Skip to content

Commit

Permalink
docs: format
Browse files Browse the repository at this point in the history
  • Loading branch information
AnnaPS committed Dec 11, 2024
1 parent de4bf3e commit 0c4f92e
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion src/content/docs/security/security_in_mobile_apps.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -220,9 +220,10 @@ There are tools like AWS Secrets Manager and Google Cloud Secret Manager that he

> ❗️**Take into account**
>
> Tools like **FreeRASP** and **obfuscation** techniques improve application >security, they can't guarantee complete protection against cyberattacks. API >keys and secrets stored on the client side are always vulnerable to extraction >through reverse engineering, among other techniques.
> Tools like **FreeRASP** and **obfuscation** techniques improve application >security, they can't guarantee complete protection against cyber attacks. API >keys and secrets stored on the client side are always vulnerable to extraction >through reverse engineering, among other techniques.
>
> One possible solution for increased security would be to implement a custom >backend as it would protect these sensitive keys. This backend would handle >API calls securely, keeping secrets hidden from the client.
>
More information on _M7: Insufficient Binary Protection_ [here.](https://owasp.org/www-project-mobile-top-10/2023-risks/m7-insufficient-binary-protection.html)

Expand Down

0 comments on commit 0c4f92e

Please sign in to comment.