Electronic Payment APP Analysis

Electronic Payment App is getting + more popular now. People don ' t has to bring credits cards any more. All they need to do are using their smartphones and they could go shopping, check bills and dining in restaurants. It very convenient But some security issue occurs.

People like fancy interface apps and they if not know how secure those apps is. It ' s developers ' responsibility to keep credential data safe and sound. But guess what??? Boss don ' t want extra costs for developers writing more secure Apps. Fancy interface is more important than security. No need to waste time and efforts for security.

Let's take a look at the some Electronic Payment App and see how secure it is.

Extract the Package folder of Allpay from a smartphone and take a look at shared preference files.

To my surprise this login accout is stored in share preference XML files. Poor lazy developers~ At least I should hash or encrypt those credential data such as account or phone numbers or e-mail .

Don ' t get me wrong. I ' m not trying to say this Electronic Payment App was not secure enough. Actually Allpay is doing well in security such as Certificate pinning and so on. We cannot emphasize the importance of secuirty.

Electronic Payment APP Analysis