Tech Review: Friday, October 14, 2011

New 6" Kindle for $79

http://www.amazon.com/gp/product/ref=pe_70020_21439970_pe_hero/?ASIN=B0051QVESA

• 800,000 titles for $10
• very small
• Wi-Fi
• E-Ink display
• holds 1,400 Books
• this seems a little small
• read up to one month on the battery
• adjustable text sizes
• email PDF and personal documents to device
• free cloud backup
• borrow from you public library
• buy once, read everywhere
• NO TOUCH!
• lots of difference between Kindles

Secure Android Kernel and 'classified' smart phones

http://gcn.com/articles/2011/10/11/ausa-secure-andriod-kernel-technology.aspx?s=gcndaily_141011

• research team
• Google
• George Mason University
• National Security Agency
• hardened kernel for Android 3.0
• final stages of certification testing
• secure national wireless network for first responders
• looking to replace radio with smart phones
• Connecting Soldiers to Digital Applications (CSDA) program
• Michael McCarthy
• Army's Brigade Modernization Command's Mission Command Complex
• right security accreditation to operate on military networks and classified networks
• hardware accreditation
• software accreditation
• triple-level security
• OS accreditation help from NSA
• Android kernel being tested for Federal Information Processing Standard 140-2 certification
• mid-Oct
• testing complete, just filling out paperwork 
• FBI and Justice planning pilot projects on a larger scale than Army

Android a likely target once mobile crime pays

http://gcn.com/articles/2011/10/11/android-malware-trends-waiting-for-money.aspx?s=gcndaily_121011

• open-source Android operating system
• enabling an increase in malicious applications
• researchers say
• which researchers?
• huge uptick on malicious software targeting devices
• smart phones?
• Android?
• poor return on investment for mobile malware
• keeping the market for this type of crime small
• Vikram Thakur
• security response manager for Symantec
• PDF paper mentioned
• http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/motivations_of_recent_android_malware.pdf?om_ext_cid=biz_socmed_twitter_facebook_marketwire_linkedin_2011Oct__androidmalwarewhitepaper
• Premium Rate Number Billing
• example code
• Spyware
• Search Engine Poisoning
• Pay-per-click
• Pay-per-install
• Adware
• mTAN Stealing
• Transaction Authentication Number (mTAN)
• sent by bank
• Android.Smssniffer
• There should be some ways to safeguard this number
• ok
• near-field communications (NFC)

Google's Dart Web Language

http://gcn.com/articles/2011/10/11/google-dart-web-programming-language.aspx?s=gcndaily_121011

• all-purpose programming language for Web development
• class-based optionally typed
• company blog about
• http://googlecode.blogspot.com/2011/10/dart-language-for-structured-web.html
• design goals
• structured yet flexible
• familiar and natural
• high performance
• main site
• http://www.dartlang.org/
• runs two ways
• browser VM
• Chrome
• JavaScript engine
• resistances from JavaScript enthusiast 
• complex operation without plugins
• in HTML 5

New Style of Attack Can Slip Past Firewalls, Prevention Systems

http://gcn.com/Articles/2011/10/12/AETs-delivered-via-HTTP-traffic.aspx?s=gcndaily_141011&Page=2

• techniques minipulates TCP/IP protocols to fragment packets and TCP segmentation.
• confuses intrusion prevention systems
• packets reassembled by host device
• advanced evasion technique (AET)
• Stonesoft
• Finnish security company
• Vasburgh