Smartphone security software market shows strong potential for channel

…

Smartphone security business challenge and channel opportunity

Sales and support opportunities for encryption are likely to grow as smartphones use more business applications, such as SAP, and store more corporate data. As discussed earlier, the potential for antimalware sales and support is enormous when smartphones finally become subject to widespread attack.

While encryption vendors offer mobile-specific products on their own, they are also included as part of their overall corporate endpoint encryption suites. Check Point’s Svegby said PC encryption orders for, say 5,000 seats, often come with an additional 150 to 200 licenses for smartphone encryption.

Some vendors, such as Credant Technologies Inc. and Check Point offer only encryption products, others such as F-Secure Corp. and Kaspersky Lab Inc. offer only antimalware, and still others, such as Symantec and McAfee Inc., offer both encryption and antimalware. In terms of operating systems, most vendors support Windows Mobile and Symbian, and some support Palm OS and Blackberry as well. There have been reports that several vendors are working on iPhone antimalware, as well.

…

Link

Multi Channel Beeper Buster System

Single Channel Beeper Buster^TM System

 

If the bad guys in your jurisdiction use pagers to conduct their business, you need The Beeper Buster^TM. With The Beeper Buster^TM, you can sit in the privacy of your own office and monitor every message sent to any pager. You do not need the cooperation of the paging system operator, nor will the user of the pager know you are monitoring all his messages. The Beeper Buster^TM can capture all messages sent to a target pager, capture all messages containing a particular “search string” (such as the phone number of a suspect location, pay phone), or any combination of the above. Special techniques are used to determine the unique address (the “capcode”) of the pager, meaning you do not need access to the target pager to capture its messages. It’s very simple. And, the The Beeper Buster^TM is affordable. Unlike rival units, The Beeper Buster^TMactually operates faster than the paging system. This means no missed pages, for any format at any speed. Persons using other less capable pager intercept systems are well aware of the problems of missed pages. The high speed and perfect accuracy of The Beeper Buster^TM is due to our extensive use of custom designed high speed hardware. If you need to use captured messages as evidence in court, the specially designed features of The Beeper Buster^TMguarantee the integrity of the data.

Interceptor – Pager Interception System

Interceptor is a system used to log pager message traffic over Pocsag or Flexpaging networks directly to a PC or computer network. The software is available in single PC or networked client/server versions.

Interceptor consists a 4 channel receiver unit and a Windows based application which together are able to monitor up to 4 paging frequencies within up to 4 pre-selected frequency bands. Pocsag and Flex pagers may be monitored on separate channels.
(For single channel logging see LogPage)

 

Interceptor is equipped with powerful filtering and reporting tools that enable the user to automatically search through received pager messages using different criteria and output the filtered results to the screen, resend it to apager or other messaging device such as a cellphone or forward it via email.

Pager reception and decoding

…

The only requirements to decode pager transmissions is a scanner / receiver capable of receiving FM on pager frequencies, ( the low 900Mhz band seems to be the most active) and software that is capable of decoding pager transmissions. The software I use is calledPDW, and is freely available. It is capable of receiving both POCSAG and FLEX transmissions in all bit rates including a handful of other protocols.

…

Gold Lock Intercept Video (English)

 

Gold Lock protects your communications

Gold Lock keeps your communications safe

Gold Lock Enterprise is the preferred solution for thousands of users around the world Licensed by the  Israeli Ministry of Defense, Gold Lock Enterprise is a world-class software-based solution providing military-grade encryption for voice and data communication. Gold Lock’s triple layered security scheme turns your PC/Laptop, Nokia Phone or Windows Mobile devite into a military grade encrypted communicator, protected against any interception attempt by private, governmental or military entities. Gold Lock Enterprise encrypts your calls, file transfer and text all over the world, including international calls. No VOiP provider is needed, the systems works on all types of internet connections (for example: 3G, EDGE, GPRS, WIFI…) Gold Lock Enterprise is easy to use, all key management is auto managed without any need for complicated user defined keys. Gold Lock Enterprise now supporting iPhone We have great news! Gold Lock is proud to announce that our flagship voice and data encryption software is now compatible with iPhone. We are the first, once again, to bring you the best solution on the market.  Now you can protect your communications on your Nokia Phone, Windows Mobile, iPhone or Blackberry, keeping conversations secure. The iPhone encryption system is completely compatible with all other Gold Lock Enterprise devices – Nokia, Windows Mobile, and PC (Windows XP/Vista. Gold Lock Enterprise available for Blackberry One of our main goals lately has been to release a Blackberry compatible version. Gold Lock Enterprise is now compatible with Blackberry, making it the most suitable and s ecure encryption tool, working on multiple platforms. Gold Lock Enterprise is now able to encrypt your calls, file transfer and text internationally with your favorite device. Sigillu is the authorized representative of Gold Lock in America. We are looking to partner with companies possessing a deep understanding of customer needs and the ability to faithfully represent the values of uncompromised security and trust for governments, corporations and individuals using Gold Lock encryption systems. If you are interested, contact Doug Haskins at doug@gold-lock.com

