Collaborate Disseminate
I have an Android application distributed to my users through an .apk file. That app collects some data, and my goal is to upload that data to a cloud service, like BigQuery. To achieve this, I am using my BigQuery’s service account creden… Continue reading How to securely use service account credentials in an Android App
I have an application, and I ran the Drozer Framework, It show me some Activities that has not permission, Is the activity of my Login and recover password, So If I run the activity in external application, It show me the ac… Continue reading Activity (Logging Screen, and recovery password) are vulnerable to using by others applications?
Lately I have done forensic analysis on my computer(with photorec) to see how many deleted files I can recover. During the analysis I recover some photos and videos of my different partitions: Windows, Linux (user with not en… Continue reading Is it posible recover file from an encrypted home directory with a forensic tool?
I know that mobile phone doesn’t use the same technology of an SSD hard drive but there is a similar mechanism like TRIM in mobile phones ?
If it doesn’t how I can delete files in a secure way ?
This question already has an answer here:
Can website see my payment information?
2 answers
If I use a debit or credit ca… Continue reading What data associated with my payment card does a merchant or a payment processor get when I purchase something with it? [duplicate]
My question is if a TOKEN is able to protect forms of automation attacks (I understand that for sensitive forms for example “create products” or “delete products” or maybe in the “Login” is most recommendable use CAPTCHA) so … Continue reading a token is able to protect against to automation attacks?
I’m confused about how to implement password reset functionality. I’m testing a Web application with two roles – administrator and normal user. Only administrators can use the password reset functionality (not has MFLAC).
Th… Continue reading Is it bad to let admins change a users e-mail when resetting passwords?
I am starting to use email encryption with a pair of keys (private and public). So far and after several days of tests, I have been able to send an encrypted/signed message. However, the recipient told me “I cannot verify the… Continue reading Publish a public key
I’m looking into Web App security and this question occurred to me:
What could be some possible effects of internet speed on Web app security?
I’m thinking of low latency, low bandwidth connections preventing or slowing the … Continue reading Effect of internet speed on Web App Security