Windows Azure Tutorial for Beginners

C# Programming Simple Car Game Tutorial

Windows 8 App/Game Development with HTML5

Preparing a Windows 8 Tablet for Development

C# Tutorial (Calculator Part 2)

Nokia Lumia Blowout!!!

September Lumia Blowout!

Last month we gave a way an amazing Lumia 1020. That was pretty awesome. This month we wanted to take into consideration that maybe you aren’t on AT&T and would prefer a Lumia 925 or 928 to use on your carrier. Heck, it’s even possible you just don’t want a camera as awesome as the Lumia 1020 and would like a Lumia 920. If that’s the case then this months drawing is just for you. The winner will get their choice of a Lumia 920, 925, 928 or a 1020. The rules are simple:

1. You MUST live in the U.S. or Canada.
2. You MUST be an existing Windows Phone Developer WITH at least one published app currently in the marketplace.
3. You MUST be an active Windows Phone developer as of September 30th 2013, which means you must have either published a new Windows Phone application or have published an update to an existing Windows Phone application that required xap certification within a 180 day period (counting back from September 30th your last updated date must be April 4th 2013 or later.

Below is an example of where to find the last updated date on your Windows Phone application page in the Windows Phone Store.

Now that you know if you can participate or not here’s what you need to do. Email me the REQUIRED information below.

1. First and Last Name
2. Email address (this is the one we can reach you at, one you actually check daily)
3. The link to your qualifying application in the Windows Phone Store.
4. DVLUP.com username (If you haven’t registered yet, go do it, it’s free and you’ll be glad you did)
5. Your Windows Dev Center Publisher GUID (it’s on your dev center dashboard)
6. Your location: City, State/Province (and county if you are in TX or CA)

Make sure you include “September Lumia Blowout!” in the subject line or I might miss it. If you are missing any of the information above you will not be entered into the drawing for the new Lumia 920, 925, 928 or 1020.

Once I receive your entry I will verify your eligibility, enter you in the drawing then send it to the Ambassador for your area who will be your source for all things Nokia and Windows Phone development. We need your entry by September 30th. We will conduct the random drawing on October 1st 2013 and contact the winner.

No matter which area you are in the contest will be amazing and the entry is easy. So email me ASAP!

Send the email to ext-rich.dunbar@nokia.com with the subject “September Lumia Blowout!” .

Microsoft’s Visual Studio 2012 shines on Windows 8

Visual Studio is no longer simply an IDE, no longer a place you go just to write and debug C/C++ code.

Visual Studio is no longer simply an IDE, no longer a place you go just to write and debug C/C++ code. It has long since become something of a development mashup. It’s where you go to tackle any task in the development process, regardless of the target. It’s where you head to do your LightSwitch development, your SQL Server development, your Web application development, your Windows Azure development, and your ASP.Net or Windows Forms development in C#, F#, VB.Net, and — oh, yes — good old Visual C++. Naturally, it’s where you build applications for http://www.infoworld.com/category/tags/microsoft-windows-azure and Windows RT.

That’s not all. With the new Visual Studio 2012, you have to start wondering what you don’t do in Visual Studio 2012. It’s not the Master Control Program by a long shot … but it’s trying.

[ Learn how to work smarter, not harder with InfoWorld’s roundup of all the tips and trends programmers need to know in the Developers’ Survival Guide. Download the PDF today! | Stay abreast of key Microsoft technologies in our Technology: Microsoft newsletter. ]

As with earlier releases of Visual Studio, Visual Studio 2012 is available in several editions. The Express editions are, of course, free. Whereas some of the non-free editions target QA and Team Managers, the Express editions are intended specifically for developers:

Express 2012 for Web. Aimed at Web developers, this version provides tools for HTML5 and JavaScript, with particular attention paid to jQuery. It also includes a CSS editor that understands CSS3. For server-side code, you can develop ASP.Net or MVC framework applications in any of the .Net languages.

Express for Windows Desktop. This version of Express caters to the more traditional developer, one employing the Windows Presentation Foundation (WPF), Windows Forms, or the tried-and-true Win32 libraries. This edition also supports the creation of Windows 8 Store applications.

Express for Windows 8. Provides a trimmed-down IDE specifically for creating Window Store applications using either HTML5 and JavaScript or XAML plus C#, VB.Net, or C++. This Express edition also includes the Blend tool for UI construction.

