'mobile'에 해당되는 글 7건

  1. 2012.09.25 HTML5 Security & Mobile by CEOinIRVINE
  2. 2009.04.04 Cool Phones Out Of Reach (In America) by CEOinIRVINE
  3. 2009.03.17 Shaking Up Advertising by CEOinIRVINE
  4. 2008.12.09 Two book publishers announce mobile phone plans by CEOinIRVINE
  5. 2008.12.02 Nokia's Next Move by CEOinIRVINE
  6. 2008.11.16 Google launches voice recognition app for mobile phones by CEOinIRVINE
  7. 2008.10.31 Exxon Mobil Profits Set a Record in Third Quarter by CEOinIRVINE

HTML5 Security & Mobile

Hacking 2012. 9. 25. 04:56

Last week, I discussed some of the new, exciting functionality that is available as part of HTML5 and how it applies to the enterprise.  While this new functionality presents several new opportunities to change how content and functionality is delivered to employees and customers, there are security and compatibility concerns that must be understood prior to embarking on a great HTML5 journey.
 
Today, we'll discuss some of the more common security concerns raised as part of the HTML5 specification as well as compatibility issues you may face while implementing some of the new HTML5 components.  In some cases, I'll include notes on how certain issues can be avoided.
 
Security
The new benefits of HTML5 aren't without their security concerns and potential for abuse.  Some of the concerns below may not be applicable for mobile apps deployed at the enterprise level, but worth reviewing nonetheless.
  • Web Storage: To the point, there are security concerns with client-side storage.  There is a large potential for abuse if not implemented properly. Here are some security concerns that should be reviewed as part of planning and design.  Keep this in mind while reading (credit toOpera for the verbiage), origin is the tuple of scheme/host/port.  Thus, http://captechventures.com, http://blogs.captechventures.com, https://captechventures.com and http://captechventures.com:80 are all different origins.
    • Storage is assigned on a per origin basis so DNS spoofing is possible which would allow intruders access to a users data. SSL can be used to prevent this.
    • While this will probably not be an issue in the enterprise (since Geocities has left us - moment of silence), Web Storage should not be used where more than one user is using different pathnames on one domain.  For example, if I implemented Web Storage at captechventures.com/nathan/ it would be accessible by captechventures.com/jones/ (note: not valid URLs).
    • Databases are stored locally, on the client, which allows would-be attackers to download a copy of your database and create very precise attacks by issuing plain SQL statements. There's no need to employ injection techniques when you have the database. While this may not immediately impact mobile devices (retrieving content from them is not straight-forward), proper security should be put in place - phone locks, data retention periods (e.g. if the new lead has been sent to the CRM system, wipe it from the local database), etc.
    • The fact that the database resides on the client also opens up the potential for attacks on your backend enterprise systems. Your schema is now widely known; very targeted, malicious queries can be created.  Proper consideration should be given to your mobile storage design - client-side storage should only store a small subset of what may be available at an enterprise level.  Therefore, design a new schema specific to that subset rather than deploying your enterprise design.  
  • Cross-Domain Capabilities: The new capabilities in HTML5 such as canvas, audio and video make it easy to access content across domains and continue to 'mashup' information.  However, this could introduce information leakage.  There are safe-guards being put in place to help prevent information leakage.  For example, the canvas element contains an attribute called origin-clean which indicates whether the content originates from a different origin (see Opera's explanation of origin above) or not.  If the origin-clean flag is set to false, calling the toDataURL() or getImageData() methods of the element would raise a SECURITY_ERRexception.
  • Geolocation: Geolocation presents a host of privacy concerns - you're pinpointing  the location of the device and therefore the user. While not always 100% accurate, geolocation should be used sparingly, requesting location information only when absolutely necessary to improve the user experience.  Proper warnings and terms must be included to make the user aware that you are storing location information and potential consequences.  Broadcasting that you're home (GPS coordinates included) once a day for months and then telling the world you're in Maui on vacation may have unfortunate consequences.
  • Forms: Javascript is client-side code and, as such, you lose a lot of control. While client-side validation, especially on a mobile device, can be powerful you should always validate form submissions server-side to ensure integrity.  Yes, this may require an extra round-trip, on occasion, but if someone has malicious intent, I wouldn't worry if they eat another 120KB of their data plan.
  • KeyGen: This is a post for another day, but HTML5 also includes the keygen element which facilitates the creation of private and public keys for identity verification - think enterprise security, banking, etc.  You should note that adoption is not standardized, documentation is sparse, and Microsoft has even asked that it be removed from the HTML5 specification all-together.  Here is one link I found useful if you're itching to dig deeper.
Compatibility
Creating a web-based version of a mobile application is quicker and typically more cost effective to deploy than platform native applications. Firstly, you don't need an in-house Objective-C developer and iPhone OS (iPad/iPod included) API guru, Java developer, and someone versed in thecumbersome Blackberry API's.  HTML5 web-applications, simplistically speaking, require a web developer and web designer. Secondly, you don't have a platform specific approval process to battle.  Consider the source, but even Google's VP of Engineering points out that not many companies are rich enough to build native apps in support of each mobile platform.
 