Gold Lock Enterprise, through Sigillu www.sigillu.com email: doug@gold-lock.com Tel: 954.892.5868

Demos to show spying on mobile IP calls

This screen shot shows the user interface of UCSniff. The user can listen in on a conversation and see the video of two people talking on an IP-based video phone. The two video screens show what each of the video phones is displaying.

(Credit: Viper Lab, Sipera Systems)

<link>

Hotspot sniffer eavesdrops on iPhone in real-time

…

“As the private call is in progress, we can see and hear what is happening,” said Jason Ostrom, a developer of UCSniff and director of Viper Labs, the research arm of security firm Sipera Systems. “There’s real-time violation of confidentiality.”

In addition to monitoring voice conversations as they happen, UCSniff can also bug video conferences in real time. Ostrom said he and fellow Viper Labs researcher Arjun Sambamoorthy plan to show those capabilities at Toorcon as well.

With the proliferation of iPhones and other smartphones, plenty of businesses and individuals have sought to save money on roaming charges by routing calls over the internet instead of over carrier networks. Adam Boone, a vice president at Sipera, said one large, unnamed client logs more than 1 million minutes per month in such VoIP calls.

The problem, he added, is that many of the iPhone apps for VoIP calls don’t provide encryption capabilities, making the conversations ripe for eavesdropping. (Sipera plans to unveil a new product to protect such users next week).

…

<link>

Common VoIP Protocols Defeated

Recent reports have surfaced that have revealed weaknesses in the ever-popular Google Voice and Skype protocols.  These weaknesses have allowed attackers to eavesdrop on third party calls and make unauthorized calls using another person’s account.

Such a vulnerability in a service as popular as this is highly concerning, but the attacks have been proven to work according to many different sources, and also the Slashdot website.  It would seem that we are now looking at two protocols, which remained secure for a long time, which now have a major vulnerability that calls into question the whole security of the architecture.

Any organization that is reliant on Google voice or Skype should now be asking themselves the question: “is it really safe for my company”? Even though according to both companies, the vulnerabilities have been fixes the truth is once a major weakness is exposed it can be very hard to trust it again.

Certainly, the fact that these technologies have been breached must be a concern for both organizations and individuals that are dependent on secure calls.  However, what alternatives are available and how do people utilize them?

One can avoid the dangers of integrating non secure solutions from Skype, Google Voice, or other non secure VOIP systems into organizations infrastructure and instead utilize technologies, which are tested, and proven more secure.

<link>

Skype tapping program code released

A software developer who designed a way to tap and record calls made on Skype and other VoIP networks has made the source code of the spying program public, a move he said will allow other programmers to build workarounds to the potential threat. The programmer, Ruben Unteregger, was tasked by his former company ERA IT Solutions to write a Trojan horse program that could tap VoIP calls for the Swiss government.

Apparently, the program bypassed Skype’s heralded encryption process, one that has vexed security officials in Europe multiple times.

In a translated interview, Untregger discussed his rationale for releasing the code.

“The code will be published, it will get analyzed as soon as the binaries got uploaded, signature patterns will be created by anti-virus companies, the malware will be detected, blocked and deleted, if it tries to infect a system,” Untregger said.

Untregger’s motives appear to be genuinely in the interest of private citizens and enterprises that use VoIP services like Skype, as the publicizing of the code makes its use by security agencies redundant, according to a Computer World report. However, making this code available could have negative repercussions if hackers can use it to build even more powerful tapping programs. Other instances of Skype hacking, such as China’s purported monitoring of dissident communication via VoIP programs, gives one pause when considering the public availability of such information.

<link>