Cameron's shared items

A questionable Android mobile wallpaper app that collects your personal data and sends it to a mysterious site in China, has been downloaded millions of times, according to data unearthed by mobile security firm Lookout.

That means that apps that seem good but are really stealing your personal information are a big risk at a time when mobile apps are exploding on smartphones, said John Hering, chief executive, and Kevin MaHaffey, chief technology officer at Lookout, in their talk at the Black Hat security conference in Las Vegas today.

“Even good apps can be modified to turn bad after a lot of people download it,” MaHaffey said. “Users absolutely have to pay attention to what they download. And developers have to be responsible about the data that they collect and how they use it.”

The app in question came from Jackeey Wallpaper, and it was uploaded to the Android Market, where users can download it and use it to decorate their phones that run the Google Android operating system. It includes branded wallpapers from My Little Pony and Star Wars, to name just a couple.

Update: Lookout notes it does not capture browsing history and text messages: It collects your browsing history, text messages, your phone’s SIM card number, subscriber identification, and even your voicemail password, as long as it is programmed automatically into your phone. It sends the data to a web site, www.imnet.us. That site is evidently owned by someone in Shenzhen, China. The app has been downloaded anywhere from 1.1 million to 4.6 million times. The exact number isn’t known because the Android Market doesn’t offer precise data. The search through the data showed that Jackeey Wallpaper and another developer known as iceskysl@1sters! (which could possibly be the same developer, as they use similar code) were collecting personal data. The wallpaper app asks for permission to access your “phone calls,” but that isn’t necessarily a clear warning.

The Lookout executives found the questionable app as part of their App Genome Project. Lookout is a mobile security firm, and it logged data from more than 100,000 free Android and iPhone apps as part of the project to analyze how apps behave. It found that the apps access your personal data quite often. On Android, each user is asked if they give their permission to access an app, but on the iPhone, where Apple approves apps, no permission is needed.

Roughly 47 percent of Android apps access some kind of third-party code, while 23 percent of iPhone apps do. The executives also found that many apps use third-party software programs to do things such as feed ads into an app. Often, developers unquestioningly use the software development kits of those third parties in their apps, even if they don’t know what they do. In many cases, there is a good reason for the use of personal information. Ads, for instance, can be better targeted if the app knows a user’s location.

Hering said in a press conference afterward that he believes both Google and Apple are on top of policing their app stores, particularly when there are known malware problems with apps. But it’s unclear what happens when apps behave as the wallpaper apps do, where it’s not clear why they are doing what they are doing.

Tags: Android, iPhone

Companies: Apple, Google, Lookout

People: John Hering, Kevin MaHaffey

© 2010 Jim Davis & Paws, Inc. See all 11728 Garfield Comics easily at http://ivanov.in/garfield/

© 2010 Jim Davis & Paws, Inc. See all 11727 Garfield Comics easily at http://ivanov.in/garfield/

© 2010 Jim Davis & Paws, Inc. See all 11726 Garfield Comics easily at http://ivanov.in/garfield/

© 2010 Jim Davis & Paws, Inc. See all 11725 Garfield Comics easily at http://ivanov.in/garfield/

© 2010 Jim Davis & Paws, Inc. See all 11723 Garfield Comics easily at http://ivanov.in/garfield/

Would you like to test drive the latest version of Google’s Android OS without buying a new mobile device?  Here’s how you can run Android on your PC for free with the Android SDK Emulator.

Android is the latest mobile OS to take the world by storm, but everyone doesn’t have access to the latest mobile devices.  Thankfully, there’s an easy way to run Android on your Windows, Mac, or Linux computer.  Google provides an Android emulator with their SDK, which is designed to let developers test their apps on Android before running them on handsets.  We can use this to test drive Android on our computer, here’s how to do it.

Getting Started

The Android Emulator requires Java to run, so if you don’t already have Java installed on your computer, download it from the link below and install as normal.

Note: When installing Java, make sure not to install any crapware it tries to sneak in like the worthless Yahoo toolbar.

Then, download the Android SDK from Google (link below), and make sure to select the correct version for your computer.  Once it’s downloaded, unzip the files as normal.

In Windows, run the SDK Setup.exe program to get started running Android on your PC.

The SDK will check Google’s servers for available packages.

If you see an SSL error message, click the Settings tab on the left in the SDK and AVD Manager window that opened in the background.  Here, uncheck the Force https box, click Ok, and then reopen the setup.

Now, the Package Installer will open.  You can choose what you want to install, and then click Install to begin installing the Android emulator on your computer.

By default, all of the SDK platforms, samples, and APIs will be selected for install.  This can take quite a while to download, as several versions of Android are currently available.  If you only want to play around with Android, choose the version you want.  You’ll want the SDK Platform Android your.version.  Then click the Reject bullet on all the other entries, and click Install.  We wanted to try out the latest Android 2.2 as well as the older 1.5, so we downloaded both of them.

