Tag Info

New answers tagged

3

As curious_cat said you need to take a holistic veiw of this, you have many separate but connected issues at play here. Below is general rundown of how I would take on this task. First and formost you should be looking at data architecture, the how, where and whys your data is stored where it is, ideally sensitive data should be segmented and have tightly ...


10

The key point here is that any security is only as strong as its weakest link. Be clear from the start whether you are protecting against: inadverent leaks by clueless or forgetful users or against intentional leaks by motivated adversaries The former are easier to protect against. But to design an effective & practical solution against the ...


1

Short answer: No Complementing what schroeder said, you can verify the content of that QR code with any QR code scanner (there are some for PCs). I verified and the content is an URL, like: https://login.weixin.qq.com/l/YYEwfl9Y-A== By itself those qrcodes are not dangerous for your mobile. However, whatever is in that site is what you need to care of. ...


2

In the specific case of this attack it would appear from reporting on the subject that additional information was included in the data dumped from the site, including physical addresses, GPS Co-Ordinates and partial Credit/Debit card numbers. A profile with things like Credit card details filled in, could be taken to indicate that the user was more than ...


0

Developers get the MINIMUM VERSION and TARGET VERSION confused. The minimum version acts as a filter in the play store to show only compatible apps. The target version is a measuring stick to how up to date it is with newer operating systems. Here is the problem: Android OS will automatically grant additional permissions to an application if it hasn't ...


0

Android Permissions are a tricky subject - there are a range of reasons why an App might require some fishy sounding permission to private data: Intent to steal you data and use it for advertsising or selling it Lazy coding / incompetent coding ( I'm not sure what exactly we need, so let's just get this general permission to all files ) Bad Android Design ...


0

Based on the information which I've found on-line so far, the following statements are true: Passwords are always encrypted source. Chrome uses your Google Account to encrypt your synced passwords source. Whether or not you use a passphrase, your synced data is protected by encryption in transit. Your Chrome sync passphrase is stored on your computer and ...


2

It is possible to infer the usage of a VPN from patterns in the communication. If you are using a tunnelling technology like IPsec, L2TP, or PPTP, your packets are incapsulated inside other packets, so the useful part of the packet might be smaller than in a classic network. MTU and MSS are two important pieces of data about the sizes of the incapsulated ...


1

How is that possible ? Well: Firefox and Chrome implement WebRTC that allows requests to STUN servers be made that will return the information you see on sites such as ip-api.com. Also the ISPs uses for sure Deep Packet Inspection (DPI) techniques to inspect traffic so that is why your OpenVPN is detect. How to avoid such situations ? Many solutions are ...


0

Can somebody explain to me how this is possible... The IP ranges are registered for the company, so a quick Whois can reveal this information. Also a reverse DNS query might reveal the company's URL too. ...and how can I stop this information leak? You could use a another proxy server or TOR to hide that information



Top 50 recent answers are included