Slashdot Mirror

← Back to Stories (view on slashdot.org)

Nexus One vs. Top 10 Phone Security Requirements

Posted by CmdrTaco on from the i'll-remote-wipe-you dept.

hiouridah writes "Consumer Grade or Enterprise Ready? The Nexus One is entering a smart phone market that is taking increasing heat from enterprises for their lack of robust security features. So how does the Nexus One stack up?"

20 of 189 comments (clear)

  1. N1 vs Iphone by Karganeth · · Score: 4, Informative

    521MB RAM vs 256MB RAM
    800x480 vs 480x320
    1Ghz vs 600Mhz
    5MP vs 3MP
    AMOLED vs TFT

    To top it off the nexus one is a slimmer device. Need I say anymore? The iPhone is no longer king! Hoorah!

  2. Obvious article is obvious by nitefallz · · Score: 4, Interesting

    I don't think the N1 is targeted at the corporate world. Google seems to have larger mobile plans than this, so I would expect some corporate type product in the future.

  3. From the article by Albanach · · Score: 4, Interesting

    -Operating system: The Android operating system is in its infancy and like any new piece of software is likely to be full of security bugs. Android is also open source, so it is highly susceptible to developers with malicious intent finding those bugs quicker than if the OS was closed like the iPhone or blackberry OS. However, the open source nature of the OS should also become a benefit for its security longer term as coders with good intent scrub Android and find the security holes and patch them. Without the source code this job becomes much harder and takes considerably longer. Bottom line is it’s a mixed bag, less secure in the short term but able to become more secure faster than a close OS can.

    Is there any evidence that an open source program is less secure in the short term than a closed source one?

    After all, when coding an program they know will be open sourced, programmers are much less likely to add a vulnerable piece of code in the hope it won't be spotted or with the intention to fix it at some later date.

    1. Re:From the article by jeffmeden · · Score: 5, Insightful

      After all, when coding an program they know will be open sourced, programmers are much less likely to add a vulnerable piece of code in the hope it won't be spotted or with the intention to fix it at some later date.

      Beg the question much? Your conclusion is just as vague as the one in the article. I don't have any actual data either, but I would venture that accidental bugs are a much much much greater security risk than malicious ones, open source or not. Of course, it's pretty darn hard to spot a cleverly hidden bit of malicious code (and be able to distinguish it from a bug), so we may never know anyway.

    2. Re:From the article by nine-times · · Score: 4, Insightful

      Also I'd question what the article means by Android being "in its infancy". Android is based on a well-tested OS that's been around for a while (Linux), the first phone running Android came out about a year ago, and the OS is past v2 (though version numbers don't necessarily tell you anything). I wouldn't call Android a long-running or well-established OS, but it's not like it was slapped together from scratch 6 months ago.

    3. Re:From the article by GooberToo · · Score: 4, Interesting

      Also I'd question what the article means by Android being "in its infancy".

      Android right now means Linux + Framework. Sure the framework can be made to run on other OSs, but for now they use Linux.

      No bones about it, the Android framework is definitely in its infancy. Google breaks applications left and right with just about every release. In some cases they even deprecate interfaces without providing an alternative interface; leaving developers and users boned.

      And because of Android's infancy, Verizon's Droid has known Android incompatibilities between the emulator and the GSM variant (Milestone). In fact, that's what was behind Droid's update from 2.0 to 2.01; even requiring an SDK update and new SDK version (5 to 6) for developer's to support. Despite the 2.01 update, Droid still has some broken interfaces because Verizon was forced to write their own Android-CDMA framework hooks - as Android's native CDMA interface wasn't ready at the time.

      While I think Android is excellent and I even own an Android phone, to be absolutely clear, both users and developers are very much feeling both the pains and absolute indifference Google has for them. For example, the Android market application and interfaces available to developers is still third world crap and a far cry from acceptable. Right now developers have to support Android 1.1 (large deprecated now), 1.5, 1.6, 2.0 (obsoleted), 2.01, and soon 2.1. Each has their own quirks, incompatibilities, broken interfaces, new and improved interfaces, screen sizes, etc. Contrary to the recent stream of FUD being spread, with the possible exception of Verizon's breakages, none of this means Android is fracturing and/or forking, but it does make for a huge headache for users and especially developers.

