Defend your phone against loose networks? There’s an app for that

A group of researchers from the University of Michigan has released an Android app designed to defend against a common firewall vulnerability which they say commonly exposes smartphones on cellular networks. The vulnerability, “off-path TCP sequence number inference”, can allow hijacking of Web pages users are trying to visit …

[LarsG]

Watch out again.

Almost everyday someone finds a vulnerability on an android handset. When will it end?

How many acces web pages with pass words, check on their bank accounts, buy stuff?

Every mobile should come with a warning 'Danger, using this phone may leave your personal data exposed and result in financial loss'.

[Anonymous Coward]

Re: Watch out again.

"How many access web pages with pass words, check on their bank accounts, buy stuff?"

Email = App. Not accessed by browser

Bank Account = App. Not accessed by browser

Buy Stuff = I use an App. If there was a need to purchase via web page, I'd do this at home on my laptop. How often would you need to purchase via browser on your phone? Not often and when required, I wouldn't be using a phone to do this.

Remember the phone must be booby-trapped as well as a load of other ifs and buts.

For Apple users, they have Apple to vet apps etc.. For droid users, they just need to be a bit savvy and not download crap apps from untrusted sources. Don't allow "non-market" apps, unless you have an idea of what you’re actually doing.

It's scaremongering for the standard user. Even Apple have their security scares, though they perpetuate the myth of (i)OS(x) being impenetrable and free from attacks.

[Ed]

Re: Watch out again.

"they perpetuate the myth of (i)OS(x) being impenetrable and free from attacks" - do they? How?

[Anonymous Coward]

Re: Watch out again.

Low tech is the cure.

[TraceyC]

Re: Watch out again.

"Almost everyday someone finds a vulnerability on an Operating System."

There, fify. Slap that warning on all the computer things.

[Confuciousmobil]

People are expected to download an app from people explaining how they can steal your data?

Are Android users really that stupid?

[ukgnome]

Are Android users really that stupid?

People in general can be a little arrogant when dealing with their security. Sometimes they need it explaining.

[Dan 10]

Or...

...an attacker can download the app to scan networks for presence of the FW type that would allow the attack to succeed, reducing wasted time.

[Roo]

Android Phones won't be the only attack vector...

If I read that paper correctly I think that attack could work on pretty much any network device that meets the criteria, not just Android phones.

[TJ Sec]

Update: App deleted in Play Store

I think the article should be updated to the fact that the App in question was removed from Google Play Store.