CERT-In warning: Android Jelly Bean, Kit Kat vulnerable to threat

A “critical flaw” has been detected in the virtual private network offered by Android operating systems in the Indian cyberspace leading to “hijack” of personal data of users.

Internet security sleuths have alerted consumers of this web-based service to guard against the spread of this virus which affects computer systems and mobile phones using the Android system.

The suspicious activity has been noticed in two Android versions — 4.3 known as ‘Jelly Bean’ and the latest version 4.4 called ‘Kit Kat’.

“A critical flaw has been reported in Android’s (virtual private network) VPN implementation, affecting Android version 4.3 and 4.4 which could allow an attacker to bypass active VPN configuration to redirect secure VPN communications to a third party server or disclose or hijack unencrypted communications,” the Computer Emergency Response Team of India (CERT-In) said in a latest advisory to users of this network.

The CERT-In is the nodal agency to combat hacking, phishing and to fortify security-related defences of the Indian Internet domain.

VPN technology is used to create an encrypted tunnel into a private network over public Internet. Organisations and group of people use such connections to enable employees or acquaintances to securely connect to enterprise networks from remote locations through multiple kinds of devices like laptops, desktops, mobiles and tablets.

The agency said the current malicious application is capable of diverting the VPN traffic “to a different network address” and successful exploitation of this issue “could allow attackers to capture entire communication originating from affected device.”

The lethality of the virus to disrupt a system is large.

“It is noted that not all applications are encrypting their network communication. Still there is a possibility that attacker could possibly capture sensitive information from the affected device in plain text like email addresses, IMEI number, SMSes, installed applications,” the advisory said.

Cyber experts said that this anomaly could only lead to capture and viewing the data which is in plain text and Android applications directly connecting to the server using SSL will not be affected.

Websites which use ‘https’ in their URL will also be safe.

The cyber agency has also suggested some countermeasures to beat this threat.

“Apply appropriate updates from original equipment manufacturer, do not download and install application from untrusted sources, maintain updated mobile security solution or mobile anti-virus solutions on the device, exercise caution while visiting trusted or untrusted URLs and do not click on the URLs received via SMS or email unexpectedly from trusted or received from untrusted users” are some of the combat techniques which have been suggested by the agency.

Samsung smartphones, tablets to receive Android KitKat update

(Image: CNET)

Samsung announced Tuesday the arrival of the latest version of Android 4.4.2, dubbed "KitKat," on its U.S. smartphone and tablet range.

The Korean electronics giant said a number of devices in the Galaxy range will receive the update soon — though, the specific rollout depends and varies based on carrier and product. Some users will receive the update as early as today, while others will continue throughout the coming months.

Devices compatible with the new version include the Galaxy Note 2 and Note 3, the Galaxy S4 and S4 mini, the Galaxy S3 and S3 mini, as well as the Galaxy Tab 3, Galaxy Note 8.0, and 10.1 tablets.

Android KitKat lands with a new Location Menu with easy-access to GPS, Wi-Fi, and mobile network controls, as well as enhanced messaging and a bevy of other new features and improvements.

While earlier versions of Android have been incompatible with many older devices, leaving the mobile platform fragmented across various different device versions, Google's pledge to reach another billion Android activations will be significantly bolstered with this effort.

A key part of Google's strategy is to ensure as many Android-powered devices possible can support the new operating system.

How to run Android 4.4 KitKat on old phones

Android 4.4 (also now known as KitKat, in keeping with the software's tradition of dessert-themed nicknames), is expected this month. On its website, android.com/kitkat, Google says, "It's our goal with Android KitKat to make anamazing Android experience available for everybody." 

Still, check with your phone's manufacturer for announcements about your particular model. Even if your phone is on the list for an official update from the manufacturer, it often takes longer for the software to become available after Google releases an update. 

Many hardware makers have customized Android to work better on their own devices and have added their own features to it — like custom interfaces or special apps — so putting out a new version of the system often requires some extra time. 

And most do not bother to update software for models more than a few years old, partly because of outdated hardware and partly because of the desire to sell you a new phone. 

