[+]d'ZheNwaY's Blog[+]: Adobe adding security, privacy goodies to ...

id='post-body-1554957581769519252'>

Summary: Adobe’s new Flash Player 11 will include support for 64-bit exploit migitation and support for SSL socket connections.

Battling to cope with the hacker bullseye on its back, Adobe plans to add new security and privacy features to the next iteration of its ubiquitous Flash Player, including  support for SSL socket connections and the introduction of 64-bit ASLR (Address Space Layout Randomization).

Adobe said the new Flash Player 11, expected in early October, will include the SSL socket connection support to make it easier for developers to protect the data they stream over the Flash Player raw socket connections.

[ Adobe to rush out Flash Player patch to thwart zero-day attacks ]

Flash Player 11 will also include a secure random number generator.

Adobe’s Platform Security Strategist Peleus Uhley explains:

Flash Player previously provided a basic, random number generator through Math.random. This was good enough for games and other lighter-weight use cases, but it didn’t meet the complete cryptographic standards for random number generation. The new random number generator API hooks the cryptographic provider of the host device, such as the CryptGenRandom function in Microsoft CAPI on Windows, for generating the random number. The native OS cryptographic providers have better sources of entropy and have been peer reviewed by industry experts.

[ Adobe admits to 80 'code changes' in Flash Player patch ]

The company is also adding 64-bit support in Flash Player 11, a move that Uhley says will bring some security side-benefits.

If you are using a 64-bit browser that supports address space layout randomization (ASLR) in conjunction with the 64-bit version of Flash Player, you will be protected by 64-bit ASLR. Traditional 32-bit ASLR only has a small number of bits available in the memory address for randomizing locations. Memory addresses based on 64-bit registers have a wider range of free bits for randomization, increasing the effectiveness of ASLR.

On the privacy side, Adobe is adding a private browsing mode to allow users to stay incognito while viewing Flash files.   A mobile control panel is also being added to Android devices to easier for users to manage their Flash Player privacy settings on their Android devices.

Source: http://dzhenway.blogspot.com/2011/09/adobe-adding-security-privacy-goodies.html

»»  read more

[+]d'ZheNwaY's Blog[+]: DroidSheep Android App Hijacks Sessions ...

id='post-body-6219452665845572370'>
Following the success of the Firesheep application, a new Android application called DroidSheep allows users to hijack Web sessions of popular online services over insecure Wifi connections.

DroidSheep enables Android-based man in the middle attacks against a wide range of Web sites, including Facebook.com, Flickr.com, Twitter.com, Linkedin.com, and non-encrypted services like “maps” on Google. DroidSheep’s official website claims that the app will work on almost any website that uses cookies.

It’s a pretty simple process once downloaded, a user only has to start running DroidSheep, click start, and wait for someone to connect to a given service on the same wifi network, at which point the user will be prompted on whether or not they want to jump in on that session.

All a user needs is a device that runs Android version 2.1 or higher, whether that device is a smartphone or some sort of tablet, with root access (and the app itself, obviously).

DroidSheep supports OPEN, WEP, WPA, and WPA2 secured networks, using a DNS-Spoofing attack on the last two.

As with the original FireSheep application, the developers of DroidSheep note that their application is “NOT INTENDED TO STEAL IDENTITIES,” but to show the weak security properties of big websites.

The release of a Firefox extension called “FireSheep” at the 2010 ToorCon conference caused an uproar, and prompted popular services like Facebook and Twitter among others to implement secure browsing features. It also helped fuel a larger discussion about the necessity of utilizing HTTPS encryption across the Web.

nb : threatpost

Source: http://dzhenway.blogspot.com/2011/09/droidsheep-android-app-hijacks-sessions.html

»»  read more

Ash Owen Davies: Touch Enabled Desktops

id='post-body-8757908206141907152'>

Today I got the chance to try out the new Developer Preview of Windows 8, something I've been looking forward to since the first announcement of the project some time ago. After initially attempting to load it onto my VMWare 7 setup, I was presented with a new style blue screen, a refreshing remodel of the classic. Through some forum trawling I had found that the release only works on the most recent version 8 of VMWare. A trial version of VMWare is available from the publishers website, like most trials it lasts for 30 days, and requires an arduous license request process, but the end result is a good solid sandbox environment.

