Tag Info

New answers tagged

3

Peter: When you use certain mobile apps (take Evernote for example), you don't get redirected to the website to grant permission to the app. Instead, you just log in with your username and password, straight inside the app. Actually Evernote uses OAuth. OAuth2 allows different authentication workflows. The Resource Owner Password Credentials Grant does ...


1

I think the only devices that have this are intel laptops-turned-tables. The only example that come to my mind are Surface Pro range. The Surface pro 1 and 2 have a TPM v1.2, and the Surface Pro 3 has a TPM v3. I don't know of any ARM powered device which has a TPM (although I think there's work in progress on this). In ARM, there's also a security feature ...


0

If it handles monetary data and, you will be asked PCI-DSS questions, you and/or any 3rd party SSAE-16/ SAS70s will be reviewed as well as the 3rd party contracts.


-1

The anti-virus apps you get from GooglePlay, is most likely made to protect against apps from outside the GooglePlay store (also know as APK packages). We're now writing 2014, and it's starting to get really ugly on the Android platform. There's COUNTLESS "APK" installer packages that just downloads automatically to your phone/tablet if you enter the wrong ...


0

This is a very broad question. First you can start by reading https://source.android.com/devices/tech/security/ to get some feeling. If you have experience with UNIX, then you will quickly see how the base of security in android works - every application has its own UID by default, which prevents it from doing may things to other applications on a system. ...


0

Let's not forget the power of download mode, particularly on devices that are a little to old to have a locked bootloader. Take a Galaxy S2 for example, it would take me about 5mins to put it in download mode, flash a custom kernel+recovery, reboot in recovery and delete the lock code via adb. Of course, that wouldn't help much if you had encrypted your ...


1

GSM is cheap and good for land with many water bodies, say like small islands and so on. Cheaper goods sell in large populations and Asia got covered by GSM before the CDMA tried its best. CDMA is good in contiguous land area. The sound quality is much better. But royalty has to be payed to Qualcomm who developed CDMA. Hence the technology, subscriber ...


0

The only thing that makes me wary in this situation is that Revolution is closed source. Especially since it can access your NAND flash storage with no restrictions, and in light of this who really knows what it's doing. Now, you can also look at this through a different lens. ClockWork is a less popular version of Android. With a less popular version, ...


0

Prey is free, but for the app to work they have to have access to a lot of your information (TANSTAAFL) Generally if an app is "free" its like any other "free" product on the internet in that they use your actions and track you to sell data about you. Prey may or may not be doing this but at the very least you should assume they track your actions as much ...


0

It depends. Prey bases on a software installed onto the device which pings regularly a server owned by prey. Prey could misuse this regular connection to get an ip address - identity link. Its hard to get rid of this one (eg. by using tor), so nothing to blame prey here. The apps are open-source, so you can check yourself that when you only allow a small ...


2

Any merchant accepting payments, regardless of the method, needs to be PCI compliant. To accommodate the various methods of accepting payment (outsource, redirect, iframe, POS, etc.) the PCI council has developed different self assessment questionnaires (SAQ). The SAQ forms are essentially a paired down list of requirements from the full PCI DSS. The ...


0

In addition to the fact pointed by @Abbas Javan Jafari that all third-party software is verified by Apple before being put on the App Store, there is also a safety feature built into the system itself, that prevents third-party keyboards to type into password fields - when you touch a password field the system will go back to the default keyboard ...


38

This started as a comment reply to @user10008 but got too long... Even after the towers are all upgraded, the carriers can't immediately switch off 2g service for a number of reasons. The biggest issue there is that not everyone upgrades their phone frequently; in particular this is true of people who use it as just-a-phone or an emergency-use-only-phone. ...


33

In order to make a cellphone tower UMTS-capable, various hardware upgrades need to be made to it. This costs money. For that reason, many cellphone towers, especially in rural areas, have not been upgraded yet. As long as there is not near-100% UMTS coverage, cellphones will still need to support a pure GSM connection to ensure that the user has ...


0

I think this is a reasonable approach, as we have seen countless websites being hacked and millions of passwords being stolen. Using a two-factor authentication mitigates the risk. Depending on the security level of your installation, a hardware based OTP is not needed. Software-based OPT, like Google Authenticator, will suffice in most cases. You can use ...


1

Can you confirm what you're actually asking here; Is it that you have two domain names IE; 1 - Networkguys001-website.co.uk 2 - Networkguys001-mobileapp.co.uk and you want to have 1 certificate which secures both domains? If this is the case then what type of certificate did you buy from Digicert, I've included a list below; WildCard SSL ...



Top 50 recent answers are included