MrTechZ

7 Things About Android Lollipop 5.0 You Need To Know

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0GfM5auFfcmYVTMqm0TjZlNnLTyBvFB_D8kQEoyz3uIMPuEnfGpCpspI2tTVP2fGjuLpDpLS5Pi_8HYcVo1V52BF8sxdrb51ldIvkWo-UTSnsuJPcGR4GjFjN_Bl9grKWgFz2a4XZWaY/s1600/Android-5-Lollipop.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="399" original="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0GfM5auFfcmYVTMqm0TjZlNnLTyBvFB_D8kQEoyz3uIMPuEnfGpCpspI2tTVP2fGjuLpDpLS5Pi_8HYcVo1V52BF8sxdrb51ldIvkWo-UTSnsuJPcGR4GjFjN_Bl9grKWgFz2a4XZWaY/s1600/Android-5-Lollipop.jpg" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0GfM5auFfcmYVTMqm0TjZlNnLTyBvFB_D8kQEoyz3uIMPuEnfGpCpspI2tTVP2fGjuLpDpLS5Pi_8HYcVo1V52BF8sxdrb51ldIvkWo-UTSnsuJPcGR4GjFjN_Bl9grKWgFz2a4XZWaY/s1600/Android-5-Lollipop.jpg" width="640"></a></div>
<div style="text-align: justify;">
<h3>
<span style="font-size: small;">After offering chocolate (<i>Kit-Kat</i>), now Google is ready to serve 
you Lollipops. Google on Wednesday finally revealed the official name of
 its next version Android L — <b>Android 5.0 Lollipop</b>.</span></h3>
</div>
<div style="text-align: justify;">
<h3>
<span style="font-size: small;"> </span></h3>
</div>
<h3 style="text-align: left;">
<span style="font-size: small;">
</span></h3>
<div style="text-align: justify;">
<h3>
</h3>
</div>
<h3 style="text-align: left;">
<span style="font-size: small;">
</span></h3>
<div style="text-align: justify;">
<h3>
<span style="font-size: small;">
The newly released <b>Android 5.0 Lollipop</b> ships with the latest 
Motorola-made Nexus 6 smartphone and Nexus 9 tablet built by HTC, but 
the company did not make the Lollipop available for download to other 
users immediately. The older versions of Nexus devices will receive the 
Lollipop update in the coming weeks.</span></h3>
</div>
<div style="text-align: justify;">
<h3>
<span style="font-size: small;"> </span></h3></div></div>

Android Lollipop 5.0 7 Things About Android Lollipop 5.0 You Need To Know

After offering chocolate ( Kit-Kat ), now Google is ready to serve you Lollipops. Google on Wednesday finally revealed the official na...

How to Use 2 Whatsapp Account On Single Android Device

Akash 2

Requirements: Android 2.1+ OGWhatsApp is a modded version of WhatsApp for Android that always you to use 2 numbers of WhatsApp in one de...

Facebook SDK Vulnerability Puts Millions Of Smartphone User At Risk

Akash 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="articlebodyonly" id="articlebodyonly" itemprop="articleBody">
<div id="aim17492458691728021454">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgv1M0NmIpbq8a3n_J52bBn4ToBKbY1DFjb8VKaIXTBjYrZjMaamtppJBkksGuCe6Vx1-O6Z7Rct1q10N5cMVeN_hDWyheSLUPyEyXlfI0jpqaRhrPD6jhSEZDDteeAnYf57j1ViGazv2Q/s1600/facebook-sdk-access-token-hacking.jpg" imageanchor="1" rel="nofollow" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="facebook sdk access token hacking" border="0" height="439" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgv1M0NmIpbq8a3n_J52bBn4ToBKbY1DFjb8VKaIXTBjYrZjMaamtppJBkksGuCe6Vx1-O6Z7Rct1q10N5cMVeN_hDWyheSLUPyEyXlfI0jpqaRhrPD6jhSEZDDteeAnYf57j1ViGazv2Q/s728/facebook-sdk-access-token-hacking.jpg" title="facebook sdk access token hacking" width="640" /></a></div>
Security researchers from MetaIntell, the leader in intelligent led Mobile Risk Management (MRM), have discovered a major security vulnerability in the latest version of Facebook SDK that put millions of Facebook user's Authentication Tokens at risk.</div>
<div style="text-align: justify;">

</div>
<div style="text-align: justify;">
Facebook SDK for Android and iOS is the easiest way to integrate mobile apps with Facebook platform, which provides support for Login with Facebook authentication, reading and writing to Facebook APIs and many more.</div>
<div style="text-align: justify;">

</div>
<div style="text-align: justify;">
Facebook OAuth authentication or ‘<i>Login as Facebook</i>’ mechanism is a personalized and secure way for users to sign into 3rd party apps without sharing their passwords. After the user approves the permissions as requested by the application, the Facebook SDK implements the OAuth 2.0 User-Agent flow to retrieve the secret user’s access token required by the apps to call Facebook APIs to read, modify or write user's Facebook data on their behalf.</div>
<div style="text-align: justify;">
</div>
</div>
</div>
<div id="aim27492458691728021454">

<b>ACCESSING UNENCRYPTED ACCESS TOKEN</b>
<div style="text-align: justify;">
It is important that your secret token is never shared with anyone, but researchers found that Facebook SDK Library stores it in an unencrypted format on the device’s file system, which can be accessed easily even on a non-rooted Android or jailed iOS Device.</div>
<div style="text-align: justify;">

</div>
<div style="text-align: justify;">
“<i>With just 5 seconds of USB connectivity, Access token is available on iOS via juice jacking attack, no jailbreak needed and on Android file system, it can be accessed via recovery mode which is tricker and require more time</i>.” Chilik Tamir, Chief architect for MetaIntell told <i>The Hacker News</i>.</div>
<div style="text-align: justify;">

<b>THREAT FROM OTHER APPS</b></div>
<div style="text-align: justify;">
Moreover, any 3rd party smartphone application with permission to access device file system can read this file and able to steal users’ Facebook access tokens remotely, he said.</div>
<div style="text-align: justify;">

</div>
<div style="text-align: justify;">
Researchers dubbed the vulnerability as “<b><i>Social Login Session Hijacking.</i></b>”. Once exploited, could allow an attacker to access victim’s Facebook account information using access token and session hijacking method.</div>
<div style="text-align: justify;">

</div>
<div style="text-align: justify;">
<b>VIDEO DEMONSTRATION: STEALING FACEBOOK TOKEN FROM VIBER</b></div>
<div style="text-align: justify;">
Researchers published a Youtube video, demonstrating the reported vulnerability in one of the most popular messaging application ‘<i>VIBER</i>’ for iOS.</div>
<div style="text-align: justify;">
<div class="video-container">
<iframe allowfullscreen="" frameborder="0" height="480" src="//www.youtube.com/embed/1fylUF_YUqk" width="640"></iframe></div>
</div>
<div style="text-align: justify;">
All those iOS and Android apps are vulnerable to this attack, who are using Facebook SDK for app login and storing users unencrypted access token on the device, <a href="https://twitter.com/_coreDump" rel="nofollow" target="_blank">Chilik Tamir</a> told <i>The Hacker News</i> in an email.</div>
<blockquote class="tr_bq" style="text-align: justify;">
“<i>MetaIntell has identified that 71 of the top 100 free iOS apps use the Facebook SDK and are vulnerable, impacting the over 1.2 billion downloads of these apps. Of the top 100 Android apps, 31 utilize the Facebook SDK and therefore make vulnerable the over 100 billion downloads of these apps</i>.” researcher said in a blog post.</blockquote>
<div style="text-align: justify;">
<b>PASSIVE RESPONSE FROM FACEBOOK SECURITY TEAM</b></div>
<div style="text-align: justify;">
MetaIntell team has already informed Facebook Security team about the vulnerability, but it seems that Facebook is not in any mood to update their SDK with a fix.</div>
<blockquote class="tr_bq" style="text-align: justify;">
“<i>I followed up with our Platform team to see if there were any changes they wanted to make here: - On the Android side we've concluded that we will not be making any changes: we are comfortable with the level of security provided by the Android OS. - On the iOS side the team is exploring the possibility of moving the access token storage to the keychain in order to comply with best practices.</i>” Facebook replied to MetaIntell after bug report.</blockquote>
<div style="text-align: justify;">
<b>WHAT TO DO?</b></div>
<div style="text-align: justify;">
Mobile app users are advised to do not use ‘Facebook Login’ option within Mobile apps and disallow apps to use their Facebook login. App Developers are recommended to move their users’ access tokens from device file system to secure online storage with encrypted channel.</div>
</div>
<div style="margin: 10px 5px 5px 5px;">
</div>
</div>
</div>

Android Android APP Facebook SmartPhone Facebook SDK Vulnerability Puts Millions Of Smartphone User At Risk

Security researchers from MetaIntell, the leader in intelligent led Mobile Risk Management (MRM), have discovered a major security vu...

5 Essential cPanel Settings for Beginners

Akash 0

internet Web 5 Essential cPanel Settings for Beginners

cPanel is the leader and industry standard of standalone hosting platform nowadays. The main product WHM/cPanel has been used by ...

How to Use Simultaneously Wifi and Mobile Data for Faster Download

Akash 2

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1rHVEAUDL7TjB_iu9c7h1p4R_O0_MfhfsQOwJ2HR5nrmOJ0-NOnsXaqc27L2IMbZZ6kAxaJWhziKivfW-vE7XSx7skABjjcFF2HiNqrXH6WB2733-6PhYiTjTRPX2K9lJZ_WmiEs1CJ7g/s1600/How+Use+Both+Wifi+and+Mobile+Data+for+Faster+Download.jpg" imageanchor="1" style="background-color: white; margin-left: 1em; margin-right: 1em;"><img border="0" height="420" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1rHVEAUDL7TjB_iu9c7h1p4R_O0_MfhfsQOwJ2HR5nrmOJ0-NOnsXaqc27L2IMbZZ6kAxaJWhziKivfW-vE7XSx7skABjjcFF2HiNqrXH6WB2733-6PhYiTjTRPX2K9lJZ_WmiEs1CJ7g/s640/How+Use+Both+Wifi+and+Mobile+Data+for+Faster+Download.jpg" width="640"></a></div>
<span style="background-color: white; font-family: Verdana, Helvetica, sans-serif, Arial; font-size: 13px; line-height: 18px;"></span><br>
<span style="background-color: white;"><br></span>
<span style="background-color: white;">Today, i'm talking abo<span style="font-family: Verdana, Helvetica, sans-serif, Arial; font-size: 13px; line-height: 18px;">ut how to use simultaneously Wifi and Mobile Data for Faster Download.</span></span><br>
<br>
<span style="background-color: white;"><span style="font-family: Verdana, Helvetica, sans-serif, Arial; font-size: 13px; line-height: 18px;">if you are just not satisfied with the internet speed you are getting from your service provider and do you want feed up of your WiFi/3g/4g connectivity? As a human mentality, we always need more and more and the bandwidth we are getting from service providers is no exception to it. Some or the other day, you might have thought of using Wifi and mobile data simultaneously. Isn’t it? Probably Yes. As you know, generally it’s not possible because as soon as you turn on your WiFi connection, your mobile data got disabled.</span></span><br>
</div></div>

Android Android APP Android Application Download How To internet Wifi How to Use Simultaneously Wifi and Mobile Data for Faster Download

Today, i'm talking abo ut how to use simultaneously Wifi and Mobile Data for Faster Download. if you are just not satisfied with...

How to find and remove duplicate files

Akash 2

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEln9v5blrgDzNY83HnvzloSUMKQBOMk4Gob8jXjgvYjQ8Cd_KZKvDemZeVjfwVoQJUiEjv-zf3SD49XjrN-2lrlIOAum6GjXA9c0EjnHk1pJX_TYM37y4xtrlFwrvSLRb97uf8Jy030U/s1600/1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEln9v5blrgDzNY83HnvzloSUMKQBOMk4Gob8jXjgvYjQ8Cd_KZKvDemZeVjfwVoQJUiEjv-zf3SD49XjrN-2lrlIOAum6GjXA9c0EjnHk1pJX_TYM37y4xtrlFwrvSLRb97uf8Jy030U/s1600/1.jpg"></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br></div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: 'Helvetica Neue', Arial, sans-serif; font-size: 15px; line-height: 1.7em; margin-bottom: 0.7em;">
A hard drive is like a family garage--junk expands to fill available space. An SSD behaves very much the same way, but with less space.</div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: 'Helvetica Neue', Arial, sans-serif; font-size: 15px; line-height: 1.7em; margin-bottom: 0.7em;">
A good duplicate file finder will help you reduce your digital junk levels. It can search for files with the same name, the same size, and/or the exact same contents. It helps you examine each file and decide which one to keep. It can ignore small files, so you can concentrate on the more wasteful redundancy.</div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: 'Helvetica Neue', Arial, sans-serif; font-size: 15px; line-height: 1.7em; margin-bottom: 0.7em;">
I'm going to recommend two such programs, both free for non-commercial use.<br>
</div></div></div>

Computer Software How To Software windows Windows Trick How to find and remove duplicate files

A hard drive is like a family garage--junk expands to fill available space. An SSD behaves very much the same way, but with less spac...

7 Things About Android Lollipop 5.0 You Need To Know

How to Use 2 Whatsapp Account On Single Android Device

Facebook SDK Vulnerability Puts Millions Of Smartphone User At Risk

5 Essential cPanel Settings for Beginners

How to Use Simultaneously Wifi and Mobile Data for Faster Download

How to find and remove duplicate files

Popular Posts

Blog Archive