#phone security

Stop Using Flashlight Apps

...  The reality is many of these flashlight apps have been found to abuse unnecessary permissions. It’s been a bigger problem on Android, but there have been some malicious iPhone flashlight apps too.

Back in 2019, looked at around 1,000 flashlight apps found on the Google Play Store. Over a quarter of those apps were requesting between 50 to 77 permissions. These were things like recording audio and reading contacts, which are certainly not needed by a flashlight.

The scary thing is several of these apps had over one million downloads. Who would suspect such behavior from an app that is supposed to be so simple? Thankfully, both the iPhone and Android have gotten much better permissions controls.

Thankfully, it’s no longer necessary to use any type of flashlight app. Android devices and iPhones now have built-in toggles to turn on the flash. There’s nothing to install or worry about permissions being abused.

On the iPhone, you’ll find the flashlight toggle on the lock screen and Control Center for quick access. You can even adjust the brightness. With the Shortcuts feature, you can even launch the flashlight by tapping the back of the iPhone.

What are stingrays and dirtboxes? How law enforcement can track your cell phone even when you’re not using it.

Stingrays ... don’t just collect data from targeted phones; they collect data from any phone in the vicinity of a device. That data can be used to identify people — protesters, for example — and track their movements during and after demonstrations, as well as to identify others who associate with them. They also can inject spying software onto specific phones or direct the browser of a phone to a website where malware can be loaded onto it.

Gotta Catch ‘Em All: Understanding how IMSI catchers exploit cell networks

There are three main categories of attacks: Communication interception, denial of service and service downgrading, location tracking

“Some cell-site simulators are small enough to fit in a police cruiser, allowing law enforcement officers to drive to multiple locations, capturing from every mobile device in a given area—in some cases up to 10,000 phones at a time. These indiscriminate, dragnet searches include phones located in traditionally protected private spaces, such as homes and doctors’ offices.”

ACLU Interactive Map of Stingray tracking devices and who uses them.

How to Defeat Stingrays (note: from 2015, but still relevant)

Simple Cyber Security Step by Step

Android IMSI Catcher and Detector (AIMSICD), a free open source app for Android to detect fake towers or illicit access to your phone. It’s still in Alpha, but it’s got some good reviews from the security community. Keep an eye on this one.

Phone Security

QR codes are everywhere now such as restaurant menus, parking meters, package delivery notices, event check-ins, and charity donation appeals. They’re convenient, and that convenience is exactly what scammers are exploiting. A QR code is just a link. And a link can go anywhere. Scammers are printing fake QR codes and placing them over legitimate ones on parking pay stations, delivery tracking…

हैकिंग क्या है? हैकिंग एक प्रक्रिया है जिसके माध्यम से कोई व्यक्ति कंप्यूटर नेटवर्क, डिवाइस या सिस्टम में अवैध रूप से प्रवेश करता है। हैकिंग का उद्देश्य आम तौर पर जानकारी चुराना, सिस्टम के कार्यों में विघटन करना, या संवेदनशील डेटा को नष्ट करना होता है। हालांकि, हैकिंग के विभिन्न प्रकार और उद्देश्य होते हैं, जो इसे एक बहुआयामी गतिविधि बनाते हैं। हैकिंग के मुख्य प्रकारों में “व्हाइट-हैट हैकिंग”…

SIM swapping is a serious threat that can have significant consequences. By understanding how it works and taking proactive steps to protect yourself, you can significantly reduce your risk of becoming a victim. Don’t underestimate the importance of 2FA and staying vigilant against phishing scams – they’re your first line of defense in this ongoing battle. What is SIM Swapping? SIM swapping, also…