Tag Info

New answers tagged

3

You've answered the question yourself. You're trying to implement DRM to prevent users from getting the video off the device. In practice there is little you can do to prevent this. There will always be ways to copy the stream, even intercepting the stream (it has to be displayed on the device at some point right?). So the only thing you can do is make it ...


2

Users authenticate with their phone number, get a pin text, and if it is correct, they get an access token. Phone numbers are PII, so you should be keeping them safe (encrypted?). Text messages are sent in the clear and are readable by smartphone applications, consider that. Also, are the pin numbers random or can they be deducted easily? Are they valid ...


0

The other answers already explain the security of GSM and the technologies involved against technical attacks. However, there are a number of other attacks which bypass the technical protections. The German Wikipedia article on transaction authentication numbers (which are often sent by SMS) lists some attacks: stealing or stealthily access the victim's ...


0

Broadly, the design of Unix-like operating systems (in particular Linux, on which Android is based, and Mac OS X) means the OS is by design the only software entity that's allowed to communicate with the SIM. (I say 'software' because other hardware isn't quite so limited.) So I don't think this is something you need to worry about. Or, phrased another way: ...


0

You can use an encryption algorithm like RC4 or AES. You can encrypt the auto generated password in your app with a key and decrypt the same at server before account creation. If any user catches the transfer he will only see some random sequence of letters. If your users have an account on your server than you can also generate a unique encryption key for a ...


1

Another approach or approaches that you can take to try to solve this problem is the idea of a semi-fragile signature. A semi-fragile signature is a digital signature which can be verified even when the data undergoes a limited set of transformations. I developed the concept originally (I called it a robust signature) in context of limiting the set of ...


1

Snapchat keeps a log of all messages sent and their corresponding IPs, so they can easily tell who sent which message and from where. If someone compromised the Snapchat account and sent some content from another machine, the IP address would be the one of the machine/phone from where the content was sent, or possibly the address of a proxy/compromised ...


1

It sounds like what you really are looking for is a zero knowledge proof (or several zkps). You want to prove that (1) data belongs to a given class (general contents) and (2) that the data is within some limits (upper/lower bounds). Since you also want to transmit the data through the system, you'll need to bind the proof to the data in such a way that ...


1

Token expiration may take place on the server side causing the client to reauth after x time. If youre looking to do social logins this method should be fine as long as youre transmitting the data over SSL and not saving credentials (U/P Combos) on your systems. The login endpoint should be running on HTTPS (again, read, secure) and should be connecting to ...


0

I don't know how the audio playing is done on the device, but if an external application outside chrome is used for download the content, then the problem might be the use of SNI (Server Name Indication). Some Android applications still have problems with SNI, especially if they where built with Apaches HTTP client library. But, your site requires SNI. That ...


2

These days basic Software Defined Radio (SDR) kit has become very affordable so you can now obtain the RTL-SDR USB stick for about $15 and perform some GSM sniffing on a standard laptop running Wireshark. The GSM capture is done using the RTL-SDR and the airprobe tool (which builds on GnuRadio) that relays the packets to Wireshark, via the GSMTAP port (UDP ...


1

SMS or app: App-style access is more secure on both major platforms since app data is sandboxed while SMS provider is publicly accessible from all apps. Android is a little bit more secure than iOS since it gives the user a list of privileges an app is using hence giving out a clue to the user to be more cautious when the app asks for SMS access (or, if ...


1

As you've already surmised, the only thing you can do is to prevent the camera from working at all. Unfortunately, tiny camera's are prevalent everywhere now so completely preventing this issue is pretty well impossible without taking very extreme actions.



Top 50 recent answers are included