Windows Metro UI

The installation was fairly quick, despite only sharing a portion of the computers resources, but that doesn't really hold much necessity bearing in mind you only need to install once. Now disregarding the numerous benefits and improvements brought about in Windows 8, such as ARM processor support, Windows to Go, and the rumours of a new file system, there were many changes that I felt simply were not welcome for a desktop. Being that my own specialities lie in the design of user interfaces this is generally what I focus my attention to first, biased or not I think that the new Metro UI is probably the largest change to be brought about in any revision of Windows.

Many believe that we are now in the post-pc era, with the sudden evolution and adaptation of touch enabled devices such as tablets, smart phones and laptops, eclipsing the use of desktops. However I believe that desktop computers still make up a huge proportion of computer users and are still the workhorses that drive the industry. In anticipation of this operating system manufacturers are keen to develop a platform that works for all devices, whilst I can see this is a beneficial feature, I've always believed that something that boasts an ability to perform many tasks does so poorly in comparison to something that delivers a single purpose.

Microsoft isn't the only company to show this, Google's upcoming version of Android (code-named 'Ice Cream Sandwich'), also attempts to shoe-horn the facilities relevant to touch enabled devices into an all-rounder operating system. Whilst I believe that Google will do a better job (this being down to my own preferences) I still feel its the wrong outlook to have.

Though I hold a personal resentment towards Apple and their following, they have achieved one thing correctly, the IOS/OSX holds the same style of user interface across all platforms, whilst keeping the features relevant to the capabilities of the device, this is however one benefit of being able to manufacture the target device along with operating system, a benefit that is not shared amongst it's competitors.

I don't boast to know the ideal solution, should manufacturers segregate the versions of their operating systems to allow for multiple devices? Would this create resentment towards the feature set or a compulsion to own the latest version? Unifying operating system versions may even be the correct solution

In short, desktops aren't touch enabled (or at least they shouldn't be) and trying to fit a solution around that just won't work, Microsoft learn't a big lesson in the wake of Windows Vista, and that showed just how capable they were at listening to user feedback with Windows 7.

Source: http://ashowendavies.blogspot.com/2011/09/touch-enabled-desktops.html

»»  read more

Notion Ink Adam- Android Tablet

Notion Ink has been delaying the launch of its much talked tablet device, the Notion Ink Adam, but that’s worth the wait as the delay was because of the new features being packed into the device. The tablet device is pretty huge, when you would compare it with the rivals in the same field, i.e. the Apple iPad, the Samsung Galaxy Tab (yet to release but announced) but still less bulky than OlivePad which is also Android based. But think of the other side, the size delivers. It has everything which the iPad lacks, i.e. several sockets various connections (this be one of the reasons why iPad sucks).
Here is some technical information about the Adam tablet by Notion Ink -
->Wi-Fi b/g/n for wireless connectivity
->Full functioning GPS rather than the A-GPS
->Beats the non-3G iPad by having 3G compatibility
->The camera in the front can take pictures at an angle of about 180-185 degree
->The tablet when kept on the table, is on a tilt so that
the camera doesn’t face straight to the ceiling.
->Mini USB port is also available
->Genesis – the application store, content store, media player etc. all integrated into one.
->Unreal Engine Support – Preloaded with a few game titles
->Multitasking – The android based tablet can run multiple apps at once.
->Four versions of Adam will be launched: each will use NVIDIA’s Tegra 2, but there will be Pixel Qi and
LCD models and a choice of WiFi- only or WiFi and 3G.
Pricing
LCD version will cost $399 for the WiFi-only and $449 for the 3G model. Pixel Qi version will cost $449 for the WiFi-only and $498 for the 3G model. There is also news that depending on the deal, the price could be lesser by $25 and there might be special discounts for students.

