[go: nahoru, domu]



Editor's note: Today we hear from Jaime Hinojosa, Information Technology Officer at Elsa State Bank, which has served Texans since 1945. Learn how Elsa State Bank overhauled its IT department to provide its workforce with the tools to be more mobile and productive.

Elsa State Bank's 20,000 customers across South Texas depend on our expertise in commercial, consumer and agricultural finance. We’re always looking for ways to better serve our customers and grow our customer base. As an IT officer, I introduce, evolve and maintain the technology that helps our 100 employees acquire more customers. Security, durability and affordability are top of mind when I’m researching a new solution.

In 2010, we looked to modernize our IT solutions. Our employees wanted greater flexibility to pursue customer leads outside of the office. At the time, our employees were using laptops and smartphones that didn’t have the security, functionality or mobile management we needed. I started researching other solutions and discovered Google Apps for Work, Google Mobile Device Management (Google MDM) and Android devices. I believed these solutions would help us achieve our goal of giving our team greater mobility with tools that not only advanced productivity but that also offered the security, central management and cost efficiency we required — I was right.

Today we use Google MDM to manage 40 Samsung Galaxy smartphones and Samsung Note tablets. These Android devices help us save time and money. One example: We used to print and ship 300-page binders for board meetings, which was wasteful and inefficient, but now, board members use Android tablets during meetings to view and share annual reports and quarterly earnings presentations.

Our employees are already benefitting from greater mobility at work. Lenders now commonly travel to construction sites to meet with customers, receive progress updates and pursue more loan opportunities. Loan officers who work away from the office can receive reminders about upcoming client meetings on their Android smartphone, locate and reach their destination using Google Maps and retrieve relevant customer documents from the cloud with Google Drive.

The security of Google Apps was essential to our purchasing decision. Since commercial institutions can be targeted by cybercriminals, protecting our customer data is especially important. Our centrally-managed Android devices help us save time and money without compromising security, and IT administrators benefit from capabilities like mobile device management. Remote administration also helps us save time and money from a pure logistics standpoint — we don’t have to be on site to solve individual problems that arise.

Before we adopted Google Apps for Work and Google MDM, our employees were clamoring for tools that allowed them to work from anywhere and better serve our customers. The integration of Google Apps and Google MDM, supported by Android devices, has vastly improved what our employees can accomplish each day. These tools have helped keep Elsa State Bank competitive amid a rapidly evolving work environment.



(Cross-posted on the Android Developers Blog.)

Over the course of the summer, we previewed a variety of security enhancements in Android 7.0 Nougat: an increased focus on security with our vulnerability rewards program, a new Direct Boot mode, re-architected mediaserver and hardened media stack, apps that are protected from accidental regressions to cleartext traffic, an update to the way Android handles trusted certificate authorities, strict enforcement of verified boot with error correction, and updates to the Linux kernel to reduce the attack surface and increase memory protection. Phew!


Now that Nougat has begun to roll out, we wanted to recap these updates in a single overview and highlight a few new improvements.

Direct Boot and encryption

In previous versions of Android, users with encrypted devices would have to enter their PIN/pattern/password by default during the boot process to decrypt their storage area and finish booting. With Android 7.0 Nougat, we’ve updated the underlying encryption scheme and streamlined the boot process to speed up rebooting your phone. Now your phone’s main features, like the phone app and your alarm clock, are ready right away before you even type your PIN, so people can call you and your alarm clock can wake you up. We call this feature Direct Boot.


Under the hood, file-based encryption enables this improved user experience. With this new encryption scheme, the system storage area, as well as each user profile storage area, are all encrypted separately. Unlike with full-disk encryption, where all data was encrypted as a single unit, per-profile-based encryption enables the system to reboot normally into a functional state using just device keys. Essential apps can opt-in to run in a limited state after reboot, and when you enter your lock screen credential, these apps then get access your user data to provide full functionality. File-based encryption better isolates and protects individual users and profiles on a device by encrypting data at a finer granularity. Each profile is encrypted using a unique key that can only be unlocked by your PIN or password, so that your data can only be decrypted by you.


