U.S. government, military to get ‘secure’ modified Android phones

“Some U.S. officials this year are expected to get smartphones capable of handling classified government documents over cellular networks, according to people involved in the project,” Mark Milian reports for CNN.

“The phones will run a modified version of Google’s Android software, which is being developed as part of an initiative that spans multiple federal agencies and government contractors, these people said,” Milian reports. “The smartphones are first being deployed to U.S. soldiers, people familiar with the project said. Later, federal agencies are expected to get phones for sending and receiving government cables while away from their offices, sources said. Eventually, local governments and corporations could give workers phones with similar software.”

“Officials have said they worry that hackers or rogue apps could tap into the commercial version of Android and spill state secrets to foreign governments or to the Web through a publisher such as WikiLeaks. As many as 5 million Android users may have had their phones compromised by a recent virus outbreak rooted in apps found on Google’s market, said security software maker Symantec,” Milian reports. “But with a secure smartphone, a soldier could see fellow infantry on a digital map, or an official could send an important dispatch from Washington’s Metro subway without fear of security breaches.”

“Still, Apple’s iPhone and iPad are also highly desired among U.S. officials, and people involved in the U.S. smartphone program said their goal is to support any type of smartphone,” Milian reports. “As CNN has reported, the Chairman of the Joint Chiefs of Staff, Gen. Martin Dempsey, uses an iPad to read his classified intelligence by downloading cables and disconnecting from the network.”

“However, the government chose to work on Android first because Google already allows people to tinker freely with its code, said those working on the project. Federal officials have met with Apple, but they were told they could not have access to the core of the company’s mobile operating system, said Angelos Stavrou, an information-security director at George Mason University who is working on the government project as a contractor, in a phone interview,” Milian reports. “‘Android was more cooperative in supporting some of the capabilities that we wanted to support in the operating system, whereas Apple was more averse,’ Stavrou told CNN. ‘They’re shifting the strategy now.'”

Read more in the full article here.

MacDailyNews Take: SNAFU.

And, if Google is found to be infringing patents, will the U.S. government then pay royalties to Oracle, Microsoft, and Apple (if they decide to license some patents) and/or modify their custom code in order to not infringe on patented IP? This could become FUBAR quicker than the lifespan of a box of a dozen doughnuts in Ballmer’s office.

Hopefully, in reality, Apple is more focused and involved in serving the government and military markets than this CNN article suggests.

[Thanks to MacDailyNews Reader “Jay in DC” for the heads up.]

Related articles:
Massive Android malware operation may have infected 5 million users; many infected apps remain on Android Market – January 28, 2012
Insecure: Malicious Android apps double in six months – December 14, 2011
Android permissions flaw allows eavesdropping, data theft, location tracking – December 2, 2011
You bank on your pretend iPhone? Are you nuts?! Android malware up 472% since July – November 16, 2011
Android security threats surge with infected ‘Angry Birds’; iPhone and iPad users unaffected – November 15, 2011
Apple’s iOS unaffected by malware as Android exploits surge 76% – August 24, 2011
McAfee: Google’s Android number one in malware – August 23, 2011
Android malware records phone calls; iPhone users unaffected – August 2, 2011
Symantec: Apple iOS offers ‘full protection,’ Google Android ‘little protection’ vs. malware attacks – June 29, 2011
Malware apps spoof Android Market to infect Android phones – June 21, 2011
Google forced to pull several malware-infested apps from Android market – June 8, 2011
Android malware sees explosive growth; even faster than with PCs – April 27, 2011
Virus-laden apps infest Google’s ‘open’ Android platform; iPhone unaffected – March 3, 2011
Security firm warns of new Android trojan that can steal personal information; iPhone unaffected – December 30, 2010
Trojan infects Android smartphones; iPhone unaffected – August 10, 2010
Millions of Android phone users slammed by malicious data theft app – July 29, 2010
Unlike proactive Apple, reactive Google doesn’t block malware from Android app store – June 4, 2010
Malware designed to steal bank information pops up in Google’s Android app store – January 11, 2010

51 Comments

    1. Apple won’t give Gov the code to create a back door. Google obviously doesn’t care if you are crooked or not but then again, isn’t that the pot calling the kettle black?

      Good for Apple. Not so good for citizens but what would you expect.

