chr7z
Re:Thousands of secret keys found in Android apps
on Thursday June 19, 2014 @04:46AM (#7915220)
There is a tool for moving API keys out of the source: Keystok stores encrypted API keys and tokes in a cloud service and lets the App / client retrieve them during runtime.
Its not just about moving keys out of the source, but about getting rid of local config files altogether. Related post on their blog: http://blog.keystok.com/why-i-stopped-using-local-config-fil...
Disclosure: I'm a developer at Keystok.
Re:Ask HN: How Do You Securely Share Passwords in Teams?
on Monday May 26, 2014 @10:40AM (#7799863)
+1 for client-side encryption in general^^.
Commonkey and Keystok.com both work well, CK just has a nicer UI and Keystok a better API.