Windows 10 phones home when you search your start menu, even with Bing disabled

Re:Windows 10 phones home when you search your start menu, e... by ultramancool on Monday August 10, 2015 @07:53PM (#10038264)

Not really, heck, on Android and iOS around 40% of banking apps don't even check the certificate at all.

Most people, even most developers seem to be pretty clueless with this stuff.

[ Parent | on HN ]

Re:Windows 10 phones home when you search your start menu, e... by jacobwil on Tuesday August 11, 2015 @12:21AM (#10039072)

The paper won't be available to everyone until Wednesday at [1], but:

> Altogether, of the 639,283 [Android] apps in our data-set, 45 implement pinning.

[1]: https://www.usenix.org/conference/usenixsecurity15/technical...

[ Parent | on HN ]

Re:Windows 10 phones home when you search your start menu, e... by yrro on Monday August 10, 2015 @08:22PM (#10038382)

> on Android and iOS around 40% of banking apps don't even check the certificate at all.

Please name and shame, this sounds pretty surprising!

[ Parent | on HN ]

Re:Windows 10 phones home when you search your start menu, e... by sprkyco on Monday August 10, 2015 @09:07PM (#10038531)

List of Android SSL MITM vulnerable apps: https://samsclass.info/128/proj/popular-ssl.htm

Highly recommend any material on the main site as well. One of the few legit infosec professors I have ever interacted with.

[ Parent | on HN ]

Re:Windows 10 phones home when you search your start menu, e... by unluckier on Monday August 10, 2015 @08:45PM (#10038455)

At least for Android: https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w...

There are several banking-related apps listed here.

[ Parent | on HN ]

Re:Windows 10 phones home when you search your start menu, e... by ultramancool on Monday August 10, 2015 @08:37PM (#10038421)

Heard that on an old security now episode, https://www.grc.com/sn/sn-443-notes.pdf is the best I have unfortunately, there's mention of it near the bottom there.

[ Parent | on HN ]