Tag Info

New answers tagged

0

Although using Guided Access and Apple Configurator are both valid solutions, removing the status bar is simple on iOS. Use this method call in your app's initialization to hide it. Objective-C: [[UIApplication sharedApplication] setStatusBarHidden:YES withAnimation:UIStatusBarAnimationSlide]; Swift: ...


3

The bug isn't with the file format, it's with the software of Hangouts the Android software library. iOS, Android, and Windows phones run system software from three different groups of developers. As such, this vulnerability probably doesn't exist on other platforms. Even if it did, one payload couldn't affect all three systems, because their software isn't ...


4

From the top of my head : the API server's security, which means you may need to hire a competent sysadmin to take care of it if you aren't experienced with system administration. Whatever security you implement on top of that (API authentication, etc) becomes moot if your server itself is compromised. Keep in mind that every software installed on it is a ...


2

You say "SSH is fast". It's not. It's fast enough for its intended purpose (remote shell access and occasional file transfer/sshfs) but it's definitely not fast enough for IPC, let alone efficient. On a local machine there's never any need for encryption between processes. If an attacker can read what you're sending to localhost, he can most definitely read ...


1

I presume that you're having the user generate an RSA keypair. If that's so, you simply need to stash it somewhere that, ideally, no other applications are permitted to look. As you said, apps can't access other apps' document directories. However, the Apple File System Programming Guide advises you to put data the user shouldn't access in the Library ...


0

You are hashing on the client, then encrypting again on the server? If you are under SSL, sending the hash from the client isn't really any more secure than sending the password in plaintext to the server. In fact, this method just makes the hash BE the plaintext, if you can capture that you can send it over to the server just fine, without knowing the real ...


0

There are already a number of standard solutions for this type of problem, such as Javascript Web Tokens. The architecture for most of these solutions is fairly straight forward - you have an authentication service which authenticates the user and returns a unique token which is encrypted and contains information your service requires. The server owns the ...



Top 50 recent answers are included