Binary file slides/slides04.pdf has changed
--- a/slides/slides04.tex Thu Oct 15 10:07:14 2015 +0100
+++ b/slides/slides04.tex Thu Oct 15 12:51:46 2015 +0100
@@ -58,13 +58,13 @@
\begin{itemize}
\item a list of common Android vulnerabilities
-(5 BOAs out of 35 vulnerabilities)
+(5 BOAs out of 35 vulnerabilities; all from 2013 and later)
\begin{center}
\url{http://androidvulnerabilities.org/}
\end{center}\bigskip
-\item a paper that measures security of Android phones
+\item a paper that attempts measures security of Android phones
\begin{quote}\small\rm ``We find that on average 87.7\% of Android
devices are exposed to at least one of 11 known critical
@@ -72,7 +72,8 @@
\end{quote}
\begin{center}\small
-\url{https://www.cl.cam.ac.uk/~drt24/papers/spsm-scoring.pdf}
+\makebox[0mm]
+{\url{https://www.cl.cam.ac.uk/~drt24/papers/spsm-scoring.pdf}}
\end{center}
\end{itemize}
@@ -83,8 +84,12 @@
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
\begin{frame}[c]
+A student asked:
+
\begin{bubble}[10cm]\small How do we implement BOAs? On a
-webpage login, for example Facebook, we can't do this. The
+webpage login, for example Facebook, we can't do this.
+I am sure the script will stop us even before we reach the
+server. The
script will not let us enter hexadecimal numbers where email
or username is required and plus it will have a max length,
like 32 characters only. In this case, what can we do, since
@@ -93,10 +98,12 @@
\begin{itemize}
\item Facebook no
-\item printers, routers, cars, IoT etc likely
+\item printers, routers, cars, IoT etc likely\pause
+\item I do not want to teach you hacking, rather defending
\end{itemize}
+
\end{frame}
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%