  1. First, if Android is ultimately found to have to be redesigned or someone has to pay huge amounts to Apple for infringing elements of Android, it won’t be the U.S. Government that will pay. All contracts of this nature that I’ve seen over the years (and I’ve seen a LOT of them) have a clause where the seller (in this case either Google or one of the smart phone vendors) guarantees that the U.S. Government won’t be held responsible for any infringement. The seller steps up in writing to say that they will be 100% responsible.

    Second, Apple would have to have a unique variant of iOS to support higher levels of encryption and such things as internal firewalls to enforce such things as “red/black” separation of data. I doubt Apple wants to build a Type 1 sanctioned device. It sure as hell won’t sell for $499 or even $899. And, if they did, they ABSOLUTELY will not be assembled in China.

  2. Very Nervous Soldiers……. Very…….

    I remember reading about soldiers using unsecured Garmin Rhino GPSs to keep track of one another early on in Iraq because the big, heavy, expensive gov. Systems would not work, or would get them lost. Scary!

    The shear population of kids hacking Android around the world is even scarier!

  3. I don’t see Apple breaking a sweat over this. The potential Gov’t market is relatively small compared to their primary aim – the consumer market. The same way that Apple doesn’t make plans to operate in the “enterprise” market. They rely on osmosis to get their products in.
    The group really threatened by this is RIM. Their security has always been their prime selling point to large, security conscious customers, and if Android can come up with a workable alternative, it will be another nail in the coffin for the RIMsters.

  4. The government is allowed to freely use patents, they are immune from prosecution and are permitted to use whatever stolen IP they want.

    They probably chose Android simply because it is open, allowing them to hack their own (hopefully secure) version.

  5. The Government will be modifying Android. It would be Apple modifying iOS. What does that mean? The Government will be spending tens thousands of dollars to create the security extensions and just as much to port their changes to the next version of Android. The government can never release their changes to Android back into the code base because it is publicly available to all Android distributors and the government can not risk their security methods being public.

    Apple code is privately controlled by Apple. Only Apple will know the changes. They will incorporate the changes into the base code. In the end iOS will become the even more secure for every one off the shelf.

    The government will be able to buy fully secure phones at street prices from Apple or buy phones at street prices plus the cost of in-house extensions for Android. We all know how cost concerned the government is. Which way do you think they would go?

    Actually, I think this is a ploy by the government to get Apple’s cooperation in making their phone meet government security standards. I can see Apple being uncooperative about changing their code so the government just says “If you won’t cooperate we will build our own phone using Android has a base”. Given Apple’s love of Android I see why they are changing their perspective toward adding the required security.

  6. So the U.S. government wants to make a version of Android that’s actually secure and safe to use?

    Sounds like yet another one of Obama’s misguided ideas about how to wast tax payer dollars through programs doomed to fail.

  7. Why be bound to a commercial vendor who can and may change up your mobile OS regardless of your needs?
    I’d hope the government would have learned that lesson with MS and Windows.
    This way they can tailor their own OS to their needs and not be stuck on another parties upgrade cycle.

    1. You may be correct about the military bureaucracy because it is like any government bureaucracy, but if you think that the military people like my son-in-law and the people who I work with every day are dumb, then I would suggest that you put up a sign in front of your house that says “Please don’t defend me when things get tough!” (and history says they always do someday) they will be more than happy to bypass you in favor of the good people who appreciate them.
      Not a problem.

      1. I definitiely meant the bureaucrats, pencil pushers who put our lives at risk. the boots on the ground have more often than not saved us from the inane decisions made by politicians and bureaucrts. Just look at the billiions wasted every year.

        My apologies to everyone.

  8. why be chained to a company who may change an OS or device to suit their needs regardless of yours?
    Sounds like a smart move for the government to me. control of their own OS.

  9. For the first time in my adult life, I’m really ashamed of my Country!

    Right Michelle…

    Of course with the gaggle currently in control, that “first time in my adult life” seems to be an everyday occurrence!

    Unfortunately…

    1. I have been ashamed of the actions taken by my country (U.S.A.) on a number of occasions. History is replete with despicable actions sanctioned by the U.S. government. I am proud that I am not blinded from recognizing those occasions by overzealous partisanship or misguided patriotism. The fact that I am able to publicly criticize the actions of my own country demonstrates the core strength of the U.S.A.

