Viber Communication Security - Bad Request

More documents

Recommendations

Info

Preliminary Research Chapter 2 key exchange algorithm or its over-the-wire protocol and, despite repeated requests, refused to explain the underlying design of its certificates, is authentication system, or its encryption implementation. Therefore it is impossible to validate the company’s claims regarding encryption. It is entirely possible that the data is both encrypted and not secure.[7] Their policy says the following about your personal information: Skype will take appropriate organizational and technical measures to protect the personal data and traffic data provided to it or collected by it with due observance of the applicable obligations and exceptions under the relevant legislation. Your personal and traffic data can only be accessed by authorized employees of Microsoft or its affiliates, subsidiaries or service providers who need to have access to this data in order to be able to fulfill their given duties.[18] This same policy says it may or may not store information about you. Because of this you can concluded they will store anything they know about you. They also say that: Skype will retain your information for as long as is necessary to: (1) fulfill any of the Purposes (as defined in article 3 of this Privacy Policy) or (2) comply with applicable legislation, regulatory requests and relevant orders from competent courts.[18] Regarding your personal data and information they say the following: Except as provided below, Skype will not sell, rent, trade or otherwise transfer any personal and/or traffic data or communications content outside of Microsoft and its controlled subsidiaries and affiliates without your explicit permission, unless it is obliged to do so under applicable laws or by order of the competent authorities. Please note that information that you voluntarily make public in your user profile, or which you disclose on forums, discussions boards or by posting comments will be publicly available and viewable by others. Skype may disclose personal information to respond to legal requirements, exercise our legal rights or defend against legal claims, to protect Skype’s interests, fight against fraud and to enforce our policies or to protect anyone’s rights, property, or safety.[18] Skype is very strict in keeping their security mechanism to the company. The review claims that Skype their platform is secure. But can this also be said about their mobile platform since it’s new? Skype should be secure since it’s used a lot. Not only for normal users but it’s famous amongst corporate businesses also. But as could be read they still had some security flaws in their system to gain your address-book for example. 8
Preliminary Research Chapter 2 2.1.6 Nimbuzz Nimbuzz is a communication application for calling and integrating different im services. They are based in the Netherlands the same as eBuddy. They have some blogs and posted about how they think about security: ‘We want to assure you that privacy and security is the top priority for Nimbuzz’.[19] They also inform users a lot on how they can assure user their own information and data is secure.[20] However Nimbuzz got hacked by Anonymous in July this year. They had full access of their network and data.[21] Although the company claimed this wasn’t the corporate environment and users their account information and data wasn’t in danger.[22] Besides this not much information can be found about the security of Nimbuzz. Their policy says the following regarding data security and private information: Nimbuzz takes appropriate organizational and technical measures to protect the personal information and communications data provided to them or collected by them. For example, your personal and communications data can only be accessed by authorized Nimbuzz staff that need to have access to this data in order for their work. Nimbuzz takes technical measures to protect the confidentiality of the content of communications sent over the Nimbuzz Services, subject to all applicable obligations and exceptions under applicable law.[23] Nimbuzz does not sell, rent, trade or otherwise transfer any personal information, communications data or communications content to any third party without your express permission (unless it is obliged to do so under applicable laws or by order of the competent authorities) except as set out in this Statement.[23] Nimbuzz wants to inform their users how security can be guaranteed for example how their password should look like and what they should and shouldn’t do. They got hacked once but this doesn’t say that their communication service is insecure. They claim to protect your data very well and should only be possible to view inside Nimbuzz their company. 2.2 Reverse Engineering Most protocols in use today are defined according to publicly available standards. Some developers though, choose to keep their implementation to themselves as to keep others out. This ‘security by obscurity’ idea is the complete opposite of the Kerckhoffs’s principle which states that a system should be secure even if anything about the system (except the key) is publicly known. The reason for this is that eventually people with enough knowledge, materials and time will figure out how it works and might also find weaknesses the inventor did not think of. This process is called ‘reverse engineering’ and is used in the it-world to get to know how a program, file or network protocol is constructed. 9
Page 1 and 2: Viber Communication Security Michie
Page 3 and 4: Introduction Chapter 1 1 Introducti
Page 5 and 6: Introduction Chapter 1 • How does
Page 7 and 8: Preliminary Research Chapter 2 2.1.
Page 9: Preliminary Research Chapter 2 mess
Page 13 and 14: Preliminary Research Chapter 2 2.2.
Page 15 and 16: Experiments Chapter 3 Android On An
Page 17 and 18: Experiments Chapter 3 (a) Android D
Page 19 and 20: Experiments Chapter 3 3.2 Reverse E
Page 21 and 22: Experiments Chapter 3 mappelman@ath
Page 23 and 24: Experiments Chapter 3 Signaling Mes
Page 25 and 26: Experiments Chapter 3 Time Source i
Page 27 and 28: Experiments Chapter 3 3.3 Applicati
Page 29 and 30: Experiments Chapter 3 1 public Stri
Page 31 and 32: Experiments Chapter 3 It does nothi
Page 33 and 34: Experiments Chapter 3 1 private Con
Page 35 and 36: Experiments Chapter 3 3.4 Other Wea
Page 37 and 38: Conclusion Chapter 4 4 Conclusion 4
Page 39 and 40: Acronyms Appendix A A Acronyms aes
Page 41 and 42: Appendix B [16] A. Greene, “Skype

Viber Communication Security - Bad Request

Create successful ePaper yourself

Delete template?

Save as template?