Tag Archives: mobile

Unprotected Firebase databases leaked over 100 million records

Thousands of mobile applications are leaking personally identifiable information from unprotected Firebase databases.

According to research from application security company Appthority, 3,000 mobile iOS and Android apps are leaking 100 million exposed records of user data. The records include 2.6 million

plain text
passwords and user IDs, at least 4 million records with protected

health  information
(PHI), 25 million GPS location records, 50 thousand financial records, and at least 4.5 million Facebook, LinkedIn, Firebase and corporate datastore user tokens.

These exposures happen “when app developers fail to require authentication to a Google Firebase cloud database,” according to the report from Appthority, which also notes that Firebase is one of the 10 most popular datastores for mobile apps with over 53,000 apps using it in 2017.

“The challenge for app developers is that Firebase does not provide adequate security capabilities out of the box. The only security feature available to developers is authentication and

rule-based
authorization,” Appthority explained in its report. “However, Firebase does not secure user data by default nor are third-party tools available to provide encryption for it.”

The report also noted that it would be easy for hackers to find unprotected Firebase databases and gain access to private data records.

“The result is a trove of data that is open to the public internet unless the developer explicitly imposes user authentication on each individual table or directory,” Appthority explained in the report. “Even when developers do implement authentication, they may not secure every database table.”

As a result, the Appthority researchers found that over 113 GB of data has been exposed through the 3,000 apps. They also found that 62% of enterprises are using at least one vulnerable app, spanning a variety of industries across the globe including banking, telecoms, postal services,

ride sharing
companies, hospitality

and
education. The apps that leaked the most data were health and fitness apps.

“Medical information can be worth ten times more than credit card numbers on the deep web,” the report said. “Fraudsters can use this data to create fake IDs to buy medical equipment or drugs, or combine a patient number with a false provider number and file fictional claims with insurers.”

It’s misconfiguration and mismanagement of the backend infrastructure opening up these vulnerabilities.
Seth HardyDirector of Security Research, Appthority

Appthority said it notified Google of this issue with apps hosted on unprotected Firebase databases, but Seth Hardy, Appthority’s director of security research, doesn’t think the blame falls entirely to Google — despite Google not making the security features that would prevent these leaks set to default.

“They’re not directly responsible,” he told SearchSecurity. “When you make a tool and try to make it easy to use, then you’re probably not going to want to add that setting by default.”

Hardy noted that it’s also not the responsibility of the user to make sure the apps are secure.

“It’s definitely a developer issue,” he said. “It’s misconfiguration and mismanagement of the backend infrastructure opening up these vulnerabilities.”

The solution, according to Hardy, lies with the developers.

“It’s really just a matter of trying to educate developers in general about secure coding practices, making sure that they’re implemented in all parts of the software development lifecycle and giving users and enterprises the tools to verify whether these apps are implementing proper security controls on their data.”

Microsoft Teams mobile app matures, but interoperability lags

Microsoft has been building out the capabilities of the Microsoft Teams mobile app in recent months, adding features more advanced than those traditionally supported by unified communications mobility clients. Nevertheless, the vendor has more work to do to catch up with rival Cisco and to provide a seamless mobile experience to businesses.

Microsoft is on par with the meeting features in Cisco Webex Teams mobile, but Cisco can give users a more seamless experience for scheduling and joining meetings from their mobile phones. That’s because Cisco Webex Teams and Cisco Webex rely on the same back-end cloud infrastructure, said Zeus Kerravala, founder and principal analyst at ZK Research in Westminster, Mass.

“Cisco has been very, very mobile-centric for a long time, so I wouldn’t expect Microsoft to have the same maturity in the mobile client,” Kerravala said. Nevertheless, recent improvements to the Microsoft Teams mobile app are “a good start.”

Microsoft users must juggle multiple UC mobile apps

Microsoft still has separate mobile apps for Teams and Skype for Business that require users to toggle between apps. Users can generally only access Teams meetings from within the Microsoft Teams mobile app, rather than from the mobile apps for Outlook or Skype for Business.

“The ability to schedule and join calls or meetings needs to be a lot more consistent,” Kerravala said. “So, if I’m in Outlook mobile and I can start a Skype for Business meeting, I should be able to start a Teams meeting.”

This gap in interoperability could cause headaches for businesses, as they attempt to migrate users from Skype for Business to Teams in keeping with Microsoft’s directive that it will eventually phase out the former.

Microsoft is encouraging customers that use the cloud version of Skype for Business to begin using Teams simultaneously. The vendor recently gave users the ability to transfer contacts and groups from Skype for Business to Teams and made instant messaging exchanges between the two clients persistent for Teams users.

Recent features added to the Microsoft Teams mobile app included the ability to join audio and video meetings in Teams or request a meeting to call them on their mobile devices. Once in a meeting, the Microsoft Teams mobile app lets users upload files, share their screens and control presentations.