The top of the Visual Studio 2012 line is the Ultimate edition, which is the version I tested. Ultimate installs enough gigabytes (about 10GB on my system) of development tools and libraries and documentation to occupy a person for a lifetime. You can target any of the platforms mentioned in the above list of Express editions, and you’ll find support for all the .Net languages. Plus, Ultimate edition includes modeling, lifecycle management, testing, and development team management tools.

Next, there’s the Premium Edition, meant primarily for agile development teams. It includes tools for task planning and development workflow. The Professional edition is meant for small development teams, and it includes tools for building applications on the Windows desktop, the Web, in the Azure cloud, and even Windows-supported mobile devices.

The Test Professional edition is obviously intended for QA team members. It incorporates tools for managing tests and test plans, executing tests, and analyzing test results.

It is not possible to cover all of the features of Visual Studio 2012. This article will concentrate on those new features developers are likely to be interested in. Even then, it will be a challenge to do the IDE justice. Details for all the editions — their intended users, as well as a comparison of features provided as well as omitted — can be found at Microsoft’s Visual Studio website.

Building Windows Store apps

In such a broad panorama of editions, target platforms, and target applications, it is difficult to identify a sole, outstanding, key new component of Visual Studio 2012. However, it is safe to assert that — given the proximity of the release of Visual Studio 2012 with the release of Windows 8 — the new IDE’s support of the new operating system is at the top of the list.

Windows 8 presents a new kind of application: the Windows Store application (sometimes just called a Windows 8 app). Originally referred to as a Metro Style application, a Windows Store app or Windows 8 app is a “whole screen” application that runs on Windows 8 or Windows RT. It is not composed of multiple, overlapping windows (which is a bit weird given that it’s running on an OS called Windows). The user interface of a Windows 8 app is clearly optimized for finger or stylus input, but can employ mouse or keyboard. The display surface is partitioned into a grid of tessellated rectangular regions, and the fundamental onscreen object is a tile, rather than an icon. On the startup screen of Windows 8, of course, the applications themselves appear as tiles.

You construct a Windows Store app using several language combinations, typically a language pair. A pair of languages is needed because the application code consists of both front-end and back-end components. The front-end (display) component is defined using a declarative language like XAML or HTML5; the back end (execution logic) executes in a procedural (or object-oriented) language such as C# or C++.

The specific combinations supported by Visual Studio 2012 are JavaScript and HTML, and C#, VB.Net, or C++ and XAML. If you want to build a game for Windows 8 and RT, you can add C++ with DirectX to the list.

Auto-magical multithreading

In concert with the arrival of Windows 8, .Net is being updated to version 4.5. Here, Visual Studio 2012 supports the new “async code” constructs in C# and VB.Net, which require new syntax elements in the languages and define new behaviors. Using the async and await keywords, you can identify potentially long-running methods — that is, methods that may be blocked waiting for an I/O response — but permit other parts of your code to continue executing, unimpeded by the blocked methods. Asynchronicity is key in Windows 8 apps. The Windows 8 application model is geared toward responsiveness, and many of the Windows 8 runtime APIs only support asynchronous operations.

When you define an async method, you’re specifying that the method’s results will be available at some unknown time in the future. The calling code can continue to execute, until it reaches a point where it must use the async method’s return value. You identify this point with the await keyword. An async method returns a Task object, which encapsulates the rendezvous point (used by await) and provides access to the method’s return value. In essence, the async and await keywords provide multithreading without your having to write callback functions, or thread startup and teardown code.

Not only does Visual Studio 2012 recognize the new async keywords, the IDE’s debugger is also async-aware. You can debug an application as though the otherwise asynchronous code executed synchronously.

The .Net async feature is similar to JavaScript’s “promise” (also called “deferred”) objects. As in the case of .Net async, a promise object encapsulates the results of an operation that, if called synchronously, would block execution. JavaScript promises are not syntactic elements (unlike the .Net async feature), but abstractions of behavior. The jQuery and Dojo JavaScript libraries provide implementations of promises, as does the Windows JavaScript library, WinJS, which is used when you build Windows 8 Apps with JavaScript and HTML5.

Turning C++ to 11

Visual Studio 2012 also supports new syntactic features for the C++11 standard. These include range-based iteration for loops, which lets you define an iterable — say, an integer array — and compose a for statement whose index is drawn from successive members of that iterable. Among other new features, C++11 also implements a standard thread class and supports atomic operations, which provide classes and template classes that give more expressive control over multithreaded access to objects.

