Something I've been mulling over for a while: for mobile app developers and users, how would I determine whether a mobile app communicates securely (using SSL for example)? How can I know whether sensitive data (e.g. login credentials) is stored by the app and if so, whether in encrypted form or plain text? Is there a way to prevent unintended transmission of data e.g. accessing contacts when not required? Or am I being paranoid? Ben
IMHO, I think you just trust the vendor of the app - thats why your sources of the app matters! ./Ok3ch On Thu, Jun 12, 2014 at 8:40 AM, Benjamin Muraguri <muraguri@gmail.com> wrote:
Something I've been mulling over for a while: for mobile app developers and users, how would I determine whether a mobile app communicates securely (using SSL for example)? How can I know whether sensitive data (e.g. login credentials) is stored by the app and if so, whether in encrypted form or plain text? Is there a way to prevent unintended transmission of data e.g. accessing contacts when not required? Or am I being paranoid?
Ben
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (2)
-
Benjamin Muraguri -
Okechukwu