Encryption support is getting stronger across the Android ecosystem as well. Starting with Marshmallow, all capable devices were required to support encryption. Many devices, like Nexus 5X and 6P also use unique keys that are accessible only with trusted hardware, such as the ARM TrustZone. Now with 7.0 Nougat, all new capable Android devices must also have this kind of hardware support for key storage and provide brute force protection while verifying your lock screen credential before these keys can be used. This way, all of your data can only be decrypted on that exact device and only by you.

The media stack and platform hardening

In Android Nougat, we’ve both hardened and re-architected mediaserver, one of the main system services that processes untrusted input. First, by incorporating integer overflow sanitization, part of Clang’s UndefinedBehaviorSanitizer, we prevent an entire class of vulnerabilities, which comprise the majority of reported libstagefright bugs. As soon as an integer overflow is detected, we shut down the process so an attack is stopped. Second, we’ve modularized the media stack to put different components into individual sandboxes and tightened the privileges of each sandbox to have the minimum privileges required to perform its job. With this containment technique, a compromise in many parts of the stack grants the attacker access to significantly fewer permissions and significantly reduced exposed kernel attack surface. In addition to hardening the mediaserver, we’ve added a large list of protections for the platform, including:

App security improvements

Android Nougat is the safest and easiest version of Android for application developers to use.
  • Apps that want to share data with other apps now must explicitly opt-in by offering their files through a Content Provider, like FileProvider. The application private directory (usually /data/data/) is now set to Linux permission 0700 for apps targeting API Level 24+.
  • To make it easier for apps to control access to their secure network traffic, user-installed certificate authorities and those installed through Device Admin APIs are no longer trusted by default for apps targeting API Level 24+. Additionally, all new Android devices must ship with the same trusted CA store.
  • With Network Security Config, developers can more easily configure network security policy through a declarative configuration file. This includes blocking cleartext traffic, configuring the set of trusted CAs and certificates, and setting up a separate debug configuration.
We’ve also continued to refine app permissions and capabilities to protect you from potentially harmful apps.
  • To improve device privacy, we have further restricted and removed access to persistent device identifiers such as MAC addresses.
  • User interface overlays can no longer be displayed on top of permissions dialogs. This “clickjacking” technique was used by some apps to attempt to gain permissions improperly.
  • We’ve reduced the power of device admin applications so they can no longer change your lockscreen if you have a lockscreen set, and device admin will no longer be notified of impending disable via onDisableRequested().These were tactics used by some ransomware to gain control of a
    device.

System Updates

Lastly, we've made significant enhancements to the OTA update system to keep your device up-to-date much more easily with the latest system software and security patches. We've made the install time for OTAs faster, and the OTA size smaller for security updates. You no longer have to wait for the optimizing apps step, which was one of the slowest parts of the update process, because the new JIT compiler has been optimized to make installs and updates lightning fast.

The update experience is even faster for new Android devices running Nougat with updated firmware. Like they do with Chromebooks, updates are applied in the background while the device continues to run normally. These updates are applied to a different system partition, and when you reboot, it will seamlessly switch to that new partition running the new system software version.

We’re constantly working to improve Android security and Android Nougat brings significant security improvements across all fronts. As always, we appreciate feedback on our work and welcome suggestions for how we can improve Android. Contact us at security@android.com.



Simple to use enterprise applications can sometimes seem like a misnomer. While enterprise software has remained complex, consumer software has gravitated towards simplicity. For Google Apps administrators, we believe in providing an EMM solution that’s as simple to operate as changing your personal Gmail settings, all the while delivering enterprise-grade security.

We recently launched three new capabilities that make it easier for Apps admins to set up mobile management and define policies:
  • Mobile Management can now be set up with one click 
    By simply clicking MANAGE NOW on the Admin console landing page, admins can set up Mobile Management with a predefined set of security policies:
  • Android for Work can now be set up with one click
    No longer must admins complete fifteen steps spread across different pages in the admin console, cutting and pasting security tokens, to set up Android for Work. With a single click, admins can begin managing and whitelisting mobile apps (MAM) for their Android for Work devices in their domain:
  • Device management settings are now easier to find and use
    With the continued evolution of our device management and application management capabilities, an ever-growing list of policy settings on a single page has become unwieldy for admins. Hence, we’ve redesigned the device management experience by logically categorizing all device policy settings, making them easier to find and use:
  • Enterprise mobile devices can now be managed from anywhere, anytime
    With the latest version of Google Admin App, we now offer mobile device management capabilities at admins’ fingertips. Our admins don’t need to reach their desk to handle a device security breach. They can view the list of all managed devices and take remote actions like account wipe or even block user devices right from our Admin app anywhere, anytime:
As we continue to improve Google Mobile Management, our goal will always be to make it simple for admins to keep their employees productive while keeping work data secure on their mobile devices.