Source: http://techods.blogspot.com/2010/08/notion-ink-adam-android-tablet.html

»»  read more

Droid Incredible Android 2.2 Update For Verizon Begins To Roll Out Tomorrow

Verizon is prepping to keep their Android devices current by treating its customers to the official Android 2.2 update.  Next on the list of the Froyo update is the HTC Droid Incredible will start rolling out tomorrow.  Now Droid Incredible users can now enjoy Flash 10.1 support within the browser, improved browser performance w/ faster loading of Javascript, Wi-Fi N support, and 720p video recording.  The PDF didn't mention the 3G Mobile Hotspot capability, is it a typo or is the DI gonna get the same treatment as the original Droid? We'll find out soon enough.

Read via BGR

Tweet

Source: http://techguysmartbuy.blogspot.com/2010/08/droid-incredible-android-22-update-for.html

»»  read more

Smartphone (Android) Applet Developer Training Program (ICONapps) with Daniel Freeman

I will be joining a 5-day intensive boot camp on Smartphone (Android) Applet Developer Training Program - ICONapps (Batch FOUR) which will be conducted from Sept 1-7, 2010 by Daniel Freeman.

Who is Daniel Freeman?

• Android, Java application development expert, with well-regarded accomplishments in the field.


• Joined British Telecom Laboratories. Became involved in the ‘Skyphone’ development and has beat four worldwide competitors to become an AEEC aeronautical standard.


• Involved in standardization for the first Pan-European Digital Mobile (GSM) standard and CCITT standards committees in the USA.


• Involved in My Voice Activity Detector for mobile telephony use, which became a European Standard. This algorithm is still implemented in every GSM mobile phone worldwide. (There are over 3.3 billion phones, and most are GSM).


• Awarded the ‘IPU4+ Inventors Prize’ by the Intellectual Property Unit of BT for patented inventions.

 

The lessons covered

1)  The Basics: An introduction to the major components of an Android application, what tools and
languages one uses to make an Android application, and what an Android activity looks like.
2)  Simple GUIs, Part One: How to create a user interface using layout XML files, how to use fields,
labels, and buttons, and how to organize them into rows and columns on-screen.
3)  Simple GUIs, Part Two: How to organize widgets in other forms, and how to use checkboxes and
radio buttons.
4)  Development Tools: How to use the Dalvik Debug Monitor System (DDMS) to inspect error logs,
manipulate files on the emulator, and simulate incoming calls and GPS fixes. Also, how to use the
Hierarchy Viewer to inspect a running activity's user interface, to isolate problems and ensure the
user interface meets designer specifications.
5)  Selection Widgets: How to use adapters to convert data collections into rows in a list, how Android
operates with or without the use of a touch-screen, and how to use “spinners” (dropdown selection
lists).
6)  Fancy Lists: How to make rows in a list involve multiple pieces of data, and then how to do that
efficiently, without wasting memory or CPU time.
7)  Fancy Widgets: How to collect dates and times from users, how to implement user interfaces with
tabs, and how to otherwise put more information in an activity than can fit on a single screen.
8)  Menus and Messages: How to set up option menus (launched via the hardware MENU button),
how to set up context menus (launched via a long-tap on a user interface element), how to display
dialog boxes, and how to display short message “toasts” on-screen.
9)  Threads: How Android works with operating system threads, how to allow a background thread and
foreground thread to work together to update a user interface, and how to indicate to the user that
background processing is ongoing (“progress indicators”).

10)  The Activity Lifecycle: What causes activities to be created and destroyed; what you should do
when activities are created and destroyed; when activities are paused, stopped, started, and
resumed (and what to do in those cases); and how to save your user interface state in case the
activity is being ejected from RAM due to low memory conditions.
11)  Resources: How non-Java assets (e.g., images) are packaged in an Android application, how to
externalize and internationalize strings, and how to declare multiple layouts or drawables to
accommodate multiple screen sizes and densities.
12)  Databases: What SQLite is and how it relates to Android, how to create a database and update its
schema when the application is updated, how to query the database, how to manipulate the
contents of the database, and how to use transactions with the database.
13)  Using Multiple Activities: Why you may wish to use more than one activity to manage your
application's user interface, how to add a second (or subsequent) activity to your application, how to
launch other activities in your application, and how to integrate activities from the Android operating
system (e.g., browser, map) into your application.
14)  Preferences and Files: How to store user preferences in Android and where they reside on the
device, how to collect user preferences from the user via  the standard Android preference user
interface, and the limitations on reading and writing files using standard Java file I/O operations.
15)  Rotation Events: What happens by default when the user changes the screen orientation from
portrait to landscape, how  to maintain activity state when the orientation is changed, how to block
orientation changes, and how to have the orientation change always be triggered by the
accelerometer.

16)  Using HttpClient: How to access the Internet from your Android application, how to call out to Web
services using the HttpClient library, and how to parse XML or JSON data that the Web services
might return.
17)  Creating Services: What roles services play in an Android application, how to add a service to your
application, and how to define what that service will do.
18)  Using Services: How to start or bind to a service, what the difference is between starting and
binding to a service, and how to allow the service to asynchronously update an activity based upon
external actions (e.g., received email message).
19)  Remote Services: Why you might want to expose a service's API to other applications on the
device, what AIDL is and its role in remote services, how to convert a local service to one that
supports remote access, and how to support listener objects across process boundaries.
20)  Notifications: How to display an icon in the status bar (or play a sound, shake the phone, flash a
light, etc.) to let the user know about something that has gone on in the background (e.g. received
email message).
21)  Location Tracking: What sources of location data are available in Android, how to request that
Android notify you when the device moves, and how you and the user can collaborate to determine
the best possible source of location data available based on user criteria.
22)  Maps: Options for integrating maps into an Android application, how to integrate Google Maps into
an activity's user interface, how to control what the map is displaying, and how to highlight points of
interest on a map.
23)  Media: How to play back audio and video on an Android device, what media formats are supported,
and what limitations Android places on streaming media playback.
24)  Camera/Sensors: How to set up picture preview with the camera, how to take a picture with the
camera, how to find out what direction the device is pointing, and how to detect device movement in
three dimensions.
25)  App Widgets: What an app widget is, how to define a new app widget, and how to control what an
app widget looks like on the user's home screen.
26)  Advanced App Widgets: How to control when the app widget gets updated, how to launch
activities from an app widget, how to collect configuration settings from the user for an app widget,
and how to support multiple copies of an app widget for the same user.

27)  Testing: What JUnit is and how it is used outside of Android, how to run JUnit test suites in an
Android emulator, how Android extended JUnit to support GUI testing, and the usage of the “test
monkey” for simulating random user input.
28)  Production Applications: How to digitally sign Android applications, how to prepare an application
for distribution, how to upload an application to the Android Market, and how to distribute an
Android application outside of the Android Market.
29)  Making Money at Mobile: Recommendations on how to choose an application to build and how
you should go about promoting it, and other business models to consider beyond selling individual
applications to individual users.
30)  Android Beyond Java: Other ways to create Android applications without using Java (e.g.
HTML5), what the Native Development Kit is and why you would use it, and how to integrate
scripting languages into an Android application.
31) Other Mobile Platforms: Comparison of application development on iPhone, Windows Phone,
Blackberry, Symbian, WebOS, and Android.

Venue

What a tough training in this Ramadhan… I will survive!!!

 

Android Developer in the Making…

Source: http://kerul.blogspot.com/2010/08/smartphone-android-applet-developer.html

»»  read more

Daily News August 18, 2010

 

加ＲＩＭ、インド政府と「ブラックベリー」対応策で合意

http://jp.reuters.com/article/technologyNews/idJPJAPAN-16801720100816

 

2010年のAndroidフォンの出荷数は5,500万台になる見込み

Android Smartphone Shipments to Pass 55 Million in 2010

http://www.cellular-news.com/story/44867.php

 

Appleは、iPhone 4を9月に中国でチャイナユニコムから発売

Apple set to launch iPhone 4 in China early next month

http://www.appleinsider.com/articles/10/08/17/apple_set_to_launch_iphone_4_in_china_early_next_month.html

 

Android アプリの決済手段として、PayPalの導入に向けてをPayPaｌとグーグルが交渉中

PayPal in Talks to Support Android Apps Purchases

http://www.cellular-news.com/story/44868.php

 

米大手書店Barnes & Nobleは、電子書籍リーダーNookのiPhoneアプリの配布を開始

Barnes & Noble releases Nook for iPhone

http://news.cnet.com/8301-17938_105-20013815-1.html?part=rss&subj=news&tag=2547-1_3-0-20

 

フィナンシャルタイムズは、「インテルは劣勢のWiMAXへの注力はやめるべき」と提言

Financial Times: Intel, and everyone else, should just ditch WiMAX

http://www.intomobile.com/2010/08/16/financial-times-intel-and-everyone-else-should-just-ditch-wimax/

 

Appleは、クリスマスまでに7インチディスプレイのiPadを発売か

Report Says Apple to Launch 7-Inch IPad By Christmas

http://www.cio.com/article/603535/Report_Says_Apple_to_Launch_7_Inch_IPad_By_Christmas

 

モトローラのAndroidタブレットの名称は"Stingray"か

Motorola’s Android tablet for Verizon called Stingray?

http://www.unwiredview.com/2010/08/17/motorolas-android-tablet-for-verizon-called-stingray/

 

東芝は、2つのスクリーンを持つWindows ７搭載の端末を1,000ドルで発売

Toshiba dual-screen Libretto now for sale in U.S.

http://news.cnet.com/8301-13924_3-20013776-64.html?part=rss&subj=news&tag=2547-1_3-0-20

 

ノキア、タッチスクリーンとハードキーボード搭載のバータイプ端末Nokia X3を発表。OSはS40

Nokia X3-02 Touch and Type puts a touchscreen on your Series 40 featurephone

http://www.engadget.com/2010/08/17/nokia-x3-02-touch-and-type-puts-a-touchscreen-on-your-series-40/

 

ソフトバンクのLTE戦略（中編）――iPhone/iPadの動向が2GHz帯の導入システムを左右

http://businessnetwork.jp/Detail/tabid/65/artid/493/Default.aspx

Source: http://mobileheadline.blogspot.com/2010/08/daily-news-august-18-2010.html

»»  read more

SAMSUNG AND GTX CORP SIGN DEFINITIVE AGREEMENT TO DELIVER GPS TRACKING APPS TO 40 MILLION NEW PHONES

Samsung Users Join Growing Community of Location-Based Social

Networking and Share "Where" Anywhere with GPS Tracking Apps

www.locimobile.com

Los Angeles, CA, August 17, 2010—As it crosses 600,000 downloads in 84 countries, LOCiMOBILE®, Inc. a wholly-owned subsidiary of GTX Corp (OTCBB: GTXO), has inked a deal with Samsung Electronics Co, Ltd., the world's second-largest handset manufacturer in 2009 with sales of more than 235 million units (source, Gartner February 2010) to deliver its family of GPS Tracking Apps to Samsung’s new line of smartphones and bada platform.

Samsung, a leading mobile phone provider, launched its own open mobile platform, Samsung bada, in December 2009. This new addition to Samsung's mobile ecosystem enables developers to create applications for millions of new Samsung mobile phones, and offers consumers a fun and diverse mobile experience. Samsung chose the name “bada”—which means “ocean” in Korean—to convey the limitless variety of potential applications that can be created using their new platform.

In the agreement, GTX Corp will develop versions of its tremendously popular GPS Tracking apps specifically for mobile phones that will run Samsung's new bada operating system. GTX expects its GPS Tracking apps to be featured for sale on the Samsung Application Store beginning in October 2010. Of the 40 million estimated Samsung handsets expected to ship between now and mid-2011, 15-20 million will be the new “Scotia” models, to be shipped before the end of 2010.

