Better safe than sorry
summary
Timeline of concrete wins and fails with dates and fixes from iOS and Android history: Touch ID spoofed with wood glue and later high‑res photo attacks, Stagefright media bug that leveraged ecosystem fragmentation, Galaxy Note 7 spontaneous combustion, and an intern who lowers passcode hash iterations then gets it fixed. Covers feature rollouts (Activation Lock, Secure Enclave, Sign in with Apple), actual mitigations (certificate pinning, TLS1.3, StrongBox) and which implementations succeed or break.
AI-written summary · about
chapters (7)
- 0:00Intro
- 0:58Welcome
- 1:53Timeline
- 7:05Security Improvements
- 15:50Face ID
- 20:45Privacy and security
- 22:45Outro
related talks
47mSecurity Threats & Mitigations for iOS Developers
27miOS Attack Vectors and how to protect your app
37mOutsmarting Hackers before your App gets pwn'ed
48mMobile Security Attacks: A Glimpse from the Trenches
52mBehind the Scenes of iOS Security
28mApp Security Essentials
41mFive Years of Android Security Research: the Good, the Bad...
57mFaux Disk Encryption: Realities of Secure Storage On Mobile Devices