Paranoid OS: Wearable Trackers

Abstract

The use of wearable devices in conjunction with smartphone applications is at an all-time high, still growing daily. These devices are used to transmit and fetch sensitive user information to a remote server, but perhaps all these communications generate issues related to the security and privacy of the transmissions. This paper will discuss issues related to the X.509 certificate authentication and validation methods that may lead to MitM exploits (data intercepted and relayed). The certificate pinning technique will be discussed and reviewed as a means of mitigating this problem.