Hot answers tagged

6

The client only supports UDP-encapsulated ESP. These packets are sent/received over the same UDP sockets that are already used for IKEv2. This limitation is mentioned on the app's wiki page.


3

No it's not possible to circumvent this CSRF-protection in a classical CSRF attack. Using the user-agent- header to submit the anti-CSRF-token is just like using any custom header, which is one of the currently preferred methods of CSRF-protection. An attacker could only 'fake' the user agent via a XSS, or a malign browser extension (or browser). But in such ...


3

Greed. You have to see which you value more, peace of mind vs the scrap money you get selling a phone that is clearly faulty & close to unusable Retrieving data from a locked/faulty phone is definitely a thing, it is a craft people possess, it is a possibility which you have to face, and you can't simply rely on us to assure you that the possibility is ...


1

If at any point you send data to a device the user physically possesses, they can extract it. (This is why DRM doesn't work.) If you want to start asking questions about "how hard" this is, the answer is that it should be super easy, and the degree to which it is not is the degree to which the device fails to meet the definition of a general-purpose computer....


1

As already mentioned in a comment, your phone is an intermediary to the same extent as our phone's ISP. They see exactly the same traffic. Therefore, any technology that protects you from a hostile ISP protects you equally from a potentially hostile phone. This is under the assumption that the only thing that the phone can see is the network traffic from the ...


1

Factory reset, open the camera and let it record a movie in the highest resolution and framerate until all storage is full, factory reset again. The first factory reset will free all storage, then the movie recording will fill up all the storage, overwriting everything, and the second factory reset deletes everything again. This will work even on older ...


1

b) does just looking at an email cause an infection on the gmail app on android? Just laying your eyes at the contents of spam or malicious email is safe. Like looking or hovering your mouse over, a picture with a link embedded at a malicious attachment a plain URL a) is there any other check I should do? There's nothing to do because there was ...


Only top voted, non community-wiki answers of a minimum length are eligible