      As for the market, Google can't even properly count the number of actively installed applications for developers. The numbers provided are known to be completely useless and inaccurate. They still don't provide tools to developers. You still can't browse the market from your computer. Application descriptions are laughably terse. The user comment system exists solely to abuse developers and harm sells. Developers can't event reply to criticism - only the most recent. About the only positive thing the Android market has going now is that its easy to remove spam and abusive comments - but that makes one wonder how often legitimate comments are now removed as anyone can mark comments as spam.

      In short, Google still has a very long way to make Android grown up. Sure its continuously getting better, and more stable with each release, but anyone who believes Android is stable and full grown simply doesn't have their ear to the ground to hear the real state of things.

  4. Specs don't matter by ThrowAwaySociety · · Score: 5, Insightful

    521MB RAM vs 256MB RAM

    800x480 vs 480x320

    1Ghz vs 600Mhz

    5MP vs 3MP

    AMOLED vs TFT

    To top it off the nexus one is a slimmer device.

    Need I say anymore? The iPhone is no longer king! Hoorah!

    Pretty sure that the iPhone was never king among the geeks that care about hardware specs. The iPhone is king among the people who care about the number of apps, user experience, and style. The kind of people who base their decision on what they see on TV, or what their friends like, and not what they read on Slashdot.

    You know, the vast majority of the population.

    1. Re:Specs don't matter by b0bby · · Score: 4, Insightful

      Pretty sure that the iPhone was never king among the geeks that care about hardware specs.

      I'm not so sure, the biggest phone geek I know has switched to an iphone. "User experience" is important for geeks too, and I have to say the iphone seems to deliver a great one (at a price).

    2. Re:Specs don't matter by ThrowAwaySociety · · Score: 4, Funny

      Could you be any more smug and arrogant?

      I don't think so. I managed to insult both the Slashdot-nerd crowd, and the regular-Joe-Shmoe crowd. I think that makes me the smuggest, most arrogant bastard going.

      Thanks for acknowledging that achievement, though!

  5. Revoke Applications by dwandy · · Score: 4, Insightful

    From TFA: Apple iPhone requires application signing and it issues and revokes the certificates making it a powerful security feature.

    This "feature" is a prime reason I didn't buy an iPhone. I guess as a Security Guy he has to be willing to give up all his freedoms in his quest for security...

    --
    If you think imaginary property and real property are the same, when does your house become public domain?
  6. 4 real issues by Enderandrew · · Score: 4, Interesting

    We're talking enterprise here, right?

    Who cares about touch screens and resolution. I do as a geek, but these are the real issues:

    Do you need a separate server to properly sync with Exchange?
    How well does it sync with Exchange?
    How secure is it, and can it handle encryption? (The iPhone can't be used in many organizations for this very reason)
    Is the email app any good? The iPhone mail app for instance is very much lacking in comparison to the Blackberry email app.

    Suits care about covering their asses, and checking email. If it can't do that, it won't be used in the enterprise.

    --
    http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
  7. RIM's bread and butter by ArhcAngel · · Score: 4, Interesting

    I increasingly hear this question from both my IT peers and users alike "Why does our company stick with Blackberry when phone XYZ is so much better?" The long and the short of it is SECURITY. I mean when India insisted RIM provide them with a back door so they could spy on BB users RIM's response was "We don't even have a back door". I would love to see a smartphone come out with all of the security features RIM has had for years so I could offer it to the Executive VP instead of telling him "I'm sorry but since you receive strictly private emails you are not allowed to use anything but a Blackberry" and having him start making calls and ultimately buying it on his expense account connecting it to the network in rogue fashion.

    --
    "A person is smart. People are dumb, panicky dangerous animals and you know it." - K
    1. Re:RIM's bread and butter by Anonymous Coward · · Score: 5, Funny

      I was going to Google "India RIM backdoor", but quickly thought against that idea.

  8. Remote data wipe? by ducomputergeek · · Score: 5, Interesting

    Phones are easy to loose or get nicked. One of the features enterprises like about the Blackbery is the ability to do a remote datawipe. On my iPhone I can set a password. If it's entered incorrectly 10 times, the device automatically wipes itself. I can also do a remote datawipe as well. I've tried googling about this feature on the N1 and so far have found nothing.

