New answers tagged

2

No. After all, the launcher is an application. If you ban applications from starting your activity, you ban the launcher from starting your activity.


-1

meh. eval might be scary or downright dangerous in the hands of the naive, but script tags are actually worse from a capability perspective, yet needed. Hybrid apps need scripts to run and can't do anything without them. Just like in a normal webapp, content will be fetched from a server, and some of that content needs to execute to drive the app. The ...


0

No, I don't think it is possible. I don't think that there is any way to guarantee (or even have some degree of certainty) that WeChat won't exfiltrate data off of your device through ways you don't intend it to or can't control. While I am personally not aware of the extent in which WeChat is exfilitrating other data off of devices or the evidence to ...


0

Both the Didi folder and the "omega.key" file are installed with the mobility app package (uber and 99 here in Brazil), I believe that they are not malicious, even deleting the omega.key it returns because the app is still on the smartphone , if you delete the mobility app and restore the factory defaults, it will not return. PS. Norton Clean was the only ...


-1

Yes, the United States for example. Multiple media and news sourçes reported on Jan. 9th, 2020 that an Android trojan dropper came pre-installed on the UMX phone by Assurance Wireless which were distributed to millions of low-income families via the US government-funded initiative.


2

TL;DR: Don't worry, your phone is not hacked. Essentially they send you a tracking link and they know from which IP address this linked was accessed. They then can match this IP address to a rough location and might defer from the IP address your ISP. This is the kind of information which are visible by any website your visit, i.e. these are not actually ...


0

Let me quote the official docs: v1 signatures do not protect some parts of the APK, such as ZIP metadata. The APK verifier needs to process lots of untrusted (not yet verified) data structures and then discard data not covered by the signatures. This offers a sizeable attack surface. Moreover, the APK verifier must uncompress all compressed entries, ...


-1

While auto download off is one of the best options, you may also want to disable the feature to install unknown apps. Disable the setting to install unknown apps from WhatsApp. Go to Settings > Biometrics and Security > Install Unknown Apps > WhatsApp. The setting should show you Not Allowed The other alternative is to Go to Settings > Apps > WhatsApp > ...


1

Your best option is simply to keep everything as up-to-date as possible. Your example of choice is what is known as a 0-day exploit. Of course once the software provider learns about it and fixes it, it is no longer an zero-day, and the solution is simple: upgrade your software to the latest (protected) version. Before the software vendor learns about the ...


1

There will always be a way to spoof the data even if you could use imei.. it can be spoofed... I usually use a unique ID, UsrName, MAC, IP, operating system, screen size and a long 'transaction token' (this token changes over time, in each login and when other values change it gets reset every login also) this is used to verify the users identity and as an ...


5

I have an Android APP with millions of users, but some users are malicious users (robot, fake, etc) ... I want to find a way to uniquely identify each mobile phone device, in order to blacklist malicious mobile phone (hardware). While your underlying problem is not really known (see XY problem) I think your approach to solve it is wrong in the first place. ...


Top 50 recent answers are included