Do We Really Need Anti-Virus on S60?

The question has been asked many many times, and most people feel very strongly towards their answer: Do you really need Anti-Virus on S60v3 devices? Personally, I say no, they’re merely a waste of precious RAM and battery life. I know Steve Litchfield, for one, agrees with me. If one is careful with their device, and does not accept messages or bluetooth connections from unknown senders, then there’s no reason to install another app to run constantly in the background.

Oddly enough, Phoneboy, over at his new S60 blog "Convergence Zone", was sent this internal video from F-Secure showing the difference in how a Nokia E60 (running S60v3 without FP1) and an E90 (running S60v3 FP1) react towards a virus being sent. Obviously, if you keep your device’s bluetooth off, or in "hidden" mode, this is a moot point altogether.



As you can see, the E90 handles the potential infection MUCH better than the E60. However, neither phone would allow the virus to be installed without the user’s approval. That’s important to note. Also important is that in the situation, they merely power down the E60 to disable the request. That means if you ever get a message like that repeatedly, simply power your phone down and move to a different location, then turn it back on and you’re likely to be safe.

I also find it ironic that F-Secure made this video as it basically proves that their product is useless, and becoming moreso with every new edition of S60.

Related Posts

The Guru

The Guru, aka Ricky Cadden, started Symbian-Guru.com in November 2006, out of his excitement for the S60 3rd Edition version of Symella. The Guru has used Symbian devices since the Nokia 6620, and is known for his perspective as a power user. You can follow The Guru on Twitter at @Rcadden

If you enjoyed this post, be sure to subscribe to Symbian-Guru.com's RSS feed to stay up to date on future articles. You can also follow us on Twitter: @SymbianGuru


  • JC

    Ricky,

    To say that S60 anti-virus is becoming more useless with every edition is really shortsighted on your part.

    For any E series device, something like anti-virus is very, very useful. Especially if you have something like blackberry connect or you use the device on a regular basis to push/sync emails. Anything that gets downloaded to the device OTA and then uploaded to a PC during sync is a potential virus/security issue, and that’s why this sort of software is necessary.

    I’ve come to expect better analysis from you, and you’ve dropped the ball on this one.

  • JC

    Ricky,

    To say that S60 anti-virus is becoming more useless with every edition is really shortsighted on your part.

    For any E series device, something like anti-virus is very, very useful. Especially if you have something like blackberry connect or you use the device on a regular basis to push/sync emails. Anything that gets downloaded to the device OTA and then uploaded to a PC during sync is a potential virus/security issue, and that’s why this sort of software is necessary.

    I’ve come to expect better analysis from you, and you’ve dropped the ball on this one.

  • http://profile.typekey.com/symbianguru/ Ricky Cadden

    JC – I don’t see that it’s shortsighted at all. You have to remember that first of all there’s no such thing as a virus for 3rd Edition currently, except in a lab. That’s important to note.

    The second thing is that anything you get via email is going to be designed to infect a Windows machine, correct? Thus, it couldn’t install itself on an S60 device, and even if it could, there are too many notifications that must be approved before anything can be installed on an S60 device.

    If you’re getting it on the device and then syncing to the PC, don’t you have anti-virus on your PC?

    -Ricky.

  • http://profile.typekey.com/symbianguru/ Ricky Cadden

    JC – I don’t see that it’s shortsighted at all. You have to remember that first of all there’s no such thing as a virus for 3rd Edition currently, except in a lab. That’s important to note.

    The second thing is that anything you get via email is going to be designed to infect a Windows machine, correct? Thus, it couldn’t install itself on an S60 device, and even if it could, there are too many notifications that must be approved before anything can be installed on an S60 device.

    If you’re getting it on the device and then syncing to the PC, don’t you have anti-virus on your PC?

    -Ricky.

  • JC

    Ricky,

    You usually do have anti-virus on a PC. You don’t always know that stuff moving through a sync conduit and written into an exchange database is going to be scanned properly. It’s a crapshoot, and most admins would rather not take that risk.

    My old company, and let’s just say they weren’t quite a F500 company, more like in the top 10 of the F500, wouldn’t allow ANY mobile device access to any company resource without some sort of anti-virus software on the device. And if you look at the usual literature for network admins you’ll quickly find that those sort of restrictions are par for the course.

    This is vital for Nokia, as eventually they’ll release a competent E-Series business device (I jest, but only partially). Having AV software in place is important if those devices are going to be used behind corporate firewalls.

  • JC

    Ricky,

    You usually do have anti-virus on a PC. You don’t always know that stuff moving through a sync conduit and written into an exchange database is going to be scanned properly. It’s a crapshoot, and most admins would rather not take that risk.

    My old company, and let’s just say they weren’t quite a F500 company, more like in the top 10 of the F500, wouldn’t allow ANY mobile device access to any company resource without some sort of anti-virus software on the device. And if you look at the usual literature for network admins you’ll quickly find that those sort of restrictions are par for the course.

    This is vital for Nokia, as eventually they’ll release a competent E-Series business device (I jest, but only partially). Having AV software in place is important if those devices are going to be used behind corporate firewalls.

  • http://profile.typekey.com/symbianguru/ Ricky Cadden

    JC – Good point, and I’m sure there are companies that require mobile devices to have anti-virus, thus the reason that F-Secure and the others have an offering, but let’s face it, for most consumers, it’s a useless app.

