3
No, there isn't. Not even remotely possible.
HTTP is just text. The client sends some text strings to the server, and the server sends replies. Those are divided into headers and content, but either is trivially modifiable, and there's many clients which lets you write content in HTTP-requests as you want. The simplest is perhaps netcat, which provides no ...
2
Bytes are just numbers, they don't come with a certificate of authenticity.
There's no way that you can be absolutely certain that your app created a request.
You need to make sure that you don't give your app any permissions that you don't want an attacker to have.
2
There is no generic "worst". For some this might be that the device is permanently broken so they need to replace it (costs), for others it might be the loss of information on the device (value of data). For some the worst might be that sensitive information leak from the device, like access credentials or sensitive pictures etc and then get used ...
1
I don't see much of a difference with your previous question How to close or block remote access backdoors? except that it now a bit more focused by asking only for Windows and Android.
It looks like you are not asking about disabling explicitly implemented remote access functionality but anything which might allow an attacker to allow remote access. Since ...
1
World-writable files are pretty much considered bad in all but very specific scenarios. If there is no legitimate reason to have a file wide-open for the world to read/write to, it's best practice to lock it down. Nearly all security audits will mark a failure for world-writable files... period. And remember, in the UNIX world, everything is a "file&...
Only top voted, non community-wiki answers of a minimum length are eligible