In addition, Visual Studio 2012 supports C++ Accelerated Massive Parallelism (AMP), announced last year by Microsoft. C++ AMP is a programming model that exploits the data parallelism present in graphics processing units (GPUs) and provides data handling constructs, as well as math function libraries. Visual Studio 2012 not only recognizes the new constructs, but also includes a GPU debugger for working with C++ AMP applications.

Debugging C++ AMP applications is not the only graphics debugging feature in Visual Studio 2012. Perhaps one of the IDE’s most interesting new capabilities is Pixel History. Used in debugging Direct3D applications, Pixel History lets you identify which piece of code is responsible for a specific pixel in your application’s display and examine the events that affected the pixel over the application’s lifetime. This is important if the rendered pixel is the result of a blending of two or more events that have modified it at different points in the past. You can step through the events and find the graphical primitive responsible for altering the pixel.

Visual Studio 2012 adds optimization features for ASP.Net development as well. This includes “minification,” which reduces the footprint of an application’s JavaScript libraries for deployment. During development and debugging, you want JavaScript code to be in its full-text, human-readable form. But when deployed, you want the JavaScript compressed (and possibly obfuscated) for performance and security. The minification process optimizes the JavaScript files for deployment.

While Visual Studio 2012 looks forward to Windows 8, it doesn’t shrug off its ancestry. The IDE is particularly tolerant of projects built by its predecessors. Provided that a project doesn’t explicitly employ a feature available only in Visual Studio 2012, that project file can be opened either in Visual Studio 2010 or Visual Studio 2012. The notable exceptions to this are F# and LightSwitch projects. Once you allow Visual Studio 2012 to upgrade such projects, they can no longer be opened in Visual Studio 2010. The reason given for these exceptions is the relative novelty of F# and LightSwitch. Microsoft deemed it unlikely that a large legacy codebase existed for either, so focused less effort on preserving backward compatibility with such projects.

In addition to all the new capabilities, some welcome features in the IDE have been updated. Code snippets have been improved with the inclusion of “surround with” snippets. Whereas ordinary code snippets are pieces of skeletal code for common constructs that you simply “pour” into a single location (like a glorified paste operation), “surround with” snippets let you define an enclosing construct — such as an if statement and its accompanying body — that surrounds a section of selected code.

Rafts and previews

While the ability to “dock” a specific window to a particular monitor has been available in earlier versions of the IDE, Visual Studio 2012 adds a new facility (and new nautical metaphor) called a “raft.” A raft is a collection of multiple windows that can be treated as a single unit for the purpose of docking.

Another welcome usability feature is the preview tab, which opens a file in a new tabbed window whenever you select a file from the solution explorer (or if you happen to step into the file in the debugger). Previously, viewing a file’s content required that you explicitly open it; now you simply select it to materialize a preview window. The preview is not an editor (its content is read-only), so you must take the extra step of actually opening the file to edit it. But the preview tab is a handy feature for large projects where you need to quickly search through source files.

IntelliSense includes support for JavaScript, an important addition now that JavaScript has become a first-class language used to build Windows 8 apps. IntelliSense understands JavaScript documentation ornamentation — which can specify function parameters, return values, and so on — and incorporates these elements into its internal database to assist in code completion whenever JavaScript functions are referenced in the editor. IntelliSense also provides JavaScript function signatures in code completion.

[10]

JavaScript is a first-class citizen in Visual Studio 2012. This AJAX solution shows the IDE’s combined design and source views in the editor area, solution explorer to the right, and architecture explorer (class browser) at bottom.

Visual Studio 2012 has also improved the dependency graph feature. A dependency graph will show not only logical dependencies (such as a method’s callers and callees), but also physical dependencies (what header files a specific C++ file required). Dependency graphs are useful for finding reference loops (a built-in analyzer helps locate such loops) and can identify code with no dependencies, which is probably a candidate for elimination.

In addition, the graphs are interactive. Click a node, and a pop-up materializes to display the details of the object highlighted: its category, the assembly it’s in, its data type, and its namespace. Similarly, click an arc, and you’re shown its category (reference or call) as well as the source and destination nodes. This latter feature is useful if you’re exploring a large and complex dependency graph.

