3 ms·
Wait, just to be clear - so anyone who downloads this app can trivially retrieve the username and password for all 2000+ users of the app? Did I misunderstand t
by austinz 13y ago
Wait, just to be clear - so anyone who downloads this app can trivially retrieve the username and password for all 2000+ users of the app? Did I misunderstand the article?
- k1kingy 13y agoBasically yes. As he did, he managed to get the API key by doing a TCP dump. From there he was able to use the key to get the users and plaintext passwords. Very much wtf.