Xanda's Blog !~!

More and More Exploits are Now Targeting Clientside & Mobile

Jul
12


[img source]

(The facts that I’m gonna talk about are based on my observations)

Back in mid 2007, Mass SQL injection that contain malicious JavaScript started to bring havoc the our cyberspace. But it brought not enough impact to alert and educate the internet user.. Until mid 2008 where another flood of Mass SQL injection happened attacking MS SQL and not so long after that people cant stop talking about 0day in IE, follow by Adobe Flash Player, Adobe Acrobat Reader, Mozilla Firefox and etc..

This clearly shows that the attacking vector is now somehow changed into the client side. This is due to the number of victim on the client side is way more compare to on the server side. Normally the mission of this kind of attack is to force the vulnerable application to crash and execute arbitrary code usually used to download another malicious file and execute it (drive by download). The victim (client) is now part of the attacker’s botnet. Awuuuooo0… (That is how the botnet sound alike.. Hahahaha)

Now in 2009, more and more client side attacks appear abusing IE, Firefox, Thunderbird, Adobe Acrobat Reader, Adobe Flash Player, Microsoft Office Power Point, Microsoft Office Excel, Google Chrome, Apple QuickTime, Foxit PDF Reader, Sun Java Runtime Environment, Adobe Shockwave Player, ActiveX and etc.. The attackers are also aware of the current world issues and trends. That is why we can see some events like H1n1, death of Michael Jackson, independent day, April Fool and many more events have been abuse by the attacker to phish for their victim.

Lately, within thin 2 months, a few mobile phone vulnerabilities have been found. iPhone, Symbian and Windows Mobile were hooked in these exploits. The attackers not only manage to get sensitive data/info from the mobile device, they also able to take control of the mobile device, and from the recent cases, victim’s mobile phones have been used to send spam SMS, MMS and also Email and at the same time, the SMS, MMS and email sent, work as an agent to ‘invite’ more device to be part of the ‘mobile botnet’ society. Awuuuooo0…

Till next time..

P/S: I am writing this entry while I’m working on my presentation slide for next week presentation in one of the organization of standardization and quality. So, I think these issues need to be highlighted as well in my slides. Beside of trends, the impact also need to be highlighted and ‘how bad is the impact could be’ should also be in part of the slide. The after discussing about the trend and impact, please make this as a habit which is to discuss on the prevention and the mitigation part as well. This is important because leaving the presentation stage without prevention or mitigation steps will create FUD to the audience and this is totally not a good practice!

Comparison Between Symbian and Windows Mobile Smart Phone

Dec
26

When talking about smart phones, 2 operating systems might appear in your head which are Symbian and Windows Mobile. In order to determine the best operating system (OS) for a smart phone, I’ve done several tests on my devices which are Nokia 6600 and HTC P3600i.


Personally, I’m neither on Symbian side nor Windows Mobile, but it is up to you to conclude which is the best operating system for a smart phone. What I’m doing here is just to highlight the strengths and the weaknesses of Symbian and Windows Mobile.

Start-up Time (Booting)

I’ve found that Symbian takes more time to complete the boot process compare to Windows Mobile. This is because Windows Mobile smart phone usually equipped with higher RAM compare to Symbian smart phone. So it can perform the booting process faster.

Contacts List

For contacts list, Symbian performs better than Windows Mobile. Nowadays, one person might use more than one mobile phone, so they going to have more than one mobile phone numbers. Windows Mobile can only store one number for each category (e.g.: mobile, work, home, office). Let say person A have 2 mobile phone numbers, in Windows Mobile we have no choice but to store one number as mobile number and another one as another category for example home. But in Symbian, we can store both numbers as mobile number.

Java Applications

Running Java applications using MIDlet Manager in Windows Mobile can sometime cause the device hang. The start-up process of java application in Windows Mobile is also slow. But it is different in Symbian. Java applications start and run smoothly in Symbian smart phone.

Alarm Manager

In Symbian, we can only manage the alarm within 24 hours time and we need to set the alarm again and again if we want it to be rang every day. But in Windows Mobile, the alarm manager is awesome. Let say we want to wake up at 5.30am on Monday till Friday and 6.30am on Saturday and Sunday, we can easily do it in Windows Mobile without any extra application to be installed.

Dialling or Search Contacts List

Dialling or searching contact in contacts list is easier to be done in Windows Mobile. This is because Windows Mobile provides suggestion of person to contact every time w type something in the search area. For example we have a person Xanda Centrino Quad stored in the contact list, and we search for “Quad” in the search area. Windows Mobile will come out with suggestion that match the keyword and surprisingly Xanda Centrino Quad will appear. This will make the process of searching faster.

SMS

Report delivery in Symbian is better than Windows Mobile. Report is receive in notification from and not as a message as in Windows Mobile. The report also clearly states the contact person’s name while in Windows Mobile it only shows the contact person’s number.

Browser

The default browser in Windows Mobile is much better than default browser in Symbian in term of usability and accessibility. I’m not saying that Internet Explorer is the best browser because Opera Web Browser is always the winner in my heart. But we are comparing Symbian and Windows Mobile, so the winner in this review is Internet Explorer.

Organizer

If you want to choose a smart phone as your organizer, smart phone with Windows Mobile is exactly what you are looking for. Tasks, Upcoming Appointment and many more application can help you to organize your daily routine.

P/S: This page will be updated from time to time. Any suggestio, correction or ideas? please leave it in comment area. Thanks