News for hackers. Stuff that matters.

A comment on Thousands of secret keys found in Android apps.

Re:Thousands of secret keys found in Android apps by jrochkind1 on Wednesday June 18, 2014 @11:38PM (#7914318)
> This can mean several things, but it also means that users can never be 100 percent certain that the app they are downloading is entirely secure.

I wonder in what circumstances the author thinks users can be 100% certain that the app they are downloading is entirely secure. Cause, yeah, there aren't any.

[ Parent | on HN ]
Re:Thousands of secret keys found in Android apps by derefr on Thursday June 19, 2014 @03:15AM (#7914827)
Presumably, if

1. the user is side-loading an app they wrote themselves (or is an internal Apple/Google developer who uploaded an app to their app store and audited the entire sausage-making process as it transpired),

and 2. the app does literally nothing,

then the user can be 100 percent certain that the app does what it does securely.

[ Parent | on HN ]
Re:Thousands of secret keys found in Android apps by GotAnyMegadeth on Thursday June 19, 2014 @08:42AM (#7915732)
Only if your compiler/build process is trust worthy ;-)
[ Parent | on HN ]