Cyberstudy
Supplementary — not from your PDF Beginner ~25 min

Harden your own phone

Go through your phone's settings against Lesson 10B: screen lock, encryption, app sources, location, Bluetooth and NFC.

Environment

Your own Android or iOS phone.

Before you start

  • Read Mobile Hardening Techniques (p.267), Location Services (p.270) and Bluetooth Connection Methods (p.274).

You will

  • Check lock screen and encryption
  • Review app permissions
  • Reduce wireless and location exposure

Steps

  1. 1

    Set a strong screen lock (6+ digit PIN or passphrase plus biometrics) and a short auto-lock time.

  2. 2

    Confirm device encryption is on. It is on by default on modern iOS and Android once a lock is set; look under Security settings.

  3. 3

    Check that only the official app store is allowed. On Android, make sure 'Install unknown apps' is off for every app.

  4. 4

    Review app permissions for location, camera and microphone, and remove any that aren't needed.

  5. 5

    Turn off Bluetooth and NFC when you're not using them, and review your paired devices.

  6. 6

    Turn on remote find/lock/wipe (Find My / Find My Device) and test that you can see the device online.

  7. 7

    Install any pending OS updates.

Check your understanding

  • ?Why does sideloading increase risk (see p.223)?
  • ?How does GPS tagging in photos leak information?
  • ?Which of these settings would an MDM enforce on a company device?