Cryptography - Ivan R Blog

Ivan R Blog

Sign in Subscribe

Cryptography

A collection of 7 posts

Why embedding secrets in mobile apps is not a good idea

Why embedding secrets in mobile apps is not a good idea

This is a somewhat complicated topic to cover, but I'll try to go into detail on why, generally, this is not a good idea and you should avoid embedding secrets in your mobile applications as much as possible. tl;dr Anyone motivated enough will get these secrets and

Created an "age" mobile client

Created an "age" mobile client

A few days ago Filippo Valsorda [https://twitter.com/FiloSottile] twitted about a simple, secure and modern encryption tool that will hopefully substitute gpg [https://gnupg.org/]. Filippo, along with Ben Cox [https://twitter.com/Benjojo12], published a document detailing the output file and key formats as well as some

Tips for Mobile Bug Bounty Hunting

Tips for Mobile Bug Bounty Hunting

My good friend Pete Yaworski [https://twitter.com/yaworsk] encouraged me to join the bug bounty scene for a long time before I decided to jump in and start using my mobile app sec knowledge to ethically hack on mobile apps from public bug bounty programs. Pete, who literally wrote

What do Pointer Authentication Codes mean for iOS jailbreaking?

What do Pointer Authentication Codes mean for iOS jailbreaking?

Yesterday, Sep 12th, Apple announced [https://www.youtube.com/watch?v=9m_K2Yg7wGQ] their next generation of iPhones. The iPhone X [s], X [s] Max and X [r] are the new members of the iPhone family and "the most advance iPhones Apple has ever created". You can watch

Proxy iOS 11 applications’ traffic

Proxy iOS 11 applications’ traffic

A big part of understanding how mobile apps work is to identify the endpoints they hit on the server side and the data they send and receive. In order to inspect the mobile app's traffic we'll need to set up a proxy between the app and

Installing self-signed certificates on Android

Installing self-signed certificates on Android

One of the best trends these days is the shift to encrypted Internet traffic, aka Transport Layer Security or TLS, and mobile apps are not the exception, often when testing a mobile app we need/want to see the data being sent from and received on our mobile devices but

The most innovative “thing” I’ve done (so far)

The most innovative “thing” I’ve done (so far)

The context I’m a software engineer and really enjoy using technology, but I love using technology to solve problems and make people’s lives better. For the last six years of my professional career I’ve been focused in mobile development, mainly iOS Applications, but two years ago I