Endpoint Security and Smartphones

[Jay Ashworth <jra () baylink com>]

Some time back, the FBI was heard to say in public that draw-your-passpattern
security, as seen on Android smartphones and tablets, was too much for them,
at least as long as you kept your screen clean of skin oil. :-)

Whether or not that's true, there are apparently ways to attack even that,
using just the sensors on the platform.  Specifically, the accelerometers
(which are actually usually just angle sensors):

  http://www.schneier.com/blog/archives/2013/02/guessing_smart.html

If you're responsible for security, BTW (and if you're on NANOG, you 
probably are), Bruce Schneier should be on your daily bookmark list...
even if you think he's full of crap.

Cheers,
-- jra
-- 
Jay R. Ashworth                  Baylink                       jra () baylink com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com         2000 Land Rover DII
St Petersburg FL USA               #natog                      +1 727 647 1274