RE: Actifit Daily #60: Top 10 Actifitters + Anti Abuse Reminder

[trincowski]

I'd be happier with a Windows Phone version, as basic as it could be. I doubt I'll be carrying around two phones all day long, just to use this app.

Comments

[steemmillionaire]

Wait! A Windows phone that is still working?

[trincowski]

Yep, and it works a million times better than Android.
To me, an Android feels like a 19th century typewriter, when next to Windows Phone. Maybe in 2300 they'll catch up.

[steemmillionaire]

Maybe in 2300... Till then, a major topics from 2016:

Oops: Microsoft leaks its Golden Key, unlocking Windows Secure Boot and exposing the danger of backdoors
As noted by Charlie Osborne for Zero Day, the ability to bypass Windows Secure Boot using the profiles Microsoft made public not only allows users to replace their Windows OS with something else such as Linux, but also "permits the installation and execution of bootkit and rootkits at the deepest level of the device."

[trincowski]

Well, at least I ain't worried that someone steals my passwords and blockchain keys, simply because I used the Copy + Paste feature in Android:

This project demonstrates a security hole In Android's API that allows any installed application to listen to changes to the clipboard (listen to everything that you copy and paste):
https://github.com/grepx/android-clipboard-security

Oops.

[steemmillionaire]

Correct!

This is true for not just mobile devices, but also desktop OSes. For example, Windows has an event, WM_CLIPBOARDUPDATE, that any application can register for. As far as I can tell, most OSes are not designed to protect the clipboard from casual monitoring

Keys should never be stored in any application or functions of a OS. Only safe place are trusted hardware wallets...

[trincowski]

I think apps in Windows Phone are isolated and locked from each other.

The Clipboard should be one of the most secure features of any OS. This just shows me we're all still living in the 20th century.

Also... who's going to insert a 50 character long key, every time they log into SteemIt? Do you actually know anyone that does that?

[steemmillionaire]

In theory, you might use the embedded secure element that most modern phones have. This is a dedicated hardware chip for secure storage of keys and cryptographic operations

[steemmillionaire]

Is Microsoft giving them away for free to people to promote them, or is it that Bill is using one of the backdoors to write from your phone?

Microsoft Accidentally Leaks Key to Windows Backdoor
In a cautionary tale to those who favor government-mandated backdoors to security systems, Microsoft accidentally leaked the key protecting its UEFI Secure boot feature.
As we all know, the problems with backdoors are less the cryptography and more the systems surrounding the cryptography.