Slashdot Mirror


Ask Slashdot: How Can I Protect My Android Devices From Hackers?

SternisheFan writes "My Android phone (an unrooted OptimusV running 2.2.2) and my Android tablet (Arnova 7g3 running 4.1) have been subjected to hacking via either 'forced Bluetooth attack' or through the Wi-Fi signals in the home where I currently rent a room. I got an Android phone at the start of this year after my 'feature phone' was force Bluetooth hacked hoping for better security, yet I still have major security issues. For instance, my Optimus's Wi-Fi again shows an error, although I am sure that a hack is causing this since when I reset the device when it's out of range from this home's signal the Wi-Fi works fine. And now the tablet (as of recently) can't access this home's open Wi-Fi, though it works fine when at other outside hot-spots. So, my question is: Are there any good (free?) security apps out there that would actually prevent this from occurring? It's not like I'm doing nefarious things on the internet, I just want to keep it private."

53 of 295 comments (clear)

  1. open WiFi? by Anonymous Coward · · Score: 5, Informative

    if you don't use bluetooth turn it off; as for wifi there are lots of reasons why it won't work (overcrowded airspace, microwaves that interfere, etc). If you are not using WPA2; then you need to upgrade. I would try changing the channel your wifi is on as well (e.g. if it is 6 now, go to 1 or 11)

    1. Re:open WiFi? by Anonymous Coward · · Score: 5, Insightful

      100%, absolutely, positively, this. There is no app out there that will effectively protect you from yourself -- and, make no mistake, it is you creating the problem. If you run around roaming from AP to AP, run unsecured at home (what?!), and leave your BT on even when not in use, you're gonna have a bad time.

    2. Re:open WiFi? by spire3661 · · Score: 4, Insightful

      I shouldnt have to put up a firewall with stateful packet inspection just to get on the internet either, but we do.

      --
      Good-bye
    3. Re:open WiFi? by jtownatpunk.net · · Score: 5, Funny

      I shouldn't have to lock my car but I lock it and most people would agree that I'd be stupid if I left my car unlocked.

      Yay, car analogy!

    4. Re:open WiFi? by hawguy · · Score: 2, Insightful

      100%, absolutely, positively, this. There is no app out there that will effectively protect you from yourself -- and, make no mistake, it is you creating the problem. If you run around roaming from AP to AP, run unsecured at home (what?!), and leave your BT on even when not in use, you're gonna have a bad time.

      What good is Bluetooth if I have to turn it on every time I want to use it and then turn it off again when I'm done? At work my phone pairs to a Bluetooth speaker, when I'm on the train it pairs to my Bluetooth headset, when I'm driving it pairs to my car audio system. If I have to mess with my phone to turn Bluetooth on and off each time I want to use it, I may as well just plug in a cable.

    5. Re:open WiFi? by mr1911 · · Score: 2

      What good is Bluetooth if I have to turn it on every time I want to use it and then turn it off again when I'm done?

      He said Bluetooth sucks. I don't think he is here to give you a sales pitch for it.

      I have yet to find a Bluetooth gadget that was worth the extra battery drain. YMMV.

      --
      This post comes with a double-your-money-back guarantee!
      Any offense taken to this post is at your sole discretion.
    6. Re:open WiFi? by SternisheFan · · Score: 3, Informative

      Yep, at end of last year when my newly bought feature phone 'buzzed' for no reason while hanging with a 'friend' in his garage mancave, that's when I started to investigate phone security. Googled 'forced bluetooth hack' and read links like http://www.newscientist.com/article/dn7461-new-hack-cracks-secure-bluetooth-devices.html AND this http://hassam.hubpages.com/hub/Types-Of-Bluetooth-Hacks-And-Its-Security-Issues and I could go on ......

    7. Re:open WiFi? by Pokey.Clyde · · Score: 2

      Because it's just so hard to add a widget to your homescreen that will turn your bluetooth on and off with just one touch. And as an added bonus, increased battery life. Is that so hard to understand?

    8. Re:open WiFi? by squiggleslash · · Score: 2

      Public service announcement: can people who don't use Bluetooth please refrain from telling those of us who do how to use it. We know how to use it, and you obviously don't, or you wouldn't make silly comments like "Put a widget on the screen to turn it on" (presumably next to the widget that predicts to the second when the next incoming call will come in.)

