Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Dr McKay

macrumors 68040
Aug 11, 2010
3,531
259
Kirkland
Where I work the iPhone was tested for possible use, it failed with over 100 Security issues. One being that it still transmits and receives data when in Airplane mode.
 

RMXO

macrumors 6502a
Sep 1, 2009
875
41
It really sucks for anyone who just bought or was gifted an Android!
Windows phone users... no sympathy.

Before W8 came out, we (I'm in IT) were asked to demo W7 & see if it would work with our network. We all gave up after a wk of trying to it to work with our certificates authentication system.

Android, BB & iOS (Easiest to hardest to setup & secure within our network) was the only smartphones we used & Android was the easiest to connect & secure in our network.
 

cnguyen0320

macrumors regular
Aug 14, 2012
177
0
Where I work the iPhone was tested for possible use, it failed with over 100 Security issues. One being that it still transmits and receives data when in Airplane mode.

Why is transmitting data on airplane mode a security issue? You know it can still connect to wifi on airplane mode right?

Anyway, Apple's ecosystem has been very good at keeping security top notch. iOS and Mac OS get like no viruses which means no spyware to steal vital info on a corporate phone. Android phones are infamous for malware. Windows OS for PC is very vulnerable but idk about their phones.
 

paolo-

macrumors 6502a
Aug 24, 2008
831
1
I'm guessing you're referring to this

http://www.nbcnews.com/technology/technolog/free-android-apps-cost-users-security-privacy-1C6848002

Which ultimately is just a write up on research done by Juniper Networks (possibly a more credible source when it comes to privacy and security then NBC).

http://forums.juniper.net/t5/Securi...formation-There-s-An-App-for-That/ba-p/166058

Ultimately this doesn't surprise me... On an unmoderated market like Play, developers can do what ever they want. The question also becomes sure they ask for the access, if you grant it what will really happen. I'm sure most car racing apps don't start sending out spam SMS from your phone. Most of it is probably just developers being lazy. (hey I need to use this library, oh it requires this permission type of thing). The other thing is did they randomly choose the apps they looked at or did they look at the ones people actually download. I'm sure there's lots of bottom of the barrel apps that no one actually downloads sitting in Play that are very badbly written and probably ask for a bunch of permissions they don't actually need. Some of might also be malware in an app that doesn't serve an actual purpose so people don't actually download it.

Mind you, I agree with Juniper's conclusion. Developers should be more diligent in their permissions requests and probably give some reasoning otherwise it creates a situation where it becomes normal for apps to request a bunch of permissions that don't make sense and the user just has to live with it.
 

siiip5

macrumors 6502
Nov 13, 2012
395
0
Why is transmitting data on airplane mode a security issue? You know it can still connect to wifi on airplane mode right?

Anyway, Apple's ecosystem has been very good at keeping security top notch. iOS and Mac OS get like no viruses which means no spyware to steal vital info on a corporate phone. Android phones are infamous for malware. Windows OS for PC is very vulnerable but idk about their phones.

LOL. Apparently you don't read the tech news sections very often. Sorry, but no OS is completely secure.I mean, think about this for a second; How do you suppose a phone gets jailbroken? Vulnerabilities within the OS. Here are a bunch of stories regarding iOS and Mac OSX malware from just this year.

And Android phones aren't infamous for malware. Name one phone that is famous for malware? It has nothing to do with hardware.

The App Store has stricter guidelines for posting an app, than the Play Store does, nothing more. Google is more apt to let the user be a 'big boy' and decide if they want to download an app based upon the permissions that you must acknowledge before downloading. Is this riskier? No riskier than downloading a program on your PC. Have you never downloaded anything on a PC or Mac? Why do you believe this is okay, yet chastise Google or Android?

http://m.nbcnews.com/technology/technolog/half-million-macs-infected-apple-issues-second-anti-malware-patch-674423

https://www.google.com/url?sa=t&rct=j&q=apple%20malware&source=web&cd=8&cad=rja&ved=0CGIQFjAH&url=http%3A%2F%2Fwww.theregister.co.uk%2F2012%2F07%2F25%2Fmac_crisis_malware%2F&ei=VJjCUKaGC9HZigLe6oDgBQ&usg=AFQjCNFiR02gxjn0fB2_CuarSY85XOl7nA&sig2=do4RlBtjoSf4SGIMKM1jjg

https://www.google.com/url?sa=t&rct=j&q=apple%20malware&source=web&cd=10&cad=rja&ved=0CHQQFjAJ&url=http%3A%2F%2Fwww.computerworld.com%2Fs%2Farticle%2F9234298%2FNew_Dockster_malware_targets_Apple_computers&ei=VJjCUKaGC9HZigLe6oDgBQ&usg=AFQjCNE6giNYRVQooMs1MkFb_YMhsI_MSg&sig2=2XJUgSBiBF0HBjUuXN65tQ

https://www.google.com/url?sa=t&rct=j&q=apple%20malware&source=web&cd=12&cad=rja&ved=0CIYBEBYwCw&url=http%3A%2F%2Fwww.latimes.com%2Fbusiness%2Ftechnology%2Fla-fi-tn-apple-trojan-malware-20120705%2C0%2C4995703.story&ei=VJjCUKaGC9HZigLe6oDgBQ&usg=AFQjCNHWoS0urw823PUO-oeg5zcieoYDrg&sig2=HdXHC8NY0f_34z6OG8e77w

https://www.google.com/url?sa=t&rct=j&q=ios%20malware&source=web&cd=5&cad=rja&ved=0CEsQFjAE&url=http%3A%2F%2Fwww.redmondpie.com%2Fanother-malware-app-sneaks-into-ios-app-store%2F&ei=i5nCUKTzA6jmiwLjioGICA&usg=AFQjCNEGADMGZaT3yiZ-WbPH88L2jr352g&sig2=Vey0Sez7n4LadNfKUQvXgw
 

Dr McKay

macrumors 68040
Aug 11, 2010
3,531
259
Kirkland
Why is transmitting data on airplane mode a security issue? You know it can still connect to wifi on airplane mode right?

Anyway, Apple's ecosystem has been very good at keeping security top notch. iOS and Mac OS get like no viruses which means no spyware to steal vital info on a corporate phone. Android phones are infamous for malware. Windows OS for PC is very vulnerable but idk about their phones.

I don't know, I work for the Air Force. They consider anything transmitting and recieving data, capable of being hi-jacked and capable of receiving and transmitting audio.

Anyway Wi-Fi is turned off when Airplane mode is turned on, you have to re-enable Wi-Fi manually.
 

aristobrat

macrumors G5
Oct 14, 2005
12,292
1,403
Where I work the iPhone was tested for possible use, it failed with over 100 Security issues.

I don't know, I work for the Air Force.
I know that they're different devices, but it's interesting the Air Force would find over 100 security issues with the iPhone, and then buy thousands of iPads for the Electronic Flight Bag Program. :confused:

If anyone hasn't seen the 10 minute video the Air Force project manager did about the project, it's pretty cool:
http://9to5mac.com/2012/09/27/u-s-a...windows-bureaucracy-and-deployed-ipads-video/
 

hyteckit

Guest
Jul 29, 2007
889
1
Out of the 4 platforms: Blackberry, iOS, Android, and Windows Mobile, Android is the less secure and Blackberry is the most secure.

With Android:

You can side load any application you want with a simple link. Any application can read all your contents on an external storage device such as a microSD card. Just downloading a simple wallpaper or widget can get you text spam.
 

Dr McKay

macrumors 68040
Aug 11, 2010
3,531
259
Kirkland
I know that they're different devices, but it's interesting the Air Force would find over 100 security issues with the iPhone, and then buy thousands of iPads for the Electronic Flight Bag Program. :confused:

If anyone hasn't seen the 10 minute video the Air Force project manager did about the project, it's pretty cool:
http://9to5mac.com/2012/09/27/u-s-a...windows-bureaucracy-and-deployed-ipads-video/

That's the American Air Force, I'm in the British Air Force. However I know the British Army has bought iPad's to train their Helicopter pilots. However the Air Force here failed the iPhone for those security violations.
 

hyteckit

Guest
Jul 29, 2007
889
1
That's the American Air Force, I'm in the British Air Force. However I know the British Army has bought iPad's to train their Helicopter pilots. However the Air Force here failed the iPhone for those security violations.

So what phone meet their security guidelines?
 

siiip5

macrumors 6502
Nov 13, 2012
395
0
So what phone meet their security guidelines?

Seriously, when will you guys realize it is not the hardware that is the issue. It is the software that matters and whether or not the manufacturer will allow modifications to the code to meet specs (Apple always says no to this request.) The US military has to buy iDevices unmodified in either software or hardware. The encryption api's have to be bought or written, or a self contained secure network built to accommodate iDevices.

Android can be rewritten to meet any secure software needs. iOS can't. This is why Android is preferred. From a CNN report earlier this year;

The US government chose Android for its open source capabilities; in order to allow modifications to improve security layers and also reduce other facilities — such as access to potentially compromising services, including the Android market. Following federal officials meeting with Apple, their smartphone range was considered unsuitable due to the company being unwilling to provide access to the iOS source code, therefore limiting security development.