Once you’ve started installing, you’ll see a window showing the download and installation progress.  This may take a few minutes, depending on your Internet speed.

You’ll have some little Androids in your taskbar, but unfortunately they don’t show the download progress.

Setup an Android Emulator

Once the download is completed, you can setup an emulator to test drive Android on your computer.  Select the Virtual Devices from the left menu, and then click the New button on the right.

Enter a name for your virtualized Android, and select the version of Android you want to use from the drop-down menu.  This will only show the version you installed previously, so you may only see one version listed depending on your selection.

Enter a size under the SD Card entry; this is a virtual SD card that’s actually an IMG file that Android will use to store your settings and files in.  Then, select a screen size from the skin options.  The default is a standard, Nexus One-type display, while the others are different sizes including even a BlackBerry-style device.

Click Create AVD when you’re finished.

The program may appear to freeze while it is creating the AVD, so just wait until you see the confirmation window.

You’re now ready to run Android on your PC!  Select your new virtual Android, and click Start on the right.

You can choose to scale the display if you’ve chosen a larger screen size than your monitor will fit, and then select Launch.

Android will now begin to load in your emulator.  Several command prompt windows may open, and then you’ll see the emulator itself.  Notice that the default, large screen size will display a keypad and virtual buttons on the right side of the emulated device.

Android may take several minutes to load, especially on your first run.  After a while, the boot screen will switch to an Android boot animation.

Finally, you’ll be presented with your new Android home screen!  Use your mouse as you would normally, though remember that you don’t need to double-click to open apps.

You can open pre-installed apps from the launcher menu, though unfortunately these emulator images do not include the Android Marketplace.

View your favorite websites in the browser, and they will render just as they would on an Android device.  Note that you can enter text using the on screen keyboard in the emulator, or with your standard keyboard.  Since this is an emulator, you may notice some lag in entering text.

You can also install Apps that are directly available online.

Default apps such as Email work great, and you can even see most of the device settings in Android.

Click and hold on the home screen to change the background or try out widgets.

You’ll even see the nifty Android Lock screen if you leave your virtual machine alone for a few minutes.  Just click the arrow and drag it to the other side of the screen to unlock.

You can always repeat the steps later to create a new Android virtual machine.  Here we’ve created an Android 1.5 virtual machine with the QVGA screen size.

We did experience a few crashes in our tests, and the emulator felt somewhat sluggish, but in all, it’s fun to try  out a new mobile OS without spending money on a new phone.

Launch Android Virtual Machines Later

Anytime you want to launch your Android virtual machines in the emulator, just run the SDK Setup.exe as before, and select them from the Virtual Devices list.  Alternately, you can launch an emulator directly from the command line.  To do this, browse to your Android SDK folder and open the Tools folder.  Press the Shift key and right-click, and then select Open Command Window Here.

Now enter the following in the Command Prompt, substituting the name of your Android virtual machine for your_device:

emulator @your_device

Create a Shortcut For Your Android

Alternately, right-click on the Emulator.exe in the SDK Tools folder, and select Create Shortcut.

This shortcut would actually only run the emulator in Command Prompt and not load an actual virtual device.  We’ll need to change the properties to do this, so right-click and select Properties.

Select the Shortcut tab, and then scroll to the end of the Target box.  Enter the name of your virtual Android as before, as @your_Android after the emulator.exe, and then click Ok.

Now you can launch your Android directly from your Desktop or Start menu.

Conclusion

Whether you’re a developer who wants to write the next greatest app for Android or are simply are curious about Android and would like to try it out without buying a new phone, the Android Emulator is a great way to get started for free.  It is also a great way to try out new versions of Android if you have an older device. We were disappointed that the Android Marketplace wasn’t included. but check back in the next couple days and we’ll show you how to run it in the emulator!

Also, don’t forget; if you’re using an aging Windows Mobile phone, you might be able to turn it into an Android phone.  Check out our tutorial on how to Run Android on Your Windows Mobile Phone.

Link

Download the Android SDK

Download Java for your computer

Similar Articles	Productive Geek Tips
Run Android on Your Windows Mobile Phone Copy Windows Error Messages to the Clipboard Try out Windows Phone 7 on your PC today Test Drive Windows 7 Online with Virtual Labs Test All Features of Windows Phone 7 On Your PC	Script Suggestion: Turn Off Music If Inactive 5 Minutes TouchFreeze Alternative in AutoHotkey The Icy Undertow Desktop Windows Home Server – Backup to LAN Use This Bookmarklet to Easily Get Albums Use AutoHotkey to Assign a Hotkey to a Specific Window

Image: Chaoslevel.com

A new LEGOLAND Discovery Center is scheduled to open in Grapevine Mills that gives convenient access for residents of the Dallas/Ft. Worth metroplex to an indoor LEGOLAND park. Currently there are four LEGOLAND Discovery Centers in Chicago, Berlin, Duisburg, and Manchester. You can read more by clicking on the image below.