--- title: "#app-security articles | Hashnode" description: "Explore 37 articles tagged #app-security on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/app-security" --- Tag # #app-security 37 posts · 2 followers [Cyber Knight](https://hashnode.com/@cyberknight2479) · [5d ago](https://hashnode.com/posts/the-password-was-inside-the-app-you-downloaded/6af2c28b123b432f99a5aa2d) ### [The Password Was Inside the App You Downloaded](https://nulltrace.hashnode.dev/the-password-was-inside-the-app-you-downloaded?utm_source=hashnode&utm_medium=feed) Wyndham's Android app carried the keys to its own customer database — and the company can't say whether anyone else used them first. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-password-was-inside-the-app-you-downloaded?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/the-password-was-inside-the-app-you-downloaded/6af2c28b123b432f99a5aa2d) [Dhruvil Joshi](https://hashnode.com/@dhruviljoshi) · [Jul 26](https://hashnode.com/posts/fintech-app-security/6a664e95a3a643840878d423) ### [Fintech App Security Starts on the Server, Not in the App](https://dhruvilblog.hashnode.dev/fintech-app-security?utm_source=hashnode&utm_medium=feed) A practical fintech app security guide for CEO, CTOs, and engineers. Secure storage, pinning, RASP, and why authorization must be enforced server-side. 9 min read · [dhruvilblog.hashnode.dev](https://dhruvilblog.hashnode.dev/fintech-app-security?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [Jul 19](https://hashnode.com/posts/building-a-secure-app-and-mistakes-i-made/6a5cc8eace51c58dc2df19e9) ### [I Built What I Thought Was a Secure App. Here's Everything I Got Wrong.](https://rr-cyber.hashnode.dev/building-a-secure-app-and-mistakes-i-made?utm_source=hashnode&utm_medium=feed) A reflection on the security assumptions I made as a undergraduate student, and the lessons that took years of industry experience to uncover. 8 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/building-a-secure-app-and-mistakes-i-made?utm_source=hashnode&utm_medium=feed) [Aneesa Shaik](https://hashnode.com/@aneesask) · [Jun 5](https://hashnode.com/posts/when-app-security-meets-ai-the-economics-of-easy-exploits/6a22dd736bd5f0cdc9b97ba9) ### [When App Security Meets AI: The Economics of Easy Exploits](https://aneesas.hashnode.dev/when-app-security-meets-ai-the-economics-of-easy-exploits?utm_source=hashnode&utm_medium=feed) How generative models turned reverse engineering, realistic bots, and prompt-injection into mass-market threats 3 min read · [aneesas.hashnode.dev](https://aneesas.hashnode.dev/when-app-security-meets-ai-the-economics-of-easy-exploits?utm_source=hashnode&utm_medium=feed) [Marios Grivas](https://hashnode.com/@unfoundedomnis) · [May 26](https://hashnode.com/posts/reverse-engineering-the-gov-gr-wallet-how-a-hardcoded-api-key-exposed-millions-of-citizens/6a15b169da253d50d4bf1ef5) ### [Reverse Engineering the Gov.gr Wallet: How a Hardcoded API Key Exposed Millions of Citizens](https://defprotocol.hashnode.dev/reverse-engineering-the-gov-gr-wallet-how-a-hardcoded-api-key-exposed-millions-of-citizens?utm_source=hashnode&utm_medium=feed) Discover how security by obscurity fails in mobile applications. Explore the gov.gr wallet case and learn best practices for API secrets management. 6 min read · [defprotocol.hashnode.dev](https://defprotocol.hashnode.dev/reverse-engineering-the-gov-gr-wallet-how-a-hardcoded-api-key-exposed-millions-of-citizens?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [May 8](https://hashnode.com/posts/moving-from-a-managed-waf-to-one-we-actually-owned/69fe54f7f239332df414195b) ### [Moving From a Managed WAF to One We Actually Owned](https://rr-cyber.hashnode.dev/moving-from-a-managed-waf-to-one-we-actually-owned?utm_source=hashnode&utm_medium=feed) A practical account of evaluating, proof-of-concepting, and migrating 100+ web assets to Imperva over four months, without taking down a single business-critical application. 10 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/moving-from-a-managed-waf-to-one-we-actually-owned?utm_source=hashnode&utm_medium=feed) [Cosmin Cojocar](https://hashnode.com/@gosec) · [Mar 28](https://hashnode.com/posts/taint-analysis-in-gosec-tracking-data-flow-from-source-to-sink/69c812957cf270651041d9f3) ### [Taint Analysis in gosec: Tracking Data Flow from Source to Sink](https://oss-sec.hashnode.dev/taint-analysis-in-gosec-tracking-data-flow-from-source-to-sink?utm_source=hashnode&utm_medium=feed) Taint Analysis in gosec: Tracking Data Flow from Source to Sink gosec is a static analysis tool that inspects Go source code for security vulnerabilities. It scans the Go AST and SSA form to find issu 10 min read · [oss-sec.hashnode.dev](https://oss-sec.hashnode.dev/taint-analysis-in-gosec-tracking-data-flow-from-source-to-sink?utm_source=hashnode&utm_medium=feed) [Mathionix Technologies](https://hashnode.com/@mathionix) · [Mar 19](https://hashnode.com/posts/mobile-application-security/69bb8efd8c55d6eefb9760eb) ### [Mobile Application Security: Preserving User Information and Privacy​](https://httpsmathionixcommobile-app-security.hashnode.dev/mobile-application-security?utm_source=hashnode&utm_medium=feed) Learn what mobile app security is, the Significance, common threats, and best practices to protect user data. Secure your app with Mathionix. 6 min read · [httpsmathionixcommobile-app-security.hashnode.dev](https://httpsmathionixcommobile-app-security.hashnode.dev/mobile-application-security?utm_source=hashnode&utm_medium=feed) [Sam Atinkson](https://hashnode.com/@samatinkson) · [Feb 6](https://hashnode.com/posts/how-ai-is-revolutionizing-mobile-app-quality-assurance/69854aeb34d0429a6e881e26) ### [How AI Is Revolutionizing Mobile App Quality Assurance](https://samatinkson.hashnode.dev/how-ai-is-revolutionizing-mobile-app-quality-assurance?utm_source=hashnode&utm_medium=feed) Mobile applications are now central to our daily lives, from banking and education to entertainment and health. With millions of apps competing for attention, quality assurance (QA) has never been more critical. Users expect flawless experiences, ins... 6 min read · [samatinkson.hashnode.dev](https://samatinkson.hashnode.dev/how-ai-is-revolutionizing-mobile-app-quality-assurance?utm_source=hashnode&utm_medium=feed) [Farouk Akinsanya](https://hashnode.com/@yourproductdev) · [Jan 16](https://hashnode.com/posts/tamper-detection-mechanism-in-react-native-and-expo-apps/696a4d2917ff852920773d72) ### [Tamper Detection Mechanism in React Native & Expo Apps](https://aremuu.hashnode.dev/tamper-detection-mechanism-in-react-native-and-expo-apps?utm_source=hashnode&utm_medium=feed) Protect React Native and Expo apps from tampering, reverse engineering, and unauthorized modifications with effective tamper detection strategies 3 min read · [aremuu.hashnode.dev](https://aremuu.hashnode.dev/tamper-detection-mechanism-in-react-native-and-expo-apps?utm_source=hashnode&utm_medium=feed)