Team collaboration elevates mobile clients

Team collaboration apps like Microsoft Teams, Cisco Webex Teams and Slack are growing in popularity because they provide a single platform for communicating synchronously and asynchronously and for getting work done through third-party integrations.

That model for unified communications (UC) has made mobile clients even more significant, as vendors compete to deliver products that help users stay connected to colleagues and data whether they are in the office or working remotely, analysts said.

“The lines between communication, collaboration and conferencing are blurring,” said Alan Lepofsky, a principal analyst at Constellation Research Inc., based in Cupertino, Calif. “One of the biggest challenges for vendors is to create consistent experiences across various device types.”

Traditional UC mobile apps were built primarily around calling and messaging, but mobile phones already provide those same capabilities over cellular networks. The mobile apps for Microsoft Teams and Cisco Webex Teams now give users access to nearly all of the files and collaboration tools available to them on the desktop.

“For all the manufacturers in this space, their singular goal should be [the following]: Can the user eradicate the term, ‘I’ll take care of that when I’m back in the office?'” Kerravala said.

For Sale – Laptops

Laptop 1 – Sold
Lenovo SL510
Intel Core 2 Duo T6670 2.20GHz
4GB Ram
320GB HDD
Intel Mobile 4 Series Express Chipset
Windows 7 Pro 64bit. Fresh install. Fully updated. Recovery disks and partition.
15.6 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Good condition. Battery 2hrs+
Genuine Charger

Laptop 2 – Sold
HP 650
Intel Core i3 2328M 2.20GHz
4 GB RAM
500 GB HDD
Intel HD Graphics 3000
Windows 7 Pro 64bit. Fresh install. Fully updated. No recovery disks or partition
15.6 inch (1366 x 766)
DVD R
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Laptop 3 – Sold
Dell Latitude E5430
Intel Core i5 3230M 2.6GHz
4GB RAM
320GB HDD
Intel HD Graphics 4000
Windows 10 Pro. Fresh install. Fully updated. Windows 7 recovery disk.
14 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Price and currency: Various
Delivery: Delivery cost is included within my country
Payment method: BT
Location: Manchester
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Laptops

Laptop 1 – Sold
Lenovo SL510
Intel Core 2 Duo T6670 2.20GHz
4GB Ram
320GB HDD
Intel Mobile 4 Series Express Chipset
Windows 7 Pro 64bit. Fresh install. Fully updated. Recovery disks and partition.
15.6 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Good condition. Battery 2hrs+
Genuine Charger

Laptop 2 – Sold
HP 650
Intel Core i3 2328M 2.20GHz
4 GB RAM
500 GB HDD
Intel HD Graphics 3000
Windows 7 Pro 64bit. Fresh install. Fully updated. No recovery disks or partition
15.6 inch (1366 x 766)
DVD R
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Laptop 3 – Sold
Dell Latitude E5430
Intel Core i5 3230M 2.6GHz
4GB RAM
320GB HDD
Intel HD Graphics 4000
Windows 10 Pro. Fresh install. Fully updated. Windows 7 recovery disk.
14 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Price and currency: Various
Delivery: Delivery cost is included within my country
Payment method: BT
Location: Manchester
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Laptops

Laptop 1 – Sold
Lenovo SL510
Intel Core 2 Duo T6670 2.20GHz
4GB Ram
320GB HDD
Intel Mobile 4 Series Express Chipset
Windows 7 Pro 64bit. Fresh install. Fully updated. Recovery disks and partition.
15.6 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Good condition. Battery 2hrs+
Genuine Charger

Laptop 2 – Sold
HP 650
Intel Core i3 2328M 2.20GHz
4 GB RAM
500 GB HDD
Intel HD Graphics 3000
Windows 7 Pro 64bit. Fresh install. Fully updated. No recovery disks or partition
15.6 inch (1366 x 766)
DVD R
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Laptop 3 – Sold
Dell Latitude E5430
Intel Core i5 3230M 2.6GHz
4GB RAM
320GB HDD
Intel HD Graphics 4000
Windows 10 Pro. Fresh install. Fully updated. Windows 7 recovery disk.
14 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Price and currency: Various
Delivery: Delivery cost is included within my country
Payment method: BT
Location: Manchester
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Laptops

Laptop 1 – Sold
Lenovo SL510
Intel Core 2 Duo T6670 2.20GHz
4GB Ram
320GB HDD
Intel Mobile 4 Series Express Chipset
Windows 7 Pro 64bit. Fresh install. Fully updated. Recovery disks and partition.
15.6 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Good condition. Battery 2hrs+
Genuine Charger

Laptop 2 – Sold
HP 650
Intel Core i3 2328M 2.20GHz
4 GB RAM
500 GB HDD
Intel HD Graphics 3000
Windows 7 Pro 64bit. Fresh install. Fully updated. No recovery disks or partition
15.6 inch (1366 x 766)
DVD R
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Laptop 3 – Sold
Dell Latitude E5430
Intel Core i5 3230M 2.6GHz
4GB RAM
320GB HDD
Intel HD Graphics 4000
Windows 10 Pro. Fresh install. Fully updated. Windows 7 recovery disk.
14 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Price and currency: Various
Delivery: Delivery cost is included within my country
Payment method: BT
Location: Manchester
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Laptops

