Risk
11/2/2010
01:25 PM
50%
50%

Lookout Rolls Android Privacy App

Tool scans smartphone apps and reveals which are accessing private identity, location, and information.

Top 20 Android Productivity Apps
(click image for larger view)
Slideshow: Top 20 Android Productivity Apps

Lookout Mobile Security on Tuesday unveiled its Lookout Premium for Android for enhanced smartphone protection. The cloud-based Lookout Premium's new Privacy Advisor feature gives users visibility into and control of their personal information when they access smartphone apps.

Privacy Advisor will let users scan every app they download and discover which can access their private data, including identity information, location, and messages. Detailed reports on the apps' capabilities on their phones are also available for users to view, Lookout said. The smartphone security provider said it has gained more than three million users in less than a year.

"Lookout Premium provides smartphone owners the peace of mind to explore everything that the new mobile world offers safely by providing added security, data protection, and visibility into personal information being accessed by the apps on their phones," said John Hering, CEO and founder of Lookout Mobile Security, in a statement.

Security and data privacy concerns are increasing with the rapid adoption of smartphones and the amount of data and proprietary information users have on their devices. On average, users have 31 apps on their phones that can access their identity information, according to Lookout, along with 19 apps that access their location, and five apps that access their SMS and MMS messages.

More than 91% of consumers have some level of concern about the privacy of information on their phone and only 7% said they feel very confident they understand what private information is being accessed on their phone, according to a recent study, Lookout said.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-1449
Published: 2014-12-25
The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.

CVE-2014-2217
Published: 2014-12-25
Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.

CVE-2014-3971
Published: 2014-12-25
The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting authentication with an invalid X.509 client certificate.

CVE-2014-7193
Published: 2014-12-25
The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtain sensitive information, and potentially obtain the ability to spoof requests to non-CORS routes, via a crafted web site ...

CVE-2014-7300
Published: 2014-12-25
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary commands on an unattended workstation by making many PrtSc requests and leveraging a ...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.