By modifying products already available, the government will be able to save both the time and money required in creating and issuing their own secure devices. Making security modifications to Android’s core functions will be a less lengthy and costly affair than the alternative, and it is reported that updates for the modified Android smartphones will be available in weeks, rather than the prolonged periods of time normal consumers generally face.

According to an NDA spokeswoman:

“The ultimate goal is to give war fighters, analysts and other intelligence professionals access to classified information on the go — boosting innovation in the field, efficiency and productivity.”

In theory, with a secure device, a soldier could track events and personnel on a digital, real-time map, or an army official could transfer emergency dispatches without security concerns.

Citing two individuals already involved in the project, CNN reports that developers in the government program have completed a version that has been authorized for storing classified documents but not transmitting them over a network. Smartphones that will be suitable for handling classified communication are expected to be ready within the next few months.

One of the directors for the Army’s Brigade Modernization Command, Michael McCarthy, told CNN that the Army has been involved in testing touch-screen smartphones at U.S. bases for the last two years. 40 of these ‘modified’ smartphone models have been shipped so far, and it expects an additional 50 handsets to be added to this number in the next month, as well as 75 tablets.

The project is funded by the Defense Advanced Research Projects Agency (DARPA). It is currently considered a top-priority project. Naturally, there will be limits for the sake of security on what a soldier can do with these modified models — they may not be able to play Angry Birds, and transmitting data will be limited.

If the program is successful, then Android could arguably become the latest competitor for the producers of BlackBerry phones, Research in Motion. The company is considered a top supplier for governmental officials, due to the stringent, centralized security systems that BlackBerry models possess.
 

Michael Goff

Suspended
Jul 5, 2012
13,329
7,422
As is Windows phone.
NBCUNI is essentially kicking android and Windows phone users off of company email. Citing security concerns. More specifically, the Android platform has branched enough that the messaging department finds it difficult if not impossible to enforce security on Android devices.
Strangely they give the same reason for Windows phone devices.
I would think Microsoft would make a phone which is more compliant with Exchange.
So moving forward employees are told that only Blackberry and iPhone devices are allowed to have corporate email.

How much more compliant with exchange can they be?
 

cnguyen0320

macrumors regular
Aug 14, 2012
177
0
LOL. Apparently you don't read the tech news sections very often. Sorry, but no OS is completely secure.I mean, think about this for a second; How do you suppose a phone gets jailbroken? Vulnerabilities within the OS. Here are a bunch of stories regarding iOS and Mac OSX malware from just this year.

And Android phones aren't infamous for malware. Name one phone that is famous for malware? It has nothing to do with hardware.

The App Store has stricter guidelines for posting an app, than the Play Store does, nothing more. Google is more apt to let the user be a 'big boy' and decide if they want to download an app based upon the permissions that you must acknowledge before downloading. Is this riskier? No riskier than downloading a program on your PC. Have you never downloaded anything on a PC or Mac? Why do you believe this is okay, yet chastise Google or Android?

http://m.nbcnews.com/technology/technolog/half-million-macs-infected-apple-issues-second-anti-malware-patch-674423

https://www.google.com/url?sa=t&rct=j&q=apple%20malware&source=web&cd=8&cad=rja&ved=0CGIQFjAH&url=http%3A%2F%2Fwww.theregister.co.uk%2F2012%2F07%2F25%2Fmac_crisis_malware%2F&ei=VJjCUKaGC9HZigLe6oDgBQ&usg=AFQjCNFiR02gxjn0fB2_CuarSY85XOl7nA&sig2=do4RlBtjoSf4SGIMKM1jjg

https://www.google.com/url?sa=t&rct=j&q=apple%20malware&source=web&cd=10&cad=rja&ved=0CHQQFjAJ&url=http%3A%2F%2Fwww.computerworld.com%2Fs%2Farticle%2F9234298%2FNew_Dockster_malware_targets_Apple_computers&ei=VJjCUKaGC9HZigLe6oDgBQ&usg=AFQjCNE6giNYRVQooMs1MkFb_YMhsI_MSg&sig2=2XJUgSBiBF0HBjUuXN65tQ

https://www.google.com/url?sa=t&rct=j&q=apple%20malware&source=web&cd=12&cad=rja&ved=0CIYBEBYwCw&url=http%3A%2F%2Fwww.latimes.com%2Fbusiness%2Ftechnology%2Fla-fi-tn-apple-trojan-malware-20120705%2C0%2C4995703.story&ei=VJjCUKaGC9HZigLe6oDgBQ&usg=AFQjCNHWoS0urw823PUO-oeg5zcieoYDrg&sig2=HdXHC8NY0f_34z6OG8e77w

