Including authentication tokens and full API responses. What. The. Fuck.
The e-banking Android app for this other bank disables fingerprint auth because I'm rooted... then logs ALL network traffic to logcat.
-
-
-
Maybe someone assumed "rooted device" == "emulator, let's turn full debugging on"
- Show replies
New conversation -
-
-
At least it's not locking itself when it detects root (or negative SafetyNet response)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Rooting android is a high security risk for banking apps. Cause open possibility to backup app and trace it
-
You know, except that *any* app could read logcat without root until Jellybean, and this app is happily dumping everything there.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.