New Cyanogen Accounts bring beefed-up security to the popular Android ROM

Rooting your phone just got a bit more appealing for the security conscious.

The hackers over at CyanogenMod are giving users another reason to consider rooting their devices. CyanogenMod Accounts recently hit the nightly builds of the open source Android ROM, offering a few handy features with more coming soon.

For now, a CyanogenMod Account offers the ability to locate a misplaced device or wipe phone data--including SD cards-- via the Web should your phone be misplaced or stolen. The CyanogenMod team says they built end-to-end encryption into the lost phone and remote wipe functionality to keep malicious actors from eavesdropping on any data in transit.

The group also has big plans for future versions of the CyanogenMod Account, including a secure SMS app and integration with CyanogenMod forums.

Why bother?

Remote wipe via CyanogenMod account is a little late to the game. In early August, Google released Android Device Manager for Android 2.2 and up. The new security feature is similar to Apple's Find My iPhone and can show your phone's location, ring it on the highest setting for five minutes, or (in the worst case scenario) remote wipe the device.

It's not clear if Google's ADM can also remote wipe your SD card. Google's blog post only says the service can wipe data "on your device." We've asked Google to clarify and will update this story should the company respond.

CyanogenMod is in good company, however, as even Google's remote wipe solution came too late. Third-party remote wipe solutions such as Lookout Security and Antivirus and Total Defense Mobile Security have been available via Google Play for some time.

Smartphone vendors are getting in on the action too; In July, Sony released its own solution for Xperia phones called My Xperia that offers location and remote wipe functionality.

But current plans for CyanogenMod Accounts go beyond remote wipe, which could make the Android ROM a more appealing choice for security-minded Android users. A secure text messaging functionality sounds particularly interesting. Developer Moxie Marlinspike, who created on the Android app TextSecure, is developing the new functionality for CyanogenMod.

TextSecure is a popular third-party app that lets you store your texts in an encrypted database and also encrypts texts during transmission to other TextSecure users.

CyanogenMod is taking a relatively slow approach to releasing the first version of CyanogenMod Accounts to give contributors a chance to peruse the code for weaknesses. The team announced the new account feature in mid-August, but it is only coming to the nightly unstable builds of the Android ROM just now.

"We are not going to be shipping [CyanogenMod Accounts] immediately in the nightlies, "the CyanogenMod Team said in an August blog post. "We want to allow those concerned to build, test, and review the code...We look forward to your feedback."

The CyanogenMod Team did not say when the new accounts feature would make it to the stable version of the Android ROM.

Join the CSO newsletter!

Error: Please check your email address.

Tags consumer electronicssecuritysmartphonesAndroidsoftwareoperating systems

More about AppleGoogleSonyTotal Defense

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Ian Paul

Latest Videos

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

  • 150x50

    IDG Live Webinar:The right collaboration strategy will help your business take flight

    Speakers - Mike Harris, Engineering Services Manager, Jetstar - Christopher Johnson, IT Director APAC, 20th Century Fox - Brent Maxwell, Director of Information Systems, THE ICONIC - IDG MC/Moderator Anthony Caruana

    Play Video

More videos

Blog Posts