  10. Sorry, MDN, but Apple is definitely NOT “focused” or “involved” in serving the government and military markets. Frankly, Apple’s not even interested in these markets.

    We military/federal government types have had to scrap together Open Source products to get our Macs working on official networks.

    We get help from 1 guy, Shawn Geddis, and he gets torpedoed by Apple at every turn, like when Apple decided to stop making enterprise servers and deprecate smart card services in 10.7 Lion cuz it’s “old technology”…but there is NO NEW TECHNOLOGY TO REPLACE IT!!

    I can’t tell you how many hours I’ve spent slapping together POS solutions to problems Apple makes for us, just so I can continue to use my Mac. It’s almost as if Apple is making a conscious effort to prevent us from using their products.

    1. We might have been inclined to believe you if you weren’t posting ANONYMOUSLY and if what you stated wasn’t BULLSHITE. Also NOTE: I can post here as ‘USAF Officer’ as easily as you. I’ll demonstrate if you like.

      We military/federal government types have had to scrap together Open Source products to get our Macs working on official networks.

      WHY? Because those networks run on WINDOWS, which remains notoriously proprietary, despite Microsoft’s claims to the contrary. No wonder you’re having trouble. Oh and that open source software you’re using is provided by Apple if you look for it. There are also commercial solutions with their own benefits, such as ‘DAVE’ from Thursby Software Systems, Inc.

      We get help from 1 guy . . . torpedoed by Apple at every turn, like when Apple decided to stop making enterprise servers and deprecate smart card services in 10.7 Lion cuz it’s “old technology”…but there is NO NEW TECHNOLOGY TO REPLACE IT!!

      1) BAD idea to offer your IT officer’s name, a very UN-military thing to do.

      2) Those of us working with the Enterprise remain upset that Apple dumped their XServe blade servers. HOWEVER, there damned well ARE replacements and Apple gladly tell you what they are. One example: Active Storage, Inc at:
      http://www.activestorage.com/

      IOW: BULLSHITE on your part.

      3) Apple support Smart Cards. In fact, Apple sell a Smart Card Reader at the Apple Store:

      SCM SCR3500 Smart Card Reader

      IOW: BULLSHITE on your part.

      Around here, most of us are pros and know our stuff regarding Apple. Forget about trolling, posting FUD or BS without getting FACT-FLAMED in reply.

      *** For those who actually ARE interested in using Macs in the Enterprise, here is the terrific long-standing email list you’ll want to join:

      Mac OS X Enterprise Deployment Project

    2. My first reply to this anonymous coward is languishing, ‘awaiting moderation’ but MDN, which takes days. Therefore, here is a revised version without any URLs embedded. Enjoy!
      ~~~~~~~

      We might have been inclined to believe you if you weren’t posting ANONYMOUSLY and if what you stated wasn’t BULLSHITE. Also NOTE: I can post here as ‘USAF Officer’ as easily as you. I’ll demonstrate if you like.

      We military/federal government types have had to scrap together Open Source products to get our Macs working on official networks.

      WHY? Because those networks run on WINDOWS, which remains notoriously proprietary, despite Microsoft’s claims to the contrary. No wonder you’re having trouble. Oh and that open source software you’re using is provided by Apple if you look for it. There are also commercial solutions with their own benefits, such as ‘DAVE’ from Thursby Software Systems, Inc.

      We get help from 1 guy . . . torpedoed by Apple at every turn, like when Apple decided to stop making enterprise servers and deprecate smart card services in 10.7 Lion cuz it’s “old technology”…but there is NO NEW TECHNOLOGY TO REPLACE IT!!

      1) BAD idea to offer your IT officer’s name, a very UN-military thing to do.

      2) Those of us working with the Enterprise remain upset that Apple dumped their XServe blade servers. HOWEVER, there damned well ARE replacements and Apple gladly tell you what they are. One example:

      Active Storage, Inc
      http://www.activestorage.com/

      IOW: BULLSHITE on your part.

      3) Apple support Smart Cards. In fact, Apple sell a Smart Card Reader at the Apple Store:

      SCM SCR3500 Smart Card Reader
      http://store.apple.com/us/product/H2312LL/A

      IOW: BULLSHITE on your part.

      Around here, most of us are pros and know our stuff regarding Apple. Forget about trolling, posting FUD or BS without getting FACT-FLAMED in reply.