That being said, there are compatibility issues to consider when looking at HTML5 for your mobile application.  HTML5 is still in draft status and is not supported by all mobile browsers.  Mobile Safari (iPhone), the Android browser support quite a few, but not all, changes in the HTML5 specification.  Opera Mini supports some (currently, around 10%) but is constantly evolving and was recently approved for use on the iPhone. IE Mobile 6.0 still doesn't appear to have much support for HTML5.  I'm still researching what will be available as part of the new Windows Mobile version 7.0, but am not holding my breath.
 
Blackberry is beginning to implement some of the specification (e.g. the datalist element), in some of it's browsers but it's still not ready for prime time.  With multiple versions of their browser running on multiple versions of the OS, building for the Blackberry will be challenge. This has been heralded as one of the biggest obstacles for HTML5 to overcome in order to go mainstream.  In my humble opinion, as Android and the iPhone continue to gain market share, Blackberry will pick up the pace of innovation.
 
In the mean time, creating a lighter version for Windows Mobile and Blackberry, while frustrating, is an option.  Another potential option would be to deploy Opera Mini to your Windows and Blackberry devices. It runs on each platform and, while it only supports about 10% of the specification now, it is evolving. Remember, Opera was a core contributor to Web Applications 1.0.

If you're interested in discussing how CapTech can help mobilize your enterprise, contact Jack Cox, the Mobile Service Offering lead.


'Hacking' 카테고리의 다른 글

Samsung Galaxy S III Hacking  (0) 2012.09.27
HTML5 Top 3 Vulnerability  (2) 2012.09.25
Burp Suite Tutorial – The Intruder Tool  (7) 2012.08.10
Understanding the iOS Security Architecture  (0) 2012.08.08
Cydia Repositories  (7) 2012.08.05
Posted by CEOinIRVINE
l

 

Why some of the hottest Korean mobile phones never leave the country.


Smitten with LG's ingeniously-named "Ice Cream" phone? Charmed by Samsung's playful "Haptic Pop" handset? Be prepared to wait--in vain--since neither phone is slated for a U.S. launch.

Korean handset makers export millions of attractive phones a month. But some of their most interesting creations never leave Korea.


That fact makes Korea a bittersweet destination for cellphone enthusiasts. The silver lining: features from these phones sometimes crop up in later U.S. releases. Looking at the newest, coolest, Korea-only phones is a peek into the future.

In Pictures: Eight Phones You'd Love To Have

And what a bright, entertaining future it is. Take the Ice Cream phone, currently a hot seller among Korean teen and 20-something women. The phone is named for its ice cream-inspired pastel colors ("snow white," "peach pink" and "sky blue") and equipped with an LED display that features emoticons on the phone's exterior cover. It is the cellular embodiment of cute. Sales have been promising enough that LG just announced a "Lollipop phone" with similar features.

