Hasta La Gadget!

We’ve recently seen Google crack down on rogue apps and patch some server-side security issues, but let’s not forget Android does have a small measure of built-in security: app permissions. But as with those pesky EULAs, many users tend to breeze through the permissions screen. And Android forces even the most attentive readers to accept or deny all permissions requested by an app. But the newest nightly builds of the CyanogenMod custom ROM include a clever patch allowing users to grant and revoke permissions individually — something like the TISSA security manager we’re still awaiting. Obviously playing God with permissions can crash your applications: with great power comes great responsibility. But we figure if you’re running aftermarket firmware on a rooted phone, you’re comfortable experimenting. See how it works in the video after the break, then hit the source link to download.

Continue reading New CyanogenMod lets you rule Android app permissions with an iron fist

Filed under: Cellphones, Software

New CyanogenMod lets you rule Android app permissions with an iron fist originally appeared on Engadget on Tue, 24 May 2011 13:34:00 EDT. Please see our terms for use of feeds.

Permalink Androinica  |  CyanogenMod  | Email this | Comments

Google spent a lot of time yesterday talking up WebGL, but UK security firm Context seems to think users should disable the feature because it poses a serious security threat, and the US Computer Emergency Readiness Team (CERT) is encouraging people to heed that advice. According to Context, a malicious site could pass code directly to a computer’s GPU and trigger a denial of service attack or simply crash the machine. Ne’er-do-wells could also use WebGL and the Canvas element to pull image data from another domain, which could then be used as part of a more elaborate attack. Khronos, the group that organizes the standard, responded by pointing out that there is an extension available to graphics card manufacturers that can detect and protect against DoS attacks, but it did little to satisfy Context — the firm argues that inherent flaws in the design of WebGL make it very difficult to secure.

Now, we’re far from experts on the intricacies of low-level hardware security but, for the moment at least, there seems to be little reason for the average user to panic. There’s even a good chance that you’re not vulnerable at all since WebGL won’t run on many Intel and ATI graphics chips (you can check by clicking here). If you’re inclined to err on the side of caution you can find instructions for disabling WebGL at the more coverage link — but come on, living on the cutting edge wouldn’t be anywhere near as fun if it didn’t involve a bit of danger.

[Thanks, Tony]

WebGL flaw leaves GPU exposed to hackers originally appeared on Engadget on Thu, 12 May 2011 15:49:00 EDT. Please see our terms for use of feeds.

Permalink The Register  |  Context, US CERT, Khronos  | Email this | Comments

What does it take for a gaming classic to survive in a world ruled by titles like Portal 2 and Homefront? A Kinect hack, a Wiimote, and some electronic elbow grease, apparently. Trinity College student Keysosaurus — as he’s know to his YouTube pals — has used a bit of C#, XNA, and OpenNI coding to play 3D augmented reality Tetris using Kinect body controls and a Wiimote. The Kinect gestures do most of the work, rotating the board, zooming the camera in and out, and moving the pieces into place, while the Nintendo controller is used to rotate. Video’s after the break, but beware, the familiar strains of “Korobeiniki” have been replaced by smooth guitar jazz, so turn the volume up at your own risk.

Continue reading Augmented reality Tetris game uses Kinect hack, Wiimote, smooth jazz (video)

Augmented reality Tetris game uses Kinect hack, Wiimote, smooth jazz (video) originally appeared on Engadget on Thu, 21 Apr 2011 10:07:00 EDT. Please see our terms for use of feeds.

Permalink PCWorld  |   | Email this | Comments

George “Geohot” Hotz wanted to crack the PS3—so he did, and infuriated Sony. He’s become a target, globetrotter, and spectacle. But before? He was little tech-inept deviant. Gizmodo’s got his yearbook, and two people who probably signed it. More »

Is your phone manufacturer’s Android ROM not treating you quite the way it should? Worry not, Cyanogen’s got your back as usual and has just released the final v7.0 of the CyanogenMod, now based on Android 2.3.3. There’s an extensive list of supported Android handsets, which is now also augmented with a couple of tablets: the B&N Nook Color and the Viewsonic G Tablet. As usual with custom ROMs, we advise reading up and making sure you know what you’re doing before you do it, but if you’re already up to speed on the latest in homebrewed Android, this is the moment you’ve been eagerly waiting for. Full details of the changes made in version 7 plus instructions on how to get it set up on your Android device can be found below.

[Thanks to everyone who sent this in]

CyanogenMod 7.0 is now final, ready for your consumption originally appeared on Engadget on Mon, 11 Apr 2011 04:07:00 EDT. Please see our terms for use of feeds.

Permalink   |  CyanogenMod  | Email this | Comments