Collaborate Disseminate
My question refers to a behavior on a production system with more than 100 million chat users.
Some time ago I changed my account password and removed all devices connected to my account.
The next day I noticed that during the night I stil… Continue reading Deauthorization Bug in messenger application – How serious is this?
When arranging a pen test it’s common practice to ask the client a set of questions, and use the answers either as the basis for further discussions, or to directly provide a test plan and quotation.
For a mobile app specifically, what que… Continue reading What questions are useful to scope a mobile app pen test?
Attackers could hack the smartwatch and send dementia patients alerts for taking their medication. Continue reading Smartwatch Hack Could Trick Dementia Patients into Overdosing
I am writing a mobile app that uses a read only REST service that sits behind our company firewall. The actual data supplied by the REST service is not private but I am concerned with a hacker using it to get behind the firewall. I have f… Continue reading Securing a read-only REST service for mobile access
App will stop reading users’ device cut-and-paste data after a new banner alert in an Apple update uncovered the activity. Continue reading TikTok To Stop Clipboard Snooping After Apple Privacy Feature Exposes Behavior
The CryCryptor malware strain is a brand-new family of threats, leveraging COVID-19 to spread. Continue reading Emerging Ransomware Targets Photos, Videos on Android Devices
It is a common method on mobile applications to allow users to bypass authentication process by verifying a locally stored token (previously authenticated) on device.
This is to strike a balance between usability (avoiding authentication … Continue reading Security concern on locally stored authentication token
Researchers warn that the Earth Empusa threat group is distributing the spyware by injecting code into fake and watering-hole pages. Continue reading Android ‘ActionSpy’ Malware Targets Turkic Minority Group
Contact tracing apps for the coronavirus are being developed and tested globally as the world starts to re-open. Are the apps worth using to flatten the curve? Or do data privacy worries trump public health? Continue reading Podcast: Would You Use A Contact-Tracing Coronavirus App?
I have created a mobile application that monitors the accelerometer activity and based on that it rewards the user if a specific pattern is observed. How I can secure the application against the user itself who may try to hack the applicat… Continue reading How to secure a mobile app against its user?