Protection against mobile malware

As mobile phones offer more and more computing functionality, anti-virus technologies for smartphones have become an inevitable reality.

Back in June 2004, the Symb/Cabir-A worm was released (as reported by the BBC and others). The target is the Symbian operating system – just as for Windows on a PC, virus-writers and hackers will attack the largest user base first.

Let’s face it – no hacker will get any credit for exploiting a security hole in something obscure – that’s why Microsoft gets so much bad security press and Linux and Macintosh users say “my system is secure” – in reality they are probably no more secure than a well-configured Windows system, just not such a target.

According to an article at the PC World website, Nokia are addressing the issue by teaming up with F-Secure to offer subscription-based anti-virus protection for their Series 60 smartphones, starting with the forthcoming Nokia 6670. Quoting from Nokia:

“F-Secure Mobile Anti-Virus is available for the Nokia 6670 imaging smartphone, providing automatic, transparent real-time protection against harmful content locally on the mobile phone. Updating the phone’s virus database can be done either over an HTTPS connection or, in critical cases, by SMS message.”

Cabir uses bluejacking as a mechanism to spread and as most people are oblivious (no nice IT department managing the security of consumer mobile phones!), the best advice I can give is to set your phone to undiscoverable or hidden. There is also some advice on “mobile malware” at the Nokia website.

You can learn more about Bluejacking at the BluejackQ website. To make matters worse, a colleague of mine found this document, which suggests some people are thinking of using it as a marketing channel.

Get ready to pay for your Hotmail

In a somewhat cynical (IMHO) move, Microsoft is hiding behind security to drop access to its free Hotmail service from Outlook, Outlook Express, and presumably from competing e-mail clients. The service (which uses web based distributed authoring and versioning – WebDAV) will still be available, but users will have to pay for it. To Microsoft’s credit, I believe that AOL and Yahoo! already restrict such access to paid subscribers.

According to the BBC, users who want to use Outlook to pick up their Hotmail messages will have to pay $19.95 (£11) for an annual subscription to Hotmail Plus or the $99.95 (£55) a year for MSN Premium. Users who are already using the technology to download their messages will be able to carry on using the service for free until April.

MSN say they have decided make the changes because spammers were exploiting the system (do they think spammers will be put off by a $19.95 annual charge?). They have already taken other steps to prevent spammers using Hotmail by limiting the number of outgoing messages on free accounts to 100 per day and introduced extra validation requirements when opening a new account.

The withdrawal of free WebDAV access began on September 27th for new users and will become effective for all users worldwide in 2005.

Links

Microsoft Nixes Outlook, Outlook Express Access to Free Hotmail Accounts
Hotmail fees for Outlook access

Windows XP: Reloaded

Contrary to much media confusion in recent months, Windows XP Reloaded is the codename for a marketing campaign that is running throughout the autumn of 2004, aimed at renewing consumer interest in Windows XP, now three years old and not due to be replaced until at least 2006. More information about the XP reloaded program is available on the SuperSite for Windows website.

According to the Windows IT Pro magazine network WinInfo Daily Update, there will be no “Windows XP SE” and the next Windows releases will be:

  • Windows 2000 SP5 (although this will be minor and certainly won’t have the same attention to security detail as XP SP2 did).
  • Windows Server 2003 SP1.
  • Windows Server 2003 release 2 (R2) – the next interim Windows server release.
  • Windows 2006 (codenamed Longhorn) – the next client release.

A more extensive list of upcoming Windows product releases is available on the SuperSite for Windows.