    Ability to do a remote data wipe is key for the enterprise market.

    --
    "The problem with socialism is eventually you run out of other people's money" - Thatcher.
  9. For those who don't want to skim TFA by DJRumpy · · Score: 4, Informative

    Screen Lock (including gestures to unlock in addition to alphanumeric codes)
    VPN support
    Standard Wireless Support (Wireless-N as well which is nice)
    Application Sandboxing
    Lacks Corporate Policy Enforcement (fail for enterprise)
    Application Signing - Doesn't require trusted signers which defeats the purpose
    No hardware encryption (fail for enterprise)
    No Remote Wipe (fail for enterprise)

    IMO, the phone definitely seems ready for the home user, but is very lacking for enterprise

  10. King? iPhone Is The 3rd Place Phone by MediaStreams · · Score: 4, Informative

    http://www.intomobile.com/2009/11/12/apple-iphone-takes-third-place-in-q3-global-smartphone-sales.html

    Nokia is the king.
    RIM behind them.

    And finally Apple in third place. So, no, Apple and iPhone isn't the king of anything in the cellphone market.

  11. Re:Im going to wait..... by stiggle · · Score: 5, Funny

    I'm going to wait for the 6th version to come along.
    I was to see the video footage it takes of "Attack Ships on fire off the shoulder of Orion" :-)

  12. Remote datawipe does exist on Android. by tweek · · Score: 4, Insightful

    While the default Exchange integration on Android 2.0 doesn't support all of the Exchange security features, Touchdown ( http://www.nitrodesk.com/dk_touchdownFeatures.aspx ) DOES. I used it initially on my DROID and am currently testing the native stuff now that Motorola released a corporate directory app on the app store. Remote wipe *IS* supported by the native android ActiveSync implementation but not PIN security IIRC.

    --
    "Fighting the underpants gnomes since 1998!" "Bruce Schneier knows the state of schroedinger's cat"
  13. At least he avoided using "sheeple" by Quiet_Desperation · · Score: 4, Insightful

    Yeah, a good user experience and plenty of useful applications that just work. What sort of damned fool would ever want that?

  14. Nexus One vs iPhone 3Gs vs. N900 by Hurricane78 · · Score: 4, Informative

    I’m sure if you ask the Japanese, they will laugh in your face. But a quick comparison:

    Nexus One vs iPhone vs. N900

    CPU: 1GHz Qualcomm SnapDragon | 600 Mhz ARM Cortex-A8 + PowerVR SGX | 600 MHz ARM Cortex-A8 + PowerVR SGX
    RAM: 512MB | 256MB | 1GB
    Display: 800x480 AMOLED | 480x320 TFT | 800x480 TFT
    Camera: 5 MP, LED flash | 3 MP, no flash | 5 MB + 0.3 MP (dual), LED flash | (All without optical zoom, which in this day and age, is pathetic.)
    Storage: 4 GB + unlimited | 16 GB (fixed) | 32 GB + unlimited
    Battery: 1400 mAh | 1219 mAh (non-removable) | 1320 mAh | (all 3.7 V li-ion)
    Input: capacitive touchscreen + trackball | multi-touch touchscreen | resistive touchscreen + 38-key backlit keyboard
    OS: Android | iPhone OS | Maemo Linux
    Dimensions: 119 * 59.8 * 11.5 mm | 115.5 * 62.1 * 12.3 mm | 110.9 * 59.8 * 18 mm
    Java support: yes | no | yes
    GPS: They all got A-GPS and Wi-Fi triangulation is possible with a software. Although from what I heard, the iPhone has that software built-in. (I bought it for 3€ for my Nokia, so not much trouble there.)
    Ability to put on it and do with it what you want: likely | locked down | absolutely
    FM radio: no | no | yes

    That’s about the differences I could make out. I hope this gives a better picture. I tried to stay unbiased. (And I’m sure I will draw hate for this. ;) As always: No guarantees.

    --
    Any sufficiently advanced intelligence is indistinguishable from stupidity.