(Owners of Google's recent Nexus phones typically get the update quickly, as Google puts out its own straight forward version of Android.) Some people have gone the unofficial route and modified their devices outside of the manufacturer's official guidelines.

Android 4.4 KitKat: What CNET expects

CNET Editors' Take

October 14, 2013 2:47 PM PDT

At a casual glance, 4.4 KitKat looks much like the current version of Android.

(Credit: TuttoAndroid)

The next version of Google's platform, Android 4.4 KitKat, is set to arrive any day now. After three helpings of Jelly Bean, we would hope that the Nestle-inspired build should prove to be a larger update, but so far signs point to minor enhancements.

This past weekend proved to be the biggest break in regards to what Android 4.4 looks like as well as some of its potential features. Some changes and details may include tweaks to the app launcher, notification bar, and dialer. Nothing too crazy, of course, but rather a color adjustment here or a transparency there.Until recently, Google has done a great job keeping KitKat under wraps. Officially, Google has only said that its goal with KitKat is to "make an amazing Android experience available for everybody." Some posit this to mean we could see new Android-powered devices such as game consoles, smartwatches, smart TV, and laptops. Others look for a kinder, gentler platform that plays nice with older hardware.

A taste of Android 4.4 KitKat? (pictures)

1-2 of 11

Scroll LeftScroll Right

• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 

When it might be announced

Some rumors suggest that Google has lined up the KitKat introduction for as soon as October 15, but I suspect an invitation for an official event instead. At the least, I expect that Google would dish the new feature set in a live YouTube broadcast. Assuming it plans to introduce newNexus 5 hardware, which it should, then we might look for at least one day's notice before the big announcement.

Other dates tossed around of late indicate that the end of October might also be in order. Should that be the case, there's still time to send out a few "save the date" e-mails and blog posts.

The software we could get

So far, leaked images like those in the gallery above point to minor, cosmetic changes, rather than a massive overhaul.

The application drawer could move away from the all-black background in favor of a transparent bar. The pervasive notification area also appears to get the same treatment; a few screenshots show the top bar as having the see-through effect. In a related note, a 9to5Google report shows the notification bar with colors that match or complement various apps. The dialer app, for instance, brings up a blue bar, while the Hangouts app has a green one. It's possible that these particular apps were designed with their own colors and that the transparency is otherwise still present.

According to Italian Android blog TuttoAndroid, the lock screen will include shortcut to the camera application. The move would make sense as most custom launchers and lock screens have moved to integrate the oft-used feature.

The Android 4.4 lock screen could include quick access to the camera.

(Credit: TuttoAndroid)

A slightly more meaty addition, TuttoAndroid site also claims the "always listening" functionality employed in the Motorola Moto X can be found in the Android 4.4 experience. Should this prove true, users can expect quick access to Google Now and searching without having to touch the phone.

An Android Police report from this weekend suggests other changes could come in the area of app folders and widgets. According to their findings, folders are no longer limited to 16 shortcuts and will simply scroll if there are more. Widget placement moves out from the app drawer and back to the more traditional long-press method on the home screen. Speaking of which, users may soon find that the stock Android 4.4 experience allows for more than five home screen panels.

The stock camera experience should see a number of adjustments as well, including options to apply filters, borders, and effects. While Google+ already allows for photo editing and manipulation, it asks that a user have already uploaded the image to the cloud. Other tweaks to the shooter could yield straightening, mirroring, and color balance. If the final product resembles the leaked images we saw, then the app itself could get a makeover. Tweaks could come in the form of streamlined UI with quicker access to flash settings, timers, and image size.

As we discovered in a recent leak, other changes may include the option to save images locally in PDF format, export images in a variety of sizes and quality, and apply built-in filters and effects.

From the sound of it, Google might simply include Cloud Print at an OS level instead of relying on its standalone application. We might also see wireless display support (via Miracast) in this next version of Android.Native printing could be built into Android and may allow for options such as paper size, number of copies, orientation, and choosing between color or black and white.

