Apps & Personal Data

Presentation delivered at the Amsterdam Privacy Conference (#apc2012).

Transcript

1. http://www.egeniq.com info@egeniq.com @egeniq APC 2012, October 8 2012 Ivo Jansch Apps & Personal Data
2. About Me @ijansch Entreprenerd Mobile & Web Developer Author & Speaker 2
3. About Egeniq Mobile Development Knowledge Distributed 3
4. Trust The Device? 4
5. Your phone knows things your friends don’t 5
6. What your phone knows: 6 Where you are Time & Date Orientation & Position Who you call
7. What your phone knows: 7 Where you are Time & Date Orientation & Position Who you are Who your wife is Your sister’s birthday Where your wife is Where you work Who you call Who emails you Who your friends are What you like Contact details
8. Privacy Policies 8
9. PlaceRaider 9 Source: http://www.technologyreview.com/view/429394/placeraider-the-military-smartphone-malware/
10. Smartphone as an eavesdropping device 10 Source: http://www.switched.com/2011/01/20/ralf-philipp-weinmann-turns-smartphone-hack-eavesdropping-device/
11. Banks use advanced privacy protection 11 Picture taken from: http://systemato.com/2012/08/my-6-favourite-android-apps/
12. ... but is app protection sufficient? 12 Source: http://www.zdnet.com/mind-hackers-could-get-secrets-from-your-brainwaves-7000003267/
13. Actual Incidents 13
14. Incidents ‣ iPhone Location Tracking (2011) • http://www.nytimes.com/2011/04/28/technology/28apple.html? _r=2& • Accident ‣ Path Address Book Upload Controversy (2012) • http://www.theverge.com/2012/2/8/2785217/path-ios-address- book-upload-ceo-apology • Naivety, good intentions ‣ Google Play Malware ‘grand theft auto’ (2012) • http://www.informationweek.com/security/attacks/more-android- malware-pulled-from-google/240003514?itc=edit_in_body_cross • Bad intentions 14
15. Potential Threat: Free Apps 15
16. “WAKE UP LITTLE PIGGIES!!” 16 Source: http://geekandpoke.typepad.com / http://www.l-i-n-k-e-d.com/no-free-lunch-except-for-bacon/
17. Potential Threat: Single Sign On 17
18. Apps often prefer Social Login 18
19. SSO means: 3 way relationships 19 Some Game Identity Provider
20. SSO means: 3 way relationships 20 Some Game Identity Provider Access to your facebook, twitter data Access to your game data - and your friends’ data - and other app data Easier login, Access to your friends
21. Thank you! Questions? http://www.egeniq.com info@egeniq.com @egeniq http://www.egeniq.com ivo@egeniq.com @ijansch