diff -r d0a95f3aa65e -r 542116a239cf slides/slides04.tex --- a/slides/slides04.tex Thu Oct 15 10:07:14 2015 +0100 +++ b/slides/slides04.tex Thu Oct 15 12:51:46 2015 +0100 @@ -58,13 +58,13 @@ \begin{itemize} \item a list of common Android vulnerabilities -(5 BOAs out of 35 vulnerabilities) +(5 BOAs out of 35 vulnerabilities; all from 2013 and later) \begin{center} \url{http://androidvulnerabilities.org/} \end{center}\bigskip -\item a paper that measures security of Android phones +\item a paper that attempts measures security of Android phones \begin{quote}\small\rm ``We find that on average 87.7\% of Android devices are exposed to at least one of 11 known critical @@ -72,7 +72,8 @@ \end{quote} \begin{center}\small -\url{https://www.cl.cam.ac.uk/~drt24/papers/spsm-scoring.pdf} +\makebox[0mm] +{\url{https://www.cl.cam.ac.uk/~drt24/papers/spsm-scoring.pdf}} \end{center} \end{itemize} @@ -83,8 +84,12 @@ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% \begin{frame}[c] +A student asked: + \begin{bubble}[10cm]\small How do we implement BOAs? On a -webpage login, for example Facebook, we can't do this. The +webpage login, for example Facebook, we can't do this. +I am sure the script will stop us even before we reach the +server. The script will not let us enter hexadecimal numbers where email or username is required and plus it will have a max length, like 32 characters only. In this case, what can we do, since @@ -93,10 +98,12 @@ \begin{itemize} \item Facebook no -\item printers, routers, cars, IoT etc likely +\item printers, routers, cars, IoT etc likely\pause +\item I do not want to teach you hacking, rather defending \end{itemize} + \end{frame} %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%