Laptop 1 – Sold
Lenovo SL510
Intel Core 2 Duo T6670 2.20GHz
4GB Ram
320GB HDD
Intel Mobile 4 Series Express Chipset
Windows 7 Pro 64bit. Fresh install. Fully updated. Recovery disks and partition.
15.6 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Good condition. Battery 2hrs+
Genuine Charger

Laptop 2 – Sold
HP 650
Intel Core i3 2328M 2.20GHz
4 GB RAM
500 GB HDD
Intel HD Graphics 3000
Windows 7 Pro 64bit. Fresh install. Fully updated. No recovery disks or partition
15.6 inch (1366 x 766)
DVD R
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Laptop 3 – Sold
Dell Latitude E5430
Intel Core i5 3230M 2.6GHz
4GB RAM
320GB HDD
Intel HD Graphics 4000
Windows 10 Pro. Fresh install. Fully updated. Windows 7 recovery disk.
14 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Price and currency: Various
Delivery: Delivery cost is included within my country
Payment method: BT
Location: Manchester
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Laptops

Laptop 1 – Sold
Lenovo SL510
Intel Core 2 Duo T6670 2.20GHz
4GB Ram
320GB HDD
Intel Mobile 4 Series Express Chipset
Windows 7 Pro 64bit. Fresh install. Fully updated. Recovery disks and partition.
15.6 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Good condition. Battery 2hrs+
Genuine Charger

Laptop 2 – Sold
HP 650
Intel Core i3 2328M 2.20GHz
4 GB RAM
500 GB HDD
Intel HD Graphics 3000
Windows 7 Pro 64bit. Fresh install. Fully updated. No recovery disks or partition
15.6 inch (1366 x 766)
DVD R
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Laptop 3 – £100
Dell Latitude E5430
Intel Core i5 3230M 2.6GHz
4GB RAM
320GB HDD
Intel HD Graphics 4000
Windows 10 Pro. Fresh install. Fully updated. Windows 7 recovery disk.
14 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Price and currency: Various
Delivery: Delivery cost is included within my country
Payment method: BT
Location: Manchester
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

For Sale – Laptops

Laptop 1 – £60 – Sold
Lenovo SL510
Intel Core 2 Duo T6670 2.20GHz
4GB Ram
320GB HDD
Intel Mobile 4 Series Express Chipset
Windows 7 Pro 64bit. Fresh install. Fully updated. Recovery disks and partition.
15.6 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Good condition. Battery 2hrs+
Genuine Charger

Laptop 2 – £100
HP 650
Intel Core i3 2328M 2.20GHz
4 GB RAM
500 GB HDD
Intel HD Graphics 3000
Windows 7 Pro 64bit. Fresh install. Fully updated. No recovery disks or partition
15.6 inch (1366 x 766)
DVD R
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Laptop 3 – £120
Dell Latitude E5430
Intel Core i5 3230M 2.6GHz
4GB RAM
320GB HDD
Intel HD Graphics 4000
Windows 10 Pro. Fresh install. Fully updated. Windows 7 recovery disk.
14 inch (1366 x 766)
DVD RW
HDMI out
WIFI
Excellent condition. Battery 3hrs+
Genuine Charger

Price and currency: Various
Delivery: Delivery cost is included within my country
Payment method: BT
Location: Manchester
Advertised elsewhere?: Not advertised elsewhere
Prefer goods collected?: I have no preference

______________________________________________________
This message is automatically inserted in all classifieds forum threads.
By replying to this thread you agree to abide by the trading rules detailed here.
Please be advised, all buyers and sellers should satisfy themselves that the other party is genuine by providing the following via private conversation to each other after negotiations are complete and prior to dispatching goods and making payment:

  • Landline telephone number. Make a call to check out the area code and number are correct, too
  • Name and address including postcode
  • Valid e-mail address

DO NOT proceed with a deal until you are completely satisfied with all details being correct. It’s in your best interest to check out these details yourself.

G-Technology G-DRIVE Mobile SSD R-Series 2TB

G-Technology G-DRIVE Mobile SSD R-Series 2TB
Brand new sealed. From work so do not have receipt but already use a Samsung T5 drive.

Interface
USB 3.1 Gen 2 (10Gb/s)

Transfer Rate
Up to 560MB/s

Compatibility

  • Mac OS 10.10+
  • Windows® 10, 8.1, 7 (via reformat)
  • USB-C™ ready; USB 3.0 and Thunderbolt™ 3 compatible

Dimensions
3.74” x 1.97” x 0.57” / 94 x 50 x 14.5mm

Kit Contents

  • G-DRIVE mobile SSD R-Series drive
  • USB-C to…

G-Technology G-DRIVE Mobile SSD R-Series 2TB