News for hackers. Stuff that matters.

A comment on Pokemon Go is a huge security risk. Parent comment

Re:Pokemon Go is a huge security risk by crescentfresh on Monday July 11, 2016 @01:45PM (#12072821)
> the WebView is fully "owned" by the app, so the developers can inject arbitrary code into the DOM of the third party website

Uh, seriously? I just suggested to our mobile team to integrate this way on Android (I implemented the OAuth 2 server).

I would've made the same suggestion to a 3rd party app vendor when the day comes.

[ Parent | on HN ]
Re:Pokemon Go is a huge security risk by russjr08 on Monday July 11, 2016 @02:03PM (#12072958)
A Chrome Custom Tab is probably the better way to go.
[ Parent | on HN ]