matlecu

3 ms·

1. 1.▲
   by matlecu 12y ago

   Yes I don't know of any good solution for client side only applications. And it's a real issue I think. For instance if I have your key, it may be possible for me to access data, post on behalf, etc... of people who signed in wit
2. 2.▲
   by matlecu 12y ago

   Some APIs should be accessed from your backend, not the app (eg the user can authorize you on Facebook without you sharing your API app secret). The paper also says they found amazon tokens, with which you can spawn instances. I think you c
3. 3.▲
   Thousands of secret keys found in Android apps(cnet.com)

   58 points by matlecu 12y ago|38 comments
4. 4.▲
   A Data Broker Offers a Peek Behind the Curtain(mobile.nytimes.com)

   1 points by matlecu 13y ago|0 comments
5. 5.▲
   by matlecu 13y ago

   Actually if you push the reasoning in the article a bit it can make sense. When they buy the company, they buy: - the users and the revenue (which may be losing money for growth as explained) - and also a product that should be easier/