New answers tagged

1

Facebook can be blocked in many ways: On proxy like squid / sslbump mentioned On Firewall and DNS Facebook is using it's own netwo rk ranges and there's more than just Facebook, but all is social essentially like Instagram. See this post on how to find out Facebook IP address You need also to think what to do with "requests to Facebook". You can ...


4

@ThiefMaster's answer does a great job of enumerating the risks of using an externally controlled Content-- which basically fall under the category of executing or displaying arbitrary code and content on a user's browser. I will mainly focus on your last question: How are those risk mitigated? which was unaddressed-- a lot has since changed (in 4 years). ...


1

Certificate Pinning is another commonly used control against Data-in-transit attacks. The TLS handshake never starts if the client doesn't receive a Public Key that is within the client's (the mobile app) known Pin List. I used Cert Pinning as a compliment to payload encryption. Perhaps the following are becoming the base standard for sensitive mobile app ...



Top 50 recent answers are included