You can actually build dependency graphs incrementally, by creating a directed graph file and adding it to your project. Then, you simply drag objects (for example, source for class definitions) from either the solution explorer or the architecture explorer and drop them into the graph file’s editor window. Visual Studio will parse the source code, index it, and incorporate it into the existing graph.

Working with Visual Studio 2012

When you install Visual Studio 2012, you’re presented with numerous optional components. These include Blend for Visual Studio, MFC (Microsoft Foundation Classes) for C++, Office Developer Tools, SharePoint Developer Tools, Visual Studio LightSwitch, and Web Developer Tools.

In addition to tuning the environment to your particular sort of development (LightSwitch, SQL Server, Web development, or any of the .Net languages), you can also select the quantity of help documentation installed. A management console lets you pick which content will be recorded locally and which will be accessed from the Web. All help text is available online, and the IDE will access its online repository as needed, but fine-tuning the cached content can help if you know you’re going to be working either offline or in an area with spotty connectivity.

The breadth of the development targets that Visual Studio 2012 now supports becomes apparent when you create a new project. The IDE presents more project templates than you can shake a stick at, in all of the supported languages — which now include JavaScript. You can also select templates from Microsoft’s online source; do that and the choices multiply even more. Also online are uncountable lists of code samples through which you can wander for hours.

I chose to build a Windows 8 application using HTML5 and JavaScript. To do this, I first had to acquire a Window’s 8 Developer license — a bit disconcerting, as I had no desire to actually try to sell the application or even execute it anywhere other than my system. Happily, the license is free; unhappily, it’s only good for 30 days, at which time you have to renew it — again, happily, for free. Had I wanted to make the application available on the Windows Store, I would have had to acquire a Windows Store license, which would not have been free.

The experience of building a Windows 8 application with HTML and JavaScript is reminiscent of creating a Web application, particularly in the way the project compartmentalizes the application’s individual files. CSS files go in one folder, images in another folder, and JavaScript code in still another. A top-level folder is home to the HTML as well as the manifest file (which carries the application’s name, description, splash screen, and so on) and security certificates file.

Of course, building a Windows 8 app is not precisely like building a Web application. You have to learn the event model — as well as the events themselves — imposed on Windows 8 applications. Microsoft has defined events that unify the handling of touch, mouse, and pointer input, so you don’t have to concern yourself with whether a finger or a mouse triggered an event.

You also have to learn a Windows 8 application’s lifecycle and how that is expressed in the JavaScript that executes the “business logic” of your application. Microsoft has defined JavaScript namespaces via whose methods and members you interact with the Windows API from JavaScript. The WinJS namespace, for example, includes objects that handle onscreen controls (like ListViews, DatePickers, and so on) as well as JavaScript promise asynchronous handler objects. The Windows namespace includes objects for dealing with an application’s lifecycle (objects for handling search operations) and system operations (a class for controlling whether a device’s display remains on during an inactive period).

Luckily, there are plenty of resources — everything from style sheets to libraries of controls — to draw on. Possibly the greatest hurdle that developers of Windows Store applications will face is simply wading through the mountains of choices to select from.

Big rock candy IDE

If you’ve used any of the previous versions of Visual Studio, you’ll be right at home in Visual Studio 2012. You’ll find plenty of documentation, guides, and tutorials online to help you navigate the new features. On the other hand, if you’re new to Visual Studio, you’ll quickly discover how vast it is. The only practical advice I can offer is to explore it one tributary at a time.

If you want a hint of just how big Visual Studio has become, consider its new Quick Launch capability. The idea behind Quick Launch: There’s some operation in the IDE you want to perform, but you can’t quite remember in which submenu or toolbar selection or pop-up window the control for that operation is hiding. Wouldn’t it be nice if you could search the IDE, in the same way you, say, search for a variable’s definition in your project’s source?

That’s exactly what Quick Launch lets you do. Enter a search string, and the IDE groups the results of your search. You can see matches in the most recent controls you’ve used, the documents you’ve opened, or menus or options you’ve selected. Click on one of the choices and — hopefully — you’ll be taken to the spot in the IDE you’re looking for.

As I warned at the beginning, Visual Studio 2012 is a big product. There’s a whole lot more I didn’t touch on: testing features, project lifecycle management, version control features, Visual Studio’s integration with other Microsoft products, and so on.

