[![](https://steemitimages.com/DQmXnaEsCwmwwnPdLfky6us2Bg1C3Kv7mXBPbts565ka8ZU/image.png)](https://steemit-production-imageproxy-upload.s3.amazonaws.com/DQmUpYRNCjaGHHuUrKJek744r74asGaUf7cgq1Qs1KQ4Zpi)

There is no such thing as a fully secure and online device.

You can **sandbox**, you can **encrypt**, you can **obfuscate**, but you will never be invulnerable. The only way you can guarantee that your sensitive information is never stolen though the internet is to never put that information on a device connected to it (now or in the future). ## The latest example --- **[Coin Telegraph](https://cointelegraph.com/news/major-risk-for-mobile-android-wallet-users)**, **[Bleeping Computer](https://www.bleepingcomputer.com/news/security/android-bug-lets-attackers-record-audio-and-screen-activity-on-3-of-4-smartphones/)**, **[and others](https://securityaffairs.co/wordpress/65786/hacking/android-mediaprojection-service-bug.html)** have begun making their reports based on the advisory paper by MWR Labs titled **["Screen Capture via UI Overlay in MediaProjection"](https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-android-MediaProjection-tapjacking-advisory-2017-11-13.pdf)**. This latest exploit effects around 77.5% of all Android devices, and allows attackers to record screen contents and audio playback without any notification to the user. This exploit is only one in a series of potential attacks effecting Android devices. From this year alone, we've seen **[Cloak & Dagger](http://cloak-and-dagger.org/)** and the revised **[toast overlay attack](https://www.bleepingcomputer.com/news/security/researchers-reveal-new-toast-overlay-attack-on-android-devices/)** that have the capability of complete takeover of the device without user notice or intervention. Android is far from being the only one with security issues. Both Android and iOS devices are vulnerable to attack as demonstrated by the **["BroadPWN"](https://www.bleepingcomputer.com/news/security/broadpwn-bug-affects-millions-of-android-and-ios-devices/)** Broadcom Wi-Fi chip exploit that allows an attacker to execute code without any user interaction. ## The crypto effect --- I've written several time before about how cryptocurrencies are redefining the hacking world. All the right ingredients are exist in this relatively new and rapidly growing space: • Lots of ignorant and new users • Lots of money • Low risk / high reward for hackers • No centralized protections • Tons of new, non-audited code in use Unfortunately, the **only good way of avoiding being compromised these days is to have an understanding of security at a technical level.** The old "3 things to stay secure" paradigm just doesn't work. **You have to know *why* those 3 things are effective** so that you can accurately judge if they still apply when new software comes along. --- Check out my **Advanced Crypto Security Guide** (**[part 1](https://steemit.com/bitcoin/@tomshwom/tomshwom-s-advanced-crypto-security-guide-part-1-privacy-security-and-trust)**, **[part 2](https://steemit.com/cryptocurrency/@tomshwom/tomshwom-s-official-security-guide-part-2-wallet-analysis)**, **[part 3](https://steemit.com/cryptocurrency/@tomshwom/tomshwom-s-advanced-crypto-security-guide-part-3-creating-a-secure-wallet)**) and my ongoing **"Computer Hygiene" series** (**[part 1](https://steemit.com/security/@tomshwom/computer-hygiene-part-1-browser-extensions)**, **[part 2](https://steemit.com/security/@tomshwom/computer-hygiene-part-2-cleanup-software)**, **[part 3](https://steemit.com/security/@tomshwom/computer-hygiene-part-3-antivirus)**, **[part 4](https://steemit.com/security/@tomshwom/computer-hygiene-part-4-comprehensive-guide-to-keepass-password-manager)**) for some useful information about computer security as it applies to cryptocurrencies. --- _{Leave a **like** or **resteem** if you found this helpful. You can also support me by sending ETH or ERC20 tokens to **Tomshwom.eth**. Leave your thoughts below about what you think and on which content you'd like to see in the future!}