4 ms·
I see nothing wrong here. They are probably doing this now because it in fact a major problem, even with large, professionally developed apps. About 8 months
by downandout 13y ago
I see nothing wrong here. They are probably doing this now because it in fact a major problem, even with large, professionally developed apps. About 8 months ago I did a brief analysis of the then-current Vine apk and relatively quickly extracted their S3 credentials (they were not stored in plain text, but close enough). Very bad idea.
- rajbala 13y agoI'm not implying that there's anything wrong. Quite the contrary actually.
- MasterScrat 13y agoThe number of valid EC2 keys you can find with a simple GitHub search is mind-blowing (or was, at least, when I tried it a month ago).
- ontoillogical 13y agoI reported this to them over a year ago, and was told they fixed it. Never bothered to check again tho.