• Apple’s iOS Is More Secure Than Google’s Android!


    An interesting report run by security experts at Symantec indicates that Apple iOS devices are much “less prone” to most security risks than Google’s Android platform.

    For its closed app distribution nature, the iOS is more secure and its increased resistance to resource abuse, data loss, and data integrity attacks among the factors.

    In a head-to-head comparison, Symantec found that iOS was just more secure in many areas, and was found, contrary to their findings regarding Android, to have full protection against malware attacks. Apple’s platform was also found to have greater security feature implementation in the categories of access control, application provenance, and encryption.

    The report also applauds Apple for their thorough and excellent job in designing the non-interface aspects of iOS. Check out the full report in all of its detail over at Symantec.

    [via mactrast]

  • New Trojan Targets the Mac


    Some security researchers have long complained that Apple won’t take security seriously because doing so conflict with the company’s marketing message that Mac buyers need not worry about being attacked. The discovery of a beta of a Mac-attacking Trojan once again shows Mac invulnerability to be a myth. And in an unrelated move, Apple has reached out to security researchers, showing that it may finally take security seriously.

    The security company Sophos says that it’s found the beta of a backdoor Trojan targeting the Mac that’s “a variant of “a well-known Remote Access Trojan (RAT) for Windows known as darkComet.”

    The author calls it the ‘BlackHole RAT,’ strongly implying that plans are to have it masquerade as the legitimate Black Hole security application designed to keep a Mac safe by purging private information such as clipboard data and recent file lists.

    Sophos is quick to point out that the Trojan is not yet finished. But the company clearly believes that attacks on the Mac are in the offing. It notes on its blog:

    It appears there is a new backdoor Trojan in town and it targets users of Mac OS X. As even the malware itself admits, it is not yet finished, but it could be indicative of more underground programmers taking note of Apple’s increasing market share.

    That Sophos researcher Chet Wisniewski has seen another Trojan called HellRTS already in circulation on file-sharing sites used to pirate Mac software.

    Apple hasn’t responded specifically to these new threats, but there’s a major, encouraging sign that it is taking Mac security very seriously, possibly because it now has a big enough market share that malware writers see it as a financially viable target.

    The Edible Apple blog reports that Apple is offering security experts free preview versions of OS X 10.7, called Lion, “so that they can take a look at Apple’s new security measures and presumably reach back to Apple with any thoughts, observations, and concerns they might have.”

    The site reports that Apple sent out the following note to security experts:

    “I wanted to let you know that I’ve requested that you be invited to the prerelease seed of Mac OS X Lion, and you should receive an invitation soon. As you have reported Mac OS X security issues in the past, I thought that you might be interested in taking a look at this. It contains several improvements in the area of security countermeasures.”

    Security researchers so far are pleased that Apple seems to be taking security more seriously than they have in the past. Edible Apple reports that MacBook hacker and security consultant Dino Dai Zov tweeted “This looks to be a step in the direction of opening up a bit and inviting more dialogue with external researchers.”

    And CNet quotes OS X hacker Charlie Miller saying in an email:

    “As far as I know they have never reached out to security researchers in this way. Also, we won’t have to pay for it like everybody else. It’s not hiring us to do pen-tests of it, but at least it’s not total isolation anymore, and at least security crosses their mind now.”

    That’s more than just faint praise, it appears that Apple may finally accept that security needs to trump marketing.

    [via: computerworld]

  • Will Carling, the iPad detective


    How would you feel if you found an iPad on a train and took it home, only to find a near-six-foot tall rugby player (think, American football for seriously tough guys) hammering on your door, demanding it back? That’s precisely what happened yesterday when UK sports celebrity and former England rugby captain, Will Carling, OBE, left his iPad on the train. Fortunately he had MobileMe’s Find My iPhone feature enabled, so he was able to find his device — and he wrote all about it on Twitter. I caught up with him to chat about what happened next.

    “At first I thought: ‘leaving it on the train, you idiot! That’s that then,'” Carling (45) told me. But a funny thing had happened one month before.

    “I was having lunch with a friend. He was telling me this story of how his iPad had been stolen from his kit bag at the gym. He hadn’t enabled the tracking feature on it, so he couldn’t find it. I asked him if tracking worked, and he said, ‘Yes, very well’, so we set it up on my iPad over lunch.”

    Carling was captain of England between 1988 to 1996, winning 72 caps. He’s an incredibly keen Twitter user, with over 45,000 followers. He’s a keen blogger, too.

    Carling uses Macs at home — his two eldest kids are “Apple obsessives” and the family share a “big-screen iMac” in the kitchen. “I think Apple make great bits of kit,” he says, “they’re great looking.” It’s not all Apple love, though — he prefers his BlackBerry to an iPhone.

    For the last six months he’s been using his iPad to keep up with business, for email, to check news reports, business correspondence using DropBox, and, erm, Angry Birds. “I’m obsessed with Angry Birds,” he told me.

    Tracking it down

    Annoyed at his stupidity on leaving his Apple device on the train, Carling thought he’d give the tracking feature a try. He logged in to MobileMe and, after about a minute, a map popped up with a blue dot showing him where his iPad was.”

    “It was a hundred yards from Woking train station,” he said, admitting he thought it was a lost property office at first. “When I got there I found it was a block of flats (apartment block) and I thought, ‘Hmm, this will be slightly more interesting.” Oblivious to consequences, Carling set off to track his iPad down.

    The former rugby player got inside the block (“I didn’t break in,” he stressed), and knocked at each of the 18 doors inside. “Not one person answered the door,” he said, though he laughed when asked how he might react if a mid-40’s, near six-foot tall tough guy hammered at his front door.

    He left notes under the door of all 18 apartments, asking for the return of his property, drove home and logged in once again, watching his iPad on the map.

    The iPad detective

    “Five minutes later I saw it start to move,” he told me. “It was bizarre,” he said.

    Talking to his Twitter horde, he wrote, “Breaking news! My iPad has moved! It is now at the station! This is like Enemy of the State !!” He’d called the cops to inform them his iPad had gone missing at this point, and began sending messages to the device.

    Carling panicked a little when he saw his iPad taking a route down the alley behind some shops, “I wondered if it had been dumped,” he said. He sent the iPad a message telling whoever had the device that they were being tracked along with the police crime reference number.

    Apple’s Find My iPhone/iPad solution doesn’t just track your device on the map, it also lets you send messages to the device which pop up on its screen, even if it is locked. You can even use the technology to erase the data on your lost gadget in order to preserve your confidential data.

    Carling didn’t need to do this. His message seemed to work. Ten minutes later and Carling could see the iPad moving toward the police station, “Feel like a real spy”, he Tweeted. “It was really quite weird watching it move across town on the screen on my Mac,” he said.

    Eager to offer a little positive reinforcement, and perhaps a little excited at the ability to send scary messages to whoever had hold of his device, he sent another, “You are very close to the Police Station now.” A few minutes later the police called Carling to let him know his iPad had been handed in. An hour passed and, “just picked up iPad. Big thanks to [the police and] MobileMe,” he Tweeted.

    “Are you going to be more careful in future, or did you enjoy the chase so much you might just start leaving it around for the thrill of it?” I asked him.

    “Loads of people on Twitter were saying, ‘go on, lose it again, it was very entertaining,'” he said, “But I’ll be more careful next time.”

    Better than Android?

    This is great for the iPad and the iPhone, but it does raise the question — why does Apple not yet offer a similar service to track down lost Macs? The technology to achieve this already exists, so it can be done. If anyone at Apple were listening, I’d observe that many MacBook Pro owners would see a service like that as enough to justify an annual subscription to MobileMe.

    Android owners, I’ve had a look for similar solutions for your devices. I can’t seem to find any with the same simple power. Most just send you a text with geographical coordinates when you ask for them. You don’t get the real-time view or facility to delete data or message your device.

    What would you have done if you’d received these messages on your iPad?

    [via: Jonny Evans]