3 ms·Web Based OAuth Is a Security Nightmare for Apps8 points by edent 11y agozimpenfish 11y agoMITM proof of concept on iOS - http://furbo.org/2014/09/24/in-app-browsers-considered-harmful/ http://furbo.org/2014/09/24/in-app-browsers-considered-harmf...edent 11y agoInteresting. I wonder if it would work on Android as well?mattkrea 11y agoOf course it would. WebView on android can be displayed without the URL bar just as easily.