Samsung's limited-edition Haptic Pop is likely to be another youth-driven hit. Unveiled in March, it is a version of the company's best-selling Haptic touchscreen phone, complete with a wardrobe of colorful, pop-off back covers.

Those looking for even more color options can opt for the Samsung W270/W2700. The streamlined clamshell is available in 24 colors, including a gold tone with leather accents.

Other popular phones are noteworthy for their design innovations. Samsung's W570 clamshell packs both an internal display and an external touchscreen. The outer screen is designed to give users one-touch access to music, video and messaging, while the inner screen offers a typical cellphone menu.

Samsung's "Oz" phone shows off a different kind of double feature: a double folding mechanism. The compact flip phone opens vertically for calls and messages and swivels horizontally for watching TV and video.

Some notable phones are flashy on the inside. LG's "Franklin Planner" phone--designed in partnership with U.S. planning products and training firm FranklinCovey--has custom software that allows road warriors to record their goals, monitor their progress and improve their English. Samsung packages stress-reducing "music therapy" software with some of its high-end touchscreen phones. SK Telecom ( SKM - news - people ) supports a mobile coupon service that lets users exchange simple gifts from retailers like Starbucks ( SBUX - news - people ) and Burger King ( BKC - news - people ) via text message.

Occasionally, a cool phone launches first in Korea but quickly migrates to the U.S. That looks to be the case for Samsung's so-called security phone, which emits a 100-decibel alarm when prompted by users. Samsung has submitted the phone's specifications to the Federal Communications Commission, sparking chatter of an American release.

It's also possible for a Korean phone to launch outside the country and then get reworked for the domestic market. At the request of Korea's leading mobile operator, SK Telecom, Samsung upgraded its popular Omnia phone into the T*Omnia. The handset is essentially an Omnia with a larger, higher-quality screen and mobile TV tuner. At $650, it is currently the most expensive phone in Korea, but store owners say it is selling briskly.

Over the years, Korea has served as a launching pad for plenty of "world's first" handsets, like Samsung's 10 megapixel camera phone in 2006. In most cases, manufacturers are willing to take these phones to other countries. The operators, tasked with selecting models that will sell well and fill gaps in their portfolios, often decide what goes where.

Local preferences play a role too. Samsung knows, for instance, that Americans like clamshell (folding) phones. It also believes that preference is waning with the rise of touchscreen and Qwerty keyboard handsets, and is reacting accordingly, says Samsung designer Ingon Park.

Cellphone exclusivity can cut both ways. Korea is still waiting for the Apple ( AAPL - news - people ) iPhone and handsets powered by the Google ( GOOG - news - people ) Android operating system. (See "Favorite Phone Fruits: Apple Vs. BlackBerry.")

Research In Motion's BlackBerry didn't reach the country until late last year. Revised telecom policies are excpected to usher in change starting this month, but operators say homegrown handsets will continue to dominate. "Koreans will never choose a handset without multimedia messaging, [advanced] ringtone capabilities ... and other customized services," says Seong Kim, manager of SK's mobile device planning team.

Someday, Americans might make the same demands.

Posted by CEOinIRVINE
l

Shaking Up Advertising

IT 2009. 3. 17. 07:17

Shaking Up Advertising

Laurie Burkitt, 03.16.09, 06:10 PM EDT

Dockers' iPhone ad is the next wave of mobile marketing.

image

Dufon Smith is a street dancer in Seattle. There, he's known for spinning on his head, flipping through the air and, more recently, making people shake their iPhones.

Levi's Dockers brand group in San Francisco hired Smith to star in the first motion-sensitive advertisement, the "Shakedown 2 Get Down," for the Apple (nasdaq: AAPL - news - people ) handset. When iPhone gamers advance to new levels while playing "iBasketball," "iGolf" and "iBowl," Smith appears in his khaki Dockers, prompting users to shake the phone so he can shake his body.

