Massive research into iOS apps uncovers widespread secret leaks, abysmal coding practices

[Kaz]

  Quote

 

Most apps on Apple’s App Store seem to leak at least one hard-coded secret. Many high-sensitivity secrets were found, including keys to cloud storage, various APIs, and even payment processors. Some endpoints are left completely unprotected, putting users at risk.

Apple’s App Store is renowned for its walled garden approach and strict app review process. However, it doesn’t evaluate the app code for hardcoded secrets.

Cybernews research into more than 156,000 iOS apps has unveiled more than 815,000 hardcoded secrets, including thousands that are very sensitive and could lead directly to breaches or data leaks.

The average app's code exposes 5.2 secrets, and 71% of apps leak at least one secret.

The majority of secrets could be disregarded as low sensitivity. However, that still leaves too many very sensitive keys exposed by app developers.

 

Expand  

Just a moment...

CYBERNEWS.COM

 

Apple apps are secure, as long as you don't look hard...  "Secrets" is a broad term, but the article goes on to describe what they are and how serious they are.

 

While I primarily use android, this is the reason I don't load apps onto my phone unless I feel they are a necessity.  (I make an exception for shattered pixel dungeon, it's an open source game that's great).  No matter how much a store promises a discount for using their app, I don't want it.  I also run youtube through the web browser, because ublock successfully blocks ads on mobile, and it can't if I use the youtube app.