      Thank you.

      --
      You are not alone. This is not normal. None of this is normal.
  2. Try.. by mschoolbus · · Score: 5, Insightful

    Why don't you turn Bluetooth off until you need it?

    I am not convinced you are being 'hacked'.

    1. Re:Try.. by thsths · · Score: 3, Insightful

      Exactly. I would recommend to dial back the paranoia, not every bug is evidence of being hacked. Unfortunately the WiFi stack of Android is absolutely full of bugs, but most only cause a bad connection or a disconnect.

      That being said, Android 2.2 is way out of date, and you should not consider it secure in any sense of the word. Watch the information that you put on your phone, including login data. And there is nothing you can do about it, except complain to the manufacturer about it not being "fit for purpose".

    2. Re:Try.. by Samantha+Wright · · Score: 5, Insightful

      I've found at least one reliable citation. Note: if, in the future, someone says their Wi-Fi is "showing an error" and equates this to "being hacked," they're completely clueless. This shouldn't be on Slashdot.

      --
      Bio questions? Ask me to start a Q&A journal. Computer analogies available for most topics!
    3. Re:Try.. by Lumpy · · Score: 5, Informative

      Knowing the phone and the OS level, It's not being hacked. it's the craptastic phone and out of Date OS.

      2.2.2 had MAJOR problems with wifi. the phone needs to be sold and buy a unlocked nexus from google.

      --
      Do not look at laser with remaining good eye.
    4. Re:Try.. by Lumpy · · Score: 3, Informative

      you have a junk phone with known problems running a very out of date OS. you at LEAST should be upgraded to 2.3.3 to fix most of the problems you are seeing.

      --
      Do not look at laser with remaining good eye.
    5. Re:Try.. by Mister+Transistor · · Score: 3, Informative

      I'll second this. I have an old crummy original 'drioid Motorola A855 and that still runs 2.2.3. There was never any further updates for it from .2 to .3 and the unsecured WiFi is completely unusable. It works passably on WEP and WPA2 but unsecured never worked right. If it ever would connect, it would time out or lock up after a few minutes of operation. Totally suck-tastic.

      --
      -- You are in a maze of little, twisty passages, all different... --
    6. Re:Try.. by ThatsMyNick · · Score: 2

      Or he could install CM7.2 (everything works) or CM9 Beta (with no USB tethering), and unroot the device.

    7. Re:Try.. by capnkr · · Score: 2

      Root it - you paid for it, why not own it, too? Then you can do your own upgrades...

      CM7, 9

      --
      "...there are some things that can beat smartness and foresight. Awkwardness and stupidity can." ~ Mark Twain
    8. Re:Try.. by nevermore94 · · Score: 3, Informative

      You have an original OG Droid and you are still complaining about it now? The phone is ancient and should have been replaced a long time ago. That being said, it is also completely unlocked and one of the easiest phones to upgrade the OS on. Check out Cyanogen Mod or Project Elite for a whole new experience on the phone and repurpose it as a useful WiFi based media device.
      http://www.droidforums.net/forum/project-elite/
      http://rootzwiki.com/forum/205-projectelite/
      http://www.cyanogenmod.com/devices/motorola-droid

      --
      Nevermore.
    9. Re:Try.. by admdrew · · Score: 2

      The HuffPo link references the NFC 'hack' that refers to a device state that describes roughly 0% of Android phones in the field (ie, pre-Android 4.x with NFC enabled). Basically non-news in the world of phone exploits.

      While I certainly feel for you, I (as do many others here) truly believe this is a very specific situation in which a conclusion of hacking was jumped to far too quickly, and probably erroneously; the evidence is too anecdotal and not technical enough.

  3. Re:Good fix by djl4570 · · Score: 5, Insightful

    This IOS versus Android stuff is as tired as the Windows 95 versus OS/2 screeds of 1995.

  4. A few tips.... by abhi2012 · · Score: 5, Informative

    1. Put bluetooth in invisible mode unless you require somebody to find it. 2. Don't put the devices you add on auto send/receive. 3. Try putting an antivirus with a firewall. There are quite a few on the market. 4. Ask the network admin (of the WiFi at your home) to disallow listing of devices on the network. I suppose that should get you started.

