slides/slides04.tex
changeset 411 542116a239cf
parent 409 0c04ec017892
child 415 56bc53ba7c5b
--- a/slides/slides04.tex	Thu Oct 15 10:07:14 2015 +0100
+++ b/slides/slides04.tex	Thu Oct 15 12:51:46 2015 +0100
@@ -58,13 +58,13 @@
 
 \begin{itemize}
 \item a list of common Android vulnerabilities
-(5 BOAs out of 35 vulnerabilities)
+(5 BOAs out of 35 vulnerabilities; all from 2013 and later)
 
 \begin{center}
 \url{http://androidvulnerabilities.org/}
 \end{center}\bigskip
 
-\item a paper that measures security of Android phones
+\item a paper that attempts measures security of Android phones
 
 \begin{quote}\small\rm ``We find that on average 87.7\% of Android
 devices are exposed to at least one of 11 known critical
@@ -72,7 +72,8 @@
 \end{quote} 
  
 \begin{center}\small
-\url{https://www.cl.cam.ac.uk/~drt24/papers/spsm-scoring.pdf}
+\makebox[0mm]
+{\url{https://www.cl.cam.ac.uk/~drt24/papers/spsm-scoring.pdf}}
 \end{center}
 \end{itemize} 
 
@@ -83,8 +84,12 @@
 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
 \begin{frame}[c]
 
+A student asked:
+
 \begin{bubble}[10cm]\small How do we implement BOAs? On a
-webpage login, for example Facebook, we can't do this. The
+webpage login, for example Facebook, we can't do this. 
+I am sure the script will stop us even before we reach the 
+server. The
 script will not let us enter hexadecimal numbers where email
 or username is required and plus it will have a max length,
 like 32 characters only. In this case, what can we do, since
@@ -93,10 +98,12 @@
 
 \begin{itemize}
 \item Facebook no
-\item printers, routers, cars, IoT etc likely
+\item printers, routers, cars, IoT etc likely\pause
+\item I do not want to teach you hacking, rather defending
 \end{itemize}
 
 
+
 \end{frame}
 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%