For the latest news and resources about Google Mobile Management, including launch announcements, product updates or user guides, please join our Admin community at Google for Work Connect.




Working on the move has gotten pretty easy. With just your phone, you can set up your next meeting in Calendar, keep track of your expenses in Concur and follow up with a new client in Gmail. And as the IT admin, it’s now easier than ever to get your team up and running on their own devices with Google Apps Mobile Management. Starting today, with the new Device Policy app on iOS, employees can easily see which apps are company approved, install them, and keep getting things done. On Android, admins can already use the Device Policy app and Google Play for Work to manage devices and apps (MDM and MAM for alphabet soup lovers), while on iOS, admins can also already manage device policies like requiring passwords and removing company information with account wipe (MDM) directly from the Admin console.
As the admin, you can quickly whitelist any work app from the iOS device management section in the Admin console.
Because security has always been a top priority for Google, we're continuously working to stay ahead of those with bad intentions. But the latest security is only as good as the number of people who use it, and that’s why mobile management — including MDM and MAM — is simply a part of Google Apps for Work, so you can just start using it, nothing to buy. We spend a lot of time on those devices in our pocket, so take advantage of everything included with Google Apps for Work, and let us know what’s working and what could be better in the Google for Work Community.



(Cross-posted on the Android Blog.)

Over a billion people today carry Android smartphones—devices that are more powerful than the computers we used just a few years ago.

For many, these phones have become essential tools to help us complete important work tasks like checking email, editing documents, reviewing sales pipelines and approving deals. But for the majority of workers, smartphones and tablets are underutilized in the workplace. Their business and innovation potential remain largely untapped.

Today we're announcing the Android for Work program to tap into that potential. With a group of partners, we're helping businesses bring more devices to work by securing, managing and innovating on the Android platform.

Android for Work features four key technology components:

  • Work profiles – We’ve built on the default encryption, enhanced SELinux security enforcement and multi-user support in Android 5.0, Lollipop to create a dedicated work profile that isolates and protects work data. IT can deploy approved work apps right alongside their users' personal apps knowing their sensitive data remains secured. People can use their personal apps knowing their employer only manages work data and won’t erase or view their personal content.
  • Android for Work app – For devices running Ice Cream Sandwich through Kitkat, or that don’t run work profiles natively, we’ve created the Android for Work app. The app, which delivers secure mail, calendar, contacts, documents, browsing and access to approved work apps, can be completely managed by IT.
  • Google Play for Work – Google Play for Work allows businesses to securely deploy and manage apps across all users running Android for Work, simplifying the process of distributing apps to employees and ensuring that IT approves every deployed app.
  • Built-in productivity tools – For everyday business tasks, we’ve created a suite of business apps for email, contacts and calendar, which supports both Exchange and Notes and provides document editing capabilities for documents, spreadsheets and presentations.
We’re joined by a number of partners as part of the Android for Work program, including many familiar names within the Android ecosystem:
Our partners bring IT:

  • Consistent management – Enterprise mobility management (EMM) providers integrate with standardized management APIs to create a simple way to manage all Android devices, new and old, from one dashboard. All Android for Work capabilities are delivered through EMM partners, with more providers available soon.
  • Secure business apps – Software vendors and developers can create a single version of any Google Play app that can be securely deployed to any Android device without alterations or wrapping. And they can create standard management configurations that allow IT to apply policies per app.
  • Innovative devices – Android smartphone and tablet makers are a key part of the Android for Work program, as they create devices and experiences that add additional value for customers.

Together with a wide range of management, application and device makers, we believe the Android for Work program provides businesses and workers with the choice and flexibility they need to get things done at work.

Learn more by visiting google.com/work/android.




Email and scheduling are two of the most commonly used tools at work. And Gmail and Google Calendar have been core to helping our Apps customers get things done. As phones have become one of our main devices at work, school and home—whether you’re checking your schedule on the move between meetings, reading your email in the taxi on your way to the airport, or responding to a customer request while at your daughter’s basketball game—we need mobile apps that help us get things done.