      *** For those who actually ARE interested in using Macs in the Enterprise, here is the terrific long-standing email list you’ll want to join:

      Mac OS X Enterprise Deployment Project
      http://lists.psu.edu/archives/macenterprise.html

      1. Buddy, I’m glad Apple’s enterprise stuff is working for you; but if you don’t know who Shawn Geddis is, you obviously don’t know what your’e talking about.
        Hint: he’s not an “IT officer”; he is (or was?) an Apple employee who helps fed-gov “IT officers”

        Anyway, read up here (http://smartcardservices.macosforge.org/post/apple-deprecates-smart-card-services-in-os-x-lion-v107/) to see what Apple’s been up to.

        Sometimes it’s fun to learn.

    3. I) We might have been inclined to believe you if you weren’t posting ANONYMOUSLY and if what you stated wasn’t BULLSHITE. Also NOTE: I can post here as ‘USAF Officer’ as easily as you. I’ll demonstrate if you like.

      We military/federal government types have had to scrap together Open Source products to get our Macs working on official networks.

      WHY? Because those networks run on WINDOWS, which remains notoriously proprietary, despite Microsoft’s claims to the contrary. No wonder you’re having trouble. Oh and that open source software you’re using is provided by Apple if you look for it. There are also commercial solutions with their own benefits, such as ‘DAVE’ from Thursby Software Systems, Inc.

      We get help from 1 guy . . . torpedoed by Apple at every turn, like when Apple decided to stop making enterprise servers and deprecate smart card services in 10.7 Lion cuz it’s “old technology”…but there is NO NEW TECHNOLOGY TO REPLACE IT!!

      1) BAD idea to offer your IT officer’s name, a very UN-military thing to do.

      2) Those of us working with the Enterprise remain upset that Apple dumped their XServe blade servers. HOWEVER, there damned well ARE replacements and Apple gladly tell you what they are. One example:

      Active Storage, Inc
      http://www.activestorage.com/

      IOW: BULLSHITE on your part.

        1. @Derek Currie
          Sorry to upset you, but have a read:
          “With the release of OS X Lion, Smart Card Services are deprecated and will not ship as a customer functioning service”

          Source:
          http://smartcardservices.macosforge.org/post/apple-deprecates-smart-card-services-in-os-x-lion-v107/

          If you’re a registered developer (like I am) you can view Apple’s entire presentation about deprecating SmartCard services:
          https://developer.apple.com/videos/wwdc/2011/

        2. DC might have been harsh against you. I’m going to cut him slack, tho. The recent explosion of Apple success has left many disgruntled enemies in its wake as corporations steam rolled by Apple fill the Internet with paid and unpaid Pro and Semipro Apple haters and trolls.

          We don’t know who you are, I haven’t seen you post on here before, so it’s easy to see why some of us might be suspicious. Long time Apple fans have been dealing with FUD for decades.

        3. I was actually hoping DC knew something I didn’t: I had to spend 6 hours today helping a co-worker get her smart card working on her Mac…

          Seriously, guys, take a look at the Fed-Talk Apple Mail list archives; we are DEDICATED Apple users, otherwise we would’ve given up a long time ago.

          Flying off the handle like that without knowing the truth (try following my links, or googling “Mac smart card services”) just makes the rest of us Mac users look ridiculous.

  11. The government cannot keep data secure on desktop computers attached to their intranet. How on earth are we suppose to believe they will be able to handle classified documents on a mobile device?

    1. I was just reading yesterday that:

      Half of Fortune 500s, US Govt. Still Infected with DNSChanger Trojan

      Great going NSA! (US National ‘Security’ Agency).

      There is a drop dead date of March 8th for getting DNSChanger off ALL these computers or they will be automatically disabled from accessing the Internet. Watch the date get moved up, then moved up, then moved up… Pathetic.

      -> US Government computer security: A Joke.
      -> Why?
      -> Windows insecurity. Tech ignorance. Laziness.

  12. As many as 5 million Android users may have had their phones compromised by a recent virus outbreak rooted in apps found on Google’s market, said security software maker Symantec,”

    OK, really, this time we will make a really good system, to prove it, give it to the soldiers in war zones who need them to save lives. Really, we mean it, this time it will be better. Trust us.
    Signed-
    Google

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.