘Make Your Move’ and ‘Adventure Starts With You.’ There is no restriction on the type or brand of equipment participants use, and they can submit as many videos as they wish.

A total of 100 winners can win a range of prizes totaling $48,600 USD in categories including Recommended Films, Best Editing, Best Story, Nominated Entries, People’s Choice Prize as well as This Week’s Most Popular, sponsored by the partner SanDisk and WD brand from Western Digital Corp. This year’s Best Short Video winners will each receive the new Ronin-SC Pro Combo, Osmo Action as well as WD 2TB My Passport Wireless SSD.

Winning entries will also be showcased on the SkyPixel website as well as to DJI’s millions of fans and followers across its social media platforms.

“DJI has redefined how people capture stable video for all of life’s moments. The compact size, portability and powerful imaging system of our Osmo and Ronin series have also made it possible for anyone to take their creativity and inspirations to the next level,” said Basile David, Director of Brand and Content Partnerships at DJI. “With this contest, we hope to encourage more people to embrace and share their own creative way of storytelling.”

Since 2014, the SkyPixel online community has attracted 16 million professional aerial photographers and content creators from more than 140 countries, growing into the largest aerial photography community today. Over the past five years, SkyPixel has received over 150,000 submissions, becoming a go-to platform for original aerial masterpieces and extraordinary footage powered by other gimbal products focusing on various themes.

Details of the 2019 SkyPixel Short Film Contest

The short film contest consists of three categories:

Big Moments Start Small: Create a video showcasing the small, lightweight design of your camera device and your best cinematic scenes. Users are recommended to include at least 10 seconds of behind-the-scenes clips of their product such as DJI Osmo Pocket or other devices.

Make Your Move: Create a video showcasing the stabilized footage from your device. Users are recommended to include at least 10 seconds of behind-the-scenes clips of their product such as DJI Osmo Series or other devices.

Adventure Starts With You: Create a short, cinematic narrative film to showcase your creative skills and visual effects. Users are recommended to include at least 10 seconds of behind-the-scenes clips of their product such as DJI Ronin Series or other devices.

*Video submissions should not be longer than three minutes in length.

Submission Details

Submission Start Date: August 15, 2019, 2:00 AM (EST)

Submission End Date: October 14, 2019, 2:00 AM (EST)

Award Announcement: October 31, 2019

Interested participants can visit the 2019 SkyPixel Short Film Contest website for more information on contest rules and guidelines. For more information, contact: Skypixel.campaign@dji.com

Continue Reading

Trending

Copyright © 2019 World Wide Worx