Article Controls

imageemail

imageprint

imagereprint

imagenewsletter

imagecomments

imageshare

Yahoo! Buzz

A number of companies, such as Zagat, The New York Times (nyse: NYT - news - people ) and Bank of America (nyse: BAC - news - people ), have been eager to take advantage of the iPhone's popularity, but most have built their own applications. Those are typically features that enable users to do things such as find restaurant reviews, read news feeds and pay online bills.

Some are more entertaining. Carling Beer's iPint lets iPhone users slide a glass of beer down a virtual bar into someone's hand. And Mars-owned pet food company Pedigree actually used a motion sensor, also known as the "accelerometer," to make dogs howl in its "Shake & Bark" app last month, but unlike Dockers', it didn't integrate with existing iPhone features. For marketers looking to win over new customers, the Dockers ad is a big first.

Dockers found its target audience, 30- to 39-year old men, in 2001 when it won tech-savvy consumers by introducing pants with a designated pocket for cellphones. Since then, the apparel company says it has been looking for new ways to reach that group.

Real-Time Quotes
03/16/2009 4:02PM ET
  • BAC
  • $6.18
  • 7.29%
  • OMC
  • $23.44
  • -0.72%

Omnicom Group's (nyse: OMC - news - people ) media agency OMD has been helping them do that through an in-house group called the Ignition Factory, a group created last summer that focuses on niche guerrilla marketing. One of Ignition Factory's first projects was creating a user-generated Doritos video game for Microsoft's (nasdaq: MSFT - news - people ) Xbox Live Arcade.

For Dockers, the Ignition Factory conceptualized the shakeable ad and then turned to Seattle interactive firm Razorfish to film Smith's smooth moves. New York-based mobile ad agency Medialets determined which applications would be most fitting for the ad placement ("iBasketball," "iGolf" and "iBowl").

The possibilities for mobile ad placements are just as vast as the TV arena. If Kitchenaid wants to advertise a blender that shows how to make a smoothie out of fruit when shaken on the iPhone, perhaps a recipe application is the perfect place. Chipotle Mexican Grill (nyse: CMGB - news - people ) could have a create-your-own burrito ad that pops up when users are hunting for Mexican eats. "It's open season for mobile ads," said Jonathan Haber, U.S. director of Ignition Factory. Marketers now know they can make a shaking ad, but there are other ways to use the iPhone's features, Haber said. This is a phone that lets you not only listen and speak, but touch, spin and interact.

One reason marketers are turning to mobile advertising is because of the information they can get from the ads. Interaction is measurable, which means Dockers will know just how long people are shaking their phones and watching Smith dance. Movie companies will know how long people watch trailers, and cafés will see which menu items consumers touch. The list goes on. "We can tell them every single page the customer has seen," said Eric Litman, CEO of Medialets. "Marketers know the more data they have available, the more sense it makes to spend in various directions."

The price tag just to build a mobile ad ranges from $35,000 to $250,000, depending on the ad's functions. Cost per impression runs between $23 and $35. That leaves some thinking the iPhone ads just aren't worth it. Yves Darbouze, CEO of New York agency Plot Multimedia, contemplated building an iPhone ad for NBC's The Biggest Loser in its recent "Train with Bob" campaign, but he ultimately decided there just weren't enough eyes on the handset to make good return on investment. Over 17 million people have bought iPhones, but it takes work to keep up with the most popular games and widgets. Banner ads on the Web, though they may seem outdated, are probably getting more views for less money, Darbouze said.

Still, the novelty may win for the foreseeable future. There's room to wow consumers and hit specific audiences with new, even tactile tactics. And while the rest of the industry facing a downturn, Medialets' Litman says he's not hurting for customers. Game makers and publishers are looking for ways to fund their applications, he says, and everyone wants to learn more about how consumers are reacting to ads.

Smith, who is only being featured in the ad for the next four weeks, just wants you to get an iPhone and start shaking

Posted by CEOinIRVINE
l

Two major book publishers announced mobile phone initiatives Monday, as a worried industry increasingly banks on a digital future.

