Tag Info

Hot answers tagged

12

You've already taken the most important first step to protecting yourself, and that it to recognize that caller-id information can be spoofed, and is not entirely trustworthy. The second step is to apply that knowledge, and stop relying on caller-id. If someone calls you and asks for personal information, even if the caller-id appears to be the legitimate ...


3

You've answered the question yourself. You're trying to implement DRM to prevent users from getting the video off the device. In practice there is little you can do to prevent this. There will always be ways to copy the stream, even intercepting the stream (it has to be displayed on the device at some point right?). So the only thing you can do is make it ...


2

This is based on personal experience with a femtocell issued by the German chapter of O2 (a branded Alcatel-Lucent 9361). For other femtocells and operators, the configuration might be different. Setting up a Whitelist of Cell Users By default, every O2 customer (and those roaming from other operators and countries, of course) is allowed to connect to ...


2

These days basic Software Defined Radio (SDR) kit has become very affordable so you can now obtain the RTL-SDR USB stick for about $15 and perform some GSM sniffing on a standard laptop running Wireshark. The GSM capture is done using the RTL-SDR and the airprobe tool (which builds on GnuRadio) that relays the packets to Wireshark, via the GSMTAP port (UDP ...


2

Users authenticate with their phone number, get a pin text, and if it is correct, they get an access token. Phone numbers are PII, so you should be keeping them safe (encrypted?). Text messages are sent in the clear and are readable by smartphone applications, consider that. Also, are the pin numbers random or can they be deducted easily? Are they valid ...


1

Another approach or approaches that you can take to try to solve this problem is the idea of a semi-fragile signature. A semi-fragile signature is a digital signature which can be verified even when the data undergoes a limited set of transformations. I developed the concept originally (I called it a robust signature) in context of limiting the set of ...


1

Snapchat keeps a log of all messages sent and their corresponding IPs, so they can easily tell who sent which message and from where. If someone compromised the Snapchat account and sent some content from another machine, the IP address would be the one of the machine/phone from where the content was sent, or possibly the address of a proxy/compromised ...


1

It sounds like what you really are looking for is a zero knowledge proof (or several zkps). You want to prove that (1) data belongs to a given class (general contents) and (2) that the data is within some limits (upper/lower bounds). Since you also want to transmit the data through the system, you'll need to bind the proof to the data in such a way that ...


1

Token expiration may take place on the server side causing the client to reauth after x time. If youre looking to do social logins this method should be fine as long as youre transmitting the data over SSL and not saving credentials (U/P Combos) on your systems. The login endpoint should be running on HTTPS (again, read, secure) and should be connecting to ...


1

SMS or app: App-style access is more secure on both major platforms since app data is sandboxed while SMS provider is publicly accessible from all apps. Android is a little bit more secure than iOS since it gives the user a list of privileges an app is using hence giving out a clue to the user to be more cautious when the app asks for SMS access (or, if ...


1

As you've already surmised, the only thing you can do is to prevent the camera from working at all. Unfortunately, tiny camera's are prevalent everywhere now so completely preventing this issue is pretty well impossible without taking very extreme actions.


1

There are low tech solutions that will work: Possibly combined with an IR repeater: if you want to limit the remote control to, say the front of the room where the teacher stands. That won't help if your teachers want to stroll around the students and operate the Beamer; as @AJHenderson says, there is no security protocol for the existing remotes. ...



Only top voted, non community-wiki answers of a minimum length are eligible