The iphone tag has no wiki summary.
2
votes
5answers
195 views
How secure are iPhone/Android/Windows 8 “PIN”/Pattern Lock features?
Most modern (and tablet-oriented) operating systems now offer alternative ways of logging on other than a strong password. For example, iPhones offer a 4-digit PIN, Android devices offer this and a ...
7
votes
1answer
178 views
Getting strange texts to an iPhone #PWD123456#00X
My dad is getting strange SMS texts to his iPhone 4
Some examples:
#PWD123456#WHL003=2308480298
#PWD123456#WHL004=2398480389
#PWD123456#WHL002
#PWD123456#WHL002
#PWD123456#STATUS?
...
2
votes
2answers
312 views
HTTPS verification failed - get certificate information iPad/iPhone
I went to log onto my bank's internet banking website this morning using Google Chrome browser on my iPad. I get the red error message of death. I can't figure out why. It's happening on both my ...
2
votes
2answers
181 views
Retreive header from SMS iphone
I received a lot of SMS from a guy where the phone number change every time. I can answer to these SMS, so I think it's only a spoofing of the sender ID of the SMS header which will be displayed in ...
1
vote
1answer
204 views
Route traffic from iphone to dektop and back
Iv'e got some iOS app to pentest, and the target server is accessible only through the iPhone APN.
My problem is, that i want to configure the traffic in such way so i can intercept and tamper HTTP ...
2
votes
1answer
253 views
Is there any way to list the contents of the iPhone/OSX Keychain and their security level?
I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone.
Since it's possible for keychain items to be bound to a device (and ...
5
votes
2answers
130 views
How much should I care about the iOS/Android version when pentesting mobile app?
Lets say I am performing penetration testing on mobile application, How significant is the version of operating system I am using while running the application?
I.e. if I test mobile application ...
4
votes
3answers
162 views
Are there guidelines for application design of HIPAA compliant browser applications?
This is a different twist - I'm pushing dispatch information to first responders, such as fire, police, and EMS. But they all could, potentially, include medical information and PII together.
My goal ...
0
votes
2answers
150 views
Dealing with a (possible) virus on both MacOSX and iOS
The symptom:
On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page.
On iPhone, when navigating to google.com I get ...
0
votes
0answers
55 views
How to create an app for mobile website [closed]
Im trying to make an app that will basically be able to be downloaded directly from my mobile website. I honestly want to just make something so users can download the app to their phone and when they ...
1
vote
2answers
88 views
Activesync: If I disable or rename the AD account does that mean the phone won't be wiped?
Suppose an Activesync phone needs to be wiped because it was lost, stolen, or it was an employee termination.
If we disable the account prior to wiping the device (or the device receiving the wipe ...
4
votes
3answers
209 views
Are there any known botnets targetting smartphones?
Are there any known botnets that specifically target smartphones? What is their topology and how are they controlled?
What are they used for?
4
votes
2answers
2k views
iPhone full disk encryption and theft protection?
Is it possible to fully encrypt an iPhone? What cipher does it use and are there any weaknesses?
How can I protect my valuable data, such as email, when my iPhone gets stolen?
3
votes
2answers
2k views
How to make an iPhone app HIPAA compliant?
How do we make a iPhone app HIPAA compliant. Our website is HIPAA compliant since we use encryption at rest, we use SSL, and other security provisions.
Will using a SSL connection give us the ...
0
votes
1answer
373 views
Iphone App Pen Test Guidance [closed]
I'm going to be studying pentesting iPhone apps. I'm a beginner in this area, and would like some guidance on the prerequisites of pen testing an iphone app, the details of the Mac machine that I'd ...
2
votes
2answers
761 views
Guidelines for secure iPhone application development
Are there any security guidelines for development and assessment of (native) iPhone applications?
7
votes
5answers
817 views
Best practices for securing an iPhone
As this question on voicemail protection got answers veering more to protecting the mobile phone, I thought I should add a specific question on this topic.
There is already a question on protecting ...
10
votes
8answers
477 views
iPhone Tracking debacle - risks and countermeasures
For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at Got an iPhone or 3G iPad? Apple is recording your moves - O'Reilly ...
6
votes
4answers
2k views
How effective is iPhone 3GS and 4 encryption?
My primary goal is to protect Activesync-based communication from being copied or stolen from an offline device.
In that context how effective is iPhone 3GS and 4 encryption?
