Tag Info

Hot answers tagged

8

Each version of Android is incrementally stronger on this front than the previous, and Lolipop certainly pushes application sandboxing a step further than Kitkat, particularly with respect to inter-app isolation. Third-party "firewall" apps on Android are probably a bit over-hyped, and the level of protection they can offer without rooting is in my opinion ...


3

Does Android KitKat and later have sufficient default sandboxing to prevent malware from doing any harm How long is a piece of string? Ensuring confidentiality isn't the only goal of information security, if the App was to run a background service that constantly consumed significant CPU with the goal of draining your battery would that be a threat? ...


1

SMS or app: App-style access is more secure on both major platforms since app data is sandboxed while SMS provider is publicly accessible from all apps. Android is a little bit more secure than iOS since it gives the user a list of privileges an app is using hence giving out a clue to the user to be more cautious when the app asks for SMS access (or, if ...


1

An old question, but adding an answer for modern times. For sensitive responses, you should set the following header: Cache-Control: no-store, must-revalidate These days, you probably don't need to worry about the HTTP 1.0 Expires header. Pragma is only for requests, not responses. To refresh the page just after session timeout (so that the login form ...


1

It can be done using netcat nc www.myhost.com 80 TRACE /mypage.html HTTP/1.1 Host: www.myhost.com An example of output is HTTP/1.1 405 Method Not Allowed Server: Apache-Coyote/1.1 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1 Set-Cookie: JSESSIONID=rfyji7QBFFld7HwMGLVM+F8s.undefined; Path=/ Content-Type: ...



Only top voted, non community-wiki answers of a minimum length are eligible