The Macrosite for News, Analysis and Opinion about the Future of the Internet

IT Clan Chat: Mobile Security Threat Looms Large

Internet Evolution's instant message board - join the crowd...
You must login to participate in this chat.

Good night to this time zone. 

Thinkernetter

See you next time, all! Happy day to everybody! :o)

Thinkernetter

I'm off to twitting the VBlog to contribute with the Twitter twits and their silly research so they can evaluate my happiness. :D lol

Thinkernetter

Too bad there's not much in the way of solutions yet.

Thinkernetter

Thanks from me too.

Thinkernetter

Same here. Thanks for joining this IT Clan chat, all!

IQ Crew

Well, I will be heading back to duties of the day.

Thinkernetter

Thanks Susan. And as ever, thank YOU for your ongoing contributions to the community.

Thinkernetter

Yeah, it was like a few cents per message; I noticed when it had crept up to about thirty bucks.

Thinkernetter

I accidentally saw the Dynamic Duo VBlog and got distracted. What a wonderful surprise! The whole new Awards thing didn't reach me until now. Congrats, team blah blah blah. :D Lovely video! 

Thinkernetter

@Kim sorry to hear that, but that's exactly the kind of form mobile malware seems to be taking. Collect small amount from a lot of accounts quickly and then close up and do it again

Thinkernetter

Wow, Kim, good thing you were keeping an eye out.

IQ Crew

@Smk I guess legit in the sense that they do provide the service they said they would... but the evil ones are the ones that charge you more or do it multiple times and then spam your phonebook looking for another sucker to click the link

Thinkernetter

@Mary: True. Or dealing with the crowd of zombies, as a friend of mine describe the mall goers. 

Thinkernetter

I was scammed by a company which started sending me messages and something I did had the effect of applying a charge to my bill for each message I received!  The charges were small but I eventually noticed them.  Called the vendor who recognized the culprit instantly and refunded my money.

Thinkernetter

Gotcha, Awilliams.

Thinkernetter

... those are considered "legit", huh?

Thinkernetter

From the talk I was at this summer a lot of them hide the process so you don't know this is happening. But other "legit" examples are those commericals like send us two names and we will send you a text back with how compatiable they are romantically

Thinkernetter

Ah, @Awilliams. What do these premium SMS ads look/sound like?

Thinkernetter

Sigh. If Jeff says it, it must be true.

Thinkernetter

Most of the SMS scams are basically designed to get you to unknowingly forward these premium rate messages. The charges are added to your mobile bill. Meanwhile the credit is given to the company and they get it all in a month and then distribute the digital currency and move onto a new account before the bills have arrived and the user knows this happens

Thinkernetter

Jeff Bezos says all apps for Kindle Fire are pre-tested.  :)

Thinkernetter

I am already paranoid about shopping online. So I don't know if I would feel safe now using a mobile for same.

Thinkernetter

The trouble is, if third-party apps are so prone to malware, it will cut into what can a sold effectively online.

Thinkernetter

One thing: IBM's report talks about how malware attacks smartphones through premium SMS services and some third-party "cheat" apps. So it seems there is a move to tempt users to adopt these apps. I guess consciousness needs to be raised.

Thinkernetter

@Nicole -- simply supply and demand, saying "Don't use it" would have about the same impact as saying "Don't do drugs" does on the drug trade.

Thinkernetter

Mike will tell you you need a security audit.

Thinkernetter

One of the things IBM X-Force suggests is to kee up with mobile and smartphone security patching. Also, though, IBM team seems to think it's vital to get control over smartphones.

Thinkernetter

And if only Mike Acker were here, we could figure out what those solutions are supposed to be.

IQ Crew

So simply saying "don't use it" won't be enough. We need security solutions to address the fact that consumers will use mobile for shopping, and they will bring their own devices into the workplace.

IQ Crew

I do have my first ever Kindle, Susan.  Although I remain under the spell of Jeff B.'s salesmanship, I was really pointing out that warnings not to use mobile for shopping are futile.  It's going to become mobile's main purpose after calls/messages.

Thinkernetter

@Susan: Agreed. Sometimes I actually enjoy shopping in brick and mortar space. That said, though, automating the process has its attractions, especially given lack of time and energy for "attacking" the mall.

Thinkernetter

Having a shopping mall in my pocket doesn't really sound attarctive to me. 

Thinkernetter

Kim's arm tattoo of Amazon.com's logo is suddenly seeming raaaather suspicious to me...

IQ Crew

Hm, shopping mall in your pocket. An image that could have come right out of Amazon corporate marketing!

Thinkernetter

Do you have a new Kindle, @Kim? 

Thinkernetter

Nobody will need to steal my new Kindle.  I plan to just leave it somewhere instead.

Thinkernetter

Kim you've really fallen under the Bezos spell. I'm concerned.

IQ Crew

A phone is a lot easier to steal as well.

