Tag Info

New answers tagged

1

To really know what is happening, you should not set your Linux machine as a proxy but as a router. The "proxy" really is an HTTP proxy. Applications which want to do HTTPS (HTTP-within-SSL) may use the system settings and use a CONNECT method to make your proxy forward the traffic in both directions; but they may also connect directly to the serve, ...


0

As you are able to to write your own keyboards for android it could be assumed that a keyboard could be written that functions like a normal keyboard while at the same time logging the input and passing it back to the attacker. Such an application shouldn't be to hard to write.


1

You would need to manually check that the signature is from the application developer. Google shouldn't have the private key that the official release is signed with. Google however could easily make their own signature as they are the signing authority for the Play store, however the new signature wouldn't match up with the certificate for the official ...


0

One specific piece of data you can access with the "Phone State" permission is the IMEI/IMSI of your phone/sim card. This number is used to identify your device for target-ads (so the ad provider could tell whether you've already seen an ad). Since showing ads is a common business model in mobile apps, the "Phone State" permission being requested is as well ...


2

No, the Android OS doesn't guarantee that intent data is not seen by anyone. Any malicious app implementing the intent filter is able to receive the message and thus get hold of your sensitive data. Encrypting data is good idea but make sure that: the key used for encryption is not stored on the SD card. you are not hard-coding the key in the app as it is ...


0

There are two options for this currently, the first is to use a software-defined radio that supports the ISM band (at least 2.4 to 2.485 GHz). This will allow you to grab any radio signals within the bluetooth range and will be especially useful if you're trying to identify interfering signals as you'll be able to look at the big picture of the nearby radio ...


0

Based on existing comments, answers, and some more elaboration from you, I'd say your scenario is something that Microsoft tried to create a solution to with Next-Generation Secure Computing Base (NGSCB) which was also formerly known as Palladium. Without encrypting everything (code, memory, data in the processor, data traveling on the bus, data moving ...


0

Yes you can record keystrokes by user on android device simply by reverse engineering the keyboard app . http://www.android-app-development.ie/blog/2013/03/06/inserting-keylogger-code-in-android-swiftkey-using-apktool/ Here is one example where attacker attaches malware to the famous swiftkey keyboard using apktool


-1

Stopping android to send keyboard keystrokes: A scenario for preventing the keyboard on sending would be by using a firewall. For NON-Rooted phones this ones should do the trick: NoRoot Firewall >> www.play.google.com/store/apps/details?id=app.greyshirts.firewall Mobiwol >> www.play.google.com/store/apps/details?id=com.netspark.firewall In this moment, ...



Top 50 recent answers are included