New answers tagged ios
0
So after some experimenting it seems that you can set UIApplicationOpenURLOptionsSourceApplicationKey to any value, but Apple overrides it in the receiving app to the correct value allowing you to verify the recipient.
1
You should not allow for state to be changed in a meaningful/dangerous way using either URL schemes or deeplinks. Apple gives the following warning:
Warning
URL schemes offer a potential attack vector into your app, so make sure to validate all URL parameters and discard any malformed URLs. In addition, limit the available actions to those that do ...
0
Inadvertently added to older question (ios 10), hence why this appears duplicate.
As always there is basic system info available similar to what any web page can access: IP address, HTTP headers, etc. Many of these are low entropy or can be changed by the user through various means, but it may be possible to combine enough for a reasonable identification. ...
0
As always there is basic system info available similar to what any web page can access: IP address, HTTP headers, etc. Many of these are low entropy or can be changed by the user through various means, but it may be possible to combine enough for a reasonable identification. Or for reasonable enough correlation for cross-device tracking.
You have answered ...
0
The answer to this is very simple, and follows from the ten immutable laws of security
If a bad guy can persuade you to run his program on your computer, it’s not your computer anymore
A computer is only as secure as the administrator is trustworthy
In your case you have a device someone else administers. If you don't trust your administrator, ...
0
How do I protect users if their device or pin has been compromised?
The best way is to avoid storing data on the device in the first place. This however means that the app won't be able to work offline, needs to re-download data each time and might have performance impact.
In the end it depends on the risk you want to accept and the user experience you ...
Top 50 recent answers are included
