Are Your Secrets Secure? How Mobile Applications Are Leaking Millions of Credentials

Explore the critical issue of secret and credential leakage in mobile applications through this comprehensive 53-minute conference talk from NDC Oslo 2023. Dive into three key sections: real-life breaches where attackers exploited leaked credentials, the prevalence of secrets in source code (particularly in React.js projects), and an extensive study of secret leakage in Google Play Store applications. Gain valuable insights into how attackers find and exploit secrets, understand the scale of the problem through in-depth research findings, and learn actionable steps to prevent secret leakage in your own applications. Enhance your understanding of application security and protect your most sensitive information from potential breaches.