Learn More
Resend Email
72
Teosz
7y

Oh God NO! Please tell me it is not normal for an Android app cumminacating with a rest API to send my login credentials in a fucking GET request!

undefined
Favorite
Ranter
Comments
  • 7
    7y
    Lol. not even in a header or anything. Just ram it in the URL there.
  • 2
    7y
    Aaahh just put it in the URL params, if someone ever see it he would definitely have the skills to bypass our security layer so why bother..
  • 2
    7y
    P.s : what app is it? Just to remove it in case 😅
  • 3
    7y
    App of the Hungarian post. Another masterpiece.
  • 2
    7y
    @divil
    Argh, ducking autocorrect ;)
  • 3
    7y
    @divil
    Nope sometimes it just fucks things up. Or I am a retarded and can't use it... Or both.
  • 2
    7y
    IT BURNS MY EYES.

    Seriously. Who is responsible for this atrocity?
  • 2
    7y
    @nukasev
    If I have to guess the one guy who did the web interface as well. (I've ranted about it previously.) But I guess it is better for him to stay unknown.
  • 1
    7y
    When satan starts making Android apps.
  • 1
    7y
    @NyxMC yep and the fact that they use plain HTTP is the real fuckup
  • 1
    7y
    Brought to you by...

    ...Me!

    Sometime ago...
    XD
  • 1
    7y
    Just be thankful the app is communicating with a rest API and not directly to database, I have a friend said he was recently asked to do that 😒
  • 3
    7y
    Hah! Now we have an estimate of your passwords length
  • 1
    7y
    @NyxMC @gnaaah @runfrodorun
    It is using https the packet capturer uses SSL stripping. :D
    So I guess it is OK then?
  • 1
    7y
    @Teosz I think you mean HTTPS decryption ;)
    Stripping would just leave you with the domain and nothing more
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment