Securing the Mobile Phone ‘SUVs’

As mobile devices become more feature-rich, some of these new capabilities may be leading users to unwittingly put more of their personal information at risk. The European Network and Information Security Agency is seeking to enlist users as a "first line of defense" against threats by highlighting the risks of using mobile devices to connect to social networking sites and offering tips on what users should do to protect their privacy.

Many of the recommendations in the new report, "Online As Soon As It Happens," seem painfully obvious, advising users to think carefully about what personal information they want to post and to set privacy settings properly. But considering how many stories we hear of security breaches that begin with an unsecured laptop left in a car or of the widespread use of the password "password," it’s pretty clear that there’s a need to spread some of these messages.

Plus, devices are adding more and more features, and it’s not hard to believe that a lot of people are getting the latest, shiniest smartphones without having any idea of the power "under the hood." It’s a bit like when everyone started buying SUVs with off-road capabilities that they’d never dream of using.

Looked at that way, the ENISA recommendations suddenly look more valid. For example, I’m betting a lot of people would never think to deactivate location-based services when not using them, to lock their device’s keypad when it is not in use, or to implement all of the necessary firewall and security settings when connecting to public Wi-Fi spots. These may be obvious to advanced users, or at least the risks related to them are well understood, but many people with iPhones or BlackBerries in their pockets aren’t fully aware of the potential risks they face with such powerful devices. -- BH