Penguin Group (USA) has started Penguin 2.0, which includes Penguin Personalized, a way for customers to add personal dedication pages to digital books, and Penguin Mobile, which enables readers to receive text on Apple Inc.'s iPhone and other mobile devices.

Also Monday, the Random House Publishing Group said it would make some books available for free on the iPhone, including works by Alan Furst and Arthur Phillips. The text can be downloaded through Lexcycle's Stanza reader.

Other publishers with mobile phone programs include HarperCollins, Houghton Mifflin Harcourt and Simon & Schuster.

Copyright 2008 Associated Press. All rights reserved. This material may not be published broadcast, rewritten, or redistributed

Posted by CEOinIRVINE
l

Nokia's Next Move

Business 2008. 12. 2. 16:51

The device maker is expected to announce a major new product Tuesday.

At Nokia, the clock is ticking.

The Finnish mobile communications giant is poised to make a major announcement Tuesday at its Nokia (nyse: NOK - news - people ) World conference, a point underscored by a large countdown timer on the company's Web site.


Time is running out for Nokia in other ways. Though the company still reigns as the world's largest cellphone maker, some analysts say it has fallen behind Apple (nasdaq: AAPL - news - people ), Google (nasdaq: GOOG - news - people ) and Research In Motion (nasdaq: RIMM - news - people ) in terms of mind share. Nokia is clearly using its two-day conference to generate some buzz.

Speculation is rampant online with most guessing that the announcement will be a high-end phone that combines a touchscreen with a Qwerty keyboard. Such a device would be a first for Nokia, which just began shipping its first touchscreen phone, the 5800 XpressMusic. A special link on the Nokia World Web page that teases upcoming news about the "Nseries in 2009" offers subtle confirmation.

Other guesses making the rounds include a netbook or laptop, a motion-sensing device that can be controlled by gestures and an N-series device running S60, the latest version of the Symbian operating system.

Given the company's new emphasis on software, the announcement could also concern Internet services, possibly something related to mobile social networking.

In a research note released today, UBS (nyse: UBS - news - people ) analyst Maynard Um backed the idea of a small notebook or tablet PC. Citing unnamed sources, Um outlined a device that would sell for more than Nokia's $408 N810 tablet and include a touchpad, Linux-based operating system and wireless technology that supports mobile wallet and ticket services.


'Business' 카테고리의 다른 글

GM, Ford Prepare for Congress  (0) 2008.12.02
A Very Fresh Prince  (0) 2008.12.02
It's Official: U.S. In Recession  (0) 2008.12.02
Bernanke: lower interest rates are "feasible"  (0) 2008.12.02
U.S. Recession Tides Lap Against Asia  (0) 2008.12.02
Posted by CEOinIRVINE
l

Google added voice recognition technology to the search software it distributes through Apple for its iPhone.

Gummi Hafsteinsson, Google Mobile Applications product manager, offered a demo of the application at Google's headquarters in Mountain View, Calif. Hafsteinsson simply opened the Google Search application on his phone, held the phone up to his ear, and spoke.

The application combines voice-recognition technology with Google's search index and the iPhone's ability to track a user's location to offer results keyed to his or her whereabouts. "This is a completely open-ended query stream, so you can say anything," Hafsteinsson says. "Anything you might want to type into Google.com, you can say to this applciation."

The move helps plug a gaping hole in the iPhone's capabilities--voice recognition--while pitting Google (nasdaq: GOOG - news - people ) against Microsoft (nasdaq: MSFT - news - people ), whose Tellme unit has long sought to bridge the gap between phones and the Web with voice recognition-enabled applications.

"Imitation is the best form of flattery, so welcome to the party," said Dariusz Paczuski, senior director of Tellme consumer services. Tellme's software allows those with BlackBerry's or Samsung's Instinct smart phone to search for information using the company's voice recognition technology. Microsoft acquired Tellme Networks in March 2007.

Expect more to come. Forrester principal analyst Charles Golvin has long argued that voice recognition, while largely ignored by application developers, will become a more common way to connect users with sophisticated data services going forward. "It's the interface that is, after all, the most widely used, the interface that people are most comfortable with," Golvin says. "It makes sense that this would come of age."

