If the app can access it (offline, on your device), then what stops a developer ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		wackget on July 9, 2024 \| parent \| context \| favorite \| on: Reverse engineering Ticketmaster's rotating barcod... If the app can access it (offline, on your device), then what stops a developer from using tools to extract the token from the device, either from wherever it's stored in memory or using an interactive debugger to extract it as the app requests it?

lisper on July 9, 2024 [–]

Nothing stops a (sufficiently motivated) developer from doing that. But it will stop a muggle.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact