Risk
11/2/2010
01:25 PM
50%
50%

Lookout Rolls Android Privacy App

Tool scans smartphone apps and reveals which are accessing private identity, location, and information.

Top 20 Android Productivity Apps
(click image for larger view)
Slideshow: Top 20 Android Productivity Apps

Lookout Mobile Security on Tuesday unveiled its Lookout Premium for Android for enhanced smartphone protection. The cloud-based Lookout Premium's new Privacy Advisor feature gives users visibility into and control of their personal information when they access smartphone apps.

Privacy Advisor will let users scan every app they download and discover which can access their private data, including identity information, location, and messages. Detailed reports on the apps' capabilities on their phones are also available for users to view, Lookout said. The smartphone security provider said it has gained more than three million users in less than a year.

"Lookout Premium provides smartphone owners the peace of mind to explore everything that the new mobile world offers safely by providing added security, data protection, and visibility into personal information being accessed by the apps on their phones," said John Hering, CEO and founder of Lookout Mobile Security, in a statement.

Security and data privacy concerns are increasing with the rapid adoption of smartphones and the amount of data and proprietary information users have on their devices. On average, users have 31 apps on their phones that can access their identity information, according to Lookout, along with 19 apps that access their location, and five apps that access their SMS and MMS messages.

More than 91% of consumers have some level of concern about the privacy of information on their phone and only 7% said they feel very confident they understand what private information is being accessed on their phone, according to a recent study, Lookout said.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading December Tech Digest
Experts weigh in on the pros and cons of end-user security training.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2010-5312
Published: 2014-11-24
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

CVE-2012-6662
Published: 2014-11-24
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.

CVE-2014-1424
Published: 2014-11-24
apparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."

CVE-2014-7817
Published: 2014-11-24
The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".

CVE-2014-7821
Published: 2014-11-24
OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DNS configuration.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Now that the holiday season is about to begin both online and in stores, will this be yet another season of nonstop gifting to cybercriminals?