What, exactly, is the PayPal Android app doing with that 1GB of storage?

[rxbrad@mastodon.rxbrad.com]

What, exactly, is the PayPal Android app doing with that 1GB of storage?

#android

[gary_alderson@infosec.exchange]

@RxBrad you may be the 1% superstar. fd: this is usual fringe, semi related

#youtube.com

- YouTube

Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.

(www.youtube.com)

[gary_alderson@infosec.exchange]

@RxBrad on a more definitive side note if you had ssl proxy you would have more insight into what all the apps are doing. is it a gray area and double standard for smb sector to use this sw when enterprise uses it all the time, yeah, cause they have the legal prudence and due diligence part covered, you can use cloud proxy for this? i would like to know more, for defensive actions and finding advanced threats it is not just a good idea; there is a chasm between smb and enterprise tech

[rxbrad@mastodon.rxbrad.com]

@gary_alderson Exactly!
...
...
Wait, what?

I still haven't charged the brain up beyond that French fart toot this morning.

Haha farts.

[gary_alderson@infosec.exchange]

@RxBrad
burp suite community edition

using an intercepting proxy like Burp Suite is an essential skill for anyone wanting to understand mobile app security or behavior. It gives you an unprecedented level of insight, turning a simple app into a readable map of its interactions with the backend. #burp collaborator (only with pro ed) #callbacks #getty

[gary_alderson@infosec.exchange]

@RxBrad i think this may require more work but it is a good thing to think about and learn more in detail, it could end up being scary, it is a tenet of surveillance capitalism? possibly #my files #their aura