News for hackers. Stuff that matters.

A comment on Critical Vulnerability: AWS Credential Disclosure. Parent comment

Re:Critical Vulnerability: AWS Credential Disclosure by gtaylor on Monday April 07, 2014 @02:47PM (#7548459)
This isn't specific to Android, as you can pull symbols out of many kinds of binaries with some work.

Being silly with you credentials can hurt you, regardless of the platform or using a compiled or interpreted environment.

[ Parent | on HN ]
Re:Critical Vulnerability: AWS Credential Disclosure by majiaguan on Monday April 07, 2014 @03:02PM (#7548564)
I believe this vulnerability is existing for IOS apps, too. Trustlook they may only focus on Android
[ Parent | on HN ]
Re:Critical Vulnerability: AWS Credential Disclosure by jug6ernaut on Monday April 07, 2014 @03:25PM (#7548731)
This vulnerability exists with EVERY client application. It is just much easier to obtain the applications with android(as opposed to IOS) which is the only reason i can assume Trustlook focused on android.

This isnt as much a "vulnerability" as it is a complete miss understanding of security and the technology they are using. Everything on the client side should be assumed as obtainable.

[ Parent | on HN ]