May 25, 2019
Home » mobile app

mobile app

Vulnerability
Twitter Bug Exposed iOS users ‘ location data to an advertiser
Moseley (Raam) Posted On May 14, 2019

Twitter Bug Exposed iOS

Twitter Bug Location exposed data Some of the users to Unknown Advertisers Twitter revealed a bug report that they accidentally collected and shared the location data for iOS users with the advertisers under certain conditions, even if they chose to reject data sharing.

If the user is using one or more twitter accounts on IOS devices and has chosen to collect location information from one account the location data will be collected from any other account on the same device. The data is collected in this condition.

“We intended, during a publicity process known as real-time bidding, to remove localization data from the fields sent to a trusted partner,” says Bug Report.

The Twitter agency states that the information was accidentally gathered and was shared with the advertisement partner during a real-time bidding process. “We had technically implemented measures to fuzz the shared information so as to make it no more accurate than zip code or city.”

Twitter confirms that “location data was not retained and only existed for a short time on its systems, then removed as part of their normal process.” Twitter now remedied the bug and contacts people who impacted the bug to provide status updates.

“We invite you to check your confidentiality settings to ensure that you only share data with us. This happened, we’re very sorry. Our confidence in us is recognized and valued, and we are committed to earning that confidence every day.


Continue Reading
0
54 Views
0

Vulnerability
Free website security monitoring tool, mobile applications, SSL security & phishing test
Moseley (Raam) Posted On May 1, 2019

website security

ImmuniWeb launches a free website security assessment tool that companies can use to test their vulnerability and PCI DSS requirements programs.

Organizations can use the tool to perform safety tests and comply with their external web applications.

Once the test is initiated, PCI DSS requirements 6.2, 6.5 and 6.6 are monitored and website versions of more than 100 frames and more than 165 000 of their plug-ins are scanned and checked.

The tool checks over 20 HTTP headers with best security, encryption, or privacy practices.

It controls all known vulnerabilities and evaluates content security policy to prevent XSS, CSRF, ransomware, and cryptojacking attacks.

So far, only 9.74 percent of nearly 40 million public websites tested have up2date software, 2.07 percent meet the above-mentioned PCI DSS requirements and only 2.39 percent are WAF protected.

“You can access the free website security test from here for testing compliance with PCI DSS, check CMS safety, cpsp, web security and privacy.

You can check the security of the iOS & Android app only by uploading or entering Google Play’s name. Phishing is one of the major threats, attackers are pursuing a number of innovative ways to attract the log-in credentials of the victim.

This is the tool to perform phishing tests to find cybersquatted, typosquatted and phoished products that violate your brand marks or spoof your brand.

“Our free community offering allows our company to have a sustained relationship with the community, to obtain valuable feedback and actionable data on the global state of application security,” says Ilia Kolochenko, CEO and Founder or ImmuniWeb.

 


Continue Reading
0
57 Views
0