Android Security - Part 2
You learned that Android is not the peaceful world it was supposed to be.
But you keep believing that there are still plenty of polite ladies and gentleman outside your room.
Maybe on the internet?
What do you know about Man in the Middle attacks?
If this doesn’t sound any bell in your head, you should check it out now…
Luckily for you, here we come: Android Security, Part 2.
packmad explains what a Man in the Middle attack is.
Basically, it is just someone who is overhearing your private conversation with others.
Who knows what happens in the middle of the communication channel? Have we a chance to discover if our communication has been intercepted?
If your data are not encrypted, and someone or something is spying on the internet, all your secrets are revealed.
Encryption needs to be used! In this lesson we will see how interact:
Long story short: a certificate is a file which delivers a public key to be used for exchanging a symmetric key.
Only the ones with the counterpart private key will be able to decrypt the message. If you trust the use of a certificate, then you can assume that digital certificate is not compromised. But there are subtle details!
Or should you?
This concludes the final lesson on Android.
Next class will deal with CTFs writeups and maybe something more…
See you next Friday!
['0x66', '0x6d', '0x63', '0x6a', '0x7f', '0x74', '0x7c', '0x6c', '0x7a', '0x71', '0x6f', '0x6c', '0x7e', '0x76', '0x7c', '0x76', '0x6f', '0x7a', '0x85', '0x72', '0x76', '0x76', '0x7a', '0x94'] ^.^
- First memorable slide.
- MITM explained on a blackboard.
- There are packets in the air!
- Digital certificates are the answer… or maybe not?
- Thank you, see you soon ;-)