    1. Re:A few tips.... by SternisheFan · · Score: 2

      5. Install Wifi Protector. It prevents the ARP cache poisoning techniques commonly used to packet sniff on open WiFi networks, as well as DoS attacks in the same vein.

      Looks interesting, I hadn't found that one, lots of apps available on android. Thank you. :-)

  5. How to prevent being hacked by Anonymous Coward · · Score: 3, Funny

    Turn the devices off.

  6. Faraday by Antipater · · Score: 4, Funny

    Not Farraday. Damnit, timothy!

    --
    Everything is better with chainsaws.
  7. Some tips: by kiriath · · Score: 5, Informative

    Be wary of "any ol' bob's" android distro. Try to stay mainstream and stay up to date. If you're not using bluetooth, turn it off. If your vendor's version of Android isn't as secure as it could be complain with much loudness, if you don't get satisfaction switch vendors.

    Your Wifi issues seem to me to be related more to your AP than the devices themselves. Perhaps try a different AP/Router?

    I'm not sure how you could be sure a hack is causing a Wifi error. Even if it popped up and said "Hi! Your wifi is disabled because we're haxoring you" I'd be skeptical. You should try some of the mainstream android support forums with that and see what they say.

    Good luck!

    1. Re:Some tips: by Radish03 · · Score: 2

      Your Wifi issues seem to me to be related more to your AP than the devices themselves.

      I've had a similar wifi issue with my phone (Nexus S) maintaining a connection to a home network running one of those ISP provided all-in-one router/modems. The solution was to turn off "Avoid Poor Connections" in Settings > Wi-Fi> Advanced.

  8. Short-range attacks by Anonymous Coward · · Score: 5, Informative

    If the vectors you're being "hacked" through are BlueTooth or WiFi, it would seem that they're both occurring from fairly close to your physical location. Maybe you should figure out which of your housemates is hacking your devices and take appropriate action.

    1. Re:Short-range attacks by K.+S.+Kyosuke · · Score: 3, Funny

      Maybe you should figure out which of your housemates is hacking your devices and take appropriate action.

      Like, deleting his porn?

      --
      Ezekiel 23:20
  9. Re:More likely bad wifi chip/driver in the phone by Anonymous Coward · · Score: 2, Insightful

    Also, compatibility between routers and hardware is not uncommon either. My toshiba laptop couldn't reliably connect to my parent's router, though it works fine with Linksys. And I've seen many HP laptops have problems with many router brands.

    Its likely your phone, or your router diverges from the wifi standard in some non compatible that causes problems.

    I seriously doubt you are being hacked. Just shit technology.

  10. You're blocked. by drakaan · · Score: 3, Informative

    Correlation is not causation.

    You assume that since you were hacked via bluetooth before at a particular place (maybe) that since your connection to an unsecured wifi hotspot (!!! seriously? you're *really* worried about getting hacked but you're connecting to an open wifi connection?) doesn't work, it must be because of hacking.

    Most routers have the ability to allow specific MAC addresses to connect, and to deny connections to MAC addresses not in that list. My guess is that's what's going on...hard to say, since you didn't mention whether you spoke to the person who pays for the internet connection associated with the previously-mentioned wireless access point.

    --
    "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
  11. Move? by Anonymous Coward · · Score: 2, Insightful

    I know it may not be real practical but if your roomates or close neighbors are hacking you all the time this might not be a very good establishment? I wonder what their motives are and if they can be trusted outside the digital realm as well. I'm also skeptical as to whether or not you are really being hacked. These things aren't that easy. I don't see how any non root app is going to be able to solve security problems which appear to be a problem of the OS.

  12. Umm... by Anonymous Coward · · Score: 2, Informative

    I think your problem is the "Open WiFi" in your house instead of your device. Maybe it's too overloaded to actually provide service with everyone using it.

    Ask your housemates to secure the wifi connection or don't use it.

  13. Why are you a target? by ebunga · · Score: 4, Interesting

    Why are you a target? If you are actually a victim here, and not some person suffering from paranoid delusions, what makes you worthy of the risk of a close range attack?

