6

The factory reset on any phone/computer shouldn't be trusted, as it can be modified by the system and thus becomes a heaven for malware that wishes to persist. This also applies to the Windows 8 "refresh my PC" feature, the "recovery partition" nonsense OEMs put up to avoid supplying $0,01 recovery DVDs (which are write-once media and can't be compromised) ...


6

If you're the application developer the best you can probably do is pin the certificate, meaning if you see any certificate other than a specific one you know and trust (e.g. by comparing thumbprint or public key), drop the connection and get out of there. Otherwise you're relying on a system that you have proven to be broken, as per your example. There are ...


4

To achieve that, you need to choose/use a Mobile Device Management (MDM) solution. There are some solutions about MDM for Windows Phone / Windows 10 Mobile. Look: From Microsoft: https://technet.microsoft.com/en-us/windows/dn771709.aspx https://technet.microsoft.com/itpro/windows/whats-new/device-management Solutions from other companies: just do a web ...


3

I believe it is possible to jailbreak a windows 8 phone. Seeing as Microsoft can't keep people from pirating games for the XBOX 360, I don't expect Microsoft to be able to put up much of a fight in the jailbreak war. A jailbroken device isn't the only way to conduct analysis of a mobile app. You can decompile Windows 8 apps which can shed light in their ...


2

There is nothing built into the SD card - its basically dumb storage. What you can do is encrypt files on the device - either individually or the entire filesystem. Modern android supports this natively - under "Security" or "Lock screen & security" etc (depending on manufacturer) look for the encryption section. This works well when the SD card is used ...


2

The Windows Phone 10 platform is the most secure of all of the current mobile platforms and the only one (last time I checked) that has no known external vulnerabilities (e.g. no way to break into a phone without the passcode). I've been speaking to Microsoft regularly about the platform as we have over 4,000 WP10 devices deployed. The software continues to ...


1

No expert but I do know that WP8 does indeed use bitlocker and also uses hardware encryption where possible. So I doubt that you can obtain a usable dump from a standard phone. Having been involved with a hardware problem on the Nokia phones recently, all I can say is that the engineers use special debug versions of the OS to do hardware level logging and ...


1

On jailbroken devices this is definitely possible. The simplest way (and not involving any reverse engineering) would be for application a2 simply spoof a1's BundleID. As for the generation algorithm, I believe that on iOS that identifier is simply a random NSUUID that is generated when first app from given vendor is installed (and removed when last app ...


1

If you're looking to test features then to be honest you don't need the phone so much as documentation about the phone hardware/operating system. It's worth noting that Windows Phone 7 is not the current version of the OS and if you're looking at a comparison of these two ecosystems then it should really be Windows phone 8 and iOS 6.x . In terms of ...


1

Unlike iPhone and Android who have (flawed) full disk encryption, there is no option in the latest version of Windows Phone 7.5 to encrypt your whole device. Windows Phone 8 however will have a lot of improvements (security wise) but they will still need to be proofed in the field. However the full disk encryption will be handled by Bitlocker, which has ...


Only top voted, non community-wiki answers of a minimum length are eligible