Tellme's Paczuski confirmed that his group is working on similar applications for the iPhone and smart phones running Microsoft's Windows Mobile software.

The update to Google's search application for the iPhone, which Apple (nasdaq: AAPL - news - people ) will release through its App Store software distribution service for the smart phone, will allow users to ask a question and get an answer from the Mountain View, Calif.-based company's search engine.

The results will also be linked to a user's location. So asking for coffee or pizza will direct users to a nearby location.

The application is one of a number of voice-friendly third-party applications for the iPhone that have helped close the gap between the iPhone and mobile phones that have long given users the ability to perform basic tasks, like dialing phone numbers, with voice commands.

While Google is best known for its Web search service, it has been pushing aggressively into telephony. In October, T-Mobile began selling the G1, a handset built around Google's smart phone software. In April of 2007, Google launched GOOG-411, a service that allows users to call an 800 number to get information by phone.

On Friday, Google shares fell $2.06, or 0.66%, to $310.02. Google shares are down more than 50% year-to-date.

'Business' 카테고리의 다른 글

Big Box & Beyond  (0) 2008.11.17
Less Power to Purchase  (0) 2008.11.17
Democrats Focus on Job Growth  (0) 2008.11.16
World Leaders Agree to Seek Major Reform  (0) 2008.11.16
Fewer Fairfax Teens Have Had Intercourse (SEX)  (0) 2008.11.16
Posted by CEOinIRVINE
l



Exxon Mobil Corp. smashed its own record for quarterly profits today, ringing up $14.8 billion in net income in the third quarter powered by soaring summertime crude oil prices.

Exxon Mobil's earnings, at $2.86 a share, are up 58 percent from the same period in 2007 and higher than what analysts expected, capping a week of strong profit numbers from the world's biggest oil companies, all of whom benefited from the spike in oil prices in July. Royal Dutch Shell also posted higher earnings today, beating analysts' estimates with $8.54 billion of profits for the third quarter.

The recent drop in oil prices to less than half the July peak will likely lower oil company profits in the current quarter and the year ahead; today UBS AG, citing the lower demand for oil as a result of the worldwide economic slowdown, cut its forecast for oil prices for next year by 36 percent to $75 a barrel.

Firms such as Exxon Mobil are still barreling toward full-year earnings that will easily set new marks in the history of U.S. corporate profits.

Investors appeared to focus on the future, however, as Exxon Mobil shares fell in early trading this morning. The company's shares have dropped nearly 20 percent this year; the Standard & Poor's 500-stock index has dropped about 36 percent.

The engine of Exxon's earnings growth came from its production of crude oil, where high prices more than offset production volumes that were 8 percent lower than they were in the third quarter of 2007. Although Exxon expanded production off the coast of West Africa and in the North Sea, overall oil production fell as a result of contract terms that trim Exxon's share of production at high prices, natural decline of older fields, and downtime resulting from maintenance and hurricane damage.

The company also made more money from its refining and marketing operations, widening profit margins in those areas even as retail prices set new record highs over the summer.

During the quarter that ended Sept. 30, Exxon Mobil also spent $8.7 billion buying back its own stock. Exxon says this helps return money to shareholders, but some critics have argued that the company should be using the money to expand oil and gas exploration or to invest in renewable energy.

Exxon Mobil's capital and exploration expenditures were $6.9 billion, up 26 percent from the third quarter of 2007.

The net income figures included a special one-time gain of $1.6 billion from the sale of the company's natural gas transmission business in Germany. Even without the one-time gain, the company's net income would set a record.

The third-quarter results also included a $170 million charge to cover a punitive damages award from the oil spill that took place when the oil tanker Exxon Valdez ran aground in Alaska in March 1989. The money set aside for the hotly contested damage award is barely more than 1 percent of the company's profits this quarter. Exxon has set aside $460 million for the Valdez damages so far this year.





Posted by CEOinIRVINE
l