Android Users: Necessary steps to be taken for your phone

Android smartphone users can take some common sense precautions to protect their personal data from being stolen -- important advice considering an app developer purports to know how to take the information in under 60 seconds.

Loredana Botezatu of BitDefender, a cybersecurity software maker, recommends:

• Never lose sight of your smartphone in public.
• Keep a close eye on what a person is doing with your phone if you lend it to someone.
• Install mobile anti-malware software on your phone.
• Don't store job-related information on your phone unless it's encrypted.

The advice comes as a gray hat app developer has released into the wild five tools purportedly for "study purposes" that can clean out all the data on an Android smartphone in less than a minute.

Based on information from virus researchers at BitDefender, here's how the tools work.

When any of the apps is loaded on a victim's phone, they can be activated remotely by a cyber thief. Once activated, it sends a five digit pass code to the phone's intruder and secretly uploads the device's contacts, messages, recent calls, and browser history into the developer's space in the Android Cloud. After copying the data from the phone, the apps uninstall themselves so a target won't know they were even on their mobile.

To obtain data sucked from a phone, a Net crook need only travel to the developer's cloud location, enter the five-digit code generated by their copy of the app and for $5 they can download all the data nicked by the sinister software.

In an ironic twist, the developer has posted a notice at their site informing users of the apps that if they don't pay for the data they've stolen within 24 hours of the theft, all the information will be erased from the site "out of respect and for security reasons." "[N]eedless to say...this statement is by no means to be trusted," Botezatu cautions.

This latest attack on Android phones is just one of many this year. In fact, the phones are seen as a ripe target for mobile miscreants. According to a report released by a cybersecurity software maker in August, attacks on Android by malware writers jumped 76 percent over the previous three months, making it the most assaulted mobile operating system on the planet.

Some of that malware has been devilishly clever. For example, a bad app called Soundminer listens to conversations on an Android phone and is able to recognize when a credit card is spoken. After identifying such a number, it snips it from the conversation it has been recording and sends it to a Web baddie.

While cyber sorties like these may give some smartphone buyers pause before picking up an Android mobile, some commentators believe the benefits of an open system like Android outweigh those of systems with less openness and less vulnerability to attack. "Threats are everywhere," JR Raphael wrote in PC World. "The answer isn't locking down the world; it's taking basic precautions."

"With freedom of choice comes a small level of responsibility -- and whether we're talking about the Web or talking about our smartphones, the tradeoff is almost always worth it in the end," he added.

Android's Permission Problems

Mobile apps are a privacy nightmare. Some apps are constantly connected to the Internet, and can upload your personal data--such as your private photos or documents--to a remote server without your knowledge or consent. While iOS users can generally depend on Apple's app-curating process to keep their data safe, Android users pretty much have to fend for themselves, left to rely on a cryptic system that doesn't seem to be working.

How Google's Permission System Works

Whenever you download an app from Google Play (the store formerly known as the Android Market), you see an alert that explains what information that app will be able to access once you install it on your phone; for instance, the alert will indicate whether the app needs to access your contacts list, or connect to the Internet. An app cannot use any part of the phone that it does not have permission to access, and the developer sets these permissions when it first submits the app to the Play store.

The Problem With Permissions

While the providing of this information is a good idea in theory, it doesn't work so well in reality. According to Joe Keehnast, a product manager for Norton, very few people actually look through an app's permissions before installing it.

Even if you were to read through the alert, you may not come away with much information: The permissions list can be extremely unclear and unhelpful. An app can request permission to use my network connection, for example, but I'm never sure what it's actually using that connection for. Some security apps, such as Lookout Mobile Security, feature "privacy advisors" that can give you a little more detail as to why an app would request certain permissions. At best, however, that is a workaround for a larger problem. Even with the extra information from security apps, you never see explicit details as to why, say, a browser app wants access to your phone's SMS function.

Confusion aside, the permission system as it is currently designed just does not work. In late February, the New York Times demonstrated an inherent flaw with the Android permission system by building an app that was able to access photos stored on an Android phone and copy them to a remote server. To accomplish that, the app needed only permission to access the Internet.

