The iphone tag has no wiki summary.
0
votes
1answer
95 views
What process on my jail broken iPhone is listening on port 80 [closed]
I can access it via telnet from the internet once I get the IP of my phone
Probably an HTTP server
telnet XXXX 80
Trying XXXX...
Connected to XXXX.
Escape character is '^]'.
HELP
...
0
votes
2answers
66 views
SQLite database iphone data [closed]
I opened an sqlite database file, and it seems to have many rows that arent readable.
The data has got weird symbols including "question mark diamonds". Is it data that iphone encrypts when it goes to ...
-1
votes
0answers
60 views
What are my options in deploying an authentication certificate to iPhones and Android devices? [closed]
I need to deploy certificates to iPhone and Android devices for the purpose of Activesync and Egnnite (like Dropbox) web authentication.
Even though most access is over HTTPs via the browser, the ...
4
votes
2answers
76 views
iPhone\Network Security
A client of mine is concerned someone is retrieving data and intercepting text-messages from his iPhone and his home network. He has told me that he has seen one of the text-messages he sent to his ...
2
votes
5answers
365 views
How secure are iPhone/Android/Windows 8 “PIN”/Pattern Lock features?
Most modern (and tablet-oriented) operating systems now offer alternative ways of logging on other than a strong password. For example, iPhones offer a 4-digit PIN, Android devices offer this and a ...
7
votes
1answer
210 views
Getting strange texts to an iPhone #PWD123456#00X
My dad is getting strange SMS texts to his iPhone 4
Some examples:
#PWD123456#WHL003=2308480298
#PWD123456#WHL004=2398480389
#PWD123456#WHL002
#PWD123456#WHL002
#PWD123456#STATUS?
...
2
votes
2answers
442 views
HTTPS verification failed - get certificate information iPad/iPhone
I went to log onto my bank's internet banking website this morning using Google Chrome browser on my iPad. I get the red error message of death. I can't figure out why. It's happening on both my ...
2
votes
2answers
235 views
Retreive header from SMS iphone
I received a lot of SMS from a guy where the phone number change every time. I can answer to these SMS, so I think it's only a spoofing of the sender ID of the SMS header which will be displayed in ...
5
votes
2answers
135 views
How much should I care about the iOS/Android version when pentesting mobile app?
Lets say I am performing penetration testing on mobile application, How significant is the version of operating system I am using while running the application?
I.e. if I test mobile application ...
4
votes
3answers
211 views
Are there any known botnets targetting smartphones?
Are there any known botnets that specifically target smartphones? What is their topology and how are they controlled?
What are they used for?
1
vote
1answer
239 views
Route traffic from iphone to dektop and back
Iv'e got some iOS app to pentest, and the target server is accessible only through the iPhone APN.
My problem is, that i want to configure the traffic in such way so i can intercept and tamper HTTP ...
2
votes
1answer
385 views
Is there any way to list the contents of the iPhone/OSX Keychain and their security level?
I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone.
Since it's possible for keychain items to be bound to a device (and ...
1
vote
2answers
92 views
Activesync: If I disable or rename the AD account does that mean the phone won't be wiped?
Suppose an Activesync phone needs to be wiped because it was lost, stolen, or it was an employee termination.
If we disable the account prior to wiping the device (or the device receiving the wipe ...
4
votes
3answers
176 views
Are there guidelines for application design of HIPAA compliant browser applications?
This is a different twist - I'm pushing dispatch information to first responders, such as fire, police, and EMS. But they all could, potentially, include medical information and PII together.
My goal ...
0
votes
2answers
158 views
Dealing with a (possible) virus on both MacOSX and iOS
The symptom:
On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page.
On iPhone, when navigating to google.com I get ...
0
votes
0answers
57 views
How to create an app for mobile website [closed]
Im trying to make an app that will basically be able to be downloaded directly from my mobile website. I honestly want to just make something so users can download the app to their phone and when they ...
6
votes
4answers
2k views
How effective is iPhone 3GS and 4 encryption?
My primary goal is to protect Activesync-based communication from being copied or stolen from an offline device.
In that context how effective is iPhone 3GS and 4 encryption?
3
votes
2answers
2k views
How to make an iPhone app HIPAA compliant?
How do we make a iPhone app HIPAA compliant. Our website is HIPAA compliant since we use encryption at rest, we use SSL, and other security provisions.
Will using a SSL connection give us the ...
0
votes
1answer
386 views
Iphone App Pen Test Guidance [closed]
I'm going to be studying pentesting iPhone apps. I'm a beginner in this area, and would like some guidance on the prerequisites of pen testing an iphone app, the details of the Mac machine that I'd ...
8
votes
5answers
837 views
Best practices for securing an iPhone
As this question on voicemail protection got answers veering more to protecting the mobile phone, I thought I should add a specific question on this topic.
There is already a question on protecting ...
4
votes
2answers
2k views
iPhone full disk encryption and theft protection?
Is it possible to fully encrypt an iPhone? What cipher does it use and are there any weaknesses?
How can I protect my valuable data, such as email, when my iPhone gets stolen?
10
votes
8answers
482 views
iPhone Tracking debacle - risks and countermeasures
For those of you who are not familiar with the topic, a quick search will turn up a lot of hits, e.g. see the researcher's report at Got an iPhone or 3G iPad? Apple is recording your moves - O'Reilly ...
2
votes
2answers
774 views
Guidelines for secure iPhone application development
Are there any security guidelines for development and assessment of (native) iPhone applications?
