New answers tagged

2

Is Jailbreaking an iPhone Easy? NO! But it's done by a program and that makes it easily repeatable, and even able to be wrapped in a nice package to make it easier for other people to use. So on your end it may look or feel easy, but someone poured real hours into developing that jailbreak method you're using. It's the same with Android. They poor real time ...


5

Your HTTP requests are proxied, hence the ipof.in service sees different IP addresses. I believe this answer explains it well, but another possibility (regardless of cellular/WiFi connection) is that your browser uses a Data Saver (Chrome*) or Turbo Mode (Opera) option. Both intended to compress the data for mobile devices. * Chrome feature seems not ...


43

I am just going to take a guess here. Your telephone data carrier may have an optimizing or caching proxy for content whose IP address appears in your JSON result. As the proxy has no visibility into encrypted HTTPS packets, it cannot proxy the content, so it may be routing directly with your public (routable) IP address. If this is the case, your phone ...


2

If the app can access the data locally (on the user's device), then a determined individual can as well. If you really want to keep the values secret you could consider having the app send the user's input to a server (which you would control) which both stores the secret values and computes the value for the user. The server would then send the value back ...


0

Great question, and welcome to the landmine of mobile encryption! Unfortunately the answer really depends on which iPhone model / Android manufacturer your app will be running on. Here's a little dump of what I know. Hopefully it'll get you on the right track! Both iOS and Android provide crypto (encryption) libraries in the OS. You should be able to ...


1

I will attempt to put together an answer based on the comments. In broad strokes, you're right that life would be better if apps with sensitive data refused to run on jailbroken devices. That said, the whole point of jailbreaking is to rip open the security features of the operating system and allow apps to have root access. Your question Should an iOS ...


0

This is a security control suggested by parties like OWASP, this will not stop deeper analysis but will surely make it harder. And since jailbroken/rooted devices have some of the security measures that were provided by the Os disabled they may increase the risk of data theft and compromise so some critical applications like financial ones detect jailbreak/...


0

If your application is able to request the key, an malicous application is able too. The only way i know to prevent this is blocking malicous users based on their ip.


3

There would never be a valid reason to use SSH for communication between processes running on the same device, unless that device was used to simulate a network, in which case it would act as multiple virtual devices anyway so technically not be the same device. Use unix domain sockets instead. Note that domain sockets are not the same as the Secure Sockets ...


0

This research states that two factor authentication has been broken by the possibility to remotely install an app on a device. 2FA relies on the idea that the the device is actually fully owned by the user. If applications are installed which controlled by the attacker are able to intercept SMS etc the device is no longer fully owned by the user, since the ...


1

Relying on mobile as a second factor is somewhat haphazard anyway - there are increasing numbers of people relying on mobiles as primary internet access devices (especially in countries with limited wired infrastructure), so an app on a phone, an SMS, or an email can end up on the same device the attacker is using. This already causes problems - try making a ...


2

During the installation process, Android isolates apps from one another and from the system by assigning them a distinct Linux User ID (UID) for security reasons. This UID doesn't change for duration of app's lifetime on the device. The system maintains a list of UIDs in use, and assigns the next available one to the newly installed app. Device rebooting ...



Top 50 recent answers are included