  • http://profile.typekey.com/symbianguru/ Ricky Cadden

    JC – Good point, and I’m sure there are companies that require mobile devices to have anti-virus, thus the reason that F-Secure and the others have an offering, but let’s face it, for most consumers, it’s a useless app.

  • JC

    Ricky,

    Yeah, for most *consumers* it’s a pointless app.

    For a company like Nokia, who pushes a line of *business* phones, it’s a vital and necessary app. So my point still stands that your ‘useless’ comment was way off base and, well, useless. :)

  • JC

    Ricky,

    Yeah, for most *consumers* it’s a pointless app.

    For a company like Nokia, who pushes a line of *business* phones, it’s a vital and necessary app. So my point still stands that your ‘useless’ comment was way off base and, well, useless. :)

  • Viipottaja

    I would say its probably mostly “useless” in the sense that the likelihood of a virus at least as of now is close to zero, but at the same equally “necessary” for the business acceptability reasons mentioned by JC. :)

  • Viipottaja

    I would say its probably mostly “useless” in the sense that the likelihood of a virus at least as of now is close to zero, but at the same equally “necessary” for the business acceptability reasons mentioned by JC. :)

  • JonnyBruha

    Of course security is important if you have such vital data that absolutely can not fall into the wrong hands, but since it really isn’t an issue on S60v3, antivirus applications on the device itself aren’t anything to be bothered with. Your high security office might require you have it on your S60 device, but that still doesn’t mean it’s necessary. The only real potential threat that could leak device information would be something like a harmful script from a spoofed website or similar that would transmit your information, and F-Secure wouldn’t be able to stop that anyway.

    On S60v2, antivirus software was much more valuable since there were real applications on a software level that could not only transmit your information, but also corrupt your phone entirely and render it useless. I use to get random BT connection requests on campus all the time, but I never accepted them with my S60v2 devices. I let my N80 download AND install one of those phantom applications one day, and the security settings in v3 wouldn’t let it install anyway.

    On other devices, antivirus may be necessary, but it just plain isn’t if you’re running a newer S60 device, no matter what kind of user you are or how important your data is .

  • JonnyBruha

    Of course security is important if you have such vital data that absolutely can not fall into the wrong hands, but since it really isn’t an issue on S60v3, antivirus applications on the device itself aren’t anything to be bothered with. Your high security office might require you have it on your S60 device, but that still doesn’t mean it’s necessary. The only real potential threat that could leak device information would be something like a harmful script from a spoofed website or similar that would transmit your information, and F-Secure wouldn’t be able to stop that anyway.

    On S60v2, antivirus software was much more valuable since there were real applications on a software level that could not only transmit your information, but also corrupt your phone entirely and render it useless. I use to get random BT connection requests on campus all the time, but I never accepted them with my S60v2 devices. I let my N80 download AND install one of those phantom applications one day, and the security settings in v3 wouldn’t let it install anyway.

    On other devices, antivirus may be necessary, but it just plain isn’t if you’re running a newer S60 device, no matter what kind of user you are or how important your data is .

  • JonnyBruha

    Something to add, even in their video, the speaker specifically says that Caribe would not have been able to infect either phone with the S60v3 platform. This video only showed the evolution of how S60 devices respond to incoming Bluetooth transmissions (he also could’ve hit the “End” key to get rid of the message as well). Even if you pressed “Yes” to accept the message on either phone, it would be put in the text message inbox. Even from there, if you specifically opened it from your inbox, you wouldn’t be able to install it on the device because it was a virus written for S60v2. No viruses have been written for S60v3 yet in the 2+ years it has been out.

  • JonnyBruha

    Something to add, even in their video, the speaker specifically says that Caribe would not have been able to infect either phone with the S60v3 platform. This video only showed the evolution of how S60 devices respond to incoming Bluetooth transmissions (he also could’ve hit the “End” key to get rid of the message as well). Even if you pressed “Yes” to accept the message on either phone, it would be put in the text message inbox. Even from there, if you specifically opened it from your inbox, you wouldn’t be able to install it on the device because it was a virus written for S60v2. No viruses have been written for S60v3 yet in the 2+ years it has been out.

  • http://s603rd.blogspot.com/ diLin

    One of the drawbacks that i see from getting your hands on one of these is that they seriously slow down your phone, and in the case of the already tight strapped RAM of the n95 – it’ll be Hell for the user !

    Moreover there aren’t many viruses around for the s60 v3 phones as yet, so you can just keep the sisx file on your phone incase of an emergency.

    But the firewall and intusion detection are certainly things that we can’t live without – especially in today’s world of digital espionage and theft…cyber theives can ruin your life with touch of a button !! Scary isn’t it?

    regards,
    dilin – http://s603rd.blogspot.com

  • http://s603rd.blogspot.com diLin

    One of the drawbacks that i see from getting your hands on one of these is that they seriously slow down your phone, and in the case of the already tight strapped RAM of the n95 – it’ll be Hell for the user !

    Moreover there aren’t many viruses around for the s60 v3 phones as yet, so you can just keep the sisx file on your phone incase of an emergency.

    But the firewall and intusion detection are certainly things that we can’t live without – especially in today’s world of digital espionage and theft…cyber theives can ruin your life with touch of a button !! Scary isn’t it?

    regards,
    dilin – http://s603rd.blogspot.com

Maemo-Guru.com Shop For Maemo Gear

Archives