We carry mobile phones with us everywhere we go and many people trust them to be secure, right? This talk will look by example (otherwise known as showing exploits) at how well this trust is placed. We will specifically look at two popular mobile platforms: Google Android and Palm WebOS. Palm WebOS will be investigated as a case study for mobile platforms which haven't been designed with a specific security model in mind and how this can result in an attacker turning a phone into the perfect bugging device. Additionally, we will look at the Google Android platform, which has been build with security features such as a sandbox. By looking into the specifics of the sandbox implementation we will see how successful attacks are still feasible against android phones. What you will take away from the talk is an understanding of why a robust security model is important on mobile devices and it will help you to understand the factors you face when assessing the mobile platform that is to be used by your organisation.