Today, we’re introducing the brand new Google Calendar app on Android—built to save you time and help you make the most of every day—and the new Gmail app on Android that has a more modern style, sleeker transitions and supports other email providers.

Assists in Calendar: suggestions that save you time
When creating a calendar event, we often have to piece together phone numbers, addresses and attendees from lots of different sources, then add them to our calendars manually. With Assists, Calendar can suggest titles, people and places as you type, as well as adapt to your preferences over time. For example, if you often have lunch with your mentor Kelly, Calendar can quickly suggest this when you type ‘l-u-n.’
Schedule View in Calendar: easy to scan and lovely to look at
Your calendar is more than just a list of dates and times—it’s your life! So Calendar’s new Schedule view includes photos and maps of the places you’re going, cityscapes of travel destinations, and illustrations of everyday events like dinner, drinks and yoga. These images will bring a little extra beauty to your day, and make it easy to see what’s going on at a glance—perfect for when you’re checking in from your phone or tablet.
The new Google Calendar will work on all Android 4.1+ devices. It’s available today on all devices running Android 5.0 Lollipop, and you’ll be able to download the update from Google Play in the coming weeks. (And yes, we’re also working on a version for iPhone!) Learn more on our website.

A more modern Gmail app for Android
Today, the Gmail app for Android is getting updated with a more modern style, sleeker transitions, and a few other handy improvements.

As part of the new design, there’s now a convenient reply button at the bottom of every message, making it quick and easy to continue a conversation when you’re on the go. And if you access the app on your Android tablet, you’ll notice it’s easier to switch between accounts and the different inbox categories.



Lastly, we know some of you have email addresses that aren’t Gmail (it’s okay to admit it). The updated Gmail app now supports all email providers, which means you can now set up a separate inbox for, say, your Yahoo Mail or Outlook.com addresses using POP/IMAP.

The updated Gmail app will support all Android 4.0+ devices, so look for it in Google Play over the next few days.

We hope the new Gmail and Calendar Apps on Android help save you time when working on the go.



(Cross-posted on the Google Drive Blog.)

Google Drive makes it easy to keep your stuff safe and accessible from any device, but it doesn’t stop there. We want you to easily find and share your documents, photos, and PDFs with others. So, in addition to a Material Design facelift, the latest update for Android gives you new ways to add, locate, and share from Drive.

Improved Search
The search tool makes it even easier to find the content you’re looking for by providing updated results as you type each letter into the search box.


Better Sharing
Now, you can add a custom message when you share a file so your collaborators know why you sent it—for example, you can add a note asking for feedback. You can also turn on link sharing to make the file “public” and set access to view, comment, or edit. This automatically copies the link to the clipboard and allows you to paste it wherever you want.

Enhanced PDF Viewer
A new PDF viewer lets you find, select and copy text in PDFs, plus, it’s built right into Drive so you don’t need to launch another app.


Look for these updates to roll out over the next several days. If you don't have the Google Drive app, you can download it from Google Play.

Simon Forsyth, Software Engineer, Gmail

(Cross-posted on the Gmail Blog.)

Important stuff doesn't always happen when you’re conveniently sitting at your desk. Maybe you're out to dinner when your boss tells you that she needs the latest project proposal ASAP, or your daughter calls you on your commute home to ask you to proofread her college essay (that’s of course due that night!). While we can't make your life more predictable, today's update to the Gmail iOS app, along with earlier updates to the Gmail Android app, makes it easier to get stuff done on-the-go.

Just like with Gmail on the web, you can now insert files from Google Drive directly into an email on your phone or tablet.
The apps will even tell you if your file isn’t shared with the person you’re sending it to so you can change the sharing settings before you send it. And to help you store all your files in a single place, if someone sends you an email attachment, you can save it directly to Drive with one tap.
On iOS, you can now also change your profile picture right from your Settings. So the next time you take that perfect selfie, you can make it your profile picture right away, all while out with friends. Lastly, if you have multiple Gmail accounts, you can choose which signed-in accounts you want visible in the app.

You can give these features a try by downloading the updated Gmail iOS app from the App Store, and if you’re using an Android phone or tablet, you can get the latest version of the Gmail Android app from the Google Play Store.



