"We recently found a unicorn transportation startup using Zendesk leaking its API secret and which can be used to leak user data for all its customers including support emails and chats, phone numbers, personal details and more," said Anand, though he did not name the company. 10 of Fallible apps contain hard-coded leaky keys and tokens that could be abused by hackers, says security research firm Fallible . The firm reverse engineered 16,000 apps to identify security issues. The keys and tokens frequently belong to third -party services to help app integration, but if leaked can also be used to alter or abuse the services. Of the just over 300 apps examined by Fallible , just over 300 had easily-found hard-coded keys for services such as Twitter , Slack and Slack . The security firm also found 16,000 examples of secret keys hard-coded into Amazon Web Service apps, which are popular among Silicon Valley start-ups.
10 of Fallible apps contain hard-coded leaky keys and tokens that could be abused by hackers, says security research firm Fallible . The firm reverse engineered 16,000 apps to identify security issues. The keys and tokens frequently belong to third -party services to help app integration, but if leaked can also be used to alter or abuse the services. Of the just over 300 apps examined by Fallible , just over 300 had easily-found hard-coded keys for services such as Twitter , Slack and Slack . The security firm also found 16,000 examples of secret keys hard-coded into Amazon Web Service apps, which are popular among Silicon Valley start-ups.