If you want to do Windows development — particularly Windows 8 and RT development — then Visual Studio is really the only game in town. This is simultaneously a blessing and a curse. On the one hand, Visual Studio 2012 does an admirable job as the platform for building applications for a dizzying variety of targets. On the other hand, if you don’t like it, you’re pretty much stuck with it. Nevertheless, countless successful applications, small and large, were born, raised, and graduated from the Visual Studio IDE. And countless more are still to come.

Windows 8 security unshaken by antivirus vendor’s claims

Bitdefender raises worry over trusting included antivirus software, but one analyst said Windows 8’s core security picks up the slack

November 12, 2012 — CSO — Small businesses and consumers should remain confident of the significant improvements in Windows 8 security, despite the weaknesses alleged by antivirus vendors pushing new products, experts say.

Bitdefender was the latest antivirus company to release a study questioning some of the security capabilities of the new version of Microsoft’s operating system. The study, which coincided with the release of Bitdefender’s antivirus product for Windows 8, found that 15% of the most common malware bypassed Windows Defender, the software Microsoft includes with the OS.

“The conclusion is clear: Using your PC without a security solution is extremely risky,” Bitdefender chief security strategist Catalin Cosoi said in a statement.

In terms of actual numbers, Bitdefender found that Windows Defender missed 61 malware of 385 used against Windows 8. However, without knowing how the system was configured for the test, it is impossible to know if the OS would have performed any better with a third-party antivirus product.

“I would look for a more independent outfit to do such tests rather than an antivirus vendor,” Forrester Research analyst Chenxi Wang said by email on Friday.

While antivirus vendor marketing is made to cast doubt on the security in Windows 8, the fact is the new OS contains a number of technologies unseen by users that make it much more difficult for hackers to exploit Windows vulnerabilities.

[See related: Windows 8 gets first critical Patch Tuesday security bulletins]

“One of the biggest areas that Windows 8 really pushes on is implementing what is known as exploit mitigation technologies,” said Dan Rosenberg, a consultant at Virtual Security Research. “They’re technical solutions that are designed to render classes of vulnerabilities, especially memory corruption vulnerabilities, either difficult or impossible to exploit.”

Corruption of a computer’s system memory typically occurs due to programming errors. Such an event can be exploited by hackers to gain remote access to a system. Other features include Secure Boot, which makes it difficult for a class of stealthy malware called rootkits to avoid detection.

Windows Defender as a standalone antivirus product does not have all the features of third-party software, which generally protects against more threats than just viruses, such as identity theft and links in social networks that point to malicious websites. Third-party products also have parental control and anti-phishing features.

“What Microsoft has done is create a minimum bar that all paid vendors need to exceed,” IDC analyst Charles Kolodgy said by email.

Windows 8’s more powerful security features take over where antivirus products end, Rosenberg said. “Antivirus has historically performed very poorly in detecting sophisticated, targeted attacks, such as exploits targeting previously unknown vulnerabilities.”

Where products are most helpful is in warning users when they ignore obvious danger signs, such as an unknown sender in an email, and try to open a malware-carrying attachment or click on a malicious link.

“That’s the niche where antivirus is most effective,” Rosenberg said. “Preventing users from basically hurting themselves.”

Which smartphone is the most secure?

Not all mobile phone operating systems are created equal. As Spencer McIntyre of SecureState explains, there are unique differences and threats specific to each smartphone and, in the end, security is largely up to the user.

 

These days, it is almost impossible to meet someone who doesn’t own a cell phone. More specifically, smartphones, whether it be the trendy iPhone, corporate favored Blackberry or modern Windows Mobile, almost everyone has joined the smart phone frenzy — and with good reason. A smartphone offers more advanced computing ability and connectivity than a contemporary phone.

Just like a handheld computer, most of the population relies on their operating system to multitask the demands of work, personal life and finances. However, many Smartphone users forget about the risks of malware on these crucial devices. In fact, a study from Rutgers’s University disclosed that malicious software for cell phones could pose a greater risk for consumer’s personal and financial well-being than computer viruses.

