Tag Info

New answers tagged

3

Honestly, the core question is whether vibration of the phone will give an application/website significantly more authority than without the vibration. Now, obviously I lack any research into this specific issue, but we can note that applications do not use vibrations as a way to convene authority. If anything it would feel wrong for an application to ...


20

A popup was used to show the alert. Does this mean that the popup feature introduces vulnerabilities? Then by that line of reasoning JavaScript is the source of all problems. There are people who actually think that JS is an important vector for attacks and block it on untrusted websites with extensions like NoScript. Many features can be misused, and is ...


3

Suppose a malicious web page pops up a fake system notification and vibrates at the same time. How confident would you be of telling the difference between a legitimate pop-up and a .png on the web page you're viewing. (Source) Personally I have not heard of any exploit related to HTML5 Vibrate API, but it could be used for evil goals as shown on ...


0

Although using Guided Access and Apple Configurator are both valid solutions, removing the status bar is simple on iOS. Use this method call in your app's initialization to hide it. Objective-C: [[UIApplication sharedApplication] setStatusBarHidden:YES withAnimation:UIStatusBarAnimationSlide]; Swift: ...


1

You still have the same advantage. Two factor authentication with SMS/TOTP is based on two things : Something you know - your password Something you have - your phone If you log in using your phone you need to know the password and... have the phone. This way it's still the same amount of security.


6

It is more secure than a password in some ways, but as you describe, it also makes accounts more vulnerable to other attack vectors. As a best practice, properly implemented two-factor authentication offers much superior security to a single factor, regardless if that single factor is a memorized password or an "on demand" password. Reduced Vulnerability ...


1

I also discourage using email in this scenario. Obviously - if you are only using it internally - the attacker could only be internal (or an external first have to become interal). The email flow internally is probably more easy to sniff than dealing with the BTS for delivering the SMS. But both ways deliver the second component (to avoid the discussion ...


3

In the United States, generally anyone can subpoena anyone or anything as part of the "discovery" process. It is up to the presiding Judge to decide whether or not this is relevant or allowable. In a civil action, as opposed to a criminal one; some typical protections (e.g. 5th amendment protection against self-incrimination) do not apply. Thus, it is far ...


0

There are many ways where your phone can be tracked even with out a SIM Card. Your phone emits other radio frequencies other then the Cellular. For example, the Washington post has an article that detailed how retail stores may use your Wifi to track your location within the store: ...


0

Short answer: Yes, each phone has an IMEI number that is tracable. Fun note: phone still works without SIM card incase you need to dial 911. More info on IMEI https://en.wikipedia.org/wiki/International_Mobile_Station_Equipment_Identity


3

By definition, 2FA is if you authenticate users based on two of the following: Something you know (like a password) Something you have (like a key) Something you are (biometrics) I see that people often argue in which category e-mail should belong. Although many argue that it belongs in the "Something you have" category, I think that it should rather ...


0

Just creating an extra answer here to make it more visible for people to find... After reading around the subject, the only 'security' to protect yourself from these stingrays seems to be the below app that is only available on Android so far: SnoopSnitch It doesn't stop your phone connecting to these stingrays, however it can apparently detect when ...


1

Note that I am not an expert in this field, this information is gleaned from other sources. 3G Interception tools are about to appear (or may well have already done so). The "Stingray" from Harris is the most commonly quoted product and is widely used by US "law enforcement" (or maybe that should be law ignorement!) The tech blog Techdirt is a blog I ...


1

Unfortunately not the way you are thinking. But things are never simple on information security. Most of phones that I'm aware of, does not let you select a specific tower you want to connect. This is a usual GUI for Android: and the relevant ones on Engineering mode GUI: Why you want WCDMA only There are others too, but I won't add here since it's ...


-1

Yes, they can. If they pay the bill, they maybe have enrolled your phone to an MDM software. This give them the ability to install a program to your phone to record all the phone calls and store it locally as files. Then, as they are admins of your device, they can download those files and listen to them. They could also record voice conversation by opening ...


1

Tapping a cell phone is doable, but very difficult, especially for someone who has little tech knowledge, and providers generally do not give the capability to listen in on specific calls either. The bill may show the duration of the call and who the call was made to/from, but generally they wouldn't be able to listen in. Consider each cell phone on the plan ...



Top 50 recent answers are included