alyssam_infosec

4 ms·

1. 1.▲
   Cheatsheet: Top Application Security Acronyms(snyk.io)

   4 points by alyssam_infosec 6y ago|3 comments
2. 2.▲
   by alyssam_infosec 6y ago

   Security practitioners throw around a lot of acronyms. If you're not well versed on what they mean it can lead to confusion and frustration. So we put together a cheatsheet of our top 10 security acronyms every developer should know.
3. 3.▲
   by alyssam_infosec 6y ago

   It is a bit surprising but at the same time Mintegral did go through a number of steps to obfuscate the code to make it harder to see that it was impacting standard iOS SDK methods.
4. 4.▲
   by alyssam_infosec 6y ago

   The challenge here is with SDKs, just like with other open source libraries and packages, once you introduce someone else's code into your app, it becomes infinitely harder to get visibility into what your app is doing and ensure that
5. 5.▲
   by alyssam_infosec 6y ago

   I've been looking but haven't found a good systematic way to review code to find this. In the case of Mintegral, there were a number of obfuscations to make it difficult to recognize. Swizzling, while a bad practice in general, ca
6. 6.▲
   SourMint: Malicious code, ad fraud, and data leak in iOS(snyk.io)

   10 points by alyssam_infosec 6y ago|3 comments