Re:40% of Android apps expose sensitive back end information
by nolikeynovotey on Monday March 13, 2017 @09:33AM
(#13857632)
Interesting stuff, what was the methodology behind this?
[ Parent
| on HN ]
Re:40% of Android apps expose sensitive back end information
by martinald on Monday March 13, 2017 @09:38AM
(#13857689)
We grabbed a selection of 2,000 top apps from the UK Play Store that were built in Java.
We looked for strings that matched certain entropy patterns common to the services listed on the site.
For staging environments we looked at likely candidates from string variable names and patterns that looked likely to be staging environments.
It's really dreadful the amount of debug/useless code that gets left in production Android apps, and it tends to grow over time.