The Wireless Industry News Portal Advertise on Wireless Industry News and reach over 300,000 potential new buyers. Click here to learn more.
Post a News Story        Resources        News Archives        Home - Mobile News
This is the last 4U HP DL-585 enterprise we have in stock. First come, first serve.

Click here to order your new fully dedicated Plesk server with the Linux operating system.

This is the last 4U HP DL-585 enterprise we have in stock. First come, first serve.
This is the last 4U HP DL-585 enterprise we have in stock. First come, first serve.

Click here to order our special clearance dedicated servers.

Wireless Industry News is read by over 300,000 people a month. Learn how you can increase your sales by advertising on our news portal -- Click here.

This is the last 4U HP DL-585 enterprise we have in stock. First come, first serve.

Google's Lollipop new release is more secure, but still not good enough

Share on Twitter.

Get the most reliable SMTP service for your business. You wished you got it sooner!

October 26, 2015

It appears that Google's new Lollipop 5.0 release is more secure, but still not secure enough.

At least that's the verdict of security researchers who checked out the model that Google's applied to its Android OS since the Lollipop 5.0 release.

In an Arxiv paper, Elena Reshetova and her collaborators from Finland's Aalto University (with support from Intel) look over the post-Lollipop era, in which they note “every process must be run inside a confined SEAndroid domain with a proper set of access control rules defined”.

The issue is that while the structure and its policy framework would work well if they were followed, OEMs have room to make implementation mistakes.

“Overall, OEM modifications can render policies less strict, resulting in a wider attack surface for potential security vulnerabilities”, the researchers write.

The security errors arise because OEMs simply aren't coping with turning the product around quickly enough to compete, while trying to make sure their implementations comply with the SEAndroid security policy.

Such issues include:

  • The overuse of default profiles. This can mean OEM Android versions can point to sensitive resources from untrusted domains;

  • The overuse of predefined domains. Instead of defining separate domains for each of their apps, OEMs tend to put them in the system_app or platform_app domains, leading to an accumulation of too many apps sharing the same allow rules;

  • Forgotten rules. Security rules that are either auto-generated or relate to deprecated drivers, hanging around creating vulnerabilities;

  • Dangerous rules. Essentially insecurity-by-convenience. Rather than go back and make wholesale changes to the code-base, OEMs ship products with inadequate security policies.
  • The research group has put together an open-source tool named SEAL, which provides policy analysis, policy visualization, and policy decompilation.

    In other mobile news

    Sprint said that it won't take part in the 600 MHz wireless spectrum auction in the U.S. scheduled for the first quarter of 2016.

    The news did come as a bit of a surprise to some.

    In a press statement, CEO Marcelo Claure said-- “Sprint has all the wireless spectrum it needs to deploy its network architecture of the future.”

    Instead of beefing up its airwave portfolio, Sprint says it will focus on improving wireless services on the spectrum it already owns.

    Sprint says it will build extra cell tower sites and aggregate its bandwidth to achieve that goal.

    Some of Sprint’s critics have also suggested that the U.S.’ fourth largest mobile carrier doesn’t have the money to take part in the spectrum auction, and there could be some truth to that.

    But it's more than ten years since the company last took part in a spectrum auction, so its spectrum inventory could be depleted by 2017 some critics say.

    The FCC plans to hold a wireless spectrum auction in March 2016. The goal is to acquire frequencies in the 600 MHz band from TV broadcasters currently using the spectrum in the United States, then sell it to mobile carriers.

    Naturally, the two largest in line would be AT&T and Verizon. A competitive auction is essential for the U.S. government because without some bidding, the auction might not raise enough cash to persuade U.S. broadcasters to part with their valuable spectrum.

    For now, there doesn’t appear to be any threat to this plan, as the other three major operators appear unlikely to drop out at this stage.

    Overall, 600 MHz wireless spectrum is considered 'prime real estate' by most mobile phone companies, simply because it is a lower frequency than the airwaves currently used for cellular communications.

    Lower frequency signals travel further and do a better job of penetrating buildings and passing minor obstacles than higher frequencies do.

    Furthermore, lower frequency spectrum is especially useful and very cost effective for servicing customers in less densely populated areas, as carriers can build cell towers further apart.

    Sprint has extensive spectrum holdings, but most of it is at higher frequencies, therefore not as desirable than what U.S. broadcasters have.

    In other mobile news

    A huge drop in the overall demand for Samsung’s newest Galaxy smartphones triggered a 5th straight monthly decline for the phone maker, wiping out about $44 billion in market value on its stock since April of this year.

    By any measure, this is a substantial drop, even for an Asian company the size of Samsung.

    Samsung dropped by almost $12 billion in its valuation in August alone as the South Korean company surrendered a large share of its market to Apple and various Chinese rivals that offer a lower price point.

    And Samsung’s corporate decision to advance the release of its new Galaxy smartphones failed to dispel pessimism about its second-half earnings.

    Apple is largely expected to take the wraps off its new iPhone on Sep. 9 and release it in time for the crucial end-of-year holiday shopping season.

    “We all know Samsung's smartphone business isn’t doing well,” said Lee Seung Woo, an analyst at IBK Securities in Seoul. “This is no secret to anybody,” he added.

    Samsung’s global smartphone market share fell more than 3 percentage points in the second quarter, and it no longer is the top seller in China, the world’s biggest mobile-phone market.

    It is being undercut at the high end by Apple’s larger iPhones and at the mid-range and low end of the market by devices from Xiaomi, Lenovo and Huawei.

    It looks like Samsung totally misread the overall demand for its S6 models released in April, failing to produce enough three-sided screens for the Edge while the regular version struggled against the iPhone.

    One of its latest models, the Galaxy Note 5, was criticized by reviewers and mobile users this month after the company acknowledged that the device can break if the stylus is inserted backwards into the storage slot.

    The next 2 to 3 quarters will obviously be extremely critical to the overall profitability of Samsung. Yes it's a big electronics producer of a lot of products, but it's still vulnerable in a way with the likes of Apple and other important competitors.

    In other mobile news

    Verizon CFO Fran Shammo, while speaking at a Wall Street Journal conference Monday, made it very clear that the company has no intention of acquiring Dish Networks.

    Shammo also added that Verizon will keep media assets like the Huffington Post and Tech Crunch, which the company acquired in its $4.4 billion acquisition of AOL, but he was very clear about his company's intentions when it comes to Dish-- Niet!

    Overall, multiple reports have surfaced in the past few weeks that Dish is crafting a deal to acquire T-Mobile.

    Just last week, the Wall Street Journal reported that Dish and T-Mobile are looking at a deal that would still leave T-Mobile parent company Deutsche Telekom with a large minority stake in the new company, and that Dish is already talking to banks to secure funding for a $15 billion offer as well.

    And yet some have questioned whether Verizon might be interested in acquiring Dish for its massive inventory of wireless spectrum.

    Shammo denied that Verizon has any interested in Dish's spectrum, telling the Journal that if Verizon had wanted more spectrum it could have easily acquired it at auction.

    This wouldn't be the first time Shammo has put to rest claims that Verizon would go to any length for more wireless spectrum.

    Speaking at an investor conference back in March, Shammo said that in the past, spectrum cost less than it did to add capacity using technology.

    Share on Twitter.

    Source: Sprint Wireless.

    Advertise with us Advertise with us and see your sales grow rapidly. Learn more.

    This article was featured on the Business 5.0 portal. Click here to visit the site.     This article was featured on Business 5.0 and on Tech Blog.

    Copyright © Wireless Industry News. All rights reserved.