According to Google, the problem stems from the fact that it originally developed the permission system to work with devices that stored photos on the removable memory card. Now that phones store photos on the built-in storage, Google's permission system no longer works as the company originally intended.

What to Look For

Though app permissions are by no means clear, you can look for a couple of red flags. Almost every app asks for access to the Internet (usually for ads), but very few should request permission to access your phone calls or your messages. A malicious app with permission to make calls or send messages can cost you big by dialing certain phone numbers or by sending out premium text messages without your knowledge. The only apps that should have access to your phone calls or text messages are security apps and communication apps such as Google Voice. If a game asks for permission to access your text messages, do not download it.

Keep an eye out for any app that asks for texting or phone permissions.Some app developers will list what their programs use each permission for. The developer of the Any.Do task-managing app, for instance, has a FAQ page that explains each of its requested permissions. It's really helpful to be able to see why an app needs access to your contacts or hardware controls. If an app developer doesn't explain why it is requesting certain permissions, send the developer an email; the Google Play app gives you each developer's basic contact information, and you can drop the app creators a line in case you have any questions. If a developer doesn't respond, and you can't find anything more about the developer or the app online, avoid them. It's better to forgo an app than to install it only to find out that it has taken over your phone.

It should go without saying, but the situation needs to change. Google must revamp the permission system so that it is easier to understand, and app developers have to clearly explain what their apps can access--and why. But until that day comes, it's important for you to keep questioning whether each app really needs access to all parts of your phone.

Top 10 Android Apps

Have an Android phone but don't know what apps are worth downloading or purchasing? Android phones are excellent for those who love apps on a daily basis and want an easy way to play games, store information, and do other simple tasks with every unique app. Here are the top ten apps for any Android phone user ranging from games, entertainment to tools and devices:

1. Paper Camera:

Everyone loves to take pictures with their Android phone, but often times the un-original camera filter apps become old after a while. Paper camera is only a 2 dollar app that lets you point the camera at what you're shooting and it automatically applies the filter you have chosen while you're taking your pictures. There's a total of 12 unique effects and you can simply press the next button to see all of them while your camera is on. This exciting app also features sharing options.

2. Speaktoit assistant:

The Speaktoit assistant app is similar to the iPhone's Siri and is handy in many situations. To use this free app, simply ask a question or place a request and the assistant will direct you to Google searches, near-by locations or even tools in your Android phone. You can also change the voice of the speaker to make it fun!

3. Google Music:

One of the hottest apps in a while is the Google Music app, which lets you upload over 20k of from a Mac or PC directly to Cloud. It's an easy way to listen to music on the go and only cost you as little as 49 cents per song.

4. Speed Forge 3D:

The best racing game for all Android phones! This game is set in the future and involves insane vehicles and driving styles. There's even weapons that can be added - even better, this game is in 3D and free for all.

5. Bonsai Blast:

Bonsai Blast is a free and perfect game when you're bored and need something to do that will pack in tons of fun. It's great for anyone who loves puzzle games and wants a new twist on them.

6. Any.DO: To Do List:

Tired of forgetting important tasks? This app is provided by a Google Executive and is made especially for android loves who need to stay organized and have their events and tasks listed out to be remembered.

7. Fooducate Shopping Scanner:

Be aware of what you eat with this popular app for Android phones. It lets you see nutritional info on thousands of foods and lets you scan items to see better and healthier alternatives.

8. Path:

This new app is an excellent choice for social networking. Easily share photos, listen to music, and tell the world what you're up too for free.

9. World of Goo:

Android users love this physics based puzzle game that challenges you to connect goo balls together and build structures with creativity. Perfect for all ages!

10. TweetDeck:

With this app, you can have all your favorite social networking sites in one spot and social feed. No need for multiple Facebook and twitter apps!

These are just an example of the best apps you can find on the Android Market. With thousands of available apps, there are plenty of other applications that will help you maximize the benefits of having such a powerful device.