Chromebooks are designed to make computing easier and better for everyone. Businesses of all sizes prefer their low total cost of ownership, central web-based management console and built-in, strong security mechanisms.

They’re also great devices for collaborating from anywhere, any time. Today we’re adding another tool for businesses to connect on the go. At the Enterprise Connect conference, Rajen Sheth, Director of Product Management, Chrome for Business announced we’re working with Cisco, and demonstrated a proof of concept of Cisco WebEx running on a Chromebook.
We're also integrating Cisco UC technologies into Google Apps, helping our joint customers work better together. Imagine joining a WebEx meeting directly from Calendar, or starting an instant meeting from Contacts or the Gmail People widget. Starting today, if you use Cisco and Google Apps, features you love, like messaging, fax, click-to-call and Cisco presence, are visible alongside Gmail.
If you’re a Cisco customer and you’re interested in learning more, get in touch with your Google sales team or contact Google Enterprise sales here. To learn more about Chromebooks, find more details here.

Denis Teplyashin, Software Engineer, Google Drive

(Cross-posted on the Google Drive Blog.)

The process of creating and accessing your stuff shouldn’t be, well...a process. Today, the Drive app for Android is getting several improvements to make creating and accessing your stuff on-the-go even easier.


To help you find the content you care about, Drive files will now be displayed in a clean, simple card-style. You can swipe between files to see large previews that let you quickly review and discover the information you’re looking for. And if you want to keep some Drive files on your Android device, you’ll now be able to “download a copy” from the actions menu inside settings.


The updated Drive for Android app also gives you to a way to keep track of important paper documents like receipts, letters, and billing statements. Simply click “Scan” from the Add New menu, snap a photo of your document, and Drive will turn the document into a PDF that’s stored for safekeeping. And because Drive can recognize text in scanned documents using Optical Character Recognition (OCR) technology, a simple search will retrieve the scanned document later. No more frantic scrambling through drawers looking for a receipt or digging through your pockets to find that business card -- just scan, upload and search in Drive.


The editing experience in Google Sheets has also gotten some improvements: now you can adjust font types and sizes for a spreadsheet and tweak the cell text colors and cell alignment right from the app. Plus, the Drive app comes with Cloud Print support so you can print anything from Drive with a Cloud Ready printer -- perfect if you need to, say, print a contract right before a meeting.

Get the Google Drive app today on Google Play



(Cross-posted on the Drive Blog.)

With the holidays fast approaching, life speeds up and work can’t always wait.

While on the move, you can now edit Google Sheets on your mobile device, just like you can with Google Docs. From the Drive app on your iPhone, iPad or Android device, you can create a new spreadsheet or edit an existing one. You can switch fonts, resize columns, sort data, and more. And just like on your computer, you’ll be able to see other people’s edits instantly as they’re made.


Beyond spreadsheets, you may notice a few other tweaks to the Drive app, including better text formatting when you copy and paste in a Google document. And if you’re using an Android device, you can now edit text within tables in documents and add a shortcut on the homescreen of your device to any specific file in Drive.

Whether it’s 2013 budget planning or your company’s holiday gift list, the Drive app on your mobile device makes it easy to get things done wherever you are.

Get the Google Drive app today from the Apple App Store and Google Play.

(Cross-posted from the Google Docs Blog and Google Mobile Blog.)

Increasingly, people are using mobile phones to access information -- from email to web browsing to editing documents. Part of getting work done on the go is being able to easily access, edit and share content, which is why we’re happy to announce the new Google Docs app for Android.

With this new app it’s easy to filter and search for your content across any Google account, then jump straight into editing docs using the online mobile editors. The app also allows you to easily share items with contacts on your phone, right from within the app.


The Docs app also allows you to upload content from your phone and open documents directly from Gmail. You can also add a widget to your home screen for easy access to three core tasks: jumping to your starred documents, taking a photo to upload, or creating a new document with one tap.


And my favorite feature: Using the app and your phone’s camera, you can turn photos with text into editable Google documents with the power of optical character recognition (OCR). Just create a new ‘Document from Photo' or select the camera icon from the widget, and your converted document will appear in your documents list shortly after you snap the picture. You can also convert photos already stored on your phone by sharing them with the Google Docs app. OCR does a pretty good job capturing unformatted text in English but won't recognize handwriting or some fonts - stay tuned, it will get better over time!


