Sunday, 10 June 2012

The Accidental Data Breach - Mobile Insecurity


This past week was a wake up call to consumers regarding mobile security and privacy, with the data breach of Trapster which is said to have affected their 10 million users. The company responded quickly telling users to change their passwords, particularly if the password they used on the site is used elsewhere. The key issue here appears that the passwords were left unencrypted in the database. Like the recent Gawker data breach, Trapster failed to use a one-way hash to secure the passwords. Particularly in the mobile space we are seeing developers focus on “speed” to get their products to market vs. taking time to ensure their systems follow security best practices, putting their customers’ data at risk.
This is also very true in the world of mobile security, where some of our biggest and even well-funded competitors are providing backup but fail to encrypt it. You can log into their control panel to see all of your contacts and photos. While convenient, this means that their staff can as well. Of course, if their systems are compromised, a hacker can get access to this data as well. GadgetTrak Mobile Security 3 is the only mobile security application for Android and Blackberry that encrypts data on the phone using a privacy key that only you know before it is uploaded this data is only decrypted when you download the data and enter your privacy key. This method ensures that not even our staff can view your contacts and photos. When you log into our control panel you will not be able to see your photos or contact data, but this means neither can we. Your privacy and security are important to us and we prove it every day.

No comments:

Post a Comment