Category: google

Auto Added by WPeMatico

Backdoor Built into Android Firmware

Posted on By infossl
android, backdoors, crime, firmware, google, malware, phones, Security technology, supplychain

In 2017, some Android phones came with a backdoor pre-installed: Criminals in 2017 managed to get an advanced backdoor preinstalled on Android devices before they left the factories of manufacturers, Google researchers confirmed on Thursday. Triada first came to light in 2016 in articles published by Kaspersky here and here, the first of which said … Read More “Backdoor Built into Android Firmware” »

The Latest in Creepy Spyware

Posted on By infossl
airtravel, alarms, google, internetofthings, privacy, Security technology, spyware, surveillance

The Nest home alarm system shipped with a secret microphone, which — according to the company — was only an accidental secret: On Tuesday, a Google spokesperson told Business Insider the company had made an “error.” “The on-device microphone was never intended to be a secret and should have been listed in the tech specs,” … Read More “The Latest in Creepy Spyware” »

Clever Smartphone Malware Concealment Technique

Posted on By infossl
concealment, google, malware, phones, Security technology

This is clever: Malicious apps hosted in the Google Play market are trying a clever trick to avoid detection — they monitor the motion-sensor input of an infected device before installing a powerful banking trojan to make sure it doesn’t load on emulators researchers use to detect attacks. The thinking behind the monitoring is that … Read More “Clever Smartphone Malware Concealment Technique” »

Android Ad-Fraud Scheme

Posted on By infossl
adware, android, behavioraldetection, botnets, fraud, google, Security technology

BuzzFeed is reporting on a scheme where fraudsters buy legitimate Android apps, track users’ behavior in order to mimic it in a way that evades bot detectors, and then uses bots to perpetuate an ad-fraud scheme. After being provided with a list of the apps and websites connected to the scheme, Google investigated and found … Read More “Android Ad-Fraud Scheme” »

Google Tracks its Users Even if They Opt-Out of Tracking

Posted on By infossl
android, google, phones, privacy, Security technology, surveillance, tracking

Google is tracking you, even if you turn off tracking: Google says that will prevent the company from remembering where you’ve been. Google’s support page on the subject states: “You can turn off Location History at any time. With Location History off, the places you go are no longer stored.” That isn’t true. Even with … Read More “Google Tracks its Users Even if They Opt-Out of Tracking” »

Google Employees Use a Physical Token as Their Second Authentication Factor

Posted on By infossl
google, keys, phishing, Security technology, twofactorauthentication

Krebs on Security is reporting that all 85,000 Google employees use two-factor authentication with a physical token. A Google spokesperson said Security Keys now form the basis of all account access at Google. “We have had no reported or confirmed account takeovers since implementing security keys at Google,” the spokesperson said. “Users might be asked … Read More “Google Employees Use a Physical Token as Their Second Authentication Factor” »

Manipulative Social Media Practices

Posted on By infossl
consumerization, deception, facebook, google, norway, privacy, Security technology, socialmedia

The Norwegian Consumer Council just published an excellent report on the deceptive practices tech companies use to trick people into giving up their privacy. From the executive summary: Facebook and Google have privacy intrusive defaults, where users who want the privacy friendly option have to go through a significantly longer process. They even obscure some … Read More “Manipulative Social Media Practices” »

Sending Inaudible Commands to Voice Assistants

Posted on By infossl
amazon, apple, google, internetofthings, Security technology, voicerecognition

Researchers have demonstrated the ability to send inaudible commands to voice assistants like Alexa, Siri, and Google Assistant. Over the last two years, researchers in China and the United States have begun demonstrating that they can send hidden commands that are undetectable to the human ear to Apple’s Siri, Amazon’s Alexa and Google’s Assistant. Inside … Read More “Sending Inaudible Commands to Voice Assistants” »

Google’s Data on Login Thefts

Posted on By infossl
academicpapers, credentials, google, keylogging, phishing, Security technology

This is interesting research and data: With Google accounts as a case-study, we teamed up with the University of California, Berkeley to better understand how hijackers attempt to take over accounts in the wild. From March 2016 to March 2017, we analyzed several black markets to see how hijackers steal passwords and other sensitive data. … Read More “Google’s Data on Login Thefts” »

Google Login Security for High-Risk Users

Posted on By infossl
gmail, google, malware, phishing, risks, scanners, Security technology, securityengineering, usb

Google has a new login service for high-risk users. it’s good, but unforgiving. Logging in from a desktop will require a special USB key, while accessing your data from a mobile device will similarly require a Bluetooth dongle. All non-Google services and apps will be exiled from reaching into your Gmail or Google Drive. Google’s … Read More “Google Login Security for High-Risk Users” »