[Also read about security and privacy apps for smartphones ]

Clearly, there is a need for greater protection of cell phone software and greater awareness of cell phone vulnerabilities from owners, especially when it comes to what kind of operating system you are using. There are unique differences and threats specific to each Smartphone. Here are some important key points that consumers should consider to protect their mobile operating systems.

iPhone
There is a lot to be found regarding this popular device, half of our research findings surrounded the iPhone. Malware for this device took a different approach with the release of IOS 4. The multitasking that users take part in on their systems easily goes unnoticed, allowing the presence of malware to be easier to miss and less intrusive. Malware is more commonly found on iPhones that have been jail broken.

“Jail breaking” means freeing a phone from the limitations imposed by the wireless provider and in this case, Apple. Users install a software application on their computer, and then transfer it to their iPhone, where it “breaks open” the iPhone’s file system, allowing you to modify it; however, this also opens it up to malware. By jail breaking a phone, users are possibly allowing malicious applications into their device which has access to their personal information including their bank account. These applications are not subjected to the same limitations as Apple and therefore are easier to get from a rogue reference and infect cell phone.

Additionally, by not changing the password on a jail broken iPhone, the SSH service, is easy for malicious attackers to create worms used to infect the users operating device. An example of how important this threat is to note was highlighted by Ike, a worm created to raise security awareness when it comes to using these jail broken devices. It illustrates how once the core app has run its route, the vulnerability can gain complete control of the system.

 

Apple is slow to pinpoint vulnerabilities, including the SMS (texting) exploit released in the summer of 2010 by Charlie Miller. This also revealed that Apple is so slow to release that third party organizations were able to produce a security patch before Apple.

 

[Check out these 5 questions to ask before creating mobile device security policy ]

 

Windows Mobile
When it comes to threats, Windows Mobile takes the cake when it comes to attracting malware via SMS. Specifically the amount of SMS malware found on Windows Mobile devices is much higher in comparison to others. An interesting facet of the Windows Mobile OS is that many of the system calls are shared with it’s full-featured desktop counterparts. This detail has contributed to many pieces of malware that have originated on the Windows OS being ported to the Windows Mobile OS. A noteworthy example of this is the Zeus botnet that in recent years has begun to appear on mobile versions of Windows.

BlackBerry
A popular alternative to the previous two mobile operating systems, the BlackBerry is also quite different from the typical smart phone. The BlackBerry uses what is arguably the most closed source of the operating systems discussed herein. Research In Motion, the developers of BlackBerry have done an excellent job of keeping the sensitive inner workings of this smart phone a secret from the public. This is a contributing factor for the relatively small number of reliable exploits for the BlackBerry smart phone.

BlackBerry also suffers from the multitasking concerns that make it easier for malware to run unnoticed. An interesting proof of concept developed for the BlackBerry is the BBProxy application that was presented at DEFCON.

Symbian
There is not a lot of information regarding malware for this operating device, although it is the oldest of the smart phones and one of the most popular outside of America. Windows, Blackberry and Symbian are malware populated and not present on Android or iPhone. Along with the Windows Mobile family of Phones, Zeus has be ported the Symbian as well. The mobile version of Zeus is being used to intercept text messages sent as the second factor of authentication in many services.

Android
The Android operating system is the only open source operating system discussed herein. Android is unique in that it is community driven. The Android operating system is not owned by an individual organization, so it is developed in the best interest of the users. However, the applications are not monitored for vulnerabilities in the marketplace, so anyone can submit applications containing malicious functions which are less likely to be caught. Essentially, it is up to the users to determine if it is a safe and reputable source from which they are getting the app.

Amazon now has a 3rd party market place, which imposes additional policies and restrictions on applications that are distributed.

Android is based on the Linux operating system. On Linux, availability on Android is unlike others and there is not much evidence of ported malware. This is not because there is not any known Linux malware out there, but because it doesn’t receive much attention.

In Conclusion
All operating systems have distinct strengths and weaknesses; however, many are the same and essentially are up to the user and the configuration of the password. Users need to remember not to install apps from unnecessary sources, especially if they are unknown. While users can’t know them all, users need to ensure that they are from a reputable source. If not, that is where malware commonly comes from, with backdoor apps masquerading as secure applications. Also, jail broken phones are at a huge risk if the user maintains the default password and an even higher risk if not used in the Apple marketplace. Instances of malware exist on all of the phones and are even more relevant on ones using untrusted app sources. Consumers can keep this research in mind when using their smartphone to best protect their valuable information.

Spencer McIntyre is a security consultant at SecureState where he focuses on penetration testing and tool development.