iOS is Apple's operating system for the iPhone, iPad and iPod Touch.

learn more… | top users | synonyms (1)

1
vote
0answers
61 views

Force TLS on mobile app

i'm developing a mobile application for iOS and Android. On this app i'm asking resources on a secure server through ajax. Server's developers asked me to force the call in order that we use TLS ...
1
vote
0answers
54 views

FIPS Compliance with iOS app

Our company is working on getting FIPS validation for the iOS app and is in the initial phase. We have decided to use a private FIPS-certified libraries for using in the crypto modules. I have some ...
1
vote
2answers
2k views

Why do I need a certificate to pin an SSL connection with AF Networking 2?

I am using the AF Networking 2 library and read that I need to include the server's certificate here. The client should be able to tell that the certificate is valid when it connects to the server, ...
1
vote
0answers
122 views

HIPAA Compliant App, using Encypted Core Data vs Core Data Attribute Encyption

I am writing an iOS app which needs to be HIPAA compliant. The app should preferably function offline, so data needs to be stored on the phone. So here is what I was thinking of doing: On First ...
1
vote
0answers
136 views

Implementation of different BCrypt versions

I'm fairly new to encryption, and I am investigating the different kind of encryptions. I want to encrypt passwords in a secure way. I discussed this with my colleague, and he said that BCrypt is the ...
0
votes
2answers
459 views

Are passwords safe to send through POST, without SSL in a iOS app?

Is it safe to post passwords to my web server in this manner? NSURL *url=[NSURL URLWithString:@"http://mywebsite/test/register.php"]; NSData *postData = [post dataUsingEncoding:NSASCIIStringEncoding ...
0
votes
2answers
94 views

how to encrypt a sensitive model on android and ios

I am writing a mobile app which uses a statistical model contained in binary files. I want to be able to distribute the app freely, but I don't want anyone to be able to use my model files, even on a ...
0
votes
3answers
62 views

How secure is my method?

I want to select data from a MySql database on an iphone device. The method I seem is the easiest one is to connect to a php file with GET arguments and then return it as a string. Now I'm just ...
0
votes
1answer
389 views

How to prove iOS app is vulnerable to MiTM

I'm updating an iOS app and I want to prove that it is vulnerable to MiTM attack. I have set up Charles Proxy on my mac and configured the Simulator so that it trusts Charles CA Certificate, per ...
0
votes
3answers
142 views

Restrict request to Android and Iphone App only?

I have a ASP.NET/IIS server. I want to restrict my server to only accept request from Android and Iphone(IOS) applications. I have heard about HMAC. Can HMAC help me?
0
votes
1answer
237 views

What process on my jail broken iPhone is listening on port 80 [closed]

I can access it via telnet from the internet once I get the IP of my phone Probably an HTTP server telnet XXXX 80 Trying XXXX... Connected to XXXX. Escape character is '^]'. HELP ...
0
votes
1answer
63 views

Iphone app not allowing proxy

Hi everyone I am interested in how a banking app works, especially the way it handles https requests. So I installed one, set my proxy settings, started burp suite and expected it to work. As you may ...
0
votes
1answer
84 views

What tools are available for iOS vulnerability assessment and penetration testing [closed]

I want to start learning about VA on Apple iOS devices. Besides documentation, is there any good tool - in terms of automated vulnerability scanners, or scripts - to start?
0
votes
1answer
135 views

Per Vendor/Publisher Device Unique Identifier, How is it and how much secure? [closed]

iOS and WP8 support Unique Identifier per Vendor or Publisher according to this and that. Android unfortunately does not support that feature. Is there anybody knows the mechanics of that mechanism? ...
0
votes
1answer
199 views

Zeus for iOS devices

Is there a known variant of Zeus which attacks iOS based mobile devices? I have read about versions for Android and Symbian , wondering if iOS is vulnerable to it as well.
0
votes
1answer
78 views

Level of Data Security in iOS [closed]

How secure is the data stored on iOS devices, specifically app data like notes, pictures, etc.? Are there any ways to make it more secure?
0
votes
0answers
24 views

Snoop-it crashes on iOS6 [on hold]

I'm trying to run Snoop-it on an iPhone 5 running iOS 6.1.4 but it crashes immediately after starting: Feb 25 14:18:56 Sogetis-iPhone Snoop-it Config[745]: MS:Notice: Injecting: ...
0
votes
0answers
15 views

Does sending a token back with a different channel (iOS Push Notification) improve security?

So I have this customer who has a project which is "very sensitive". It's a Jabber client which will connect to their servers to allow users to communicate. Here's what he requires for the ...
0
votes
0answers
69 views

How to allow activesync, but block outlook iOS app? [migrated]

An outlook application for iOS has just been released, and it seems like it is welcomed and rejoiced by many newssites: https://itunes.apple.com/us/app/microsoft-outlook/id951937596?mt=8 ...
0
votes
0answers
37 views

Do iOS applications have access to the certificates installed?

As the title says, I'm curious if a generic iOS application can access/retrieve the certificates installed in the device (e.g., via a management profile) Thanks
0
votes
0answers
301 views

Mobile Backend Server: How to validate authenticated client is valid?

Consider this scenario Step 1: App asks user to "Sign In" using Google or Facebook Step 2: Once authenticated, app sends user's Id (from Google/Facebook) to My App Server requested to app ...
0
votes
0answers
22 views

Is SCEP safe if I use a different long and complex password per enrollment, and validate it against expected parameters?

I'm considering using SCEP to enroll iPads and other devices in my network. The iOS configuration profile allows me to configure a different password for each device. Is it valid, and safe for me to ...
0
votes
2answers
168 views

What security mechanisms are in place for iOS' custom keyboards?

Apple has just announced iOS 8. The new version appears to be more extensible than previous versions, and one of the new possiblities is to allow developers to develop custom keyboards, different than ...
0
votes
0answers
426 views

Share and store RSA - public key in java server and vice versa

My requirements are: Requirement 1: Share public key to java server. Steps: Generate public-private keys in iOS app. Store the generated keys in keychain. Send generated public key to java server. ...
0
votes
1answer
125 views

Tablet / phone app security in unsecured networks

Although reluctant to use my laptop on unsecured networks, I at least know that without me launching any processes or logging into certain web pages, that I will not be sending any credentials over ...
0
votes
0answers
16 views

Heartbleed - impact on iOS apps? [duplicate]

Just heard about the heartbleed news over the internet for OpenSSL and wondering if it affects ios apps as well. My app uses openssl crypto library and thus the concern ! Any views in this regard ...
-1
votes
1answer
121 views

Possible ways to test security for Windows Phone 7 or iOS devices [closed]

I'm trying to test the security features of different types of OSs available, and I decided to narrow this down to the Windows Phone 7 and iOS operating systems. I will be testing both my Nokia 800 ...
-2
votes
1answer
428 views

Foolproof Jailbreak detection? [closed]

I went through various posts which talks about jailbreak detection mechanisms. Whatever I came across is either something that apple would reject during the vetting process or something that could be ...
-2
votes
1answer
136 views

Cross-checking Driver's License Against DMV Using MySQL DB or PHP Script? [closed]

Ok, so I am coming into this a little blind on how to go about allowing this app to store and check one's driver's license ID against the DMV or some other government agency. Basically, everything ...