Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
rajbala
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
9 ms
·
31.
▲
by
rajbala
13y ago
I'm not embedding account credentials for Flurry and UA in my app. I embedding app keys and while those don't allow someone to take over my account they could certainly wreak havoc with push notifications.
32.
▲
by
rajbala
13y ago
Urban Airship actually instructs you to create a plist file for an iOS app where you specify your production app keys. http://docs.urbanairship.com/build/ios.html
33.
▲
by
rajbala
13y ago
I'm not necessarily disagreeing with you, but it's not always practical and perhaps not even possible. For example the push notifications SDK from Urban Airship and app analytics SDK from Flurry depend on having credentials stored
34.
▲
by
rajbala
13y ago
I think that is what's happening. They would have no other way to identify my app and my AWS credentials otherwise.
35.
▲
by
rajbala
13y ago
I think this happens all_the_time. Amazon has a solution for managing their access credentials that I admittedly wasn't using, but how many vendors do not? If you're using a web services API from a 3rd party that requires devel
36.
▲
by
rajbala
13y ago
I asked myself the same question and don't have an answer yet.
37.
▲
by
rajbala
13y ago
They clearly say that they've detected my access credentials in the app. There's no way to associate my credentials to my app without downloading the app first and inspecting it.
38.
▲
by
rajbala
13y ago
Reading/writing to S3 was my use case. I'm sure there are others.
39.
▲
by
rajbala
13y ago
What's misguiding? No intention to misguide. I think it's completely accurate. They downloaded my app, inspected it, found AWS credentials and emailed me as a result.
40.
▲
by
rajbala
13y ago
Save files to S3.
41.
▲
by
rajbala
13y ago
They (or someone working with them) would have had to download the app and inspect it. They clearly tell me that they've detected access credentials in the app itself. That's not conjecture.
42.
▲
by
rajbala
13y ago
I'm not implying that there's anything wrong. Quite the contrary actually.
43.
▲
by
rajbala
13y ago
I don't think they're looking for higher than average API calls for a given key because my charges were completely expected.
44.
▲
Amazon Is Downloading Apps From Google Play and Inspecting Them
(blog.rajbala.com)
310 points
by
rajbala
13y ago
|
109 comments
45.
▲
Google mandates ‘Powered by Android’ branding on new devices
(geek.com)
2 points
by
rajbala
13y ago
|
0 comments
46.
▲
The Search For The Next Platform
(avc.com)
4 points
by
rajbala
13y ago
|
0 comments
47.
▲
Data Mining Reveals How Conspiracy Theories Emerge on Facebook
(technologyreview.com)
18 points
by
rajbala
13y ago
|
8 comments
48.
▲
Tweeting in style
(economist.com)
3 points
by
rajbala
13y ago
|
0 comments
49.
▲
Secure Domain Foundation Debuts to Fight Internet Domain-Based Threats
(eweek.com)
1 points
by
rajbala
13y ago
|
0 comments
50.
▲
We’re Fucked, It’s Over: Coming Back from the Brink
(scott.a16z.com)
351 points
by
rajbala
13y ago
|
112 comments
51.
▲
10,000 GitHub users inadvertently reveal their AWS secret access keys
(net-security.org)
4 points
by
rajbala
13y ago
|
1 comments
52.
▲
by
rajbala
13y ago
I often find that Disconnect can be overly aggressive in the parts of a page that it blocks. When something is amiss when using a webpage whitelisting the site in Disconnect usually fixes the problem.
53.
▲
United States of America vs. Alex A. Kibkalo
(seattletimes.wpengine.netdna-cdn.com)
2 points
by
rajbala
13y ago
|
0 comments
54.
▲
Callback Hell
(callbackhell.com)
2 points
by
rajbala
13y ago
|
0 comments
55.
▲
Streaming Subscriptions Are Now a Billion-Dollar Business, but Music Sales Stall
(recode.net)
1 points
by
rajbala
13y ago
|
0 comments
56.
▲
Cloudera Said to Raise at Least $200 Million in Funding
(bloomberg.com)
4 points
by
rajbala
13y ago
|
1 comments
57.
▲
by
rajbala
13y ago
The plane reportedly flew under the radar after turning away from Kuala Lumpur.
58.
▲
by
rajbala
13y ago
If there was indication that something was awry the passengers would have had plenty of time before reaching the open ocean to use various forms of communication.
59.
▲
by
rajbala
13y ago
There would have been calls/texts/tweets/facebook posts from the passengers if they were aware that something terrible was happening whether accidental or intentional.
60.
▲
Design Quips from ZURB
(zurb.com)
2 points
by
rajbala
13y ago
|
0 comments
More ›