Slashdot Mirror
66 Percent of Popular Android Cryptocurrency Apps Don't Use Encryption (vice.com)
An anonymous reader shares a report: High-Tech Bridge used its free mobile app analysis software, called Mobile X-Ray, to peek under the hood of the top 30 cryptocurrency apps in the Google Play store at three different popularity levels: apps with up to 100,000 downloads, up to 500,000 downloads, and apps with more than 500,000 downloads. So, a total of 90 apps altogether. Of the most popular apps, 94 percent used outdated encryption, 66 percent didn't use HTTPS to encrypt user information in transit, 44 percent used hard-coded default passwords (stored in plain text in the code), and overall 94 percent of the most popular apps were found to have "at least three medium-risk vulnerabilities."
Here comes the wave of free software designed to keep you busy while it tries to steal your wallet key in the background.
#DeleteFacebook
Welcome to another episode of Mutual Of Bromaha's Mild Kingdom! Today, we will be following another set of dumb easily hoodwinked techbro's as they continue their headlong march into losing their life savings via the cryptocurrency fad. Wait what's that? Oh we are in for a treat today! Observe how some hilariously dumb "power users" have installed some laughably insecure software to their laughably insecure cell phones to manage their accounts. See how they ignorantly touch and swipe no doubt imagining in their tiny minds how many awesome loot crates they will be able to buy. Oh how delicious it is to watch these total fucking imbeciles all talk each other into believing this generation's penny stocks will set them up for life.
Until bitcoin starts offering free miles, or rewards points, or cash back or something like that I can't fathom why anyone would use it. You're basically throwing money away. and that's ignoring the enormous security risk of losing it all.
Sadly, this sums up some very sad realities about modern software, especially apps for mobile phones: it's complete fucking crap.
More specifically, it's put together by lazy and incompetent people, who are managed by idiots and greedy assholes who just want a product out the door, who are more concerned with ad revenue than any actual quality, and who have neither the time, inclination, or skillset to write solid robust code.
The "app economy" creates what are essentially fly by night companies who rush products out the door to get into the market space. They don't care about security, they care about revenue. They just want to push some piece of crap out the door which is part of the latest fad, they want ad revenue and analytics data they can sell for revenue ... and if that involves shortcuts, sneaky stuff to spy on you, and shit code written by idiots, so be it.
Mobile apps are the new gold rush, and as a result you get a fairly large amount of shady products. That we're all apparently shocked by this is pathetic. That people are entrusting currency to this shit is hilarious.
Honestly, I've given up on apps. I've stopped looking for apps. The overwhelming majority are useless garbage and clones of other stuff; I've never seen any indication I'd entrust an app with something which spends like cash.
Names not one single name.
ship sailed
allanis morsette is that you?
Where have you gone?
a cryptocurrency app?
Yeah yeah, random software is badly written, full of bugs and made by people with hardly a clue what they are doing. No surprise there.
But there would have been one piece of information that would have made this article positive and worth reading:
What are those 6% of apps that do it right? Which of those go beyond what should be minimum security?