The Google Docs app is currently available in English and works on Android 2.1+ phones. Try it out by scanning the QR code below or by visiting Android Market.


Let us know what you think of the new Google Docs Android app in our forum.

With more than 300,000 devices activated per day globally, Android is seeing rapid adoption in the post-PC era. Android works quite well with Google Apps, but we’re working to make it an excellent choice for both end-users and IT at businesses and schools. Over the last year for instance, we helped IT administrators manage Android straight from the browser, and we introduced features such as Priority Inbox view in Gmail for Android and the ability to edit Google Docs on the go.

Today we are announcing three more updates to our Android for business portfolio around security and connecting with colleagues. These products will be available to all Google Apps for Business and Google Apps for Education customers:
  1. With the new version of the Google Apps Device Policy app, employees can quickly secure a lost or stolen Android 2.2+ device by locating it on a map, ringing the device, and resetting the device PIN or password remotely via the new My Devices website.

  2. Google Apps administrators have an option in the control panel to “Encrypt Data on Device”, which will now include requiring encrypted storage on Android 3.0 tablets. Devices will need version 2.0 of the Google Apps Device Policy app.
  3. A new corporate contacts app, Google Apps Lookup, makes it easier to find and contact people in your organization. Type (or speak) the name or email address of a coworker, and then tap to call, email, IM or send a text message. Lookup pulls information from the Google Apps directory, so admins need to enable “Shared Contacts” in the control panel before employees can use Lookup on their Android 2.1+ devices.

Learn more about how to set up Google Apps Device Policy and Google Apps Lookup. Mobile devices harness the power, speed and scale of the web to help people stay productive on the go. And these improvements should help make Android users even more productive while keeping their information secure. Stay tuned, there’s more to come.

Today in Tokyo, more than 600 IT leaders from across Japan are coming together with Google and 18 of our partners at Google Enterprise Day. It’s our annual event dedicated to discussing trends in enterprise technology and how businesses can use cloud technologies to increase productivity and innovate more quickly. This year, one of the hottest topics is mobile computing and how companies can allow employees to use their personal phones and tablets at work without compromising corporate security.

With over 200,000 devices activated each day, Android is seeing rapid adoption, and today we are launching new administrative controls that make it possible to securely manage these devices in the Google Apps environment. With this launch, Google Apps provides secure management and sync capabilities for all major mobile platforms. You can manage most mobile devices right from the browser, without having to deploy dedicated servers.

Many Android devices feature tight integration with Google Apps, including native applications for Gmail, Google Talk, and Google Calendar, as well as mobile access to Google Docs. Now any employee with an Android device running version 2.2 - personal or company-issued - can access their corporate information while allowing administrators to enforce data security policies such as:
  • Remotely wipe all data from lost or stolen mobile devices
  • Lock idle devices after a period of inactivity
  • Require a device password on each phone
  • Set minimum lengths for more secure passwords
  • Require passwords to include letters and numbers

When the employee leaves the company, the administrator can withdraw access to corporate info, which allows the employee to continue to use their device if it’s their own.

These policies can be enforced on devices that have installed the Google Apps Device Policy application, which will be available from Android Market in the next few days. They will be available free to all Google Apps Premier and Education Edition customers in the next few days, and can be accessed from the 'Mobile' tab under 'Service Settings' in the Google Apps control panel.



To learn more about these updates in mobile device management for Google Apps, join us for a live webcast with Mayur Kamat, Google Apps Product Manager, on November 10, 2010 at 9 a.m. PDT / 12 p.m. EDT / 6 p.m. GMT. Register now.

It's important for business users to have fast, easy access to their email and calendars when they're on the go – even when cell phone reception is limited. That's why we're happy to tell you about new speed and functionality improvements for Gmail and for Google Calendar for the iPhone and for Android-powered devices. Click through the links to read descriptions on the Google Mobile Blog, and to watch a video overviewing the new features.

To access these mobile apps, browse to http://www.google.com/m/a/example.com
on your iPhone or Android-powered device (you'll need to replace "example.com" with your organization's domain name.) Continue by clicking the link for either Gmail or Calendar.

by Debbie Leight, Google Apps team