Nightwatch Cybersecurity Research

Advisory: Open redirect on Google.com

Overview

An open redirect is operating at www.google.com

Details

Google’s main website provides a subsite for displaying mobile-optimized pages published using a special subset…

Advisory: Open Redirect on adwords.google.com

Overview

A marketing server at adwords.google.com operated an open redirect.

Background

Advisory: Arro and Other Android Taxi Hailing Apps Did Not Use SSL

Overview

Arro and possibly over 100 other Android taxi hailing apps did not SSL to secure communications between the application and its servers.

Opinion: Security Bounty Hunting for Fun and Profit

Introduction

Many technology companies are beginning to embrace the concept of bounties to enhance the security of their products, websites and apps. Bounty programs promise a reward to those reporting…

Advisory: Potential vulnerabilites in PayPal Beacons

Overview

Hardware beacons made by PayPal have some potential vulnerabilities. However, because we have been unable to obtain a physical beacon for testing, these remain theoretical.

Research: Chrome For Android Reveals Phone Model and Build

Overview

Google’s Chrome browser for Android tends to disclose information that can be used to identify the hardware of the device it is running on. This problem is further exacerbated by the fact…

Opinion: Privacy is Dead: It’s Time We Admit It

“And even inside your mind, do not curse the king, and in your inner bedroom do not curse the rich, for a bird may relay your voice, and a flying thing may retell the matter.” (Ecclesiastes 10:20)