Re: [webauthn] SafetyNet response as an extension

@herrjemand 

One more recent reference from 2017:  http://s-space.snu.ac.kr/handle/10371/122680.  The study presents different ways to essentially compromise an API.  From the discussion section -

"Although SafetyNet seems to collect various information, fundamentally, it shares the same limitation with other cases shown in this paper as long as a compromised kernel finds ways to present fake data
that make it appear unchanged when probed by SafetyNet."

There is also a corresponding ACM paper in https://dl.acm.org/citation.cfm?id=3053018.

-- 
GitHub Notification of comment by gmandyam
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1011#issuecomment-407844554 using your GitHub account

Received on Wednesday, 25 July 2018 18:05:32 UTC