Will Strafach – Medium

Will Strafach

Will Strafach

Notes on Analytics and Tracking in Onavo Protect for iOS

Recent media coverage of Onavo Protect encouraged me to investigate the code for the iOS version of their app. I wanted to determine what…

Mar 5, 2018

Mar 5, 2018

Will Strafach
in
HackerNoon.com

Advisory: AccuWeather iOS app sends location information to data monetization firm

The AccuWeather application for iOS requests location access under the premise of providing users localized severe weather alerts, critical…

Aug 21, 2017

Advisory: AccuWeather iOS app sends location information to data monetization firm

Aug 21, 2017

Will Strafach

Advisory: 44 Credit Union apps for iOS may allow login credential exposure

During the development of our web-based mobile app analysis service verify.ly, it was essential to have a clear understanding of the most…

Jun 16, 2017

Advisory: 44 Credit Union apps for iOS may allow login credential exposure

Jun 16, 2017

Will Strafach

Follow up: 76 Popular Apps Confirmed Vulnerable to Silent Interception of TLS-Protected Data

In February, I posted “76 Popular Apps Confirmed Vulnerable to Silent Interception of TLS-Protected Data” describing an alarming problem…

May 4, 2017

May 4, 2017

Will Strafach

Anonymous Browsing App Falls Short of Claims

OpenDoor claims to be an anonymous internet browsing application for iOS devices, created to help fight internet censorship (According to…

Mar 3, 2017

Anonymous Browsing App Falls Short of Claims

Mar 3, 2017

Will Strafach

Notes on “天行VPN” by “ma bing”

The “天行VPN” application for iOS is a VPN application for Chinese users in the App Store. It is one of many applications which Chinese folks…

Feb 14, 2017

Notes on “天行VPN” by “ma bing”

Feb 14, 2017

Will Strafach

CVE IDs for High Risk Apps

The following CVE IDs have been assigned for iOS applications described in my previous post regarding vulnerability to interception of…

Feb 7, 2017

Feb 7, 2017

Will Strafach

76 Popular Apps Confirmed Vulnerable to Silent Interception of TLS-Protected Data

During the development of our web-based mobile app analysis service verify.ly, it was essential to have a clear understanding of the most…

Feb 6, 2017

Feb 6, 2017

Will Strafach

Technical Information Regarding Analytics Collection in the “Meitu” app for iOS

There has been some commotion today regading to a mobile app named Meitu. This post will only focus on the iOS version (Others have taken…

Jan 20, 2017

Technical Information Regarding Analytics Collection in the “Meitu” app for iOS

Jan 20, 2017

Will Strafach

Will Strafach

building great things. breaking others. | infosec, cyber, CANEX, mobile phone (iOS) hacking. | e: will@wstraf.me

Following

See all (1,189)

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams