Tag Info

New answers tagged

0

Touch ID is easily broken if someone can lift your fingerprint (which is easier than most people think). Thus, you shouldn't rely on Touch ID for security.


0

One possibility here would be to not have the user actually generate a password, you could have the app generate a random string when the local biometric auth succeeds on account creation. This randomly generated string could be used as a password to generate the shared secret between the client and the server. Store this shared secret in the keychain. ...


2

Cracking that tunnel is a non-trivial exercise. The short answer is that key store is located in the file /private/var/keybags/systembag.kb and retrieved with the kernel service called AppleEffaceableStorage under the locker tag \BAG1. This is the architecture: The keys themselves are further encrypted and checksummed using AES and HMAC. It would be a big ...


6

Once a computer boots, the operating system is given near exclusive control over the system resources (kernel access). After this occurs, if a program wants to run, it must ask the OS to let it run. Before iOS allows an application to run, it examines the code that is going to be loaded in to memory from the binary and checks it against a signed value that ...


5

An app must be code signed with a certificate issued by Apple. Whenever an app is run this signature is checked using its public key. As long as the certificate chain is traced back to Apple as the Certificate Authority, then the app is authenticated. More info on Code Signing. This is a bit of a generalization. Detailed guide from Mac Developer Library ...


1

For Ingress, Google's global wargame, a range of anti-spoofing measures are used. Google are keeping quiet about the full range, but two that have been demonstrated are: Speed limitation: 40mph maximum allowed in game Corroborating measures: cross referencing wifi SSID's received with their location database


0

The short answer is that (as far as I'm aware) it isn't possible to perfectly stop location emulation on open platforms (e.g. Android). Other more restrictive platforms (e.g. non-jailbroken iOS/Windows Phone) don't tend to suffer as much from these problems as they don't allow users the same level of freedom in terms of the types of applications they can ...


0

From my knowledge the way you spoof the locations is to : 1) Use developer mode with mock locations. There are ways of detecting that you are using developer mode so the developer can decide that the GPS is not to be trusted in this case. So they will use other ways of finding your location like wifi networks. 2) You can fake your position when your phone ...



Top 50 recent answers are included