“The Samsung bada platform further advances our march towards universal availability for our people-finder apps," says GTX Corp CEO Patrick Bertagna. “We're delighted to have been asked by Samsung to participate in this new market and add the bada platform to our current list along with Apple, Android and RIM. We anticipate bada to be huge out of the gate and a tremendous boost to our business in the US and worldwide.”

GTX Corp’s announcement follows on the heels of an 89% increase in its revenues over the previous quarter and a number of recent software and hardware deals, including the launch of its new consumer based social networking portal www.gpstrackingapps.com. The company also formally launched its GPS Tracking app for the iPad several weeks ago and has already updated that app to version 1.1, and is launching a new GPS camera app this coming month, which will continue to add value to the growing suite of LOCiMOBILE GPS apps.

On the hardware side, developments include embedding miniaturized GPS tracking devices in the Aetrex Ambulator® GPS shoe, which just debuted to the trade at the WSA Show in Las Vegas, and for packages with international shipper MNX.

“We aim to continually drive developments that increase the value and strength of our Company, concludes Bertagna. The Samsung agreement vastly increases our visibility in the US and abroad, and further validates our GPS Tracking model of letting consumer and business users get the answer to ‘Where is my friend, co–worker, family member or high-value asset?’ with one push of a button.”

ABI Research predicts that more than 550 million GPS-enabled handsets will be shipped by 2012. LOCiMOBILE®, with 10 GPS apps on the market and 3 more in development across 4 major platforms, continues to gain traction and momentum in what is estimated to be a $29 billion dollar market by end of 2013.

# # #

About Samsung Electronics Ltd.

Based in Samsung Town near Seoul, South Korea, Samsung Electronics Co., Ltd. is a global leader in semiconductor, telecommunication, digital media and digital convergence technologies with 2009 consolidated sales of US$116.8 billion. Employing approximately 188,000 people in 185 offices across 65 countries, Samsung is widely recognized as a leading mobile phone provider and the bada platform is utilized in millions of phones sold by Samsung. Samsung expects the bada platform will rapidly be adopted by its hundreds of millions of customers this year. In 2010 bada's global distribution and coverage of Samsung mobile phones and Samsung Apps, the application store, will expand its service to 75 countries.

About GTX Corp with you ®

GTX Corp (OTCBB: GTXO.OB) a leader in embedded real-time GPS Tracking personal location services (PLS) was founded in 2002 and is based in Los Angeles, California. Known for its game changing patented micro GPS device in a shoe - the patented smart shoe and its block buster smartphone GPS Tracking App, recently featured in Los Angeles Business Journal and which hit number two on the iTunes top grossing chart, the Company continues to pave the way with innovative geo-specific and proximity alerting applications that help you know where someone or something is at the touch of a button. Committed to being the "better people finder", GTX Corp owns and operates LOCiMOBILE, Inc. which develops location-based social networks (LBSN) applications for smart phones, Code Amber News Service, and the Code Amber Alertag. The Company has an aggressive intellectual property strategy and owns an extensive portfolio of patents, patents pending, registered trademarks, copyrights and website properties. GTX Corp is well positioned to capture the PLS Market through its diverse product platform licensing model, brand recognition, traction in the market and strategic partners.

For information regarding GTX Corp: www.gtxcorp.com please contact

Henry Eshelman

Public Relations

323.337.9042 begin_of_the_skype_highlighting              323.337.9042      end_of_the_skype_highlighting begin_of_the_skype_highlighting              323.337.9042      end_of_the_skype_highlighting
heshelman@platformgrp.com

Investor Relations
213.489.3019 ext 646
ir@gtxcorp.com

GTX Corp does not warrant or represent that the unauthorized use of materials drawn from the content of this document will not infringe rights of third parties who are not owned or affiliated by GTX Corp. Further GTX Corp cannot be held responsible or liable for the unauthorized use of this document’s content by third parties.

# # #

Source: http://codeambernews.blogspot.com/2010/08/samsung-and-gtx-corp-sign-definitive.html

»»  read more