    1. Re:Why are you a target? by dave420 · · Score: 5, Insightful

      Have you seen a doctor? You have given a pretty decent account of what life feels like to a paranoid schizophrenic. I'd rule that out first before assuming that all your devices are hacked. Do you even have any evidence they were hacked? Or did they just start acting weirdly, and you assume them to be hacked? Give us something to go on, at least.

    2. Re:Why are you a target? by murder_face · · Score: 3, Informative

      I remember splicing some speaker wires together for a friend with scotch lock clips, and his (unknown at the time) bi-polar schizo wife tried to stab me because she said I was bugging their house.

    3. Re:Why are you a target? by Xest · · Score: 2

      "Like I posted before, thanks for your 'input'. I'm as sane as anyone else is"

      Look, that's precisely the problem with disorders like this, you wouldn't know that, you'd have no idea.

      So just take this advice, okay, you're fine, or you believe you are or whatever, the point is you wouldn't know if you weren't.

      So go to the doctors regardless, and just say people are questioning your sanity, there's no harm if you're right the doctor will tell you you're fine and you can carry on as is and everyone questioning your sanity here will be proven wrong. But if you do have problems that you don't realise you have then the doctor will be able to help break the cycle of denial about whether you have a problem and you'll be able to realise all along that you had issues.

      What's the harm? Just do it, it's best to be sure.

  14. hacked?! by Anonymous Coward · · Score: 5, Insightful

    You aren't being hacked, the owner of the wifi in your house is fed up with you skanking his wifi and blocking you.
    How did this get posted?

  15. Is this a joke? by DigitAl56K · · Score: 5, Insightful

    So you have two devices having problems connecting to your home access point, and you assume you need protection for your android devices? It sounds more like you need to fix a problem with your access point, in that it's stopped accepting connections. Maybe it's exhausted DHCP assignments for your devices, or your MAC addresses are being blocked - maybe because someone was trying to spoof them, maybe because of a bug in the access point.

    Going from "my devices are having problems connecting to my access point at home only" to "help, hackers are attacking my android devices" is a bit of a stretch, isn't it?

    And more of a stretch is how this got front page...

  16. Para-droid? by WoodburyMan · · Score: 3, Insightful

    Okay so you are paranoid about someone attacking your device via Bluetooth, yet you're connection is a unsecured unencrypted WiFi network. Also if you believe someone is coming in via Bluetooth, then it's limited range, and someone in your home is doing it. Time to file criminal charges or move. This might be legit. However this strongly reminds me of a client we had to deal with that we had to finally tell to stop calling us, as he believed "hackers" were out to get him, and installed a virus in his phone line. As in the wire. Despite hours and hours of patiently explaining how it was impossible, and local phone company replacing and checking for wire taps according to him. He believed it because a person would always join the AOL Chat room he was in and tell him his phone conversations he just had. This was in dial up days. Within the last year, the same guy stopped in. (Only I recognized him as others who were working for our business at the time have all left). He claimed hackers kept installing viruses on his smart phone and he wiped it and they kept coming back.

    1. Re:Para-droid? by dave420 · · Score: 2

      I have no idea how you can tell the difference. Please go into details. So far you've not mentioned a single thing that differentiates your claims from those of a person suffering a paranoid episode. Have you used a task manager to actually see what services your phone is running? You sound indistinguishable from this guy, who let his paranoid imagination run rampant.

  17. blocked MAC adresses by backwardMechanic · · Score: 4, Informative

    Maybe he's being blocked because it's not his access point?

  18. Re:Submitter here... by assantisz · · Score: 4, Insightful

    I've had enough of a crash course in android this year to know it's real, especially when I have family members who are in law enforcement and gov't jobs that they can't/won't talk about. Those people do have access to the 'interesting' toys...

    I don't know, dude. The most logical answer anybody here can give you: your wifi access at home is crap because a) both of your devices work fine using other hotspots and b) both of your devices don't work at home. Btw, Android 2.2.x (aka Froyo) is known to have wifi problems in enterprise settings. Google fixed that in 2.3. Just another example how other explanations make a lot more sense than "I am being hacked." And the quote above makes you sound a bit of a looney.

  19. Re:Good fix by Bill_the_Engineer · · Score: 4, Funny

    Everyone knows it was the Atari 800 versus the Commodore 64 that was the holy war of the 80s!

