Weekly Security Review: Dropbox Client Reverse Engineered, Hytrust Adds Secondary Approval
It’s been an eventful week in the cybersecurity arena. Security researchers have successfully reverse engineered Dropbox, a study confirmed that Android is the most targeted mobile operating system on the market, and Hytrust unveiled a new secondary approval solution at VMworld.
Dhiru Kholia and Przemyslaw Wegrzyn recently announced that they have gained access to the source code for Dropbox’s desktop client using a combination of new and existing reverse engineering techniques. The two researchers claim that they were able to bypass Dropbox’s two-factor authentication, create open source Dropbox clients and perform a wide range of other malicious activities.
Kholia and Wegrzyn argue that the anti-reversing measures employed by Dropbox do not benefit end-users in any way. A spokesperson for the company shot back in a statement to SiliconANGLE that “the user’s computer would first need to have been compromised in such a way that it would leave the entire computer, not just the user’s Dropbox, open to attacks across the board.”
Dropbox is much more vulnerable than users believe, much like Android. A recent study by the Public Intelligence and the Department of Homeland Security’s Cyber Intelligence Analysis Division found that 79 percent of all mobile attacks in 2013 targeted Google’s operating system . The division perceives fragmentation as a major security concern, and warns that cyber threats will continue to grow as security personnel and emergency responders become increasingly dependent on mobile devices.
Mobile is among the many risk factors that modern enterprises have to take into account, as is virtualization. Cloud security specialist Hytrust is addressing the latter with the latest release of its flagship security appliance, which can automatically delay actions taken by administrators until external approval is granted. The solution was unveiled at the recently concluded VMworld 2013 conference in San Francisco.
Since you’re here …
… We’d like to tell you about our mission and how you can help us fulfill it. SiliconANGLE Media Inc.’s business model is based on the intrinsic value of the content, not advertising. Unlike many online publications, we don’t have a paywall or run banner advertising, because we want to keep our journalism open, without influence or the need to chase traffic.The journalism, reporting and commentary on SiliconANGLE — along with live, unscripted video from our Silicon Valley studio and globe-trotting video teams at theCUBE — take a lot of hard work, time and money. Keeping the quality high requires the support of sponsors who are aligned with our vision of ad-free journalism content.
If you like the reporting, video interviews and other ad-free content here, please take a moment to check out a sample of the video content supported by our sponsors, tweet your support, and keep coming back to SiliconANGLE.