BREAKING SMART.

HACKING HEALTH, WEARABLE AND SMART

APPS TO PREVENT LEAKING

YURY CHEMERKIN
MULTI-SKILLED SECURITY EXPERT

CJSC ADVANCED MONITORING

 YURY CHEMERKIN
I have 10+ years of experience in information
security. I‘m a multi-skilled security expert on
security & compliance and mainly focused on
privacy and leakage showdown. Key activity
fields are EMM and Mobile &, Cloud
Computing, IAM, Forensics & Compliance.

I published many papers on mobile and cloud

security, regularly appears at conferences such
as CyberCrimeForum, HackerHalted, DefCamp,
NullCon, OWASP, CONFidence, Hacktivity,
Hackfest, DeepSec Intelligence, HackMiami,
NotaCon, BalcCon, Intelligence-Sec, InfoSec
NetSysAdmins, etc.
LINKEDIN:
HTTPS://WWW.LINKEDIN.COM/IN/YURYCHEMERKIN

TWITTER: @YURYCHEMERKIN

EMAIL: YURY.S@CHEMERKIN.COM
SMART ISSUES

FORENSICS SPORT & SECURITY &

CAPABILITIES HEALTH TIPS
SECURITY NOWADAYS. FORENSICS
DIRECTION

APP SERVERS HEALTH CDN 3RD PARTY BACKUP OF

VENDOR CLOUD DEVICE
CLOUD

MOBILE DEVICE 2FA LEAKED

DATABASE
FORENSICS TOOLS. ADVERTISEMENT IS
NOT SCARIEST THING IN THE WORLD 
FORENSICS. UNSTOPPABLE ACCESS
STRAVA

GOOGLE, NETWORK CREDENTIALS, SPORT GEAR MAINLY KEEP

CRASHLYTICS, DATA IS PROFILE AND MEASURES IF IT ON STRAVA
FACEBOOK, PROTECTED MEASURES EXISTS SERVERS
ZENDESK, FROM MITM
IO.BRANCH

GEO DATA IN ZENDESK PHOTOS

BACKUPS USERID & TAKEN BY
TOKEN USERS ON
+ BASIC CLOUDFRONT
PROFILE
FORENSICS. DEVELOPED IN A MAC
STYLE 
CLOUDY DATA. EXTRACTION
RUNGAP APP.
AN EXCHANGE INTERFACE FOR DATA

DROPBOX SPORT HEALTH DATA BODY ZIPPED FILES

SUPPORTS ACTIVITIES MEASURES

ROUTES MAPS
ALTERNATIVE SOURCES ARE NOT
SUPPORTED
ALTERNATIVE SOURCES ARE NOT
SUPPORTED. ~50 APPS W/O 2FA
• General Sport: Strava, RunGap, Pacer, Nike RUN Club & Training,
MyFitnesspal
• Gym: Smartgym, Gymaholic, GYM & Freelitcs, Flexi, Hussle, Strong
• Health & Sleep: Pillow, HeartWatch, SleepWatch, Welltory
• Summer Sports: RunKeeper, Road & Mountain Bike, iSkate, Bike
Tracks, SpeedTracker, CycleMeter, FitMeter Bike, Crono, Altimeter
• Winter Sports: Ullr & Ullr Maps, Squaw alpine, Snow forecast,
SnocRu, Slopes, Skitude, SkiTracks, Ski AR, Jolly Turns, Riders, Fatmap,
Avalanche
• Workouts: Workouts++, Running, Gymatic, Gymnotize, Muscle
Booster, Fitness buddy, Centr, Body weight, Asan Rebel, Training
(Adidas, Runtastic)
DOWNLOADS W/O RESTRICTIONS.
PUBLIC DATA, BACKUP ACROSS CLOUDS

SLEEPWATCH: ROADBIKE, PACER: SKITUDE: RIDER LIST

SLEEP & HEART MOUNTAIN BIKE: WORKOUTS, AND THEIR TRACKS
DATA IMAGES ON CDN HEATH & GPS
SHARING YOUR DATA. LEAKING OUT
OF HEALTH APP

INTER-ACCESS: DISCOVERING IDS: TRANSFERRING: NOT CLEANING:

GYMAHOLIC, MUSCLE BOOSTER WELLTORY GYMNOTIZE
WELLTORY,
FATMAP,
CYCLEMETER
SECURE APPS. NO DATA, NO ISSUES
• No backup data, no network data
• Speed tracker, Altimeter
• Workouts++, Gymatic, Flexi, Hussle, & Smart gym, BodyWeight
• Squaw alpine, JollyTurns, Avalance
• No network data
• Pillow, SleepWatch
• Cyclemeter, FitmeterBike, Crono
• Muscle Booster
• No backup data
• Pacer, GYM & Freelitcs, Gymnotize, Centr
• Ullr & Maps, Snow Forecast, Slopes
OVERLOADED APPS

ROAD BIKE, MOUNTAIN ULLR & MAPS, SNOW ISKATE, SKITRACKS,

BIKE, ISKATE, BIKE FORECAST, SLOPES, FITNESS BUDDY, CENTR,
TRACKS, CYCLEMETER, SKITUDE, SKITRACKS, RUNKEEPER
FITMETER BIKE, FATMAP, RIDERS, FATMAP, FITNESS
RUNNING, WELLTORY, BUDDY, CENTR,
RUNKEEPER WELLTORT
MOBILE, IoT, CLOUDS…
IT’S TIME TO HIRE A RISK MANAGER!
YURY CHEMERKIN
SEND A MAIL TO: YURY.S@CHEMERKIN.COM

HOW TO CONTACT ME ?
ADD ME IN LINKEDIN:
HTTPS://WWW.LINKEDIN.COM/IN/YURYCHEMERKIN