Collaborate Disseminate
What are the risks arising when it is possible to take screenshots of payment apps, mobile banking apps etc.? User ID can be stolen. Any other risks?
Continue reading Risks arising from the ability to take screenshots of payment apps [closed]
I want to secure my mobile app with a passwordless MFA mechanism.
The registration/login flow would be:
You register you account online with a username and a mobile phone (an OTP will be sent to verify the phone number).
You login to the … Continue reading Secure Passwordless MFA authentication on mobile app
I have an Android application distributed to my users through an .apk file. That app collects some data, and my goal is to upload that data to a cloud service, like BigQuery. To achieve this, I am using my BigQuery’s service account creden… Continue reading How to securely use service account credentials in an Android App
I am working on security testing of an android application. There is a root detection in the Android application. objection, frida etc. It is possible to bypass this with ways.
My main question is: Can this qualify as a vulnerability and i… Continue reading Bypassing root detection qualify as a vulnerability?
I am developing an iOS/Android app for Parental Control, and I am seeking a solution to ensure the app cannot be uninstalled by a child unless authorized by the parent.
I have been getting random SOS countdowns triggered on my phone. Every time this happens, a pop-up appears telling me that unknown numbers have been temporarily unblocked. The most recent instance was immediately followed by a call from a … Continue reading Is Android SOS being used as privilege escalation or settings bypass?
In my Unity app in C# I am using a 3rd party script which allows me store and retrieve data using iOS keychain. The stored data is a private user generated key which is used to encrypt data before backing the file online (not iCloud).
I ch… Continue reading Storing encrypted data in iOS keychain
it is my first time with MobSF and Android APK assessment. I have found something while testing a specific APK and I am trying to understand the concept behind it:
Under HARDCODED_SECRETS in MobSF, was found a pair of KEY/SECRET related to… Continue reading MobSF Android Activity APK Pentest
While downloading unsafe modded .apk files from the internet and while installing them there is no prompt of "unsafe app being downloaded". But when I install an apk that I made, there is a prompt (just a warning that the app tha… Continue reading Why does Android mark my applications as unsafe? [migrated]
I am increasingly buying IoT aka smart devices for my household.
All these devices need to be connected to WLAN and proprietary app (via bluetooth on iPhone). I do this initial step, but then block the internet access for the IoT device in… Continue reading Are there IoT devices that send data home despite blocked internet connection (with the detour via bluetooth on the phone)?