Bluebox Apps

July 2014: Now includes scanning for Fake IDvulnerability!The Bluebox Security Scanner will scan your device todetermine:- If your system is vulnerable or patched to any of the "Fake ID"or "Master Key" security flaws affecting most Android devices- If your system settings allow 'Untrusted Sources' applicationinstalls- If any installed application on your device is trying tomaliciously take advantage of any of the 'Master Key' securityflaws
Further details of the Android "Fake ID" and "Master Key" securityflaws are available at:- http://bluebox.com/technical/android-fake-id-vulnerability/- http://www.bluebox.com/blog/technical/uncovering-android-master-key-that-makes-99-of-devices-vulnerable/Effectively addressing a vulnerability requires three steps:1) Google produces a generic code fix2) Android phone manufacturers then incorporate that fix into afirmware update for various phones3) Carriers then distribute the final update, which ensures yourphone is safeAs regards Fake ID, Google has provided the generic code fix tothe phone manufacturers who are working with the carriers todistribute the updates. This scanner will help track when thatfinally happens. Alternatively, contact customer support at yourphone manufacturer or carrier a realtime update.

The Bluebox Wifi Protector will removepotentially unused open Wifi network profiles from your device, toprotect you from spoofed malicious Wifi access points. The app willalso protect your device from connecting to already recognized wifiprofiles that have no security enabled.Candidate Wifi networks are auto-selected when you launch theapp; you can review the list, then press the "Clean Me" button toremove unused networks. It is safe to remove open networks -- youcan easily add them back at a later date by selecting them from thelist of available Wifi networks.Note:- This app can find certain Wifi profiles that are not displayedunder the normal Android settings list- Some Wifi network profiles are embedded into the vendor firmwareand cannot be removed

The Trustable by Bluebox app provides Androidmobile phone and table users, and any interested parties, with asecurity trust score illustrating how trustable the device is forsecurity and protection of data.The Trustable by Bluebox app:- Provides a consistent and on-going method to measure the securityproperties and trustability of a device, including any knownvulnerabilities- Computes a security-centric trust score in a range of 0.0 to10.0, based up on all discovered information, including theanalysis of various configuration and settings information- Provides specific instructions for users to improve their devicetrust score- Enables users to make informed decisions on which vendors/devicesmake below-average or above-average security decisionsThe types of items that are represented in the trustscore:- Known system vulnerabilities on the device- Insecure configurations caused by the device vendor- Insecure configurations caused by the device user- The amount of pre-installed applications, third partyapplications, “bloatware”, and other excessive devicepopulationAs mentioned above, the Trustable by Bluebox app provides asecurity-centric trust score in a range of 0.0 to 10.0, where ascore of 0.0 represents an insecure and un-trustable device, and ascore of 10.0 represents a device following above-average securitybest practices and having a good overall security state.You can see the full description of what specificsecurity-related aspects of the device are measured and analyzed tocreate the trust score here: https://bluebox.com/trustable-by-bluebox/

Trust Manager by Bluebox allows users tomanage the roots of trust (certificate authorities, or CAs)installed on their Android devices. For more information about theroots of trust on your device: https://bluebox.com/blog/technical/questioning-the-chain-of-trust-investigations-into-the-root-certificates-on-mobile-devices/This application can be used on rooted or non-rooted devices:- Devices with root access/SuperSu can manage (disabled/enable) thecertificate authorities directly from the application- Devices without root access can still examine the certificates ontheir device and view the certificate authorities and which groupsthose CAs are placed inNOTE: If your device does not have root access you can still managethe CAs on your device, but you will need to disable/enable eachone manually via Settings -> Security -> Trusted Credentialsand then click each cert and use the "Disable"/"Enable" button thatappears for each CA.

The Bluebox Security app enrolls your devicewith the Bluebox mobile data security solution. By installingBluebox, you ensure corporate data remains secure on your mobiledevice without sacrificing your personal privacy or freedom to useany preferred apps for the ultimate productivity. Finally, securitythat both the enterprise and employees can embrace.Notes:• You need a Google Play account to install the app.• After install, you also need a valid Bluebox account group ID toenroll with Bluebox. Please contact your administrator.About BlueboxFounded in 2012 by a team of security experts, Bluebox Securityoffers the first mobile data security platform to safeguardcorporate data across the device, application, and network. Thecloud-based solution provides complete visibility and security ofcorporate data, while providing employees the freedom, ease of use,and privacy that ensures widespread adoption. Bluebox Security hasreceived a total of $27.5 million in funding from AndreessenHorowitz, Tenaya Capital, Sun Microsystems co-founder, AndreasBechtolsheim, SV Angel, and Google Board member Ram Shriram. Thecompany is headquartered in San Francisco.Webpage: http://www.bluebox.comTwitter: https://twitter.com/BlueboxSecFacebook: https://www.facebook.com/pages/Bluebox-Security/120767781395545