https://www.google.com/url?sa=t&rct=j&q=ios%20malware&source=web&cd=5&cad=rja&ved=0CEsQFjAE&url=http%3A%2F%2Fwww.redmondpie.com%2Fanother-malware-app-sneaks-into-ios-app-store%2F&ei=i5nCUKTzA6jmiwLjioGICA&usg=AFQjCNEGADMGZaT3yiZ-WbPH88L2jr352g&sig2=Vey0Sez7n4LadNfKUQvXgw

When I said Android phones, I meant the Android as an operating system. As far as Apple vs Google in their app screenings, Apple's approach is consumer friendly in security, Google is friendly in choice. But how do viruses and spyware get onto devices? Consumers download something that they are misled into believing is something else. You can't blame consumers for downloading something that lies about its intents, it happens to the best of us. Also, New Android users or simply less tech savvy ones believe Google is a reputable company, they shouldn't have stuff in THEIR play store that could harm me and they download it straight away. Little do they know Google has no connection other than hosting that app and they claim no liability. So while google's methods have its advantages, it also has the huge security loophole.
 

swy05

macrumors 6502
Aug 9, 2008
411
0
Rofl. What a joke.

Yeah, NBC. I'm sure your absolute use of Apple products on your shows had nothing to do with it. :rolleyes:

My old company had CNBC (as every other Financial institution) on everyday. I used to watch it while I worked. And since the beginning, CNBC has been using the iPad and other Apple products plain as day, on their shows. I always wondered why the iPad and Apple products were displayed so prominently on their shows. The analysts on their shows, sitting at their desks, with their iPad clearly visible.

It's not even obscure. It's clear as day. The broadcasters sitting at their desks, with their iPads clearly showing.

What jokes.
 

Vetvito

macrumors 6502a
Sep 30, 2012
532
13
Out of the 4 platforms: Blackberry, iOS, Android, and Windows Mobile, Android is the less secure and Blackberry is the most secure.

With Android:

You can side load any application you want with a simple link. Any application can read all your contents on an external storage device such as a microSD card. Just downloading a simple wallpaper or widget can get you text spam.

Common misconception when it comes to enterprise software on Android. IT can block all access and users can't install anything or run any app that's not approved.
 

Scrub175

macrumors 6502
Apr 25, 2012
487
13
Port St Lucie FL
Seriously, when will you guys realize it is not the hardware that is the issue. It is the software that matters and whether or not the manufacturer will allow modifications to the code to meet specs (Apple always says no to this request.) The US military has to buy iDevices unmodified in either software or hardware. The encryption api's have to be bought or written, or a self contained secure network built to accommodate iDevices.

Android can be rewritten to meet any secure software needs. iOS can't. This is why Android is preferred. From a CNN report earlier this year;

iOS can, apple chooses not to let it be modified.

Our company allowed BB on corp email exchange and as company phones. Apple email was allowed as well. We just got VPN remote access with all idevices. Android natively still requires a third party app to connect to corp email. Even with the enterprise minded razr's, connection to corp exchange was not secure enough to allow connection. In my narrow mind this illustrates an issue with native security inside the OS of android compared to others. Security clearance is required where I work as well.

Our company is now issuing iPhone 5 as a corp phone. I see more of this practice soon up to and including laptop/desktop conversions for the same security reasons.
 

hyteckit

Guest
Jul 29, 2007
889
1
Common misconception when it comes to enterprise software on Android. IT can block all access and users can't install anything or run any app that's not approved.

How does IT block users from installing or running any app that's not approved?

I'm sure these phone have data plans where they can download and install apps.
 

aristobrat

macrumors G5
Oct 14, 2005
12,292
1,403
How does IT block users from installing or running any app that's not approved?

I'm sure these phone have data plans where they can download and install apps.
Both iOS and Android support the use of MDM (mobile device management) systems like Mobile Iron, which can lock the devices down in ways that consumers can't.

Where I work, the company uses Iron Mobile. If a user has an application on their device that the company wants blacklisted, when the user goes to run it, it simply doesn't run. Mobile Iron doesn't stop the user from installing the app, though. It just prevents it from being run.

Furthermore, besides not letting the user run the app, it can also put the user's device in a "non-compliant" status, and set a timer. If the user doesn't remove the app before the timer runs out, MobileIron can remove the profile that's required for the device to connect to the company network.

I'm assuming Android is similar.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.