Tag Info

New answers tagged

0

No, no, no, no, no and no. This is completely, completely 100% insecure. There is no fixing it. It is broken. Not only will the IP of the SQL server be trivially discoverable (and with no possible way to prevent it from being discovered relatively trivially since any information needed to connect is contained within the application itself), but it leaves ...


1

Your idea has nothing to do with security. At best, it's obscurity. A PHP script which is accessible for everybody is public by definition. You may try to hide it a bit so that the average visitor won't find it immediately. But neither IP addresses nor file names are secret data, so anybody with a bit of motiviation will find them out sooner or later. And ...


3

The chances are 100%. It's easy for anyone to look at your code and find the URL inside it, or to watch the network traffic and infer how your requests are performed. When you should think about your app's security, assume that this information is public and go from there. If you want to slow down the attacker's work (but keep in mind that you won't be ...


1

You're missing three things: Third party apps don't have to use TouchID if they don't want to. A 4-digit PIN is only weak if the attacker can do an offline attack. You're describing an on-line attack, where the attacker is sitting at the device entering PIN codes. IOS will notice repeated bad codes and take steps. By default after every 10th bad password ...


0

I believe the answer is quite simple unlike android, apple does not have multiple app stores and the official app store has relatively strict policies regarding app verification in other words, even though iOS 8 allows custom keyboards, they still need to be verified before they are put up on the app store. however this is not the case for unofficial app ...


1

This is not the case. iOS 8 allows the use of touch ID for apps but the "fallback" for the touch ID in terms of apps are the actual app password. the 4 digit code is only used if touch ID fails to unlock your phone on a side note, certain apps such as banking can almost definitely chose not to allow touch ID for the app itself or even high-risk functions ...



Top 50 recent answers are included