Re:Critical Vulnerability: AWS Credential Disclosure
by majiaguan on Monday April 07, 2014 @03:02PM
(#7548564)
I believe this vulnerability is existing for IOS apps, too. Trustlook they may only focus on Android
[ Parent
| on HN ]
Re:Critical Vulnerability: AWS Credential Disclosure
by jug6ernaut on Monday April 07, 2014 @03:25PM
(#7548731)
This vulnerability exists with EVERY client application. It is just much easier to obtain the applications with android(as opposed to IOS) which is the only reason i can assume Trustlook focused on android.
This isnt as much a "vulnerability" as it is a complete miss understanding of security and the technology they are using. Everything on the client side should be assumed as obtainable.