-
Hey, look at all the .pk people who registered just to defend the app.
And honestly, I could care less where you're from. You could be in a garage in my own country and I wouldn't trust an app coming from you. The concern was voiced and is valid BASED ON YOUR TRUSTWORTHY POPULARITY, not your nationality or race or color or sexual orientation for that matter. I don't see enough credible information out there that's easy to find from you guys, so it holds as a valid concern. There's a lot of neferious stealing of data happening behind the scenes via apps on both PCs and mobile devices. People should be made aware of such risks.
Also, Mike, your example of sniffing out the packets and seeing where they go. That's all nice and good if the app was written to always behave the same. What happens if the coder is smart enough to build in a trigger that only starts sending data after the app was installed for several days? Or what if it works by the coder triggering a remote command to the app before it sends the data. Guess what, in those cases, the app traffic would look normal until said time and the people testing it initially would think it's fine and use it... until it was too late.
Ya, that's right, I think outside of the box... because I know how the smart ones think.04-15-11 12:09 PM - Wow! You really are on a race/nationality crusade. It's funny that you roll your eyes and say you "could care less" about where people are from while bringing up someone's location as the very first line in your response. I don't know about the vendor's credibility, but this sort of behaviour doesn't do much for your own.Hey, look at all the .pk people who registered just to defend the app.
And honestly, I could care less where you're from.
I am a new user here and may not have much "trustworthy popularity", but I think readers with a moderate degree of intelligence can read the arguments presented and come to the conclusion that based on the standard of trust you propose, we should perhaps wait for all applications to be certified by your intelligence agency of choice before we install them on our phones. Microsoft has perhaps been responsible for more system compromises than any international vendor. And OS X was hacked for root access within minutes at a recent hackathon. So I am assuming you are using an OS of your own construction that comforts your security paranoia? Do you rail against Apple and MSFT too, by the way, or does their west coast address contribute in changing the facts?coming from you. The concern was voiced and is valid BASED ON YOUR TRUSTWORTHY POPULARITY, not your nationality or race or color or sexual orientation for that matter. I don't see enough credible information out there
In my previous response I already said, if security is your concern that's fine. We can discuss that logically. But you have repeatedly brought in nationality and location as the core element of your argument. Two of your posts have started off with the flimsy ".pk" line of FUD. Have you ever considered that if someone wanted to mask their location they could register a .com address for $11 a year? And they could prevent you from doing a whois on their record for another $20/year? How's that for "out of the box"People should be made aware of such risks.
My turn to roll eyes...Also, Mike, your example of sniffing out the packets and seeing where they go. That's all nice and good if the app was written to always behave the same. What happens if the coder is smart enough to build in a trigger that only starts sending data after the app was installed for several days? Or what if it works by the coder triggering a remote command to the app before it sends the data. Guess what, in those cases, the app traffic would look normal until said time and the people testing it initially would think it's fine and use it... until it was too late.
Ya, that's right, I think outside of the box... because I know how the smart ones think.
If your self congratulatory conclusion about knowing how the "smart ones think" were true, you would also know that there are numerous ways in which to discover a TCP or UDP socket initiation signature (or other form of outbound access) with a binary scanner, regardless of whether such initiation is time-delayed, along with the socket destination. You would also know that security testing routinely involves system time adjustments to find time-triggered easter eggs.
Anyway, there doesn't appear to be much point in actually have a discussion concerning security because apparently your inclination to wave hands and respond with "ooo noooo, .pk!!" is a tad too strong.
Cheers and hope you have the opportunity to travel a bit more and enjoy the world. It has a lot to offer.Last edited by mikeheinz; 04-15-11 at 09:38 PM.
04-15-11 09:21 PM - Are you smoking something while constructing your "logical" arguments or are you on Steve jobs payroll?Hey, look at all the .pk people who registered just to defend the app.
And honestly, I could care less where you're from. You could be in a garage in my own country and I wouldn't trust an app coming from you. The concern was voiced and is valid BASED ON YOUR TRUSTWORTHY POPULARITY, not your nationality or race or color or sexual orientation for that matter. I don't see enough credible information out there that's easy to find from you guys, so it holds as a valid concern. There's a lot of neferious stealing of data happening behind the scenes via apps on both PCs and mobile devices. People should be made aware of such risks.
Also, Mike, your example of sniffing out the packets and seeing where they go. That's all nice and good if the app was written to always behave the same. What happens if the coder is smart enough to build in a trigger that only starts sending data after the app was installed for several days? Or what if it works by the coder triggering a remote command to the app before it sends the data. Guess what, in those cases, the app traffic would look normal until said time and the people testing it initially would think it's fine and use it... until it was too late.
Ya, that's right, I think outside of the box... because I know how the smart ones think.
Posted from my CrackBerry at wapforums.crackberry.com04-15-11 11:32 PM