Thinkernetter

I see, @Mary & @Awillims. Thanks. It still gives me the image of killing whales. :( 

Thinkernetter

Kindle Fire is basically a shopping mall in your pocket. 

Thinkernetter

Oh hey can I borrow you phone for a second mine is almost out of battery (five seconds later) thx for all your monies

Thinkernetter

We're talking about tablets as well as phones here.  Major retail use.

Thinkernetter

@Susan yeah it's phishing for a big fish... a whale

Thinkernetter

@AWilliams -- that's what's coming down the pipe.  Or at least predicted to.

Thinkernetter

@Kim and SMK: Most malware aims to steal data for financial gain. so the vulnerability of the mobile and retail combo is a given.

Thinkernetter

People shop using their phones?

Thinkernetter

@Kim: I don't trust mobile retail because I don't trust my phone's security.

Thinkernetter

@Susan: The whaling reference is "phishing" for "big fish," I believe.

Thinkernetter

I am wondering why they chose the term whaling. It gives my an immediate image of whaling as it is commonly used. 

Thinkernetter

Hi Smk: I think people are betting a lot of money that retail will be central to the mobile experience.  Jeff Bezos for one.

Thinkernetter

They're basically pocket PC's.  All PC's need security, period.

Thinkernetter

Welcome, smk. Why are you surprised?

IQ Crew

I think enterprises need to balance the advantages of increased productivity from mobile use with the need for security and make a judgment.  McAfee would say their internally held data either has probably been hacked already in any case.

Thinkernetter

Ping!  Sorry I'm late.  I'm surprised by mobile's lack of security, all things considered.  There's a good reason why I don't shop using my phone.

Thinkernetter

I think I am past being surprised by the Pollyanna attitude to security.  We're moving rapidly towards an environment where data is held by external server farms and accessed using a wide range of devices which have very open attack surfaces.  Given the proven problems with locking down data held on internal, supposedly secure systems, of course we are heading for problems.

Thinkernetter

@Kim I agree, nothing particularly startleing there if anyone has bothered to look at the issue before.

Thinkernetter

Lol sorry I think I distracted the chat with my Norm reference... I blame the DayQuil. Back to smartphones!

IQ Crew

Hm... I think I lost the thread somewhere

Thinkernetter

Anyway, none of this is truly surprising, is it?  I think everyone foresaw that mobile would multiply the security problem once it escaped the Blackberry corral and opened itself to the WorldwideWeb.  We just all went ahead anyway.  Security will have to play catch-up as usual.

Thinkernetter

Who's Norm, Nic?

Thinkernetter

Well, unless Mike shows up we can't really know in detail what he meant.

Thinkernetter

Just listening to Mary's presentation now. 

Thinkernetter

Hi AWilliams!

Thinkernetter

@Mary, I'm surprised, given that one hacker essentially destroyed a major certificate provider, that Mike has higher hopes for digital authentication than for anti-virus software.

Thinkernetter

And hello, Awilliams, welcome!

IQ Crew

Hello, steping in briefly.

Thinkernetter

It's a problem for enterprise IT when workers arrive bearing new kinds of devices almost every week.

Thinkernetter

@Kim: Also, it seems that besides trouble with authentication, anti-virus software isn't effective anymore, really.

Thinkernetter

I've seen a lot of indication that security is having to change itself from a more local internal effort to a more distrubutied effort as workers continue to scatter, but even thing as consumerization continues the enterpirse has even less control :(

Thinkernetter

I know Google is seeking to make Android more relevant to the enterprise, but that can't happen as long as these security issues are still so widespread.

IQ Crew

Digital authentication is just a generic term for reliably identifying parties in cyberspace.  That's very much a work in progress, to say the least.

Thinkernetter

That's a really bad problem.

Thinkernetter

Re Android, here's a link to one of several stories I've seen.  There's an open door which allows apps granted access for a specific purpose to harvest just about any data on the device.

Thinkernetter

@Nicole, yes, IBM's X-Force is finding that smartphones are vulnerable not only because there are so many of them, but because they appear to be easy to breach.

Thinkernetter

@Mary, I'm not sure how behavior monitoring could be implemented.  I guess it's the equivalent of banks suspending use of cards when aberrant activity is identified.  Not sure how that would work for mobile devices. 

 

Thinkernetter

So the concerns with Android security, in particular, are justified.

IQ Crew

Argh, Kim. What flaw?

Thinkernetter

@Nicole, yes. I have heard that forms of single sign on are being discussed more widely, along with facial rec and other forms of scanning.

Thinkernetter

Less hilariously, story breaking today about a "massive flaw" in HTC Android system.

Thinkernetter

Probably because I took too much DayQuil, Mary.

IQ Crew

@Kim: Have you any ideas about the kind of behavior  monitoring and digital authentication Mike refers to?

Thinkernetter

That is a mouthful. Too bad Mike isn't here to explain to me what that means.

IQ Crew

Why is Kim hilarious today in particular?

Thinkernetter

Mike Acker referred to "behavior monitor based defenses and digital authentications."

Thinkernetter

Hilarious Kim has joined us!

IQ Crew

I haven't heard about a blanket ban, Nicole. But someone on the board below Jart's blog indicates that a new kind of identity management is likely going to be required.

Thinkernetter

Hello.  Whaling is hunting for big Pfish, as I understand it.

Thinkernetter

Well I guess my question is how we go about solving this problem. Are any consultants or experts recommending banning user devices from the corporate network altogether?

IQ Crew

Indeed, per IBM, they may even be malware disguised as legitimate products. You know, those calls to "update your software now."

Thinkernetter

One thing that Jart points out too in his blog: Antivirus packages won't help.

Thinkernetter

Still, it is scary to see how the security landscape is changing, shifting.

Thinkernetter

LOL! I am sure that is not true.

Thinkernetter

Ha. Nah I'm only important to my mom.

IQ Crew

You, on the other hand, may be a candidate, Nicole!

Thinkernetter

I'm not certain I'm important enough to qualify as a whaling target. But it sounds pretty scary.

Thinkernetter

Thanks for the intro, Mary.

IQ Crew

"Whaling" is one I'd only heard of recently.

IQ Crew

It's an IT Clan chat day. Hooray.

IQ Crew
IBM information resources
IETV: the thinkerNet on film
5
of
John Kennedy
How Big-Data Is Changing Marketing

6|13|13   |   1:07   |   1 comment


Big-data and analytics tools enable marketers to understand customers as individuals, identifying unmet needs and addressing each customer as a "segment of one," says John Kennedy, VP corporate marketing, IBM.
Kim Davis
Big-Data Can’t Always Sell Wine

5|21|13   |   2:23   |   10 comments


Whole Foods Global Wine Purchaser Doug Bell told me about some of the constraints on using analytics in the US wine market.
Paul J. Fleuranges
Digital Signage Keeps NYC Subway Straphangers on Track

5|6|13   |   3:51   |   1 comment


New York's Metropolitan Transit Authority is conducting a pilot test of digital kiosks to guide subway users to where they want to go more efficiently and at lower cost.
Kim Davis
Fast Forward to the Future

4|23|13   |   2:29   |   20 comments


A look back at tech writing in the 90s makes us wonder where enterprise IT will be 20 years from now.
Mitch Wagner
Google Launches Its Most Depressing Service Yet

4|15|13   |   2:59   |   10 comments


Google's new Inactive Account Manager lets you control how Google disposes of your accounts when you die.
Second Shooter
Argument Over Top-Level Domains Is 'Stupid'

4|11|13   |   2:07   |   3 comments


The whole Amazon.reader debate is a double-stupid. It's stupid to think that there's any e-book buyer who doesn't know Amazon's URL, and it was stupider to let ICANN launch the whole free-form TLD initiative to start with.
Kim Davis
Ladies, Your Tablet Awaits

3|21|13   |   2:22   |   37 comments


ePad Femme is the world’s first tablet “made exclusively for women.”
Wisdom of the Big Chair
NFC Moves Into the Mainstream

3|20|13   |   2:16   |   No comments


While NFC's original goal was to enhance mobile commerce applications, it is finding its way into a number of other uses, which is creating both opportunity as well as challenges for IT departments.
Wisdom of the Big Chair
Integrating Security Into Your Cloud Contract

3|19|13   |   3:35   |   No comments


Enterprises would like to move to cloud computing but are hesitant because they are concerned about providers’ ability to secure company data. Here are some tips that help to ensure that if breaches occur, the business is not left holding the bag.
Brian Baron
How Edmunds.com Collects Customer Information

3|18|13   |   1:15   |   No comments


Edmunds separates customers into segments based on the info it collects on its site and from partners, and uses that to push out custom content, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
2pm EDT
Fri
Jun 21st
an IBM information resource
sponsored content
big blue blog
Todd Watson
Todd Watson   6/18/2013   Post a comment
The IBM Smarter Commerce Global Summit in Monaco kicked into high gear today, and we've already begun to see news emerging from that lovely city-state by the sea.
an IBM information resource
sponsored content
Expert Integrated Systems: Changing the Experience & Economics of IT
In this e-book, we take an in-depth look at these expert integrated systems -- what they are, how they work, and how they have the potential to help CIOs achieve dramatic savings while restoring IT's role as business innovator.

READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE!

REGISTER HERE
Wanted! Site Moderators
Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?

Please email: moderators@internetevolution.com
Internet Evolution – not for thickies
NSA Leaks Shine Spotlight on Perils of Contractor Partnerships
Jason Mick
The US National Security Agency learned the
hard way that it can be dangerous to give a contractor too much money and access, with too little scrutiny. The NSA and other government agencies hire tens of thousands of contractors a year to analyze data. Edward Snowden -- who revealed himself as the NSA leaker after fleeing the country -- was one such contractor, reportedly holding a $122,000 salaried position at Booz Allen Hamilton at the time of his departure.

CLICK FOR MORE