Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Specifically, I'm trying to make a purchase inside a certain iPhone app using Paypal. Instead of the app opening for me a paypal url in the Safari, it seems to be loading the paypal url in a browser window inside the app. I can't see the url of the page and in general can't be sure that the app isn't intercepting my paypal credentials.

Is there a way to see what the url is of a browser window opened inside an app? Is there to verify that it is a genuine browser window and that the app can't eavesdrop on what I'm typing/submitting inside the window?

share|improve this question
    
Hard to tell exactly what's your concern. Because the answer to the title is obviously yes and the answer to the question "can we make sure nobody is spying" is obviously no. –  Cawas May 8 '11 at 0:01

2 Answers 2

Two Questions:

Verify URL

Connect through laptop. Use packet sniffing tools to check what requests go out.

Perhaps: Disable 3G. Wrap with WiFi in Faraday cage, make sure no other covert incoming or outgoing communication.

Eavesdrop

Cat and mouse. Basic tools and basic skills will detect basic phishing/eavesdropping. But the above URL verification would not catch other simple methods like the website re-broadcasting it elsewhere, or the app recording and transmitting at other times.

Still, you could read the EULA.

Given what is currently known about Apple and Google, Verizon and AT&T, Paypal and credit card companies, your ISP, business focii, data breaches, government agreements, other gov't interactions, etc. it is probably safest to assume that everything is tracked and recorded, whether you are using the phone or not.

share|improve this answer
    
what's "WiFi in Faraday"? also, forgot to mention I'm talking about an app not from the app store. I have no problem with apple/google/etc somehow accessing my paypal credentials, as they already have direct access to my credit card details... –  GJ. May 7 '11 at 23:08
    
@GJ101 He was making fun. The Faraday cage should block every wireless signal in this case. –  Cawas May 7 '11 at 23:59

You may be able to tap and hold on a link on the webpage, copy the URL, and paste it into Notes or something. However, it's still no guarantee that you're not being phished though.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.