Here are some of the things I am interested in

The Smart Lock Feature allows Android users (Android version 5.0 and later) to automatically unlock their smartphone whenever a trusted device, Wi-Fi network or geo location is in close proximity. Trusted devices could either be NFC tags or Bluetooth devices. Looking at Bluetooth devices, it turned out that the Smart Lock implementation had at least one security issue that got resolved. Early implementations of Smart Lock implied that when a trusted Bluetooth device was connected to the phone it was safe to unlock the respective device. ... Read More
In a recent assignment, I was asked to do an IT security audit of a Samsung Smart-TV app. It took me some time to find the (for me) ideal solution to do the audit with my usual setup of tools. Since Smart-TV apps are based on javascript, they run on a fancy browser in the Smart-TV device. Consequently, using the same auditing techniques for Smart-TV apps as for web applications makes sense. ... Read More
In the last blog-post on this blog, I focussed on the use of Google analytics in HbbTV applications. After almost two months, the situation has changed quite a bit. Compared to the 30 stations in December 2013, now only 12 stations make use of Google analytics as a tracking service. The following table shows whether the respective station makes use of the recommended anonimizeIP: HbbTV enabled station using Google Analytics ... Read More
After yesterdays talk at 30C3, a very intersting question was asked by a person the audience. The question was, whether the stations that use Google analytics in order to track their viewers are using it in a legal way. In order to use Analytics legally, the tracking code has to be used with the anonymizeIp parameter. So I took some time and checked the stations red button pages in order to find out, whether the tracking code complies with the law. ... Read More
Since attackers could modify the information that is being displayed on HbbTV capable SmartTVs, there is now a project that overlaps the news ticker section of some stations’ program. Currently, the following stations are enhanced with great fake news from www.der-postillon.com. Thanks to Stefan Sichermann for the support! tagesschau24 tagesschau24 HD n-tv Here are some pictures of Spooofticker® in action: There is a GooglePlus community about HbbTV Security now. ... Read More