“The reports of the weak apps come almost a year after two academic reports uncovered wide-ranging deficiencies in the cryptographic protections in smartphone software. One found that Android apps used by as many as 185 million people contained holes that leaked login credentials and other sensitive data even though they were supposed to be protected by SSL. The other revealed a variety of apps running on Android and PCs that were fooled by fraudulent SSL certificates. It’s possible that similar defects could fail to protect code exposed in WebView objects even when developers think they’re properly contained inside an SSL channel.”
Related posts:
Fraudulent Certificate for Google Domains Found After Mistake by Turkish CA
Bernanke Textbook Royalties
Students DESTROY NSA Recruiters Over Illegal Spying and Lies
Terrible News: Mark Zuckerberg Does D.C.
Robocoin shipping 45 more Bitcoin ATMs by March
Twitter Nears Deal With Payments Startup Stripe
Beta Is Boss
Even more smuggled gold enters India
Gitmo-izing Air Passengers
Mark Thornton: Government's War on Bitcoin
Leaked Debate Agreement Shows Both Obama and Romney are Sniveling Cowards
Fed's Big Ag Policy is Anything But "Green"
Cannabinoids Lead to Leukemia Cancer Cell Destruction
The Police-State's Fascist Strength
Court Finds Red Light Camera Fines “Unconstitutional”, Forces Ticket Refunds