One area where Google has struggled to gain traction, mobile payments, could be rolled into the Android 4.4 platform. Screengrabs show a "Payments" option, but it's unclear what its role could mean for people. Presumably this is simply the place where one manages their Google Wallet account. Perhaps the thought is that by including it in the standard Android experience, it gains a larger awareness. The more you know it exists, the more likely you might be to use it.

An updated app suite

As far as the Pure Google app experience is concerned, we may see Drive, Keep, and Quickoffice come preloaded by default (right now they're optional downloads or bundled with one carrier or manufacturer experience). As many of you know, this trio of products and services work seamlessly with other Google properties and adds a layer of productivity.

To get a sense for how Android 4.4 KitKat might look in action, be sure to check out the video below. Again, the details are not all that obvious and easy to overlook. However, the experience seems to be one that is smooth and fluid. This is to be expected; Google will continue pushing for performance optimizations across the board.

You might miss it the first time around, but the messaging app is nowhere to be found in the video. As the standard app for sending and receiving SMS and MMS, it's possible that Google is transitioning to Hangouts for its communications. We have long expected to see a unified chat and messaging service from Google; this could be the sign of such an animal.

When KitKat could land

KitKat is expected to ship with the Google Nexus 5 smartphone first, and then later come to other Nexus devices via over-the-air updates.

If history is an indicator, the most recent Nexus 4, Nexus 7 2013, and Nexus 10 devices, as well the previous generation Galaxy Nexus and Nexus 7 2012 to pick up the release first, maybe a few weeks after the launch.

In terms of all other devices, I suspect the same rules still apply; newer and more popular models will get priority seating aboard the S.S. KitKat, like the LG G2 and HTC One. Note that phones that use custom interfaces (that's most of them) will take longer to get the update.

Handset makers are becoming ever more vocal over social media so look for OEMs to detail specific devices in blog posts and status updates. Realistically, if you are running 4.1 or 4.2, you might expect some Nestle love this winter.

What's missing?

Taken as a whole, the 4.4 KitKat version of Android looks like it's a minor, not massive, step forward. But, given this is still a version-point update and not a full 5.0 release, we should keep our expectations in check.

Is there something in Android that you see as lacking at the Android 4.3 Jelly Bean platform level? Which features in other smartphones that you would like to see come to Android? I invite you to share your thoughts in the comments below.

Alleged Android 4.4 KitKat screenshots surface online, reveal new features

Ketan Pratap, October 04, 2013

Alleged leaked screenshots of Google's upcoming Android 4.4 KitKat are now doing the rounds of the online rumour mills. The images, if true, reveal several new features and changes to Google's current Android 4.3 Jelly Bean iteration.

The supposed Android 4.4 Kitkat screenshots have been published by Gadget Helpline, which has also posted hands-on of the Android 4.4 OS. However, the site clearly reveals that the OS was an unfinished version of Android 4.4 KitKat. It's worth pointing out that the site spotted 'Key Lime Pie' running on the device, even when repeatedly checking the Android OS version in the About section of Settings.

Visible in the alleged Android 4.4 KitKat screenshots, and according to the site, one of the major additions to the OS is a payment feature, which will reportedly bring wireless NFC payment to Android devices without depending on third party apps. Also spotted was Miracast, meant for wirelessly video output of content to television, and a new option dubbed Keep for note-taking.

Android 4.4's alleged new camera UI was also detailed by the website, supposedly featuring a completely overhauled design, with Instagram-like features. Other new features said to be spotted in the camera UI include Tilt-Shift and Centre Focus, apart from Negative and Posterize effects. The site also refers to a new Print feature being available when viewing an image, reportedly allowing the user to save the image as a PDF locally, or even view network printers and print out a hard copy. The site further mentions that the overall UI has minor changes, however, the animations on the device are now much smoother.

The search giant has been in news ever since it announced the next iteration of its mobile operating system, Android 4.4 KitKat, with the Nexus 4 successor (expected to be its platform lead device), making multiple appearances on the Internet via image and specification leaks.

Prior to this, it was reported that Android's next iteration will see the light of day in October, as Nestle had revealed the first news about the launch of Android 4.4 KitKat on Facebook.