title: parse.com security
body: <p>Recently I discovered how useful and easy <a href="http://parse.com">parse.com</a> is.
  It really speeds up the development and gives you an off-the-shelf database to store all the data coming from your web/mobile app.</p>
  
  <p>But how secure is it? From what I understand, you have to embed your app private key in the code, thus granting access to the data.</p>
  
  <p>But what if someone is able to recover the key from your app? I tried it myself.  It took me 5 minutes to find the private key from a standard APK, and there is also the possibility to build a web app with the private key hard-coded in your <a href="https://github.com/ParsePlatform/Todo/blob/master/js/todos.js">javascript source</a> where pretty much anyone can see it.</p>
  
  <p>The only way to secure the data I've found are ACLs (<a href="https://www.parse.com/docs/data">https://www.parse.com/docs/data</a>), but this still means that anyone may be able to tamper with writable data.</p>
  
  <p>Can anyone enlighten me, please?</p>