-
Realistic threats exists in NFC. Are they all secure?
The mobile payment is aggressive in some sort of area. As seen, it fully utilized in China market. From the economey point of view, this new payment design driven the retail business in parallel. The traditional banknote concept convert to digitalization silently.Is this a prelude of digital currency? The people doubt of the NFC (near…
-
Firebase Analytics – To be compliance or not to be compliance on personal privacy
Perhaps the scandal of Facebook and awaken people in the world concerning their personal privacy. Meanwhile web surfing behavior is a major element to do the behaviour analytic. Now we fully understand the influence power of social media platform. However the analytic function not only valid today. Firebase is a mobile and web application development…
-
CVE-2018-3561 – Is this a hiccups or it will maintain longer?
Retrospectively, the annual revenue growth of smartphone chips vendor on 2017 Q3. Samsung is the winner.Qualcomm growth only 23% but apple only growth of 12%. From my personal point of view, even though operating system or vulnerability on iPhone looks mystery. Perhaps it is a business strategy in order to avoid competitor know the details.…
-
Do you concerns of your e-wallet?
Electronic wallets play an important role in our daily lives. Perhaps the demand of e-wallet market in Hong Kong cannot compare with Greater China market. However mobile phone itself like computer device will encounter Zero – day. This week I keen my personal interest review the TNG wallet design. I am concerning the vulnerability (CVE-2016-5195) on…
-
Undetected malware on android
Preface: Till 2018-02-01, the official announcement provides the following details. Security patch level—Vulnerability details Start discussion: ART (Android RunTime) is the next version of Dalvik. Unlike Dalvik, ART introduces the use of ahead-of-time (AOT) compilation by compiling entire applications into native machine code upon their installation. Regarding to Android security bulletin on February 2018, the official announcement did not…
-
Special Edition – HIDDEN COBRA – Malicious Cyber Activity
Special Edition: Information security focus US Homeland security (DHS) urge the world to staying alert with HIDDEN COBRA Malicious Cyber Activity. It looks that the cyber attack wreak havoc to the world. And therefore DHS suggest to add below Yara rule into your IDS or malware detector (For instance RSA ECAT). The following YARA rule…
-
Renaissance – Cyber attack transformation
Preface: Renaissance – The period of this revival, roughly the 14th through the 16th century, marking the transition from medieval to modern times. Background: The virus and malware wreak havoc in information technology environment in past decade especially on Microsoft windows operating system platform. It looks that a transformation was happened since smartphone leading the…
-
SS7 flaw make two factor authentication insecure – Reveal the veil
Preface: Two factor authentications claimed itself that it is a prefect security solution. No matter online banking transaction, Bitcoin wallet, e-trading business system and application system which concern the data privacy are willing to apply two factors authentication. The overall comments for two factor authentication on the market Let’s take a review in below cyber…
-
The enemy of ASLR (Address space layout randomization) – memory leak
Preface Address space layout randomization (ASLR) is a computer security technique which popular in cyber world today. Since it reduce the ratio of incident hit rate of malware infection. Do you agree that there is not required to worries about malware infection once ASLR implemented? Start discussion We discuss ASLR topics in our earlier discussion (see…
-
Price of your privacy – mobile phone
Preface: Google Pinyin,QQ,TouchPal,Sogou IME apps has high volume download volume in Google Play store. However user may also be vulnerable to component-hijacking attacks. Do you think whether there are more apps monitor your mobile phone silently! Start discussion: We heard technical terms so called predictive search and auto-correction. Google browser (Chrome) keyboard input feature apply similar…