Two weeks ago LinkedIn released an app for the iPhone called "Intro". It turns out to be an IMAP proxy that inserts itself as a man-in-the-middle between your email provider and your phone's email client. This talk details an analysis that we performed on the app to discover exactly how it works and what it is doing. Along the way were were able to discover enough clues to write a snort IDS rule that you can use to detect the app's traffic on your network. The snort rule will be released at the talk.

Back to BSides Delaware 2013 video list