    Or was it Amiga versus the Atari ST?

    Coke versus Pepsi.

    --
    These comments are my own and do not necessarily reflect the views or opinions of my employer or colleagues...
  20. A perfunctory glance at this post tells me by blind+biker · · Score: 3, Insightful

    ...that SternisheFan is not being "hacked". I do get the impression that he's somewhat clueless, though, and could benefit from the wisdom of the /. community.

    For one thing: do not keep BT on all the time - that's going to sap a bit of energy from your battery. Not terribly much, but since it's also a potential safety risk, there is absolutely no need to have Bluetooth on unless you need it.

    It's when the wi-fi situation was mentioned, that I realized the poster is clueless.

    --
    "The agriculture ministry is not in charge of Gundam" - Japanese ministry official.
  21. Dos and don'ts by tero · · Score: 3, Informative

    Doesn't sound like you're hacked really.
    But generally:

    don't: ..run old versions of android (upgrade your devices - upgrade hardware if you can't run latest software) ..install apps from non-appstore sources, be vary of malicious appstore apps as well (read reviews, do research before install, generally avoid "freebie" versions of paid software). ..surf on strange pages, click strange links or scan QR-codes ..have bluetooth/wifi/nfc on when not needed ..connect to unsecure free wi-fi, ever. ..don't use public USB loading stations (airports, malls etc). ..have sensible information on your phone/tablet.

    do ..use encrypted device / sd-card ..use passphrase to lock the device screen ..use remote wipe/anti-theft service (most AV-vendors offer this) ..keep backups ..consider using a VPN service for those moments you can't avoid connecting to unsecure wi-fi.

    That's it for starters.

  22. Obvious answer by daq+man · · Score: 2

    " How Can I Protect My Android Devices From Hackers?"

    Simple, don't turn them on.

  23. Re:Good fix by Mister+Transistor · · Score: 2

    Let us not forget emacs vs. vi!

    Of course, everyone knows emacs is better! ;)

    --
    -- You are in a maze of little, twisty passages, all different... --
  24. Re:Good fix by cusco · · Score: 2

    Coke vs. New Coke!

    --
    "Think about how stupid the average person is. Now, realise that half of them are dumber than that." - George Carlin
  25. Re:Good fix by spazdor · · Score: 4, Funny

    Wait, no you guys.... Emacs vs. Windows XP!

    Which is the more bloated operating system?

    --
    DRM: Terminator crops for your mind!
  26. Re:Good fix by SternisheFan · · Score: 2

    I have a 'lamer' phone because it's my first smartphone, the reviews I read before I bought it all said it was a very good for the money ($100) starter smartphone. And for the most part, I've been very impressed with it, takes great pictures, call quality is there, and I have a 600mhz, internet capable pocket computer, that also plays my 7500+ Mp3's, and I get all the old video game systems back. Seems like any one of these reasons would be worth $100.

  27. how did this dumbass get this posted on /. by LodCrappo · · Score: 4, Informative

    WTF.

    The OP obviously is not "hacked". That doesn't make the first bit of sense. Even if the problem wasn't presenting on *two different devices*, why in god's name would any 'hacker' disable your WIFI (and only at your own home). What is the possible motivation for this imaginary criminal mastermind who has invested their time in ruining your WIFI when you are at home? Is he perhaps funded by The Others in a plot to steal your mind waves???

    Or maybe... just maybe... (and I know, I'm reaching here)... YOUR ACCESS POINT IS BROKEN, OR HAS BEEN CONFIGURED TO BLOCK THESE DEVICES??? It's just a theory based on the fact that two different devices work fine with every other access point, but not this one. Wild, I know.

    How did the editors not notice that this is complete ignorant crap?

    PS
    the entire question is retarded.

    thank you

    --
    -Lod
  28. Re:Good fix by Raumkraut · · Score: 2

    Not true.
    There is/was a website (jalbreakme.com, IIRC) which used a PDF vulnerability in iOS to jailbreak iPhones, just by clicking a button on their site using the iOS web browser.

  29. Move to a Windows Phone .. by dgharmon · · Score: 2

    Stop using these defective and unlicensed products and immediatly move to a Windows Phone ...

    Insert Innovation Here :o

    --
    AccountKiller